$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: z6bxWSRZeXGrSKSM0VvXuO96AbC4CEtMnZfqe+H6Njg= Subject key identifier: CA:1B:57:68:FE:34:63:B6:F4:EC:FA:86:7E:CC:28:EB:55:E3:BD:4B Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DEE Signing time: Fri 22 Aug 2025 17:59:15 +0000 Manifest this update: Fri 22 Aug 2025 17:59:15 +0000 Manifest next update: Fri 29 Aug 2025 17:59:15 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: nwLjGIufnQ7NpmK7B3EGm0ocd+uAPDTdaH3xyHW4Agk=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: cYdmS5wLlGFfq5Y1sGvt09KmgEcXdc6nHMkHCfvEFrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Aug 22 17:59:15 2025 GMT Not After : Aug 29 17:59:15 2025 GMT Subject: CN=68a8aff3-d1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:19:01:5b:b5:90:28:32:5c:11:99:df:03:a3: f3:44:98:b5:ac:23:3f:76:94:d5:b8:91:71:a5:86: 27:58:96:c9:bc:db:79:0a:ea:8f:ee:17:06:9c:22: 7d:de:31:84:6f:70:dc:b7:d8:ab:8f:09:c1:9c:02: c3:fd:9e:af:5e:c2:1d:59:e1:fa:8f:bc:b4:35:ad: 7a:e4:01:b3:35:ab:be:51:4d:e5:c1:7f:12:5c:ce: 29:47:0b:14:13:1c:e3:98:51:bd:c4:66:70:27:78: 67:a7:7c:3e:7e:23:c0:58:d4:28:26:e3:f1:f1:1a: e6:34:51:49:69:b3:98:a8:40:5e:49:28:87:52:dc: c3:b9:3b:4d:f3:09:25:ac:71:b8:be:28:a2:f1:75: cf:13:3b:18:a1:49:8c:6f:21:6b:f4:82:8c:b6:e4: ec:72:a3:d5:c2:8e:06:75:db:31:f1:13:60:e2:ae: c4:d7:76:7a:3a:b8:00:c7:4c:15:41:68:cd:87:9c: 91:77:10:d0:76:0f:0d:20:50:1e:61:ea:40:27:c7: a0:d8:72:1f:1a:46:13:34:4d:55:1b:af:80:12:dc: 0a:6d:3f:cd:bc:db:c4:d7:00:b6:a3:d4:6b:a0:e5: 9e:04:59:bf:79:cf:28:ae:44:3b:3d:63:ae:fc:93: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1B:57:68:FE:34:63:B6:F4:EC:FA:86:7E:CC:28:EB:55:E3:BD:4B X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:ba:a9:4d:26:0f:05:b7:e9:8a:0e:0a:d1:b0:28:cd:5c: f7:94:ff:a5:a6:4a:d5:cf:a7:80:16:0d:db:6e:48:6c:f2:44: 9b:8c:a1:8b:35:9e:fc:24:9b:0d:8d:92:ad:9b:43:df:6a:16: d4:ad:12:ef:32:42:3b:6b:f3:14:50:65:7e:1e:d2:92:cd:9b: 8b:3e:95:11:64:af:43:7c:dc:b4:05:84:28:83:04:88:f6:c7: 84:5b:41:38:e6:cf:4f:81:47:2c:6d:47:3a:00:6e:16:67:9f: a6:89:da:82:fe:f3:83:1d:a9:75:e6:b6:af:a4:fc:74:f8:58: 8d:d2:2d:96:80:c0:4e:c4:3b:3a:67:29:69:3b:8f:ac:a1:64: d5:5a:9f:90:d5:57:54:15:6d:54:bc:96:90:9c:1d:cd:5d:ca: b9:d8:bd:35:21:1c:f7:59:dc:84:40:36:5f:3d:25:99:8e:cd: 99:e4:0c:29:19:15:f4:64:fa:5f:ac:3b:d0:46:31:7e:37:17: de:c4:c0:7b:34:8f:4a:4f:f4:51:aa:b2:0c:2d:d6:1b:97:3f: b3:ed:c1:ee:79:65:bc:f0:74:32:24:10:93:21:c5:31:23:8f: 8a:af:b5:36:74:a2:9a:f7:0f:6f:c0:ee:65:ca:cb:37:bf:c6: c7:2a:89:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwODIyMTc1OTE1WhcNMjUwODI5MTc1OTE1WjAYMRYwFAYD VQQDEw02OGE4YWZmMy1kMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BkBW7WQKDJcEZnfA6PzRJi1rCM/dpTVuJFxpYYnWJbJvNt5CuqP7hcGnCJ9 3jGEb3Dct9irjwnBnALD/Z6vXsIdWeH6j7y0Na165AGzNau+UU3lwX8SXM4pRwsU ExzjmFG9xGZwJ3hnp3w+fiPAWNQoJuPx8RrmNFFJabOYqEBeSSiHUtzDuTtN8wkl rHG4viii8XXPEzsYoUmMbyFr9IKMtuTscqPVwo4Gddsx8RNg4q7E13Z6OrgAx0wV QWjNh5yRdxDQdg8NIFAeYepAJ8eg2HIfGkYTNE1VG6+AEtwKbT/NvNvE1wC2o9Rr oOWeBFm/ec8orkQ7PWOu/JMnYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMobV2j+ NGO29Oz6hn7MKOtV471LMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlnbqpTSYPBbfpig4K0bAozVz3lP+lpkrVz6eAFg3bbkhs8kSbjKGL NZ78JJsNjZKtm0PfahbUrRLvMkI7a/MUUGV+HtKSzZuLPpURZK9DfNy0BYQogwSI 9seEW0E45s9PgUcsbUc6AG4WZ5+midqC/vODHal15ravpPx0+FiN0i2WgMBOxDs6 ZylpO4+soWTVWp+Q1VdUFW1UvJaQnB3NXcq52L01IRz3WdyEQDZfPSWZjs2Z5Awp GRX0ZPpfrDvQRjF+NxfexMB7NI9KT/RRqrIMLdYblz+z7cHueWW88HQyJBCTIcUx I4+Kr7U2dKKa9w9vwO5lyss3v8bHKol+ -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:41 2025 by rpki-client