$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: rlzkyzQy2ReF4bHGrBwR4qFOijCS4K01jTxccChqsSo= Subject key identifier: 4E:4C:41:42:63:DE:85:C8:F2:19:12:2B:B0:CA:AB:74:73:04:0E:AA Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 0131 Signing time: Sat 23 Aug 2025 04:39:11 +0000 Manifest this update: Sat 23 Aug 2025 04:39:10 +0000 Manifest next update: Sat 30 Aug 2025 04:39:10 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: dvMAe5sZYcsvusCpPJx+ew4DOdyiyq6n5HiEkIoQC6Y=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Aug 23 04:39:10 2025 GMT Not After : Aug 30 04:39:10 2025 GMT Subject: CN=68a945ee-4460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:b0:42:b2:e0:2f:14:c5:b9:e2:f1:9c:80: ea:f6:db:52:c5:5d:7f:7a:86:4e:ac:d7:c0:79:05: d9:81:69:de:b7:9c:b7:ef:0c:22:ea:09:44:94:39: 96:e1:84:44:82:87:8d:9c:1c:05:33:bb:41:d8:c2: 96:e2:4d:40:b1:62:77:45:3c:77:7e:0f:77:0b:dc: 2e:23:76:12:42:6a:ce:cd:0b:80:37:7b:26:57:7b: 4e:ac:56:2c:5c:4a:55:1b:3e:31:69:f7:51:f6:92: 3d:a6:0b:5b:7f:7e:e1:11:e0:2b:61:86:1b:32:c9: 97:4b:21:3e:d5:eb:4b:50:41:4a:8a:d2:47:95:7f: 41:fc:28:65:e0:c3:69:e3:02:e9:9b:e1:7a:ce:1c: ac:62:9b:d6:af:f4:f6:35:1a:95:26:17:03:e2:0e: 95:19:09:8a:71:f2:10:52:66:82:6e:56:8f:f7:7a: 61:4f:ff:8e:3c:5d:c0:b1:0c:f9:5d:be:a2:94:dc: b4:8b:ba:78:db:ab:26:a7:c3:d1:cc:b3:ef:e1:f6: d6:7e:09:b4:66:e5:57:c0:bf:32:4f:95:b7:f3:94: 49:20:8f:26:2a:8b:ba:e8:23:69:f3:4d:25:d5:6b: 2f:e7:88:d8:0d:d6:bd:41:31:97:c0:d9:db:29:eb: 1d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:41:42:63:DE:85:C8:F2:19:12:2B:B0:CA:AB:74:73:04:0E:AA X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:cc:ca:74:70:f3:01:08:ce:ac:e6:93:89:8a:a5:d4:65: e6:a4:c1:0d:ce:04:ee:40:43:04:87:6c:0c:ef:ac:b9:3a:8c: c0:35:61:cf:9c:df:ec:1c:bd:ac:09:84:42:03:d0:10:ed:06: 49:c7:b6:5d:a8:51:31:ba:54:50:df:d0:90:5a:24:55:1c:6f: 87:ac:b0:21:8f:0c:6f:14:84:53:4a:de:24:0f:26:6e:66:6b: ba:3e:04:aa:e6:89:d1:95:ed:02:c6:3f:79:59:cc:dc:36:8d: df:49:55:83:55:a3:92:b8:64:16:9d:d0:ef:c8:44:d1:3b:f9: 8a:8f:87:1d:c0:b1:9f:bc:6f:c9:f8:54:0c:2c:02:34:49:07: e7:a0:6c:5f:fe:fb:61:53:04:9c:5c:f2:05:e7:65:1a:99:f0: 7b:7c:26:0d:8e:fc:02:e0:c3:9b:72:73:63:07:c8:87:03:fd: 9e:21:18:ed:64:95:8b:27:c2:9a:13:aa:21:7d:f6:c6:65:c4: 77:d5:9a:f4:be:76:ff:21:8b:34:ef:e9:27:70:7c:bd:56:2e: be:49:90:67:8f:1f:9b:d3:80:94:ac:80:af:04:5c:b2:f5:ec: b8:5f:aa:d5:ca:3a:11:1b:8f:62:d5:23:e1:6a:3e:93:83:b9: 47:96:fb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwODIzMDQzOTEwWhcNMjUwODMwMDQzOTEwWjAYMRYwFAYD VQQDEw02OGE5NDVlZS00NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8qwQrLgLxTFueLxnIDq9ttSxV1/eoZOrNfAeQXZgWnet5y37wwi6glElDmW 4YREgoeNnBwFM7tB2MKW4k1AsWJ3RTx3fg93C9wuI3YSQmrOzQuAN3smV3tOrFYs XEpVGz4xafdR9pI9pgtbf37hEeArYYYbMsmXSyE+1etLUEFKitJHlX9B/Chl4MNp 4wLpm+F6zhysYpvWr/T2NRqVJhcD4g6VGQmKcfIQUmaCblaP93phT/+OPF3AsQz5 Xb6ilNy0i7p426smp8PRzLPv4fbWfgm0ZuVXwL8yT5W385RJII8mKou66CNp800l 1Wsv54jYDda9QTGXwNnbKesdrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5MQUJj 3oXI8hkSK7DKq3RzBA6qMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe0czKdHDzAQjOrOaTiYql1GXmpMENzgTuQEMEh2wM76y5OozANWHP nN/sHL2sCYRCA9AQ7QZJx7ZdqFExulRQ39CQWiRVHG+HrLAhjwxvFIRTSt4kDyZu Zmu6PgSq5onRle0Cxj95WczcNo3fSVWDVaOSuGQWndDvyETRO/mKj4cdwLGfvG/J +FQMLAI0SQfnoGxf/vthUwScXPIF52UamfB7fCYNjvwC4MObcnNjB8iHA/2eIRjt ZJWLJ8KaE6ohffbGZcR31Zr0vnb/IYs07+kncHy9Vi6+SZBnjx+b04CUrICvBFyy 9ey4X6rVyjoRG49i1SPhaj6Tg7lHlvuD -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:56 2025 by rpki-client