$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: KiXN4sFeCwI6nye9FBddvO8cbjrmTE8sGneAju9oFQA= Subject key identifier: EF:C2:99:CA:FC:87:66:02:2A:50:FA:42:57:B5:EF:6D:4E:7A:8A:EA Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 0415 Signing time: Sat 23 Aug 2025 00:36:29 +0000 Manifest this update: Sat 23 Aug 2025 00:36:29 +0000 Manifest next update: Sat 30 Aug 2025 00:36:29 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: P9OrfKH8LkBWryE+Z8Q3qmLyFcPs5r+rxyZ+alTGccw=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Aug 23 00:36:29 2025 GMT Not After : Aug 30 00:36:29 2025 GMT Subject: CN=68a90d0d-868e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:ac:e4:83:91:c1:47:ce:d1:09:8f:42:73: a2:9e:d0:b4:f1:d8:23:92:a8:f0:b5:67:1b:c7:ec: 09:96:6e:57:48:67:1f:b1:d7:aa:98:35:fa:47:7f: 7c:f9:6a:b3:f1:50:e8:32:9b:2a:74:3b:f0:67:71: 2c:9b:d8:af:57:3d:6c:3e:5f:20:fe:0a:02:4b:a7: a7:8b:cb:6a:2b:25:32:6d:72:d7:6a:67:81:d3:ee: 13:b7:6c:61:1c:a4:6c:da:f4:f3:24:23:6c:44:59: 1d:cf:56:4d:31:63:df:2f:23:d9:fc:56:11:76:dd: ca:8d:14:e7:6c:41:71:4a:7f:cf:0f:e7:75:56:80: 24:1f:6e:db:7b:7c:60:ea:aa:af:2e:91:7d:f8:6a: a3:2b:fe:63:23:75:57:08:35:2a:6a:1b:56:86:27: 5d:5a:55:49:0d:fb:d8:67:b1:41:9f:b1:48:22:6c: 76:49:5f:fc:6a:b2:f1:b2:82:ed:bd:6c:f2:f1:14: 3e:4a:23:22:3a:ce:c7:83:dd:77:6c:a9:76:05:b2: 53:e5:82:b1:fa:fd:cc:dd:90:e1:99:b7:bc:31:46: 51:12:1f:97:fe:db:cc:3d:39:56:b3:d8:f5:8f:db: 84:8a:31:39:5b:36:20:43:b6:41:cc:5c:07:20:d6: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C2:99:CA:FC:87:66:02:2A:50:FA:42:57:B5:EF:6D:4E:7A:8A:EA X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:1e:98:35:74:53:33:e2:1f:e6:85:f0:67:27:a5:f9:ad:49: d6:d6:aa:f7:17:94:1e:04:77:80:b7:79:c9:ac:98:59:b0:31: 76:25:78:e6:28:4c:b4:7d:f4:14:d4:84:e0:57:a2:fb:7a:0d: 5b:6d:70:15:d3:ad:55:52:1f:a9:38:77:e1:b4:cd:e6:47:a4: 19:7c:cc:03:69:1e:e2:04:28:36:f9:3f:7d:a6:72:ba:6b:44: a2:ef:a7:0c:6a:86:54:c3:94:55:a4:0e:26:e3:d3:48:a6:ac: 7f:99:41:07:af:0c:fa:a9:d8:d5:09:4b:44:09:2b:3d:57:b3: 79:9c:ef:d7:f1:53:ab:19:65:ec:ec:29:4b:20:da:ca:ca:06: 93:70:a6:f8:50:07:e7:57:4a:9a:c1:19:3c:28:0b:fa:43:53: 1e:8b:2c:96:40:8c:78:62:86:c6:e3:b0:49:41:13:45:06:a8: f9:72:d6:04:6c:d4:54:21:89:c2:42:4c:5f:b8:a8:fa:f6:29: 6e:87:fe:b0:e3:9f:a7:ef:29:1e:0f:47:12:66:86:3f:b6:62: 06:f8:6f:90:05:73:eb:8a:17:54:66:c8:68:3f:d1:38:94:1a: 31:2d:68:5c:21:ed:19:84:9c:e7:c2:04:47:1d:9d:a2:2b:20: 1f:4f:9a:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwODIzMDAzNjI5WhcNMjUwODMwMDAzNjI5WjAYMRYwFAYD VQQDEw02OGE5MGQwZC04NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfis5IORwUfO0QmPQnOintC08dgjkqjwtWcbx+wJlm5XSGcfsdeqmDX6R398 +Wqz8VDoMpsqdDvwZ3Esm9ivVz1sPl8g/goCS6eni8tqKyUybXLXameB0+4Tt2xh HKRs2vTzJCNsRFkdz1ZNMWPfLyPZ/FYRdt3KjRTnbEFxSn/PD+d1VoAkH27be3xg 6qqvLpF9+GqjK/5jI3VXCDUqahtWhiddWlVJDfvYZ7FBn7FIImx2SV/8arLxsoLt vWzy8RQ+SiMiOs7Hg913bKl2BbJT5YKx+v3M3ZDhmbe8MUZREh+X/tvMPTlWs9j1 j9uEijE5WzYgQ7ZBzFwHINb7hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/Cmcr8 h2YCKlD6Qle1721OeorqMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Hpg1dFMz4h/mhfBnJ6X5rUnW1qr3F5QeBHeAt3nJrJhZsDF2JXjm KEy0ffQU1ITgV6L7eg1bbXAV061VUh+pOHfhtM3mR6QZfMwDaR7iBCg2+T99pnK6 a0Si76cMaoZUw5RVpA4m49NIpqx/mUEHrwz6qdjVCUtECSs9V7N5nO/X8VOrGWXs 7ClLINrKygaTcKb4UAfnV0qawRk8KAv6Q1MeiyyWQIx4YobG47BJQRNFBqj5ctYE bNRUIYnCQkxfuKj69iluh/6w45+n7ykeD0cSZoY/tmIG+G+QBXPrihdUZshoP9E4 lBoxLWhcIe0ZhJznwgRHHZ2iKyAfT5pR -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:18 2025 by rpki-client