$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: f1JSIBXbDB8RtB4Az5+5NgfT0DXE2n4WiO4Z73DYb6g= Subject key identifier: 04:37:15:14:77:E6:5A:91:B0:00:65:60:79:85:59:07:5B:56:3E:AC Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 0834 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 129A Signing time: Fri 22 Aug 2025 19:45:42 +0000 Manifest this update: Fri 22 Aug 2025 19:45:42 +0000 Manifest next update: Fri 29 Aug 2025 19:45:42 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: tBLWGFAir9AQuneRe/TOmtVskqQoRAK8Jmwo62yvU4Q=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Aug 22 19:45:42 2025 GMT Not After : Aug 29 19:45:42 2025 GMT Subject: CN=68a8c8e6-9770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:5c:30:ea:39:82:e3:8b:56:11:86:d0:8b: 2b:04:1d:a5:4f:3a:6c:c4:fd:3a:c0:41:0e:11:16: 08:8e:87:f8:f4:09:30:ed:3b:6a:92:41:27:06:06: c8:8b:76:1b:a9:94:d6:8e:3c:40:0d:9a:b7:09:b8: ae:20:f2:fe:6a:ae:a2:5d:4b:5a:85:92:25:5b:eb: 6e:6a:d1:1a:cd:f6:20:30:5b:64:4f:b2:bb:49:18: f7:2c:0b:24:2c:72:58:4a:2b:ef:46:62:4e:32:f0: 0a:94:65:7b:d6:57:dc:1b:f4:e4:c9:28:cb:20:e4: 04:09:29:55:17:06:16:27:66:23:e2:a2:19:c0:47: 2e:77:5e:3e:38:44:98:fd:fa:99:2e:72:38:dd:20: e5:d3:23:8f:b3:47:be:95:3a:6c:c3:51:9c:f7:47: 74:62:d8:79:e7:3b:34:cd:a7:eb:2f:93:d3:1e:f3: ab:c2:a9:e1:4f:05:05:f3:21:2f:92:46:d8:54:9d: 14:c8:13:3a:20:72:b9:30:a4:df:5a:6f:d7:c9:63: 03:b9:ff:eb:54:c5:d1:8b:83:00:24:40:c5:fb:26: 44:07:f8:ee:84:e4:87:f9:a7:c1:1e:d1:f1:8c:36: aa:87:0f:4a:ee:f6:d9:38:80:2e:6a:f9:da:28:0f: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:37:15:14:77:E6:5A:91:B0:00:65:60:79:85:59:07:5B:56:3E:AC X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d3:21:fa:85:57:7a:07:f5:d7:9e:96:f9:6a:39:7a:03:82: c7:d0:c4:8d:08:d2:81:2d:2f:55:a2:0e:6c:da:77:ad:99:4a: b6:e3:5e:6b:7e:e0:ba:cc:0a:cb:5c:36:72:54:20:4c:ab:ea: 86:e7:26:15:9c:9f:ae:78:36:9e:99:a1:21:99:52:e4:9a:45: ec:b1:ad:6d:d3:ba:a2:7a:07:0d:93:9e:88:4b:ec:1a:a9:c8: 40:a6:16:ba:f4:f3:6e:0a:71:a9:04:e4:7b:8a:64:d0:cb:5e: c6:05:43:1e:76:ef:bb:7f:02:39:90:30:8c:08:05:d4:52:61: d7:9a:ca:6c:9a:da:75:74:79:f7:f0:07:17:f7:f0:d6:c2:b8: e8:60:c7:e2:9a:08:df:92:50:1b:de:22:ab:56:98:68:cd:8f: c6:50:51:3c:f1:f6:ec:06:e8:23:cb:d6:eb:bc:ff:81:1d:e5: 82:b4:95:89:2c:a5:92:13:0e:ea:3e:cb:d4:76:b9:e7:f7:37: 1e:89:28:8a:57:f2:42:65:d7:c2:80:b9:1f:4c:aa:81:99:ed: 16:6c:6b:d4:7e:13:f9:67:c5:40:82:7a:19:5a:ca:51:f4:91: 86:42:3d:a9:5b:51:cc:6d:b4:e4:34:d2:90:7e:f1:73:c6:2e: a6:f6:40:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUwODIyMTk0NTQyWhcNMjUwODI5MTk0NTQyWjAYMRYwFAYD VQQDEw02OGE4YzhlNi05NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodlcMOo5guOLVhGG0IsrBB2lTzpsxP06wEEOERYIjof49Akw7TtqkkEnBgbI i3YbqZTWjjxADZq3CbiuIPL+aq6iXUtahZIlW+tuatEazfYgMFtkT7K7SRj3LAsk LHJYSivvRmJOMvAKlGV71lfcG/TkySjLIOQECSlVFwYWJ2Yj4qIZwEcud14+OESY /fqZLnI43SDl0yOPs0e+lTpsw1Gc90d0Yth55zs0zafrL5PTHvOrwqnhTwUF8yEv kkbYVJ0UyBM6IHK5MKTfWm/XyWMDuf/rVMXRi4MAJEDF+yZEB/juhOSH+afBHtHx jDaqhw9K7vbZOIAuavnaKA++vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQ3FRR3 5lqRsABlYHmFWQdbVj6sMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs0yH6hVd6B/XXnpb5ajl6A4LH0MSNCNKBLS9Vog5s2netmUq2415r fuC6zArLXDZyVCBMq+qG5yYVnJ+ueDaemaEhmVLkmkXssa1t07qiegcNk56IS+wa qchApha69PNuCnGpBOR7imTQy17GBUMedu+7fwI5kDCMCAXUUmHXmspsmtp1dHn3 8AcX9/DWwrjoYMfimgjfklAb3iKrVphozY/GUFE88fbsBugjy9brvP+BHeWCtJWJ LKWSEw7qPsvUdrnn9zceiSiKV/JCZdfCgLkfTKqBme0WbGvUfhP5Z8VAgnoZWspR 9JGGQj2pW1HMbbTkNNKQfvFzxi6m9kC+ -----END CERTIFICATE-----Generated at Sun Aug 24 05:03:07 2025 by rpki-client