$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: 0EXBI7G53BMjqdB4IbLbmuQ2G11dTSkkZncxP1bih8M= Subject key identifier: 9D:71:17:DD:D5:20:24:94:9F:0A:CD:9F:31:66:5B:22:23:C2:C7:D2 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34A7 Signing time: Sat 14 Jun 2025 14:52:39 +0000 Manifest this update: Sat 14 Jun 2025 14:52:38 +0000 Manifest next update: Sat 21 Jun 2025 14:52:38 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: KVu/MoFlUVxgQ15LuGcjFIjIkFx6mi94Hv+FZv5zNp4=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: XcDFXjlfUG7gat5Mn2G5GUkU6QTMu4zYAY0E0LcWZ/I=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: PxQFBDt3MlLgfKc8KqwYwfOpnira0VBqCMOA9nowVeQ=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: rZN8MBWyEzHwpv4iO0Yw1pt5Vq4fsdDOBU015oji+0s=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: Tw8o51QsKWxSHOjK/psQ5MTWchWVnaRSIbAtlFB/kL8=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: qoFcoGLH5rF61ICxkb9LlHSey20FafRf8pg6MY0OMrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Jun 14 14:52:38 2025 GMT Not After : Jun 21 14:52:38 2025 GMT Subject: CN=684d8cb7-b098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:25:d1:ae:9f:33:22:81:5e:cf:94:eb:f4: 5f:c1:de:e3:8e:6d:10:65:c8:4d:0f:d7:cf:1a:24: 07:e1:8a:02:85:f5:0b:40:4f:27:2b:cd:26:ff:47: f2:6a:0a:15:e2:d3:63:77:60:85:e5:00:9b:de:32: 0f:e0:cd:37:7b:5c:4d:d7:45:82:7e:d0:06:48:8b: 44:8c:16:d2:22:7a:c7:a7:06:46:53:3d:4b:5f:0b: 68:6f:55:40:5f:66:fe:08:a7:5f:8b:7f:3b:12:9d: c0:9d:27:89:eb:c4:27:69:7d:67:73:ee:bb:34:85: b6:70:47:b0:ad:8d:b9:02:f6:eb:2f:b8:46:1b:88: 67:2b:68:78:1a:e7:91:3a:e0:19:e6:5d:6b:4f:77: e9:cd:7d:76:95:24:ac:06:89:e0:2f:1f:8a:2d:5a: 77:0a:46:8c:89:84:76:61:c4:f1:db:43:e3:95:63: 95:5b:79:d5:14:a6:70:71:21:20:c7:6b:b9:9d:00: d4:be:62:2f:75:3b:4c:d1:22:cc:1c:47:b8:f1:08: f4:63:a4:01:e2:a3:90:e1:8f:21:70:6f:2f:84:a5: b7:e5:1b:83:3d:f4:00:0a:62:6a:c3:0e:1c:a7:54: f6:55:90:64:73:e4:6c:38:6a:23:03:b8:e6:1a:25: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:71:17:DD:D5:20:24:94:9F:0A:CD:9F:31:66:5B:22:23:C2:C7:D2 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a8:83:57:fd:1f:4c:da:73:81:26:83:e0:91:c2:fd:71:cd: 48:56:5b:ff:44:eb:fb:3d:69:46:1a:6e:ed:4d:a2:82:84:6c: 41:89:e1:93:5f:91:fa:3d:dc:84:73:99:76:ce:5f:ee:bc:99: 57:99:00:b5:ea:17:3d:f6:69:3d:34:ae:57:1c:89:1d:00:cd: 4f:fe:29:f8:4c:b9:68:c1:e6:70:a7:fd:08:ed:2c:13:c7:fb: 3a:44:4a:2b:79:b0:e7:6d:15:c6:b3:48:dc:54:34:20:96:fe: ce:17:b3:d7:65:56:4f:18:ac:08:33:d3:03:3d:63:63:91:b5: 59:64:7c:a7:95:e5:a9:80:eb:c0:13:21:06:8b:a1:86:07:40: 77:ef:46:a0:49:d8:a6:7d:0d:38:5e:6b:85:6b:c4:c0:bb:7e: 81:b4:5e:df:55:3b:6a:a2:88:0d:de:98:a4:d2:af:78:36:99: a3:af:57:31:0f:78:a5:ab:c2:8c:5d:0f:3a:2f:85:61:30:71: 79:f4:6c:fb:c3:69:05:49:9a:5c:c7:06:eb:28:31:7b:77:4e: f8:0d:b6:9f:12:95:87:74:05:ff:77:ba:7a:2b:e2:bc:a7:bd: b9:75:d0:28:de:e9:a9:4b:f9:fb:4b:ec:a7:f1:dc:b2:6b:f3: 53:e7:7f:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwNjE0MTQ1MjM4WhcNMjUwNjIxMTQ1MjM4WjAYMRYwFAYD VQQDEw02ODRkOGNiNy1iMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dMl0a6fMyKBXs+U6/Rfwd7jjm0QZchND9fPGiQH4YoChfULQE8nK80m/0fy agoV4tNjd2CF5QCb3jIP4M03e1xN10WCftAGSItEjBbSInrHpwZGUz1LXwtob1VA X2b+CKdfi387Ep3AnSeJ68QnaX1nc+67NIW2cEewrY25AvbrL7hGG4hnK2h4GueR OuAZ5l1rT3fpzX12lSSsBongLx+KLVp3CkaMiYR2YcTx20PjlWOVW3nVFKZwcSEg x2u5nQDUvmIvdTtM0SLMHEe48Qj0Y6QB4qOQ4Y8hcG8vhKW35RuDPfQACmJqww4c p1T2VZBkc+RsOGojA7jmGiUh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1xF93V ICSUnwrNnzFmWyIjwsfSMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMqINX/R9M2nOBJoPgkcL9cc1IVlv/ROv7PWlGGm7tTaKChGxBieGT X5H6PdyEc5l2zl/uvJlXmQC16hc99mk9NK5XHIkdAM1P/in4TLloweZwp/0I7SwT x/s6REorebDnbRXGs0jcVDQglv7OF7PXZVZPGKwIM9MDPWNjkbVZZHynleWpgOvA EyEGi6GGB0B370agSdimfQ04XmuFa8TAu36BtF7fVTtqoogN3pik0q94Npmjr1cx D3ilq8KMXQ86L4VhMHF59Gz7w2kFSZpcxwbrKDF7d074DbafEpWHdAX/d7p6K+K8 p725ddAo3umpS/n7S+yn8dyya/NT539i -----END CERTIFICATE-----Generated at Sun Jun 15 05:53:31 2025 by rpki-client