$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: tIeIMA2EulSbNYsaIR8B/UU26+j/gkK2lBxkiL8lryk= Subject key identifier: E7:40:98:77:53:E8:74:08:EA:62:5E:C7:6A:BA:5F:2C:D0:C2:79:FA Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 4F Signing time: Sat 23 Aug 2025 07:37:50 +0000 Manifest this update: Sat 23 Aug 2025 07:37:49 +0000 Manifest next update: Sat 30 Aug 2025 07:37:49 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: R62eG03xB53PSvHEnRTG4kWa0eHvtosFti4a0o7gi2U=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Aug 23 07:37:49 2025 GMT Not After : Aug 30 07:37:49 2025 GMT Subject: CN=68a96fce-fab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:b9:ed:64:df:7a:f1:a3:c8:00:d1:09:e6: be:84:31:a2:b6:84:08:37:de:16:b5:2c:87:11:a6: b4:29:51:7a:f6:8a:94:eb:99:93:7f:12:5f:df:b7: 38:2a:3d:13:c2:57:b8:86:f7:2f:b9:12:68:30:61: 97:74:4f:31:31:6e:ac:84:f0:c5:44:47:23:6f:a5: 9f:ec:83:b9:52:06:8a:88:09:5a:88:ce:10:9e:62: 48:84:68:2f:f8:ce:6f:d1:1e:7e:15:5f:81:34:54: 65:91:f8:f6:58:4b:33:01:5b:68:5e:27:f5:4a:51: 22:6a:4b:fb:b1:e3:4d:40:f4:ad:d3:01:17:f4:5e: 91:2f:12:b7:e4:62:09:dd:20:e6:1e:bb:a2:da:d8: 56:aa:60:b6:2e:5b:c4:ae:08:3b:30:c0:c5:e5:51: 1d:65:1d:e1:be:32:46:c8:de:71:c2:d4:5c:b2:d8: 24:68:12:bf:6a:b1:87:b6:e5:44:aa:5f:c8:0a:df: bb:26:21:2c:1f:c6:40:48:23:58:2e:74:3a:ab:99: 7a:09:a7:0c:c0:5d:62:84:22:f3:4c:cc:59:91:05: 96:6e:81:cc:1b:1c:b8:44:c2:13:c8:f6:d8:4a:81: bf:3d:fe:18:af:a3:10:3b:2b:b6:fa:68:0b:91:ed: da:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:40:98:77:53:E8:74:08:EA:62:5E:C7:6A:BA:5F:2C:D0:C2:79:FA X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:1d:6a:ec:a8:7c:33:83:f2:f5:61:91:4f:c2:cb:12:c5:2d: ee:e1:fc:d4:d4:87:2a:b4:ec:d7:79:4d:c1:6e:ba:13:6c:83: fb:29:a1:b5:89:2a:7f:8d:9e:85:fb:6d:c4:f5:e4:90:3c:23: 28:f8:4d:a5:b2:fa:38:09:49:de:b9:86:15:e9:e9:80:42:98: c6:6b:b7:89:e2:0a:29:01:eb:ce:f8:9c:a6:41:81:ea:e8:10: 96:b5:03:6e:a5:3a:a8:45:56:91:51:d1:d4:ba:c8:1c:ec:ce: 97:d5:f5:1a:ec:43:41:4a:8a:b5:8d:48:3c:8c:2b:04:24:8c: b8:b5:5c:6b:d5:70:17:12:d9:2d:79:7d:82:fa:f2:42:83:49: 92:c2:c8:e5:76:c5:74:ff:2a:55:b9:eb:d9:1e:71:ac:95:23: cd:4e:a8:5a:b2:d3:d7:b1:3e:0c:77:ec:9a:08:ed:51:13:4f: 97:ea:db:6c:f4:bd:85:a7:56:06:79:88:c4:e9:cb:9b:f6:22: 9d:8a:7b:26:c0:d8:a1:84:d9:17:c4:ec:48:a4:54:ea:5f:2e: bc:2c:f5:46:a3:12:1a:dc:bd:18:a4:24:69:f7:57:74:90:0d: c6:fa:52:2c:72:ff:e1:5f:18:dc:db:ae:e6:a6:1c:d6:00:b3: 85:34:ed:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTA4MjMwNzM3NDlaFw0yNTA4MzAwNzM3NDlaMBgxFjAUBgNV BAMTDTY4YTk2ZmNlLWZhYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDs/bntZN968aPIANEJ5r6EMaK2hAg33ha1LIcRprQpUXr2ipTrmZN/El/ftzgq PRPCV7iG9y+5EmgwYZd0TzExbqyE8MVERyNvpZ/sg7lSBoqICVqIzhCeYkiEaC/4 zm/RHn4VX4E0VGWR+PZYSzMBW2heJ/VKUSJqS/ux401A9K3TARf0XpEvErfkYgnd IOYeu6La2FaqYLYuW8SuCDswwMXlUR1lHeG+MkbI3nHC1Fyy2CRoEr9qsYe25USq X8gK37smISwfxkBII1gudDqrmXoJpwzAXWKEIvNMzFmRBZZugcwbHLhEwhPI9thK gb89/hivoxA7K7b6aAuR7do3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU50CYd1Po dAjqYl7HarpfLNDCefowHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHUdauyofDOD8vVhkU/CyxLFLe7h/NTUhyq07Nd5TcFuuhNsg/spobWJ Kn+NnoX7bcT15JA8Iyj4TaWy+jgJSd65hhXp6YBCmMZrt4niCikB6874nKZBgero EJa1A26lOqhFVpFR0dS6yBzszpfV9RrsQ0FKirWNSDyMKwQkjLi1XGvVcBcS2S15 fYL68kKDSZLCyOV2xXT/KlW569kecayVI81OqFqy09exPgx37JoI7VETT5fq22z0 vYWnVgZ5iMTpy5v2Ip2KeybA2KGE2RfE7EikVOpfLrws9UajEhrcvRikJGn3V3SQ Dcb6Uixy/+FfGNzbruamHNYAs4U07f4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:20 2025 by rpki-client