$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft File: JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json) Hash identifier: mI8hQ8CRdhuyUidpa7cxeUrr7dQucqA70UQSNoHfvT4= Subject key identifier: 83:22:0E:F7:51:73:D2:CA:00:C9:38:F9:2C:08:CD:A1:15:E0:14:D3 Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Certificate serial: 1643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft Manifest number: 1633 Signing time: Sat 14 Jun 2025 16:40:24 +0000 Manifest this update: Sat 14 Jun 2025 16:40:23 +0000 Manifest next update: Sat 21 Jun 2025 16:40:23 +0000 Files and hashes: 1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: XoVA9OSwvHHS4VNL2Oenzdg3ZPHC3NgqXXk3zgJnUVM=) 2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: V1SwqzHI+ZNQe6jN+twymLot2bdeSiq+QMKz3KdM7RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5699 (0x1643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Validity Not Before: Jun 14 16:40:23 2025 GMT Not After : Jun 21 16:40:23 2025 GMT Subject: CN=684da5f8-e549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:45:e8:47:e7:9f:04:35:9b:af:73:fb:44:0d: 5d:37:6f:ee:c0:e0:9d:9a:56:2e:69:3a:ad:38:77: 8e:26:d6:46:2f:9b:21:8a:92:03:16:08:b5:7e:45: 36:1a:75:c4:d2:ac:cc:82:46:c0:31:68:14:db:f0: 3e:67:4a:0e:c1:9c:c8:48:fa:a8:6b:00:da:d9:de: 54:a1:49:ab:c1:de:0a:f3:46:2d:dd:94:89:3e:94: a9:ac:c3:c1:a9:d9:e5:d4:14:45:1d:ed:37:a1:55: 7d:20:6f:da:d6:c4:e8:fb:b5:ad:73:b2:c0:f6:df: 65:4b:8d:82:24:bf:ea:cc:32:fe:d7:00:00:4d:96: a7:4a:a6:ff:bb:31:06:a7:ab:ef:eb:ff:11:fd:ad: 50:c7:02:58:a6:d0:f2:a6:c8:24:a3:85:43:cb:71: 5a:7d:5a:ca:3e:7a:b6:a6:e7:b7:55:17:3d:ea:6f: 98:ba:4a:40:99:65:8d:77:5b:c2:7d:a3:a4:81:75: 4b:1e:3a:fd:3a:33:cc:18:34:14:81:ce:b6:c0:88: 2a:d5:0e:74:56:65:4d:d3:2f:31:c4:a0:d7:b1:cf: e1:2d:fb:1f:97:8b:0c:d3:0c:00:d5:bb:2a:1a:cb: b9:00:f3:b8:f3:62:c0:2d:94:30:22:4d:26:aa:7b: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:22:0E:F7:51:73:D2:CA:00:C9:38:F9:2C:08:CD:A1:15:E0:14:D3 X509v3 Authority Key Identifier: keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:d3:85:2f:68:0e:18:0d:55:62:23:18:52:38:e5:3c:15: c1:41:be:ea:d8:7e:82:54:f4:df:96:b6:ba:77:55:f3:2e:de: be:ea:b1:af:ab:7b:74:90:96:8e:2a:8f:c9:65:93:0f:7b:8e: 2c:c3:f0:cf:46:d8:a1:8e:19:0d:e5:64:47:1b:79:0c:ab:1e: 7e:3a:bd:fb:38:78:b6:43:35:95:59:ac:e7:de:69:fe:3e:00: bd:c0:6d:0c:f7:1a:10:da:a0:6f:a1:99:62:e6:7e:71:6a:37: 7b:b6:d8:57:6f:79:34:7f:5a:89:08:cc:47:f0:4b:a8:e6:8a: ca:de:d6:27:4f:e6:aa:1e:b0:09:19:6e:f2:c8:b6:ba:79:73: 87:ad:61:9e:b9:9d:17:50:cd:51:2e:9b:cf:94:38:dd:72:64: 42:86:8d:42:f5:64:8f:cc:3a:58:e0:bd:2a:dd:3c:53:4c:7e: 09:4d:6a:96:fa:47:db:2f:59:70:a2:22:c5:48:bf:0d:b2:31: 5b:5a:b2:79:91:b5:59:20:13:cf:d7:63:b6:2d:7c:c4:fe:44: f6:fe:26:cd:0f:e1:80:8d:25:d7:59:8c:b1:1b:ea:4b:6e:44: d4:aa:84:ed:6f:6e:d4:b9:73:6d:8b:9a:05:07:cc:cb:79:27: e1:d9:88:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1 Qzg3NTAzRkEwHhcNMjUwNjE0MTY0MDIzWhcNMjUwNjIxMTY0MDIzWjAYMRYwFAYD VQQDEw02ODRkYTVmOC1lNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUXoR+efBDWbr3P7RA1dN2/uwOCdmlYuaTqtOHeOJtZGL5shipIDFgi1fkU2 GnXE0qzMgkbAMWgU2/A+Z0oOwZzISPqoawDa2d5UoUmrwd4K80Yt3ZSJPpSprMPB qdnl1BRFHe03oVV9IG/a1sTo+7Wtc7LA9t9lS42CJL/qzDL+1wAATZanSqb/uzEG p6vv6/8R/a1QxwJYptDypsgko4VDy3FafVrKPnq2pue3VRc96m+YukpAmWWNd1vC faOkgXVLHjr9OjPMGDQUgc62wIgq1Q50VmVN0y8xxKDXsc/hLfsfl4sM0wwA1bsq Gsu5APO482LALZQwIk0mqnvmBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMiDvdR c9LKAMk4+SwIzaEV4BTTMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1 RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REU2OC84MEIyRjNGODE1RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGty WDlxTnR0cldMTUZjaDFBX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB52NOFL2gOGA1VYiMYUjjlPBXBQb7q2H6CVPTflra6d1XzLt6+6rGv q3t0kJaOKo/JZZMPe44sw/DPRtihjhkN5WRHG3kMqx5+Or37OHi2QzWVWazn3mn+ PgC9wG0M9xoQ2qBvoZli5n5xajd7tthXb3k0f1qJCMxH8Euo5orK3tYnT+aqHrAJ GW7yyLa6eXOHrWGeuZ0XUM1RLpvPlDjdcmRCho1C9WSPzDpY4L0q3TxTTH4JTWqW +kfbL1lwoiLFSL8NsjFbWrJ5kbVZIBPP12O2LXzE/kT2/ibND+GAjSXXWYyxG+pL bkTUqoTtb27UuXNti5oFB8zLeSfh2Yjb -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:55 2025 by rpki-client