$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft File: JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json) Hash identifier: SNAZ9wcGpgb3r70Ib5ZbKPleU4SK8c4aN0iQOAN/Yp4= Subject key identifier: A9:5C:35:2B:80:70:B9:8A:8D:02:8F:AA:86:80:ED:BD:C5:2D:CF:EA Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 281B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft Manifest number: 27FE Signing time: Fri 22 Aug 2025 15:40:17 +0000 Manifest this update: Fri 22 Aug 2025 15:40:16 +0000 Manifest next update: Fri 29 Aug 2025 15:40:16 +0000 Files and hashes: 1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: E3nDc+c0BfxG1wu36oTdk08RDDCqGdHUbHqydYsACtA=) 2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: zYzRPHKgSeX768eROJRNf9tX7Mow08v94Ny1/BRKK1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10267 (0x281b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: Aug 22 15:40:16 2025 GMT Not After : Aug 29 15:40:16 2025 GMT Subject: CN=68a88f61-e185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5d:c1:8f:75:15:52:c1:1e:2c:23:a3:0b:42: 52:8f:e0:be:74:61:41:7f:17:97:30:c8:3b:d3:ef: db:bf:cd:14:48:d7:fb:bb:d3:f4:93:58:e4:07:3d: 37:9a:8c:86:64:0b:77:5a:0c:6a:07:47:fc:28:39: 16:af:16:2c:91:50:41:5c:84:85:79:b3:d3:9b:f0: 15:72:2e:d9:c7:64:ac:8b:01:e6:b4:26:9c:f0:1b: 13:b0:ae:f5:91:96:bf:f4:7f:1e:7a:5d:39:17:2e: f1:7a:3b:85:64:ff:ef:b4:d3:fa:d2:9b:7a:f0:f1: 3d:e5:ba:6a:5e:69:a3:6e:86:d3:6c:b3:6f:f9:13: 9c:74:74:33:a6:c4:24:37:55:40:45:f8:0d:83:56: 28:73:eb:ae:e2:a0:b8:75:d6:12:d9:55:ca:3e:da: 16:f8:ab:36:28:91:09:e1:7e:c7:06:55:69:db:0d: e6:21:9b:46:86:16:15:95:b0:56:9d:e9:6d:a1:62: be:bf:38:51:c5:81:bb:f2:96:63:d0:3a:d0:cf:17: 0a:92:55:d3:19:45:2d:d8:dc:62:0c:75:9b:31:65: cf:96:60:bb:0e:ee:d5:5d:e7:42:52:bb:00:3e:68: d2:d5:9b:ca:39:5e:0b:9b:70:c3:fc:44:a2:75:7f: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:35:2B:80:70:B9:8A:8D:02:8F:AA:86:80:ED:BD:C5:2D:CF:EA X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:59:74:5d:8e:fe:6b:29:1f:ca:ad:47:fc:b7:99:fe:16:02: ce:87:6b:1c:7c:0c:21:9a:73:9b:a6:19:fe:8d:9a:0c:54:aa: e2:9d:10:f2:95:a6:65:1f:f6:85:de:a5:0d:30:2e:37:ca:71: 98:42:1f:4e:5e:cb:0b:19:a4:f9:ae:d9:a6:45:5f:c3:71:87: ac:63:08:5a:c1:ee:60:ae:7d:0e:e6:c7:ed:48:22:50:16:8a: e0:a7:02:58:e1:ad:c7:e0:8d:bb:a4:45:9d:6b:1a:90:f2:fc: 15:46:5e:30:40:63:be:14:c6:08:ba:3c:ea:26:26:d8:17:7b: a0:9d:a7:72:f7:1f:e1:11:b4:fc:3c:62:81:25:28:2d:77:93: 51:35:71:1e:53:22:f5:af:a1:05:6a:f7:ee:42:a3:1c:4e:6e: cf:53:9f:9e:44:2c:af:f9:31:cf:f4:70:49:c3:c6:84:3d:fa: 8d:93:80:aa:f0:4d:08:cf:2e:a7:75:f1:9c:32:6d:f9:9d:96: 5d:11:7a:8b:68:b1:d4:0f:9e:03:65:5b:02:b2:40:d2:11:89: 9d:22:e6:4c:89:fe:ba:a1:21:37:23:b8:a6:dd:0e:6f:99:d4: f5:91:74:c2:d6:ac:09:9e:91:fd:fd:f0:4c:0d:78:42:9c:5c: 6c:03:5a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjUwODIyMTU0MDE2WhcNMjUwODI5MTU0MDE2WjAYMRYwFAYD VQQDEw02OGE4OGY2MS1lMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3F3Bj3UVUsEeLCOjC0JSj+C+dGFBfxeXMMg70+/bv80USNf7u9P0k1jkBz03 moyGZAt3WgxqB0f8KDkWrxYskVBBXISFebPTm/AVci7Zx2SsiwHmtCac8BsTsK71 kZa/9H8eel05Fy7xejuFZP/vtNP60pt68PE95bpqXmmjbobTbLNv+ROcdHQzpsQk N1VARfgNg1Yoc+uu4qC4ddYS2VXKPtoW+Ks2KJEJ4X7HBlVp2w3mIZtGhhYVlbBW neltoWK+vzhRxYG78pZj0DrQzxcKklXTGUUt2NxiDHWbMWXPlmC7Du7VXedCUrsA PmjS1ZvKOV4Lm3DD/ESidX8WqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlcNSuA cLmKjQKPqoaA7b3FLc/qMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQWXRdjv5rKR/KrUf8t5n+FgLOh2scfAwhmnObphn+jZoMVKrinRDy laZlH/aF3qUNMC43ynGYQh9OXssLGaT5rtmmRV/DcYesYwhawe5grn0O5sftSCJQ ForgpwJY4a3H4I27pEWdaxqQ8vwVRl4wQGO+FMYIujzqJibYF3ugnady9x/hEbT8 PGKBJSgtd5NRNXEeUyL1r6EFavfuQqMcTm7PU5+eRCyv+THP9HBJw8aEPfqNk4Cq 8E0Izy6ndfGcMm35nZZdEXqLaLHUD54DZVsCskDSEYmdIuZMif66oSE3I7im3Q5v mdT1kXTC1qwJnpH9/fBMDXhCnFxsA1rt -----END CERTIFICATE-----Generated at Sat Aug 23 15:51:16 2025 by rpki-client