$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: SGgm0sIEjGbAn9V/duAQ6AVt2PBRey+ceTF0/q7sDyE= Subject key identifier: ED:3D:0D:2C:BB:5D:2D:74:54:34:A0:C5:23:6D:A5:00:03:FC:4D:46 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 0939 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 0926 Signing time: Fri 20 Jun 2025 20:11:41 +0000 Manifest this update: Fri 20 Jun 2025 20:11:40 +0000 Manifest next update: Fri 27 Jun 2025 20:11:40 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: V1MO7XaefkCyM+LE4AC6rIisrBkMmAIObzRhX75Vxag=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: LRUqK0HbwhlophByZnm497LSzITbbBMeAuaK57/ofL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2361 (0x939) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Jun 20 20:11:40 2025 GMT Not After : Jun 27 20:11:40 2025 GMT Subject: CN=6855c07c-e6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:f2:b8:1f:9b:8f:e6:85:a6:fd:0e:d5:b4: 17:e1:19:90:07:ec:d5:9c:52:a5:a4:49:ef:8a:3b: 16:a0:af:3e:03:de:6a:ea:8f:3e:0f:e8:34:81:b5: da:9b:07:5f:ac:09:29:61:ac:13:b5:61:c3:33:d7: f8:66:a9:8a:59:4b:59:ab:02:8a:68:87:71:c1:67: 97:00:23:de:0e:9b:66:97:47:df:1f:bb:f6:28:c0: 59:0b:1b:32:aa:65:ee:53:fc:13:09:85:02:8b:6e: 80:81:39:a7:7e:59:ba:9d:49:c4:3c:1d:12:3a:ac: 19:26:5d:30:f8:fb:4f:2f:8c:3c:19:a9:2c:6d:91: 4a:86:59:44:f8:ee:eb:1c:bc:de:5c:bb:4d:d5:6d: a3:49:b8:aa:0a:4d:87:16:21:ef:3f:d1:e8:03:b2: 00:3f:53:be:4c:7a:c6:e2:c9:2d:62:3c:a0:72:ff: 65:1e:ce:c2:a9:ca:93:13:64:25:fb:9a:ed:38:c4: f5:2e:91:7b:9e:46:8e:dc:2a:ca:c5:91:df:32:cb: f7:b8:d7:11:be:4f:fa:06:42:c2:d1:71:e3:35:50: eb:79:bb:a3:5a:49:89:0e:fa:7f:64:d3:0e:05:41: 25:0f:23:01:b6:87:d8:86:ce:e2:50:de:e4:27:aa: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3D:0D:2C:BB:5D:2D:74:54:34:A0:C5:23:6D:A5:00:03:FC:4D:46 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e1:39:79:51:9a:29:36:7a:b8:86:36:5d:df:e1:ea:cb:34: 94:87:fc:ba:f0:73:fa:59:a6:47:21:83:c2:b1:46:61:fe:17: b8:99:c9:be:4f:f9:47:5b:e0:0b:01:f8:44:3d:99:72:d0:8b: 33:e9:71:15:39:68:6b:74:6e:a2:5a:1d:3a:0f:32:9d:26:4c: 74:39:04:a1:b4:94:aa:54:c2:51:a2:48:dc:7c:76:76:77:ba: dd:e1:d5:9b:43:df:ec:87:0f:60:25:bb:d0:53:7e:ee:1d:c9: 03:46:e8:c5:48:a6:7a:b6:17:e7:11:7d:31:da:cc:20:3e:f5: a6:56:dc:26:fe:8a:c8:32:4e:2e:a9:c9:83:5d:7d:62:5c:ff: 79:33:c5:87:e1:c2:04:86:25:fc:66:47:e9:d0:e6:cc:f4:e3: a3:6b:52:77:d3:18:ad:5f:93:5a:19:9e:4e:6e:15:39:af:78: 7d:27:58:c1:d5:e0:06:4c:a6:02:a2:9a:46:c6:8a:92:33:8f: b5:8a:b1:27:1a:97:a6:44:40:ac:cf:92:fe:17:c4:d7:2b:f6: f9:d8:e5:73:23:a0:04:e1:d5:74:6e:a5:af:8d:65:e2:56:f3: 9a:c9:63:bd:68:16:a0:11:cc:49:75:10:26:96:2c:c3:19:74: ea:1c:16:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjUwNjIwMjAxMTQwWhcNMjUwNjI3MjAxMTQwWjAYMRYwFAYD VQQDEw02ODU1YzA3Yy1lNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtDyuB+bj+aFpv0O1bQX4RmQB+zVnFKlpEnvijsWoK8+A95q6o8+D+g0gbXa mwdfrAkpYawTtWHDM9f4ZqmKWUtZqwKKaIdxwWeXACPeDptml0ffH7v2KMBZCxsy qmXuU/wTCYUCi26AgTmnflm6nUnEPB0SOqwZJl0w+PtPL4w8GaksbZFKhllE+O7r HLzeXLtN1W2jSbiqCk2HFiHvP9HoA7IAP1O+THrG4sktYjygcv9lHs7CqcqTE2Ql +5rtOMT1LpF7nkaO3CrKxZHfMsv3uNcRvk/6BkLC0XHjNVDrebujWkmJDvp/ZNMO BUElDyMBtofYhs7iUN7kJ6p4bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO09DSy7 XS10VDSgxSNtpQAD/E1GMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4Tl5UZopNnq4hjZd3+HqyzSUh/y68HP6WaZHIYPCsUZh/he4mcm+ T/lHW+ALAfhEPZly0Isz6XEVOWhrdG6iWh06DzKdJkx0OQShtJSqVMJRokjcfHZ2 d7rd4dWbQ9/shw9gJbvQU37uHckDRujFSKZ6thfnEX0x2swgPvWmVtwm/orIMk4u qcmDXX1iXP95M8WH4cIEhiX8Zkfp0ObM9OOja1J30xitX5NaGZ5ObhU5r3h9J1jB 1eAGTKYCoppGxoqSM4+1irEnGpemRECsz5L+F8TXK/b52OVzI6AE4dV0bqWvjWXi VvOayWO9aBagEcxJdRAmlizDGXTqHBbv -----END CERTIFICATE-----Generated at Sat Jun 21 12:33:05 2025 by rpki-client