$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: glsAgDVbClIVA68DZr7LS4ZIwm6WNyUoHjaGeJ8BXso= Subject key identifier: C7:92:09:42:F0:16:46:07:70:5F:10:26:E1:2F:90:48:41:52:14:E3 Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 05B7 Signing time: Fri 22 Aug 2025 23:18:18 +0000 Manifest this update: Fri 22 Aug 2025 23:18:17 +0000 Manifest next update: Fri 29 Aug 2025 23:18:17 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: QR10rSBECkDuGv8IMB033HLxq808GnQN7c5SRUy95iQ=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Aug 22 23:18:17 2025 GMT Not After : Aug 29 23:18:17 2025 GMT Subject: CN=68a8fab9-52c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:cd:60:c6:11:ee:d0:81:1f:04:12:a9:e0: 2d:64:d7:c6:be:93:a0:84:7f:1e:38:81:f3:4f:f9: c4:27:f7:de:01:0c:15:3a:46:12:0a:e7:88:5c:d5: 0c:0c:38:56:f7:1c:45:e6:4b:1e:5f:7e:92:99:b1: 3d:4f:8b:a9:23:7a:ed:49:48:f4:cc:44:83:21:5a: 64:c2:b9:86:5f:f0:6d:2e:dd:dd:d5:62:4e:44:37: d6:2f:61:af:fa:7f:51:e6:1b:26:80:d5:4a:dc:a7: a0:de:81:f3:ca:f4:36:87:7f:5c:19:0c:2b:be:02: 2d:a0:b6:68:66:0e:77:4a:02:de:e7:6d:f9:95:e6: bb:b1:9a:91:a6:3d:c6:76:e6:39:dd:cb:50:04:c5: ae:22:13:99:6a:b8:56:96:28:22:95:01:bc:e0:d0: 0f:d9:ad:cd:24:7d:df:cb:d7:3a:17:c0:b6:cd:02: 5e:a3:11:65:59:87:69:fc:e0:de:e4:af:1c:30:2f: e6:0d:ed:22:da:0e:a7:8d:e4:ef:57:90:c6:00:06: 2d:3a:48:03:c9:74:ef:8f:84:38:37:84:65:11:bc: 63:66:c7:cc:d7:00:75:67:51:e2:06:08:70:42:06: ca:04:30:41:44:b5:95:3e:2a:db:b8:81:4d:ff:9b: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:92:09:42:F0:16:46:07:70:5F:10:26:E1:2F:90:48:41:52:14:E3 X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2d:44:f4:e2:bf:56:e9:6e:57:1a:25:68:d9:81:92:ee:ec: d8:05:2c:7a:a3:a2:aa:7a:0a:f9:fe:67:70:cd:e0:38:5a:7c: da:72:84:5c:8a:b9:d5:93:bf:57:d0:f5:ff:20:89:35:dc:a3: 92:15:34:32:a5:d6:d2:16:28:9e:53:4b:a8:30:05:6d:a3:0b: 92:55:b4:f9:da:8c:26:9f:46:d2:67:92:e2:3f:ab:52:18:96: 13:d7:3b:51:1f:3b:31:23:32:1d:7e:00:d0:52:31:85:46:fb: a5:ba:df:30:50:be:51:d7:2a:dd:c9:ed:35:84:4c:6d:ee:86: 74:4e:db:82:c5:cf:aa:3d:9b:d4:56:9f:ef:82:4d:93:cc:b6: 7e:2a:ce:cf:68:6a:6d:7d:42:de:e2:d5:e3:20:73:58:18:69: 60:29:42:df:f0:d2:ba:eb:c9:f4:fe:ae:96:20:45:9b:a0:05: 18:32:3f:ee:2e:f9:0d:45:54:66:b3:2e:37:00:50:4f:05:13: 10:97:01:e0:a9:93:01:46:c7:41:bd:bc:f2:78:09:67:a8:f6: 50:b4:5c:c2:03:67:01:73:7c:bb:14:d6:1c:a7:01:16:6a:f5: d4:50:4c:d8:b9:f2:4d:12:1e:e6:8d:e0:48:92:b0:60:e5:65: cf:9d:55:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUwODIyMjMxODE3WhcNMjUwODI5MjMxODE3WjAYMRYwFAYD VQQDEw02OGE4ZmFiOS01MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6nNYMYR7tCBHwQSqeAtZNfGvpOghH8eOIHzT/nEJ/feAQwVOkYSCueIXNUM DDhW9xxF5kseX36SmbE9T4upI3rtSUj0zESDIVpkwrmGX/BtLt3d1WJORDfWL2Gv +n9R5hsmgNVK3Keg3oHzyvQ2h39cGQwrvgItoLZoZg53SgLe5235lea7sZqRpj3G duY53ctQBMWuIhOZarhWligilQG84NAP2a3NJH3fy9c6F8C2zQJeoxFlWYdp/ODe 5K8cMC/mDe0i2g6njeTvV5DGAAYtOkgDyXTvj4Q4N4RlEbxjZsfM1wB1Z1HiBghw QgbKBDBBRLWVPirbuIFN/5sZ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeSCULw FkYHcF8QJuEvkEhBUhTjMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhLUT04r9W6W5XGiVo2YGS7uzYBSx6o6Kqegr5/mdwzeA4WnzacoRc irnVk79X0PX/IIk13KOSFTQypdbSFiieU0uoMAVtowuSVbT52owmn0bSZ5LiP6tS GJYT1ztRHzsxIzIdfgDQUjGFRvulut8wUL5R1yrdye01hExt7oZ0TtuCxc+qPZvU Vp/vgk2TzLZ+Ks7PaGptfULe4tXjIHNYGGlgKULf8NK668n0/q6WIEWboAUYMj/u LvkNRVRmsy43AFBPBRMQlwHgqZMBRsdBvbzyeAlnqPZQtFzCA2cBc3y7FNYcpwEW avXUUEzYufJNEh7mjeBIkrBg5WXPnVXw -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:15 2025 by rpki-client