$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: hSsEJksiVuQiC2dbwhNQrq3fGWTICkD5ECKW6QEnXYM= Subject key identifier: AB:D2:94:46:10:C8:DD:78:51:D3:E1:EA:C8:79:7B:23:0A:CC:3B:17 Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 040A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 0405 Signing time: Sat 23 Aug 2025 00:40:08 +0000 Manifest this update: Sat 23 Aug 2025 00:40:07 +0000 Manifest next update: Sat 30 Aug 2025 00:40:07 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: Jk4GVlRT9wN0l/0yLVha9au0OgT5FR5w2plcHJ2sqmM=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: aEYNM6Phn31D8FyeIqNiot79wvPM4Ab/EZ23BGQS/EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1034 (0x40a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: Aug 23 00:40:07 2025 GMT Not After : Aug 30 00:40:07 2025 GMT Subject: CN=68a90de8-5918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:23:61:f8:4e:d9:5f:3f:01:d0:f1:aa:b1: 0c:78:5e:5a:ab:ec:a3:dc:f6:54:c7:17:46:a5:4b: 9b:40:3f:8e:d2:84:ab:ba:72:4d:4c:33:0c:88:16: dd:cc:a4:2f:73:d7:34:0a:1a:0c:ef:fc:8e:3b:7a: 20:90:bf:80:9c:62:19:19:20:bb:52:24:ac:b8:6f: 2b:a7:6b:6a:a9:8b:da:cb:54:a1:97:7a:36:94:d8: f3:21:0b:0c:f3:b3:f8:ee:e8:5a:e7:ee:4b:84:2f: 4f:50:42:49:19:5a:36:ff:cc:c2:77:49:30:4e:55: 83:c6:c1:ad:b1:da:0c:12:12:aa:a6:8d:41:e1:22: 4f:51:bb:a5:63:93:00:93:fc:1a:79:25:c0:53:10: 29:00:8a:95:7a:76:36:36:41:58:bd:8c:19:c5:9c: 32:65:61:33:8b:8d:9b:ff:57:48:3b:65:68:c2:9a: e8:73:1b:08:f8:8b:aa:ae:47:c2:95:f4:70:c9:96: 9b:13:6f:f6:c8:8c:2c:9c:79:81:38:9c:2c:5f:60: 7e:84:67:f8:96:bc:0e:a4:50:76:07:2d:46:59:4d: 72:1e:07:13:54:75:28:0e:26:70:a1:1d:96:a5:c9: b5:8b:fa:c6:32:8d:c6:a5:0b:72:fe:f5:ce:9c:7f: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D2:94:46:10:C8:DD:78:51:D3:E1:EA:C8:79:7B:23:0A:CC:3B:17 X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:cf:28:35:b8:44:5c:92:b1:c3:2f:e5:95:2a:52:2a:f4:98: 62:c7:71:67:cf:c8:61:fc:00:9a:cb:d5:f8:e9:8f:b9:00:29: 50:b0:8b:39:c1:e9:53:f4:fc:ff:00:6b:5c:1e:85:31:d6:7f: 0f:b5:ca:ca:1f:5c:f4:5e:a8:2f:99:3f:c8:9c:18:c5:d2:22: 8c:af:c8:58:67:3c:43:2b:03:43:f6:eb:5f:40:87:01:b3:d0: 43:f7:8b:f5:c6:40:dd:81:e9:df:99:01:04:9d:a5:2c:74:ae: 57:82:e9:51:5e:8f:6d:3f:b8:89:ab:cc:56:3e:76:f4:e4:ab: 90:a0:1b:66:69:b8:ed:25:35:57:fe:77:6d:32:b6:81:83:5d: 8b:49:4c:c3:4f:57:83:90:62:c0:8d:5f:f1:85:fb:3e:28:ac: 6c:ef:19:c2:e6:a5:bf:50:f9:e8:f1:91:3d:a6:6b:28:00:56: af:8e:a0:f3:51:27:ca:97:1b:13:a3:e5:06:65:d1:24:09:f4: 13:e7:f4:4c:57:4c:00:94:9b:62:b5:b3:89:19:28:99:ba:c5: 79:66:d2:30:d2:55:71:a1:47:de:7b:d2:87:38:71:10:bd:cc: 02:c6:51:5a:5d:9d:5f:25:06:e3:37:83:2c:7c:d4:40:ae:a1: 8b:2c:ee:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUwODIzMDA0MDA3WhcNMjUwODMwMDA0MDA3WjAYMRYwFAYD VQQDEw02OGE5MGRlOC01OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mUjYfhO2V8/AdDxqrEMeF5aq+yj3PZUxxdGpUubQD+O0oSrunJNTDMMiBbd zKQvc9c0ChoM7/yOO3ogkL+AnGIZGSC7UiSsuG8rp2tqqYvay1Shl3o2lNjzIQsM 87P47uha5+5LhC9PUEJJGVo2/8zCd0kwTlWDxsGtsdoMEhKqpo1B4SJPUbulY5MA k/waeSXAUxApAIqVenY2NkFYvYwZxZwyZWEzi42b/1dIO2VowprocxsI+IuqrkfC lfRwyZabE2/2yIwsnHmBOJwsX2B+hGf4lrwOpFB2By1GWU1yHgcTVHUoDiZwoR2W pcm1i/rGMo3GpQty/vXOnH9J+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvSlEYQ yN14UdPh6sh5eyMKzDsXMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDzyg1uERckrHDL+WVKlIq9Jhix3Fnz8hh/ACay9X46Y+5AClQsIs5 welT9Pz/AGtcHoUx1n8PtcrKH1z0XqgvmT/InBjF0iKMr8hYZzxDKwND9utfQIcB s9BD94v1xkDdgenfmQEEnaUsdK5XgulRXo9tP7iJq8xWPnb05KuQoBtmabjtJTVX /ndtMraBg12LSUzDT1eDkGLAjV/xhfs+KKxs7xnC5qW/UPno8ZE9pmsoAFavjqDz USfKlxsTo+UGZdEkCfQT5/RMV0wAlJtitbOJGSiZusV5ZtIw0lVxoUfee9KHOHEQ vcwCxlFaXZ1fJQbjN4MsfNRArqGLLO45 -----END CERTIFICATE-----Generated at Sun Aug 24 06:44:06 2025 by rpki-client