$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: p38K8H32gAo2HTyfN5sON/94zmMLyWrIJYdo8lOT3X8= Subject key identifier: 4B:41:7D:F4:E2:D3:71:86:77:FD:1A:FA:8F:15:85:82:EA:9C:DD:C7 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 063F Signing time: Thu 12 Jun 2025 22:17:14 +0000 Manifest this update: Thu 12 Jun 2025 22:17:14 +0000 Manifest next update: Thu 19 Jun 2025 22:17:14 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: K2wujp6lXbxZFmTf12kLF5XcJfBIxzfSGPUhV2H+gjo=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Jun 12 22:17:14 2025 GMT Not After : Jun 19 22:17:14 2025 GMT Subject: CN=684b51ea-549b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:e9:87:67:93:31:e4:8b:3c:52:26:af:72: b8:20:52:66:a5:56:01:9d:c4:5f:3d:fb:d0:af:b6: f4:2d:7a:cd:c7:06:ff:90:b6:8a:76:80:ae:56:2d: 2c:89:93:05:11:c7:47:0f:b7:ee:6e:95:c6:9e:66: 76:ae:ca:51:47:d4:7e:98:c5:7e:54:c8:74:18:42: 34:c6:ae:da:f2:0c:fd:c5:13:4a:03:6f:27:ee:16: f1:82:5b:39:1a:e0:1e:e9:82:7a:d6:dc:9b:19:65: db:f3:be:bc:78:16:1d:a7:93:20:91:a3:c7:a6:b0: cd:97:62:d0:b2:1c:79:20:ca:75:e6:76:22:ba:8b: 4b:b0:1f:41:03:72:42:54:17:ec:12:16:f1:1c:0b: 0e:e2:a7:ac:2f:44:49:23:99:23:b6:4b:bf:fe:f6: e5:60:fb:e5:5e:db:b4:d4:92:46:4a:a6:99:7a:7d: a5:6d:e9:d5:4d:ad:03:6e:30:1c:25:ad:5b:7f:67: 22:8c:23:07:f9:0a:11:39:c2:2c:ee:83:2d:53:b7: fe:c9:27:5a:f6:54:31:bb:3c:99:80:53:53:e8:82: 9b:15:b3:77:85:31:c1:88:59:7e:36:c4:d4:ad:82: e4:6b:d1:11:7b:9e:46:95:a9:75:79:08:ca:f9:2b: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:7D:F4:E2:D3:71:86:77:FD:1A:FA:8F:15:85:82:EA:9C:DD:C7 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:21:ae:00:6a:ee:70:eb:54:09:b2:58:cc:74:a6:2c:98:0a: c4:70:40:07:e7:2b:65:43:51:e0:d8:b8:de:ad:66:2d:48:99: 64:91:5b:3d:2c:4a:72:19:44:95:f4:7f:ab:51:a0:15:7c:ce: d1:36:e7:66:e2:89:51:f0:e5:f2:2c:7f:e3:ab:17:9d:33:7e: 99:01:78:d5:77:e1:3d:d0:cd:c2:a3:f5:1d:01:c9:2c:b5:a8: 26:c6:f2:df:e5:98:ad:45:c2:44:6b:59:59:2b:9b:ad:14:a4: a6:19:e0:2e:e0:22:3e:1a:d2:c2:99:d8:51:8f:e5:36:2a:24: 90:f9:27:9d:0f:19:92:47:7f:ac:1d:89:db:77:de:14:79:f4: 0d:a2:4a:6e:38:9e:d3:7e:0b:21:fe:4d:62:e1:cb:c9:2e:cf: 8e:a2:3a:17:9d:6a:a4:97:ba:b4:d3:92:81:3d:53:12:61:bc: 0f:fd:10:b9:f6:03:97:51:5e:05:0c:5e:62:7e:80:94:dd:e6: f5:8a:67:74:56:96:15:fd:27:da:17:29:53:5a:4f:ab:0f:c5: ff:c1:cb:ed:78:82:b2:f7:b0:3f:08:db:63:c4:44:cf:34:5b: bb:35:2d:49:90:e0:d4:ff:35:00:5d:ca:e9:fa:43:0a:c1:ea: 2f:41:82:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUwNjEyMjIxNzE0WhcNMjUwNjE5MjIxNzE0WjAYMRYwFAYD VQQDEw02ODRiNTFlYS01NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVXph2eTMeSLPFImr3K4IFJmpVYBncRfPfvQr7b0LXrNxwb/kLaKdoCuVi0s iZMFEcdHD7fubpXGnmZ2rspRR9R+mMV+VMh0GEI0xq7a8gz9xRNKA28n7hbxgls5 GuAe6YJ61tybGWXb8768eBYdp5MgkaPHprDNl2LQshx5IMp15nYiuotLsB9BA3JC VBfsEhbxHAsO4qesL0RJI5kjtku//vblYPvlXtu01JJGSqaZen2lbenVTa0DbjAc Ja1bf2cijCMH+QoROcIs7oMtU7f+ySda9lQxuzyZgFNT6IKbFbN3hTHBiFl+NsTU rYLka9ERe55Glal1eQjK+StKTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtBffTi 03GGd/0a+o8VhYLqnN3HMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeIa4Aau5w61QJsljMdKYsmArEcEAH5ytlQ1Hg2LjerWYtSJlkkVs9 LEpyGUSV9H+rUaAVfM7RNudm4olR8OXyLH/jqxedM36ZAXjVd+E90M3Co/UdAcks tagmxvLf5ZitRcJEa1lZK5utFKSmGeAu4CI+GtLCmdhRj+U2KiSQ+SedDxmSR3+s HYnbd94UefQNokpuOJ7Tfgsh/k1i4cvJLs+OojoXnWqkl7q005KBPVMSYbwP/RC5 9gOXUV4FDF5ifoCU3eb1imd0VpYV/SfaFylTWk+rD8X/wcvteIKy97A/CNtjxETP NFu7NS1JkODU/zUAXcrp+kMKweovQYJE -----END CERTIFICATE-----Generated at Sat Jun 14 19:25:55 2025 by rpki-client