$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json) Hash identifier: UsZmzMP346MNIyeWVujj4CBZ0TNVI6cOOC5gHkjm0ro= Subject key identifier: 23:B7:89:EE:A6:B4:F4:4A:BA:86:0C:FC:E7:70:C0:F0:61:D3:21:08 Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft Manifest number: 07D8 Signing time: Fri 22 Aug 2025 21:13:40 +0000 Manifest this update: Fri 22 Aug 2025 21:13:40 +0000 Manifest next update: Fri 29 Aug 2025 21:13:40 +0000 Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: 3y7JHPDoGTM3mC49RCUjts6UDsjn+Ch004agVV4Qs5w=) 2: 076948B2428E11EF912F3710C4F9AE02.roa (hash: TUrfxp2ZB674b0yMhOuMDImIoCsh/4WxM1ekk3XEVBs=) 3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: 5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=) 4: 9ADCD3BA0CC211ED8C32645BC4F9AE02.roa (hash: 9AR0wajPgZJi4aan8+IRMeXtcBiZo3LvqeT/rc/ePUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D35E, serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Validity Not Before: Aug 22 21:13:40 2025 GMT Not After : Aug 29 21:13:40 2025 GMT Subject: CN=68a8dd84-3fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:1f:34:92:58:ad:ba:f3:86:af:8e:4c:60: e9:dd:2e:43:56:c3:6d:37:b7:33:68:6a:95:a0:eb: e7:81:cd:1c:e2:5d:b2:6f:a9:59:8f:52:43:45:fe: c6:d6:85:a8:2a:a2:9b:c7:76:f8:45:83:8c:e5:c8: cb:bf:30:59:16:53:d3:99:03:7c:9f:e7:e6:fe:29: 7d:f9:2e:3e:f6:46:a0:d8:fe:a1:0e:77:9a:02:bc: f1:09:8f:3b:06:f1:ab:46:84:04:5e:4a:78:03:fe: d1:f6:a8:55:e8:c0:fb:13:15:7b:8d:4b:b0:b2:47: 8b:2b:96:a1:d2:3e:f7:aa:9c:8e:a6:e7:85:03:96: b4:16:9b:46:48:a3:f5:04:e2:9f:e7:f3:b9:9f:b0: 86:00:6f:7e:4e:3a:8d:42:73:7c:6c:15:ca:56:44: 07:0c:60:d4:bd:4f:eb:5f:6a:b1:00:4c:25:45:a1: 42:66:fd:bb:18:5f:07:1d:47:5c:b1:d7:fb:1a:64: 43:ae:6e:13:48:51:ba:f0:20:14:fb:1a:8f:2a:7d: a8:6d:0b:13:ce:df:75:aa:5a:5f:3f:36:cf:1e:73: 73:e0:60:b4:cd:7a:4a:a6:49:41:60:d4:55:47:f7: 89:e5:0f:fe:44:46:64:b3:94:6f:8b:b0:c1:49:49: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B7:89:EE:A6:B4:F4:4A:BA:86:0C:FC:E7:70:C0:F0:61:D3:21:08 X509v3 Authority Key Identifier: keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:62:e7:3f:d6:d7:b2:ab:cb:28:4f:06:f9:dd:a1:a1:0b:7a: 26:d1:92:62:dc:79:f9:fd:81:8a:42:ac:74:ee:cb:e2:91:fc: 6b:4b:52:1f:b6:c0:27:73:e2:7c:fb:a7:f2:4b:a6:67:9c:f7: 8c:5d:9e:73:b0:de:22:ac:e5:4e:3e:00:88:85:d0:5b:42:ab: 62:37:74:bf:cd:48:cf:52:0e:cc:ea:59:3c:cb:53:5d:f5:09: 48:ea:69:e7:1d:6b:42:1d:e5:9b:3e:0c:7b:05:bd:09:2a:49: 1a:b1:8c:1d:05:9a:e5:50:84:19:39:0c:27:0b:88:c7:20:dc: 11:3a:49:75:31:b9:bc:0c:08:64:62:ba:8f:d8:6f:b7:2d:bb: 44:ad:d6:29:1e:c1:d3:5a:1b:12:7f:3b:22:a2:6b:8e:99:d4: 8c:f5:df:d7:39:24:08:f7:97:a9:2e:5c:0a:de:94:3f:a4:33: 84:1a:e8:90:52:ee:04:57:30:e8:46:1d:b7:3d:25:b3:9c:c8: a9:0a:36:a0:c3:a9:22:42:f7:e6:4c:86:a8:37:4c:ce:e3:d5: 23:09:76:2c:d0:01:80:78:67:d8:1b:7b:aa:66:4d:b0:7f:b1: 91:d9:36:a5:6d:cb:68:7e:8f:b4:47:bf:ec:42:8b:a7:2a:d3: b6:73:e3:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0 OTg2RERGMDgwHhcNMjUwODIyMjExMzQwWhcNMjUwODI5MjExMzQwWjAYMRYwFAYD VQQDEw02OGE4ZGQ4NC0zZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslofNJJYrbrzhq+OTGDp3S5DVsNtN7czaGqVoOvngc0c4l2yb6lZj1JDRf7G 1oWoKqKbx3b4RYOM5cjLvzBZFlPTmQN8n+fm/il9+S4+9kag2P6hDneaArzxCY87 BvGrRoQEXkp4A/7R9qhV6MD7ExV7jUuwskeLK5ah0j73qpyOpueFA5a0FptGSKP1 BOKf5/O5n7CGAG9+TjqNQnN8bBXKVkQHDGDUvU/rX2qxAEwlRaFCZv27GF8HHUdc sdf7GmRDrm4TSFG68CAU+xqPKn2obQsTzt91qlpfPzbPHnNz4GC0zXpKpklBYNRV R/eJ5Q/+REZks5Rvi7DBSUlR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCO3ie6m tPRKuoYM/OdwwPBh0yEIMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRYuc/1teyq8soTwb53aGhC3om0ZJi3Hn5/YGKQqx07svikfxrS1If tsAnc+J8+6fyS6ZnnPeMXZ5zsN4irOVOPgCIhdBbQqtiN3S/zUjPUg7M6lk8y1Nd 9QlI6mnnHWtCHeWbPgx7Bb0JKkkasYwdBZrlUIQZOQwnC4jHINwROkl1Mbm8DAhk YrqP2G+3LbtErdYpHsHTWhsSfzsiomuOmdSM9d/XOSQI95epLlwK3pQ/pDOEGuiQ Uu4EVzDoRh23PSWznMipCjagw6kiQvfmTIaoN0zO49UjCXYs0AGAeGfYG3uqZk2w f7GR2Talbctofo+0R7/sQounKtO2c+OT -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:47 2025 by rpki-client