$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft File: JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft (raw, json) Hash identifier: jQK8Kndx8fqvUkoDOl53xr+139i+1/EMy89fHWuTAFk= Subject key identifier: 3B:13:03:48:E9:D3:F6:62:95:0E:ED:DD:E8:5F:D7:D7:A4:CE:C9:24 Authority key identifier: 25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 Certificate issuer: /CN=A91949C1/serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft Manifest number: DC Signing time: Sat 23 Aug 2025 05:37:50 +0000 Manifest this update: Sat 23 Aug 2025 05:37:50 +0000 Manifest next update: Sat 30 Aug 2025 05:37:50 +0000 Files and hashes: 1: JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl (hash: IfEJXhnnWnQaQFXPFDMO/k0JzbQ6pNALsarDpNVeJX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=25817F8A05912E2D6BD59BEF1F95137E93DC9933 Validity Not Before: Aug 23 05:37:50 2025 GMT Not After : Aug 30 05:37:50 2025 GMT Subject: CN=68a953ae-d1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b4:34:3c:f8:87:70:cc:51:75:c9:7a:37:55: 3b:7f:eb:bd:ac:e0:9b:49:14:48:ab:9b:de:32:37: 06:5e:da:72:3b:a7:c6:24:dd:af:a9:02:1f:ea:aa: 88:04:d4:2a:d4:48:40:18:52:6a:9a:90:08:64:00: d5:0e:1c:aa:fa:43:dc:a5:bc:f9:8e:e4:6f:f4:80: e5:8c:07:08:ad:c9:0a:ba:3f:16:ed:bf:0b:9b:00: f5:97:2e:b5:99:69:98:fa:62:e8:1f:9d:06:32:7c: 42:05:6b:a3:74:d7:5c:2a:00:a6:ba:49:f5:3e:54: 77:00:08:4d:a3:22:34:5f:72:85:f2:0b:24:3e:f6: 3a:a3:92:a7:aa:eb:e0:8e:be:f1:8a:aa:c9:47:0a: 0b:d9:14:96:7f:ae:23:9f:19:e5:d8:55:51:98:19: 57:bb:40:21:33:cb:a8:97:08:d7:ef:54:ff:7f:ae: 71:84:04:cc:20:62:16:96:de:7d:79:ec:d0:45:87: 69:70:14:1d:7e:d5:04:dc:09:9d:ef:c9:8a:f4:b8: 62:05:d4:79:93:2a:6f:72:2f:ba:4e:df:a8:40:87: 76:5f:bc:a6:b3:1f:cf:34:cf:46:32:51:51:30:e0: 6d:c6:25:0a:a0:dd:7e:41:24:8f:0c:3b:c3:23:57: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:03:48:E9:D3:F6:62:95:0E:ED:DD:E8:5F:D7:D7:A4:CE:C9:24 X509v3 Authority Key Identifier: keyid:25:81:7F:8A:05:91:2E:2D:6B:D5:9B:EF:1F:95:13:7E:93:DC:99:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYF_igWRLi1r1ZvvH5UTfpPcmTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/14323D742DD511EF9E505E5DC4F9AE02/JYF_igWRLi1r1ZvvH5UTfpPcmTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7e:af:58:cc:6d:ae:68:dd:93:49:74:90:1e:5e:43:f7:89: 13:a1:7c:f0:48:48:28:9e:43:f2:86:5b:7d:43:1a:5b:b5:0d: 3d:33:5c:2e:a3:48:3c:7e:a4:d8:d3:34:e7:ba:68:69:e7:0d: 01:69:bb:d9:91:b4:dc:24:23:27:95:d1:6f:38:2c:87:1d:71: 84:c6:1b:15:04:33:ca:89:8c:b2:22:ca:f5:08:fc:06:d6:a0: 7b:b8:55:7f:5e:8c:e3:9b:60:9d:4f:49:89:7d:dc:bb:be:d6: 93:32:bc:5d:ae:ce:aa:8b:c1:be:e4:60:55:c6:d6:bb:af:d2: 8c:5b:9e:0b:89:a3:59:21:65:0c:39:d1:09:0c:96:db:20:95: 57:7f:38:a5:a6:0a:61:39:60:7f:20:7a:0e:10:52:40:46:3e: 55:65:c7:c6:2c:56:e7:9d:4b:ae:cb:5d:b0:e3:ba:8c:bf:b4: 8b:3c:d8:e4:8a:ed:b0:9d:b6:64:f5:e4:4f:20:9a:48:97:aa: ca:db:7a:0d:af:19:50:c2:bb:35:7d:2a:18:89:c0:8f:0a:32: c3:cd:5d:22:6b:cd:b0:54:2b:62:00:73:e0:f7:26:d4:fb:f6: 29:89:51:89:73:47:8e:8c:c5:3e:44:24:8f:53:7c:5b:13:76: e9:78:de:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKDI1ODE3RjhBMDU5MTJFMkQ2QkQ1OUJFRjFGOTUxMzdF OTNEQzk5MzMwHhcNMjUwODIzMDUzNzUwWhcNMjUwODMwMDUzNzUwWjAYMRYwFAYD VQQDEw02OGE5NTNhZS1kMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LQ0PPiHcMxRdcl6N1U7f+u9rOCbSRRIq5veMjcGXtpyO6fGJN2vqQIf6qqI BNQq1EhAGFJqmpAIZADVDhyq+kPcpbz5juRv9IDljAcIrckKuj8W7b8LmwD1ly61 mWmY+mLoH50GMnxCBWujdNdcKgCmukn1PlR3AAhNoyI0X3KF8gskPvY6o5Knquvg jr7xiqrJRwoL2RSWf64jnxnl2FVRmBlXu0AhM8uolwjX71T/f65xhATMIGIWlt59 eezQRYdpcBQdftUE3Amd78mK9LhiBdR5kypvci+6Tt+oQId2X7ymsx/PNM9GMlFR MOBtxiUKoN1+QSSPDDvDI1dqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsTA0jp 0/ZilQ7t3ehf19ekzskkMB8GA1UdIwQYMBaAFCWBf4oFkS4ta9Wb7x+VE36T3Jkz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8xNDMyM0Q3NDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxpMXIxWnZ2SDVVVGZwUGNt VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZRl9pZ1dSTGkxcjFadnZINVVUZnBQY21UTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8xNDMyM0Q3NDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi9KWUZfaWdXUkxp MXIxWnZ2SDVVVGZwUGNtVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUfq9YzG2uaN2TSXSQHl5D94kToXzwSEgonkPyhlt9QxpbtQ09M1wu o0g8fqTY0zTnumhp5w0BabvZkbTcJCMnldFvOCyHHXGExhsVBDPKiYyyIsr1CPwG 1qB7uFV/Xozjm2CdT0mJfdy7vtaTMrxdrs6qi8G+5GBVxta7r9KMW54LiaNZIWUM OdEJDJbbIJVXfzilpgphOWB/IHoOEFJARj5VZcfGLFbnnUuuy12w47qMv7SLPNjk iu2wnbZk9eRPIJpIl6rK23oNrxlQwrs1fSoYicCPCjLDzV0ia82wVCtiAHPg9ybU +/YpiVGJc0eOjMU+RCSPU3xbE3bpeN6v -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:10 2025 by rpki-client