$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: n+RzPN6QR+KT/zrhvP7NJ69YU7Y1/gSyu48WcCWitSE= Subject key identifier: 06:E7:3A:76:57:79:8E:0F:EE:8A:E8:71:45:56:3E:87:76:4B:10:81 Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 12D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 12C5 Signing time: Sat 14 Jun 2025 17:00:16 +0000 Manifest this update: Sat 14 Jun 2025 17:00:16 +0000 Manifest next update: Sat 21 Jun 2025 17:00:16 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: okOHScN/Al8GCaIa7LaGxEC7pziQnpJpv9XbNyra20Y=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: KCnIrYwfu7lFXb4I5Fn3ggrFhAeTiDDSoEEewMbwbp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4818 (0x12d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Jun 14 17:00:16 2025 GMT Not After : Jun 21 17:00:16 2025 GMT Subject: CN=684daaa0-c247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:8e:79:66:78:bd:96:54:9e:78:96:e9:eb: be:db:56:48:98:27:84:34:36:ad:f0:1b:10:73:a3: 22:2c:3e:5d:bb:90:bb:ed:e9:b9:d1:1e:02:b6:94: 04:06:8e:88:2f:d6:50:34:8f:47:45:56:e3:4a:48: 68:57:53:7f:e6:ca:95:c8:ea:98:7d:20:11:ed:0f: 6c:2e:6c:2e:10:b2:ac:25:d8:76:f1:99:26:f0:42: 5e:26:6e:0a:e5:3d:9b:00:9e:18:d7:2b:f5:0e:2d: e2:07:ea:b7:17:5c:42:3d:0b:14:09:f7:05:fa:55: fe:ac:8f:0d:b4:d5:ef:9b:38:ce:df:cf:45:cc:91: 7a:e8:09:ec:4b:57:a3:df:84:ca:80:e6:4a:1b:99: 11:a3:7f:11:08:62:2f:0a:47:3a:5c:9e:91:b4:d6: 9f:17:c2:c2:fc:78:89:cc:c0:d3:06:af:25:63:6d: 69:15:97:0a:d6:af:b3:02:19:fd:29:d5:89:80:ef: 38:cc:19:19:d0:b3:17:1e:a7:d7:de:3b:48:f6:df: 4b:57:5b:6c:3a:89:6e:eb:49:7b:ff:7a:00:2f:05: 1b:a6:ed:c1:6d:a5:55:98:6b:27:35:8c:24:9c:98: 7f:d2:68:00:4e:24:23:bb:8c:02:a1:6d:27:6c:75: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E7:3A:76:57:79:8E:0F:EE:8A:E8:71:45:56:3E:87:76:4B:10:81 X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c1:e4:17:d5:91:8e:c7:b9:18:9a:7a:6f:10:c3:5c:fd:a9: 71:33:3f:fe:7c:54:23:8b:df:de:d1:78:7e:ae:e7:03:10:57: 86:c2:b9:c1:92:21:c1:87:52:dd:8a:ce:3e:c6:0c:4c:99:90: 44:9f:cc:dd:d8:10:dd:79:8a:a4:27:a1:08:57:53:af:82:a0: 83:ca:a6:23:aa:bf:c0:c8:99:08:be:83:72:a0:c7:90:b6:7e: 04:44:16:52:8d:b5:1a:46:39:4f:6a:8f:be:a1:e6:29:cf:2e: 02:89:df:2a:89:aa:43:f3:49:30:02:c9:54:fe:15:d7:e4:05: f0:0a:f0:cc:a4:1b:33:63:ac:04:aa:98:ff:77:7e:35:91:9a: f1:c5:8c:c0:6b:d6:ac:ce:a2:d9:cc:54:d9:ae:a0:3c:6e:cc: 17:e0:f0:45:95:ba:3f:87:aa:e6:1d:04:01:14:6c:ed:2e:a2: 26:1f:bf:a0:57:74:75:8c:3f:9a:c9:ff:11:93:a7:1b:cd:1f: ae:e6:b5:29:9a:2f:70:0e:7f:62:e2:7c:4a:17:3f:57:1b:15: 37:7c:c5:36:23:94:75:68:01:07:47:c0:99:d7:fd:6b:58:a0: 91:6f:c0:0d:3c:a6:ed:d0:63:b0:15:ae:2b:2c:38:45:66:a7: 33:de:a6:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwNjE0MTcwMDE2WhcNMjUwNjIxMTcwMDE2WjAYMRYwFAYD VQQDEw02ODRkYWFhMC1jMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVWOeWZ4vZZUnniW6eu+21ZImCeENDat8BsQc6MiLD5du5C77em50R4CtpQE Bo6IL9ZQNI9HRVbjSkhoV1N/5sqVyOqYfSAR7Q9sLmwuELKsJdh28Zkm8EJeJm4K 5T2bAJ4Y1yv1Di3iB+q3F1xCPQsUCfcF+lX+rI8NtNXvmzjO389FzJF66AnsS1ej 34TKgOZKG5kRo38RCGIvCkc6XJ6RtNafF8LC/HiJzMDTBq8lY21pFZcK1q+zAhn9 KdWJgO84zBkZ0LMXHqfX3jtI9t9LV1tsOolu60l7/3oALwUbpu3BbaVVmGsnNYwk nJh/0mgATiQju4wCoW0nbHWrfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbnOnZX eY4P7orocUVWPod2SxCBMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUweQX1ZGOx7kYmnpvEMNc/alxMz/+fFQji9/e0Xh+rucDEFeGwrnB kiHBh1Ldis4+xgxMmZBEn8zd2BDdeYqkJ6EIV1OvgqCDyqYjqr/AyJkIvoNyoMeQ tn4ERBZSjbUaRjlPao++oeYpzy4Cid8qiapD80kwAslU/hXX5AXwCvDMpBszY6wE qpj/d341kZrxxYzAa9aszqLZzFTZrqA8bswX4PBFlbo/h6rmHQQBFGztLqImH7+g V3R1jD+ayf8Rk6cbzR+u5rUpmi9wDn9i4nxKFz9XGxU3fMU2I5R1aAEHR8CZ1/1r WKCRb8ANPKbt0GOwFa4rLDhFZqcz3qYq -----END CERTIFICATE-----Generated at Sun Jun 15 04:47:52 2025 by rpki-client