$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: eYvSFQN2nayUsORw7L8A9x7DAbkVOeofLB/aDRkJN+4= Subject key identifier: BD:F5:3C:6E:4D:76:27:A8:97:B9:07:F1:A8:20:36:EE:19:B8:CC:5D Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C89 Signing time: Fri 22 Aug 2025 18:21:59 +0000 Manifest this update: Fri 22 Aug 2025 18:21:58 +0000 Manifest next update: Fri 29 Aug 2025 18:21:58 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: off/ShMUA6YVA+JWb3mNORnt0B5YeCBsNpAY3oM/1Yc=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Aug 22 18:21:58 2025 GMT Not After : Aug 29 18:21:58 2025 GMT Subject: CN=68a8b546-bdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:89:8a:bd:91:de:d8:78:41:96:a8:30:17: e7:04:f9:be:c2:12:b7:c2:74:c6:67:10:47:4b:7d: 88:76:34:6e:ba:f0:22:98:7e:3d:6d:15:e2:cb:bd: a0:58:63:a3:22:c3:63:03:1b:db:d4:ff:fe:c1:21: bc:55:59:99:0e:9e:05:6a:ed:22:88:0f:95:28:52: 1e:aa:aa:91:c9:d8:ad:f7:21:90:78:a4:34:bd:e9: b1:12:1b:82:ab:72:1f:61:87:81:c5:0b:26:36:12: f0:7c:64:eb:31:15:b6:f7:23:a1:29:f6:05:e8:94: 3b:1a:b0:2c:3c:cb:a1:bb:32:f5:de:0c:94:5f:17: 8a:9b:0d:49:ab:55:e5:39:0a:4f:1a:f3:6c:43:17: 01:62:dd:6f:ba:f6:94:6f:ed:45:f7:98:dc:a4:bc: a5:38:76:6c:21:cb:fe:bc:b2:de:f9:6b:1f:23:cf: 3b:d0:2e:58:0a:7a:53:df:1a:33:29:7a:19:8a:6e: 14:4a:fc:81:b7:4a:10:8e:b3:7a:ec:a6:f7:85:96: 4d:97:21:81:8e:61:b2:f5:b5:35:b8:8b:49:a1:36: 2e:67:23:45:56:14:27:43:95:d6:f2:46:1d:1f:13: e9:2e:4f:3d:22:88:1a:be:66:c3:10:15:f8:ad:66: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F5:3C:6E:4D:76:27:A8:97:B9:07:F1:A8:20:36:EE:19:B8:CC:5D X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:01:32:8f:cb:bc:21:73:b9:94:b0:f7:5d:33:7f:40:b0:ba: 2f:0b:e7:48:70:9d:32:70:22:21:4c:06:53:26:cc:28:d3:8b: 2d:72:69:19:f5:e8:3b:d4:28:78:73:a0:21:bd:52:86:5b:18: dd:aa:a7:e4:df:1f:c8:3d:11:0c:35:3f:42:e9:9d:1c:8e:29: 90:49:6b:40:fe:0d:62:25:b9:3f:fb:cc:0f:e4:c7:08:5e:b1: 16:1a:aa:87:2e:0a:41:fe:d9:96:23:7a:7e:6f:d8:26:34:fd: 5b:54:7b:fc:3e:40:9b:d7:28:f7:cb:ef:2e:eb:3c:39:3f:a4: d0:73:61:7e:b5:82:f7:ea:2b:05:46:15:eb:5e:4a:f1:52:0d: 44:21:e0:c8:88:91:87:e2:e8:52:10:95:28:b4:81:3f:70:97: 1f:0d:13:2e:01:5f:89:b8:d2:4f:67:b7:85:70:4f:49:55:a5: c2:bb:1d:f8:a6:fc:47:44:5c:71:24:eb:21:dc:68:e8:a0:29: 0e:28:4d:63:1a:73:d9:e2:eb:6c:cb:e2:62:ce:43:8c:bc:b0: 35:43:60:6a:ea:f4:4a:2f:9d:6f:63:b4:0a:d3:ad:62:2f:b0: c9:f4:8d:ed:fd:15:32:2f:96:2f:f4:1a:4c:c0:11:67:3a:27: d3:ee:54:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwODIyMTgyMTU4WhcNMjUwODI5MTgyMTU4WjAYMRYwFAYD VQQDEw02OGE4YjU0Ni1iZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXyJir2R3th4QZaoMBfnBPm+whK3wnTGZxBHS32IdjRuuvAimH49bRXiy72g WGOjIsNjAxvb1P/+wSG8VVmZDp4Fau0iiA+VKFIeqqqRydit9yGQeKQ0vemxEhuC q3IfYYeBxQsmNhLwfGTrMRW29yOhKfYF6JQ7GrAsPMuhuzL13gyUXxeKmw1Jq1Xl OQpPGvNsQxcBYt1vuvaUb+1F95jcpLylOHZsIcv+vLLe+WsfI8870C5YCnpT3xoz KXoZim4USvyBt0oQjrN67Kb3hZZNlyGBjmGy9bU1uItJoTYuZyNFVhQnQ5XW8kYd HxPpLk89IogavmbDEBX4rWZPYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL31PG5N dieol7kH8aggNu4ZuMxdMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJATKPy7whc7mUsPddM39AsLovC+dIcJ0ycCIhTAZTJswo04stcmkZ 9eg71Ch4c6AhvVKGWxjdqqfk3x/IPREMNT9C6Z0cjimQSWtA/g1iJbk/+8wP5McI XrEWGqqHLgpB/tmWI3p+b9gmNP1bVHv8PkCb1yj3y+8u6zw5P6TQc2F+tYL36isF RhXrXkrxUg1EIeDIiJGH4uhSEJUotIE/cJcfDRMuAV+JuNJPZ7eFcE9JVaXCux34 pvxHRFxxJOsh3GjooCkOKE1jGnPZ4utsy+JizkOMvLA1Q2Bq6vRKL51vY7QK061i L7DJ9I3t/RUyL5Yv9BpMwBFnOifT7lQd -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:31 2025 by rpki-client