$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: dTdphL2alfVxls9tSR9Rekl/w90J8re/6q8IMXCZlgU= Subject key identifier: 56:FC:42:5D:E8:68:1E:63:31:FC:80:23:FF:DE:EB:38:C0:6E:A0:DA Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 0520 Signing time: Fri 22 Aug 2025 23:46:56 +0000 Manifest this update: Fri 22 Aug 2025 23:46:55 +0000 Manifest next update: Fri 29 Aug 2025 23:46:55 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: tCWzhVJQRERFQvsR51tYtpDG/WhQPHdS1qWfMZgep/M=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Aug 22 23:46:55 2025 GMT Not After : Aug 29 23:46:55 2025 GMT Subject: CN=68a90170-05dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:86:49:48:9b:0c:ae:76:b3:38:b2:8a:68: 5f:e5:3f:b1:8d:32:74:1f:87:01:03:93:65:da:ea: eb:3a:61:19:0b:2d:e8:3a:fd:95:61:1f:6e:9b:e7: 87:3e:ac:85:5d:65:eb:48:dc:e7:74:cb:93:ec:1a: 2d:a7:e6:66:4a:73:37:e3:f6:c0:7c:1c:1b:20:27: 95:59:79:7a:47:b0:f7:ce:c8:04:de:f1:f1:43:eb: 06:93:19:90:35:25:e3:e5:46:cf:27:a2:18:61:cb: 07:5d:a4:c6:f6:f1:77:6f:97:0e:e5:97:70:3a:1c: 49:2d:66:9d:9a:06:c4:db:2c:a5:91:5c:d4:1a:95: d2:5e:5f:3d:71:5c:8d:d7:0b:8c:05:34:8a:b4:ac: 6c:b2:9e:9a:5e:44:4c:99:08:ee:b0:fe:d8:81:d3: a3:80:c1:96:da:f8:57:0e:ac:6a:09:ad:e4:5f:bf: d6:d0:5b:94:5f:e5:97:d4:fd:24:2f:11:55:4b:67: af:c4:34:ac:15:47:f9:1e:dd:58:18:50:a9:e4:d7: 8d:dd:db:65:61:ec:35:bb:47:cc:7d:e5:57:bb:99: e2:9f:27:db:c9:62:d8:81:50:4b:2d:4e:84:4f:a9: 8d:73:8b:a3:40:96:4f:45:08:32:08:bd:56:c7:86: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FC:42:5D:E8:68:1E:63:31:FC:80:23:FF:DE:EB:38:C0:6E:A0:DA X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:1f:53:b2:58:8d:4b:f8:aa:e7:d3:1d:d5:86:61:db:da:68: a9:6d:11:2f:4d:3f:1b:70:5b:bc:c8:8a:d3:48:b2:16:05:92: 92:16:f1:2b:96:e9:7b:1c:4c:f7:9a:27:40:e7:40:0c:ff:65: 9a:10:0f:d9:38:28:9a:9e:2c:cc:92:d0:d5:20:1b:cf:61:e1: 88:0b:5a:3c:73:35:f7:4f:af:0d:d3:85:e4:bb:dd:bc:2e:a2: a6:93:7b:9b:54:a8:28:61:24:37:9b:77:06:46:e1:39:1b:bf: cd:66:8c:eb:03:08:0e:36:42:21:95:4f:64:6c:ea:4c:05:df: 10:4d:a3:ed:38:20:ea:2a:e1:17:a0:77:a1:b0:e1:4f:80:94: f5:ab:30:c3:77:9a:a4:f4:bc:25:54:da:42:a1:49:90:05:33: fb:63:27:8e:25:48:62:5b:fc:5c:29:57:f8:0b:28:b8:6d:9e: 07:ce:ee:38:5e:ce:b7:3c:9f:00:ef:06:1a:0f:5a:2d:3a:19: 77:91:c4:1d:3f:d4:50:f3:67:d8:7f:7d:ee:7c:95:14:a3:57: d4:0c:7c:1b:14:fc:ba:47:fb:52:81:8a:42:1b:ee:87:c2:c4: 11:ef:af:53:75:8d:e0:40:44:a2:96:8d:f2:5f:81:c9:e7:06: d5:3a:56:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUwODIyMjM0NjU1WhcNMjUwODI5MjM0NjU1WjAYMRYwFAYD VQQDEw02OGE5MDE3MC0wNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhiGSUibDK52sziyimhf5T+xjTJ0H4cBA5Nl2urrOmEZCy3oOv2VYR9um+eH PqyFXWXrSNzndMuT7Botp+ZmSnM34/bAfBwbICeVWXl6R7D3zsgE3vHxQ+sGkxmQ NSXj5UbPJ6IYYcsHXaTG9vF3b5cO5ZdwOhxJLWadmgbE2yylkVzUGpXSXl89cVyN 1wuMBTSKtKxssp6aXkRMmQjusP7YgdOjgMGW2vhXDqxqCa3kX7/W0FuUX+WX1P0k LxFVS2evxDSsFUf5Ht1YGFCp5NeN3dtlYew1u0fMfeVXu5ninyfbyWLYgVBLLU6E T6mNc4ujQJZPRQgyCL1Wx4bSkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFb8Ql3o aB5jMfyAI//e6zjAbqDaMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLH1OyWI1L+Krn0x3VhmHb2mipbREvTT8bcFu8yIrTSLIWBZKSFvEr lul7HEz3midA50AM/2WaEA/ZOCianizMktDVIBvPYeGIC1o8czX3T68N04Xku928 LqKmk3ubVKgoYSQ3m3cGRuE5G7/NZozrAwgONkIhlU9kbOpMBd8QTaPtOCDqKuEX oHehsOFPgJT1qzDDd5qk9LwlVNpCoUmQBTP7YyeOJUhiW/xcKVf4Cyi4bZ4Hzu44 Xs63PJ8A7wYaD1otOhl3kcQdP9RQ82fYf33ufJUUo1fUDHwbFPy6R/tSgYpCG+6H wsQR769TdY3gQESilo3yX4HJ5wbVOlaH -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:54 2025 by rpki-client