$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: ZshIGHNA6bdTOiAi0+VCOQA1p/Hi4qvop8ldnKy0IPs= Subject key identifier: 38:62:10:B4:48:0A:45:C3:7E:A0:AA:0C:9E:0B:A5:B0:A9:DC:CF:66 Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 0687 Signing time: Fri 22 Aug 2025 22:29:50 +0000 Manifest this update: Fri 22 Aug 2025 22:29:50 +0000 Manifest next update: Fri 29 Aug 2025 22:29:50 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: H+ihANP5IOU3njW/uSX9K7GjTy4Tm1HcNTNQT1fbnVc=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: Aug 22 22:29:50 2025 GMT Not After : Aug 29 22:29:50 2025 GMT Subject: CN=68a8ef5e-bb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:ab:3f:55:48:20:6c:9f:79:eb:49:17:74: fa:ed:0a:26:3c:52:d5:4b:fc:5c:7a:26:55:41:6f: 70:8c:f9:e2:8b:a1:c3:56:b8:e9:76:2c:73:ec:98: 36:01:97:ed:6e:11:d3:a0:e2:c1:82:a8:d0:9f:9e: 2a:e8:b9:7a:0e:20:9c:5c:41:c5:bd:a5:4f:8a:cb: 45:6e:bf:44:33:f4:ef:e6:b9:8b:ce:c9:42:d7:1a: 2b:c5:b8:6d:52:ff:e1:eb:0c:58:54:42:3a:a5:18: 60:5f:60:e5:79:5d:44:fe:a3:68:a0:80:58:15:ad: 66:4f:67:89:23:b9:83:3f:fc:d4:63:4e:51:c6:79: e1:59:d4:7a:34:4a:c8:00:84:33:f7:40:39:4b:9e: e3:de:45:63:b1:f0:23:c4:9a:83:a6:47:4a:5a:f3: c0:22:d0:89:6b:a9:ea:7d:50:14:b7:c1:dd:1d:58: 51:c4:dc:5f:b1:38:c4:dd:fd:e4:3e:be:d4:5a:2e: eb:21:c1:77:f3:ab:60:6d:96:8f:eb:d1:01:31:fa: 60:4a:4b:9a:2b:b3:e8:c0:3a:f6:4b:b5:c6:57:23: 23:04:c0:3b:97:af:9b:e7:03:f6:68:d0:c2:e5:1b: 8e:96:8f:a6:cc:23:d3:f5:f5:e6:9f:6e:fc:fa:2e: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:62:10:B4:48:0A:45:C3:7E:A0:AA:0C:9E:0B:A5:B0:A9:DC:CF:66 X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0a:b9:c0:5f:d2:37:ff:b0:fe:c3:5f:53:7f:f6:5f:ee:e8: d0:d6:6b:65:41:00:60:c7:1f:0f:4c:3c:3a:a7:c9:5d:12:be: eb:c9:8c:13:98:24:3a:00:ff:14:89:2d:c9:f3:e1:a0:7b:7f: 8a:36:84:46:0b:cc:de:de:94:50:fe:a2:c0:29:cc:07:b4:7a: f2:72:37:77:17:c4:6c:6e:eb:96:0b:24:c2:0f:bf:f5:b5:5f: 0d:62:f9:5a:ea:9d:ec:c3:ae:68:f4:8c:4d:ed:ef:01:d0:dd: e8:bb:da:46:08:19:2e:77:11:3f:d7:fd:cf:12:dc:7f:cd:cd: dd:11:0d:5d:63:75:dc:d8:d1:99:08:0b:e0:84:00:af:ed:95: a0:6f:77:ea:e7:d3:7f:49:29:af:56:7e:c4:57:2a:12:7b:cb: ed:2f:df:7c:14:3c:b6:6f:f6:82:9a:30:ca:68:a1:ae:bf:9e: 3a:69:70:81:1c:4a:ba:f3:56:5c:e4:7f:e4:c9:40:94:35:40: 1d:98:d7:df:81:c1:f8:63:97:21:9b:88:d1:4c:6a:a1:54:0d: 63:3e:f3:2f:43:c0:66:f0:6d:53:d4:2a:da:d2:2d:9c:f6:c4: bc:dd:eb:97:a9:67:0d:24:e4:6d:77:67:05:2f:a1:e4:36:54: f4:d0:24:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjUwODIyMjIyOTUwWhcNMjUwODI5MjIyOTUwWjAYMRYwFAYD VQQDEw02OGE4ZWY1ZS1iYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy2rP1VIIGyfeetJF3T67QomPFLVS/xceiZVQW9wjPnii6HDVrjpdixz7Jg2 AZftbhHToOLBgqjQn54q6Ll6DiCcXEHFvaVPistFbr9EM/Tv5rmLzslC1xorxbht Uv/h6wxYVEI6pRhgX2DleV1E/qNooIBYFa1mT2eJI7mDP/zUY05RxnnhWdR6NErI AIQz90A5S57j3kVjsfAjxJqDpkdKWvPAItCJa6nqfVAUt8HdHVhRxNxfsTjE3f3k Pr7UWi7rIcF386tgbZaP69EBMfpgSkuaK7PowDr2S7XGVyMjBMA7l6+b5wP2aNDC 5RuOlo+mzCPT9fXmn278+i6LIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhiELRI CkXDfqCqDJ4LpbCp3M9mMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAACrnAX9I3/7D+w19Tf/Zf7ujQ1mtlQQBgxx8PTDw6p8ldEr7ryYwT mCQ6AP8UiS3J8+Gge3+KNoRGC8ze3pRQ/qLAKcwHtHrycjd3F8RsbuuWCyTCD7/1 tV8NYvla6p3sw65o9IxN7e8B0N3ou9pGCBkudxE/1/3PEtx/zc3dEQ1dY3Xc2NGZ CAvghACv7ZWgb3fq59N/SSmvVn7EVyoSe8vtL998FDy2b/aCmjDKaKGuv546aXCB HEq681Zc5H/kyUCUNUAdmNffgcH4Y5chm4jRTGqhVA1jPvMvQ8Bm8G1T1Cra0i2c 9sS83euXqWcNJORtd2cFL6HkNlT00CQs -----END CERTIFICATE-----Generated at Sat Aug 23 21:37:09 2025 by rpki-client