$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: cZCawLeLNEcWy28GFWYpjqtZfOavew7bQ++TPZKL73I= Subject key identifier: 93:C9:BA:16:2C:C2:C0:07:F6:22:13:06:87:3F:41:05:FD:DA:84:30 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: AD Signing time: Thu 19 Jun 2025 05:24:56 +0000 Manifest this update: Thu 19 Jun 2025 05:24:55 +0000 Manifest next update: Thu 26 Jun 2025 05:24:55 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: 59ii8YbBL/DFg+APt03Gdvz6M9ZtgJtHSaW6k3VpGTA=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Jun 19 05:24:55 2025 GMT Not After : Jun 26 05:24:55 2025 GMT Subject: CN=68539f28-623a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:50:6d:bb:fc:22:4d:fb:6e:d4:f8:53:f7: 19:8c:5d:be:c5:a2:1e:eb:77:fa:75:c7:47:eb:93: 33:cc:2e:59:c5:92:e4:11:c0:76:74:ad:57:d9:9d: 0b:1a:8b:bb:c0:d8:69:d1:72:3b:88:05:1b:14:16: 81:88:97:f2:0b:98:cb:69:05:dc:c3:1f:d4:7c:00: ea:49:51:02:09:32:c2:c8:b2:6c:2f:48:55:22:38: 4a:37:66:cc:15:fb:9b:a0:76:c3:3f:51:aa:89:fa: 76:03:b2:af:bc:4e:aa:52:12:bb:8a:56:cc:63:0f: 14:f7:7e:a0:77:d6:4c:7c:91:9b:47:d4:ef:e8:64: a0:11:8f:46:78:30:75:7b:a0:92:dd:a2:de:35:ec: 8e:cb:fb:bd:b1:9b:1b:67:8a:2d:97:cc:3c:8a:19: 26:ef:93:4d:21:1a:77:64:6d:70:4d:da:5b:85:7f: 4d:b0:9d:d7:4c:cf:c8:c8:20:e5:63:c1:af:02:4b: 5b:51:49:c0:7b:64:3b:5c:1b:2e:32:5d:e4:d3:ec: aa:df:d5:35:b4:59:73:1a:4a:80:83:46:bd:ed:67: 4b:d3:24:b4:c2:61:cb:d2:b5:20:1d:4a:24:1a:c1: 9b:d1:f2:e0:f7:b2:38:67:2b:86:bc:dc:eb:09:73: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:BA:16:2C:C2:C0:07:F6:22:13:06:87:3F:41:05:FD:DA:84:30 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e0:36:fa:4d:db:0e:1e:36:85:de:6e:84:5f:ef:05:c6:b2: de:db:2f:c9:af:69:61:7f:75:a3:47:c8:b5:30:46:ad:1b:7a: de:dd:b8:1d:67:88:f8:62:2e:94:14:83:a0:c0:12:09:15:19: ea:8b:57:d3:29:b7:f9:3d:12:cb:cf:1e:85:c7:69:2f:00:5e: 15:5b:39:aa:20:a9:46:43:9c:8d:46:09:46:63:61:06:1a:57: b4:95:52:d5:55:9c:ae:33:d6:e7:1c:48:79:06:fb:28:d4:24: 0a:c0:17:a1:9c:01:4d:35:8e:80:4b:6f:d0:6f:ff:c1:8a:19: 56:ab:25:ea:f3:4a:6c:a7:13:17:f4:18:76:8a:76:5a:f8:ba: 24:ab:8d:bd:eb:db:4e:d5:44:21:bf:a7:41:0e:46:b1:bd:88: 08:80:5e:d8:86:a9:e6:a1:1a:f3:c0:d4:75:17:a8:d4:b5:f8: 0d:90:53:4c:97:2d:52:0c:36:73:28:ba:a7:63:d6:39:7f:89: 29:ce:5b:50:ae:67:cd:69:ef:9f:8c:6b:08:51:2a:72:bd:9e: 95:62:bd:d7:7c:ef:00:61:26:ff:58:ba:1b:1f:e1:0c:25:30: b4:8e:e5:be:20:53:92:e6:7c:0c:87:11:e8:e9:32:f8:8d:2b: 06:23:b3:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwNjE5MDUyNDU1WhcNMjUwNjI2MDUyNDU1WjAYMRYwFAYD VQQDEw02ODUzOWYyOC02MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmx9Qbbv8Ik37btT4U/cZjF2+xaIe63f6dcdH65MzzC5ZxZLkEcB2dK1X2Z0L Gou7wNhp0XI7iAUbFBaBiJfyC5jLaQXcwx/UfADqSVECCTLCyLJsL0hVIjhKN2bM FfuboHbDP1Gqifp2A7KvvE6qUhK7ilbMYw8U936gd9ZMfJGbR9Tv6GSgEY9GeDB1 e6CS3aLeNeyOy/u9sZsbZ4otl8w8ihkm75NNIRp3ZG1wTdpbhX9NsJ3XTM/IyCDl Y8GvAktbUUnAe2Q7XBsuMl3k0+yq39U1tFlzGkqAg0a97WdL0yS0wmHL0rUgHUok GsGb0fLg97I4ZyuGvNzrCXNhawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPJuhYs wsAH9iITBoc/QQX92oQwMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA74Db6TdsOHjaF3m6EX+8FxrLe2y/Jr2lhf3WjR8i1MEatG3re3bgd Z4j4Yi6UFIOgwBIJFRnqi1fTKbf5PRLLzx6Fx2kvAF4VWzmqIKlGQ5yNRglGY2EG Gle0lVLVVZyuM9bnHEh5Bvso1CQKwBehnAFNNY6AS2/Qb//BihlWqyXq80pspxMX 9Bh2inZa+Lokq42969tO1UQhv6dBDkaxvYgIgF7YhqnmoRrzwNR1F6jUtfgNkFNM ly1SDDZzKLqnY9Y5f4kpzltQrmfNae+fjGsIUSpyvZ6VYr3XfO8AYSb/WLobH+EM JTC0juW+IFOS5nwMhxHo6TL4jSsGI7Mk -----END CERTIFICATE-----Generated at Fri Jun 20 08:59:31 2025 by rpki-client