$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: VZqIP+xkS+HuJ7CkfZPzKJ6NtsgDso7QPnaOA+WeN24= Subject key identifier: 39:F9:F0:CE:AD:2C:EC:F4:2A:F1:A8:9C:D9:B3:BF:0C:35:AD:20:F3 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 34F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34CC Signing time: Fri 22 Aug 2025 14:54:50 +0000 Manifest this update: Fri 22 Aug 2025 14:54:50 +0000 Manifest next update: Fri 29 Aug 2025 14:54:50 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: W1FqcyWYV1p1K92H7rqDCAzv9eVjqR3EODjwkvii0J0=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: 5AL2LBzCru+E3YFyKW2P0tt8Zy0ls3uab/1OsnqWv48=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: q930PNLNWH/Z46J1d9nklohyp9ezYTSOPJVhEtOZ6aE=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: GKpbMiXXQOymixNs7kIDcgllt5ej3XEvlSe8jG36fFc=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: y580eZMTmYYpiPdGANCgGD9h1bATBcJx0pEL7nWorJ4=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13557 (0x34f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Aug 22 14:54:50 2025 GMT Not After : Aug 29 14:54:50 2025 GMT Subject: CN=68a884ba-8617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d9:16:fa:fe:ee:fe:fc:1b:1e:f1:85:af:9b: 68:45:15:48:51:ac:77:7e:8f:de:36:c2:a4:96:e5: 2c:f1:e4:f2:b6:80:e9:f6:72:1d:ed:6c:5e:cf:08: f3:e2:5c:4f:bd:28:cf:16:40:44:76:c6:1b:93:f3: 73:dc:8e:7c:c0:40:26:1d:6b:cd:98:d7:e2:e7:13: d9:a7:cb:11:e8:6c:e6:04:92:e3:36:04:85:3a:8b: 9f:a9:bf:fa:78:98:74:00:5d:63:dd:67:b2:6b:d3: b2:bf:d8:8f:25:64:a0:17:94:13:2e:0c:c8:2a:e9: a1:89:80:19:6b:a2:7c:c3:60:ec:14:69:c0:93:5f: a2:c6:4f:82:f2:3c:37:bc:8e:15:3b:c5:a9:9c:27: 36:dd:1a:51:c4:a0:78:82:58:38:1e:6c:24:53:71: 84:4c:27:38:ef:99:0b:0b:b5:0a:0e:ac:9b:0a:e7: 90:6d:76:04:73:f8:97:c5:f8:97:ab:00:dd:f3:7f: df:45:c3:01:85:72:69:ea:63:02:b4:a1:c9:99:f1: da:8c:b0:1f:ef:52:d8:6d:1e:85:0d:12:93:18:0c: 2c:f0:3b:bc:51:60:6b:0e:75:dd:5a:f8:97:f9:ae: 19:fa:27:22:90:45:cb:2d:ed:61:1c:31:35:29:e2: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F9:F0:CE:AD:2C:EC:F4:2A:F1:A8:9C:D9:B3:BF:0C:35:AD:20:F3 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:46:9a:57:79:35:09:82:17:ab:16:01:d0:ea:74:62:e4:a8: bf:06:80:f8:1c:c5:20:ea:22:d1:b4:79:d5:39:6f:4b:e6:80: 35:39:18:ef:71:ec:f2:58:34:71:bd:bd:c1:50:94:76:bb:9c: d7:da:02:d6:52:a4:aa:52:ea:52:63:a2:7d:a8:4c:7e:89:cf: 17:18:a9:bd:a7:f3:1a:b8:9c:47:76:07:d2:2f:5e:71:fb:7f: fe:8b:8d:b1:c3:a7:29:75:fa:a1:39:df:6c:1d:a0:1c:d7:d8: 42:32:fd:2b:d1:b6:8a:31:47:6e:87:77:20:1a:53:5f:90:c6: dc:be:79:5d:9f:be:3c:cc:33:38:65:cd:98:9e:5b:77:4d:aa: 08:5a:fb:3d:8b:a3:0a:22:01:b9:10:57:f2:94:43:dc:31:cd: db:3a:d5:c0:e7:de:e9:f2:89:de:bb:1d:4c:4b:6d:3d:25:77: 5c:5c:b5:89:b6:13:40:55:73:95:23:59:5f:df:e5:d9:5a:45: 1f:35:fa:a9:4b:11:b2:0f:16:80:0d:92:92:2d:9a:ee:9c:31: 81:cb:75:26:d6:10:d9:c5:8f:c8:32:e8:23:80:cd:6f:db:41: 11:a0:52:99:65:44:65:ac:b8:d4:66:6c:0a:82:3d:cf:e0:c1: 36:0c:62:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwODIyMTQ1NDUwWhcNMjUwODI5MTQ1NDUwWjAYMRYwFAYD VQQDEw02OGE4ODRiYS04NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tkW+v7u/vwbHvGFr5toRRVIUax3fo/eNsKkluUs8eTytoDp9nId7Wxezwjz 4lxPvSjPFkBEdsYbk/Nz3I58wEAmHWvNmNfi5xPZp8sR6GzmBJLjNgSFOoufqb/6 eJh0AF1j3Weya9Oyv9iPJWSgF5QTLgzIKumhiYAZa6J8w2DsFGnAk1+ixk+C8jw3 vI4VO8WpnCc23RpRxKB4glg4HmwkU3GETCc475kLC7UKDqybCueQbXYEc/iXxfiX qwDd83/fRcMBhXJp6mMCtKHJmfHajLAf71LYbR6FDRKTGAws8Du8UWBrDnXdWviX +a4Z+icikEXLLe1hHDE1KeJKpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn58M6t LOz0KvGonNmzvww1rSDzMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnRppXeTUJgherFgHQ6nRi5Ki/BoD4HMUg6iLRtHnVOW9L5oA1ORjv cezyWDRxvb3BUJR2u5zX2gLWUqSqUupSY6J9qEx+ic8XGKm9p/MauJxHdgfSL15x +3/+i42xw6cpdfqhOd9sHaAc19hCMv0r0baKMUduh3cgGlNfkMbcvnldn748zDM4 Zc2Ynlt3TaoIWvs9i6MKIgG5EFfylEPcMc3bOtXA597p8oneux1MS209JXdcXLWJ thNAVXOVI1lf3+XZWkUfNfqpSxGyDxaADZKSLZrunDGBy3Um1hDZxY/IMugjgM1v 20ERoFKZZURlrLjUZmwKgj3P4ME2DGI0 -----END CERTIFICATE-----Generated at Sat Aug 23 14:09:11 2025 by rpki-client