$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft File: JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json) Hash identifier: ZygPt1Iz/i5CuVbm1BgMnRnDyP+oJJdnm+/7ub7GV3U= Subject key identifier: D8:E8:69:CB:D1:5E:C7:4E:5F:BE:29:CC:17:F5:9D:CF:1D:18:0A:21 Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft Manifest number: C7 Signing time: Sat 23 Aug 2025 05:56:15 +0000 Manifest this update: Sat 23 Aug 2025 05:56:14 +0000 Manifest next update: Sat 30 Aug 2025 05:56:14 +0000 Files and hashes: 1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: l7P+ACyZZ64viTPpnaQy4lbKIrK8p5zCTnPMQ6AE6T8=) 2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Validity Not Before: Aug 23 05:56:14 2025 GMT Not After : Aug 30 05:56:14 2025 GMT Subject: CN=68a957fe-cbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:e6:a8:59:ac:bf:67:b6:81:68:d0:81:e7: cd:59:a8:38:d7:f8:de:19:e4:c3:99:54:2f:c1:b5: 7a:1b:8a:e3:9a:5d:e9:d4:49:70:a0:7c:08:91:81: 50:2f:64:67:36:05:4c:b2:32:a7:84:f0:85:09:17: af:a7:14:73:2e:4a:96:c4:87:59:3a:32:19:c7:db: aa:7b:ca:38:52:5a:34:0a:41:79:8f:d3:dc:31:de: 58:14:21:06:25:e3:44:13:67:57:9b:9a:11:7d:d7: 11:20:83:35:10:1f:41:6a:c3:99:58:b4:a5:cc:25: 00:43:b4:9a:65:e1:38:68:32:cb:49:37:13:ac:89: 6e:5b:11:50:05:77:85:18:86:28:94:ce:2a:45:cf: 5a:2d:ca:a2:01:40:5d:b1:df:27:7b:29:4d:92:0b: 19:b4:e4:c0:2c:1a:24:bb:98:c5:e9:08:86:8c:07: f8:33:55:5f:68:72:73:68:7d:d9:71:d9:ef:e9:a5: e9:96:84:35:25:d3:31:cb:6e:0c:20:6d:da:7a:68: ab:cf:3b:fb:cb:b1:d6:51:a1:95:55:b6:08:0a:d3: e8:2c:1e:6d:8a:71:f6:ee:82:f7:00:1c:44:36:96: 53:d9:5a:2d:9b:8d:d8:3c:d0:30:a7:b7:5d:f3:aa: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:69:CB:D1:5E:C7:4E:5F:BE:29:CC:17:F5:9D:CF:1D:18:0A:21 X509v3 Authority Key Identifier: keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f3:cb:69:22:d8:bd:1b:b2:54:e3:fa:6b:a5:e9:c1:02:d4: 88:62:50:9c:b2:25:20:90:10:bb:8f:81:a8:0b:29:00:a5:98: 30:8b:94:17:bc:a2:bc:28:4e:73:56:4a:1a:77:95:86:6f:95: d9:b1:45:14:2c:42:af:c0:bc:34:b9:d8:8d:71:e2:70:5b:07: 6e:f8:d3:bc:2d:b0:ed:25:fc:0d:2f:41:58:df:78:6a:a5:50: 94:2c:0b:bc:18:9d:4b:11:c0:dd:91:b5:26:23:7c:54:15:da: 23:dc:64:8a:5e:f3:7f:7e:41:20:e2:d8:0c:c2:3d:4c:19:15: 59:d7:d3:e3:5c:b4:39:4f:49:d3:ed:16:54:87:69:bc:78:d2: 4e:33:d0:38:71:8c:e1:e5:f6:91:e6:3e:22:f4:b2:ea:b8:ef: b7:e7:a9:c9:f4:a2:45:76:be:b6:bc:fd:c8:a8:38:f6:31:f6: a4:5d:99:f2:b5:5f:1f:3f:61:24:5a:4f:85:58:47:43:11:b0: ae:79:59:9a:38:e2:28:b2:06:7a:a8:e0:4b:39:87:18:41:87: 4b:ca:b1:13:37:01:ea:ff:d0:b7:cd:86:13:7b:be:3d:dc:71: db:25:b0:66:5f:68:b8:24:1c:8a:7e:1a:a3:63:fe:00:bc:31: 05:9e:3d:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjQxMTAvBgNVBAUTKDI0QjEwQzMxRDY5MUY4NDVGQ0VBRTNGRTMyMzFCRTU2 MDAyQkFDNkEwHhcNMjUwODIzMDU1NjE0WhcNMjUwODMwMDU1NjE0WjAYMRYwFAYD VQQDEw02OGE5NTdmZS1jYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cfmqFmsv2e2gWjQgefNWag41/jeGeTDmVQvwbV6G4rjml3p1ElwoHwIkYFQ L2RnNgVMsjKnhPCFCRevpxRzLkqWxIdZOjIZx9uqe8o4Ulo0CkF5j9PcMd5YFCEG JeNEE2dXm5oRfdcRIIM1EB9BasOZWLSlzCUAQ7SaZeE4aDLLSTcTrIluWxFQBXeF GIYolM4qRc9aLcqiAUBdsd8neylNkgsZtOTALBoku5jF6QiGjAf4M1VfaHJzaH3Z cdnv6aXploQ1JdMxy24MIG3aemirzzv7y7HWUaGVVbYICtPoLB5tinH27oL3ABxE NpZT2Votm43YPNAwp7dd86oG4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjoacvR XsdOX74pzBf1nc8dGAohMB8GA1UdIwQYMBaAFCSxDDHWkfhF/Orj/jIxvlYAK6xq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCNC8xRjMyMENGQzU1 RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1FWDg2dVAtTWpHLVZnQXJy R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMRU1NZGFSLUVYODZ1UC1NakctVmdBcnJHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCNC8xRjMyMENGQzU1RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1F WDg2dVAtTWpHLVZnQXJyR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv88tpIti9G7JU4/prpenBAtSIYlCcsiUgkBC7j4GoCykApZgwi5QX vKK8KE5zVkoad5WGb5XZsUUULEKvwLw0udiNceJwWwdu+NO8LbDtJfwNL0FY33hq pVCULAu8GJ1LEcDdkbUmI3xUFdoj3GSKXvN/fkEg4tgMwj1MGRVZ19PjXLQ5T0nT 7RZUh2m8eNJOM9A4cYzh5faR5j4i9LLquO+356nJ9KJFdr62vP3IqDj2MfakXZny tV8fP2EkWk+FWEdDEbCueVmaOOIosgZ6qOBLOYcYQYdLyrETNwHq/9C3zYYTe749 3HHbJbBmX2i4JByKfhqjY/4AvDEFnj3y -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:22 2025 by rpki-client