$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: 8W7XM9MFw4cOrG4Uuhh/Ig4LnPk2aUYzdqGftHO53eA= Subject key identifier: 0F:C7:E5:A9:A9:16:7D:76:51:B4:7A:18:45:AA:46:DE:02:B5:77:95 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 9C Signing time: Sat 23 Aug 2025 06:33:30 +0000 Manifest this update: Sat 23 Aug 2025 06:33:30 +0000 Manifest next update: Sat 30 Aug 2025 06:33:30 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: +slwm272PvemvdiAg3V5UqKlu9InCwkb6uwemeu3xHw=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Aug 23 06:33:30 2025 GMT Not After : Aug 30 06:33:30 2025 GMT Subject: CN=68a960ba-4c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:73:95:74:a8:38:04:a2:97:a1:e9:55:c6: 53:31:70:0a:9b:48:79:c4:75:8b:e9:af:f3:7b:d9: 59:73:38:7d:06:ed:e8:7f:1b:92:0d:a4:24:75:a4: ef:d3:15:e8:0b:bd:31:36:e8:0e:5d:4b:e5:85:7b: dd:1b:6c:c6:0d:21:7e:27:22:03:8a:8c:a9:bb:30: 42:c9:9f:c9:e8:d0:cd:81:81:ca:c1:9e:1d:61:24: bd:e4:d2:c7:f7:15:59:e9:99:4b:26:36:75:0d:b0: 67:19:32:a4:8d:73:b5:8f:23:3a:b2:fb:70:75:eb: 17:dd:e9:39:ed:99:ad:2f:a7:8e:a0:23:8a:89:d9: af:5a:b9:1a:48:d3:e7:65:95:54:a2:4e:3c:29:68: e7:02:9a:db:c5:8b:4e:9a:eb:8a:e8:ae:d2:20:6e: 9c:b0:50:47:b1:3a:c2:5f:9c:b8:65:0e:d1:16:6e: b0:8b:a8:85:69:a5:32:44:35:b3:7d:f8:40:da:01: 57:77:06:d9:ee:8f:de:2f:f1:65:7c:79:45:4b:54: 37:e6:7b:a2:50:7c:a6:2b:32:20:a0:3e:c2:10:d4: 10:de:30:0f:d3:1b:85:a0:e6:88:85:85:6a:a2:e0: 08:3a:ad:83:0d:4e:ba:51:72:71:7f:a5:bc:3b:f2: d7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C7:E5:A9:A9:16:7D:76:51:B4:7A:18:45:AA:46:DE:02:B5:77:95 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9c:70:c3:27:f4:f7:b7:bb:4a:e4:41:07:ee:1c:64:53:d9: 52:4f:4e:75:5c:05:54:91:dc:8b:44:50:3a:32:fd:1c:a0:16: 96:0b:77:3f:41:e0:b7:89:fe:37:70:9d:e9:24:fc:dd:81:85: e3:ab:f4:81:ab:5e:1c:6a:ee:31:c0:9d:2e:32:12:1b:55:5d: f9:f1:e0:c5:de:66:f2:48:a9:f4:4c:36:5d:d5:a3:11:0e:9b: 87:4c:ff:d7:c3:4a:9c:ce:35:e5:b0:c8:95:84:c5:8e:43:96: bd:f6:0c:3f:2c:d1:83:e2:5e:e2:0a:f1:f4:c1:6b:6e:73:7b: 0f:06:97:aa:9e:94:77:e3:22:a5:a5:e0:7b:bf:35:07:34:39: 60:20:fc:e7:b9:f4:1c:fa:07:2e:c1:57:71:78:77:35:f4:e5: f7:dd:b6:14:05:fe:49:7a:c5:8f:bc:ee:b1:4b:16:11:65:aa: bb:77:8b:93:b7:26:98:6a:5a:3a:6a:27:86:75:81:35:70:a7: c8:c3:64:4e:ce:1f:73:30:71:3f:c0:67:08:16:16:8b:b1:5f: 69:4c:c1:d6:19:29:8a:6f:7f:a9:90:c1:49:df:37:51:d9:07: b9:f1:62:69:d8:9d:55:08:ea:ab:a3:51:c6:24:6b:30:98:d5: 58:c4:8e:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjUwODIzMDYzMzMwWhcNMjUwODMwMDYzMzMwWjAYMRYwFAYD VQQDEw02OGE5NjBiYS00YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzNzlXSoOASil6HpVcZTMXAKm0h5xHWL6a/ze9lZczh9Bu3ofxuSDaQkdaTv 0xXoC70xNugOXUvlhXvdG2zGDSF+JyIDioypuzBCyZ/J6NDNgYHKwZ4dYSS95NLH 9xVZ6ZlLJjZ1DbBnGTKkjXO1jyM6svtwdesX3ek57ZmtL6eOoCOKidmvWrkaSNPn ZZVUok48KWjnAprbxYtOmuuK6K7SIG6csFBHsTrCX5y4ZQ7RFm6wi6iFaaUyRDWz ffhA2gFXdwbZ7o/eL/FlfHlFS1Q35nuiUHymKzIgoD7CENQQ3jAP0xuFoOaIhYVq ouAIOq2DDU66UXJxf6W8O/LXyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/H5amp Fn12UbR6GEWqRt4CtXeVMB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYnHDDJ/T3t7tK5EEH7hxkU9lST051XAVUkdyLRFA6Mv0coBaWC3c/ QeC3if43cJ3pJPzdgYXjq/SBq14cau4xwJ0uMhIbVV358eDF3mbySKn0TDZd1aMR DpuHTP/Xw0qczjXlsMiVhMWOQ5a99gw/LNGD4l7iCvH0wWtuc3sPBpeqnpR34yKl peB7vzUHNDlgIPznufQc+gcuwVdxeHc19OX33bYUBf5JesWPvO6xSxYRZaq7d4uT tyaYalo6aieGdYE1cKfIw2ROzh9zMHE/wGcIFhaLsV9pTMHWGSmKb3+pkMFJ3zdR 2Qe58WJp2J1VCOqro1HGJGswmNVYxI7M -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:58 2025 by rpki-client