$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: D/98nNI9RDGh9gPKYDhNUYB8Ro0ZBTdnAFiGEwruuXk= Subject key identifier: 9B:39:BC:9B:9D:4D:B5:B9:2E:A1:3B:17:BE:5A:64:53:2B:C4:E4:84 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 13C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 13BA Signing time: Sat 14 Jun 2025 16:54:11 +0000 Manifest this update: Sat 14 Jun 2025 16:54:10 +0000 Manifest next update: Sat 21 Jun 2025 16:54:10 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: a4+6ACGci2OrKr90ANMDPqh085Iq86Pp+bTdiB5w1c4=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5061 (0x13c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Jun 14 16:54:10 2025 GMT Not After : Jun 21 16:54:10 2025 GMT Subject: CN=684da933-1253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:53:15:2d:b6:64:30:51:16:bd:18:ef:a8: 84:80:55:78:b0:bd:c6:58:ca:2d:cf:4b:35:bc:7d: e2:05:0f:18:9a:06:f1:ab:84:f2:49:89:7c:af:1c: 3f:7b:03:9f:60:e6:af:a5:4e:9f:a5:aa:67:2d:c1: 73:00:90:ae:c9:a6:64:33:72:32:dc:d4:ad:3c:e0: a4:af:c8:0b:59:bb:9f:67:d2:34:01:30:c2:a7:9a: 23:b2:63:ad:b7:d4:f0:c0:48:a3:31:9d:55:52:72: 22:3b:d4:50:b6:93:19:a6:30:be:bb:b0:3f:89:5e: ac:92:22:ea:ae:bc:9f:e1:e1:2c:b1:b5:23:24:16: 3f:18:2d:e6:c9:6f:04:f9:7d:fd:f8:35:0b:ef:88: 85:e0:ee:9e:35:ce:bf:07:6d:cb:b2:ca:1e:37:3f: a2:03:5c:da:12:c5:f8:a9:91:9d:a2:66:61:23:76: e3:48:12:4d:f9:02:f0:af:9b:42:d4:ae:8e:7f:1e: 48:b4:c6:40:08:b9:f5:33:7e:a5:83:84:85:78:b9: f8:12:59:17:bf:12:24:14:f2:f0:36:41:65:9e:b6: c9:ab:c6:fc:3a:9b:63:29:67:b4:72:7e:01:ed:b7: 2a:83:6f:fc:8f:85:4b:06:c2:a0:c8:72:71:19:1b: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:BC:9B:9D:4D:B5:B9:2E:A1:3B:17:BE:5A:64:53:2B:C4:E4:84 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6d:71:f4:cc:0e:84:f6:56:ba:bd:59:c6:c6:0b:1b:47:e8: 96:76:9d:de:d5:9b:0b:24:fe:84:e5:3c:36:df:b6:66:47:a3: da:16:40:75:1e:25:56:0b:db:10:95:ba:35:45:d9:67:12:ec: a5:f0:6f:f8:cf:31:3d:aa:6c:fa:f0:1a:64:25:f8:2c:fe:ea: 9f:4b:bc:53:1d:3e:83:1b:b0:31:ba:d1:1e:2d:a1:a1:61:29: ed:e8:39:21:ce:45:94:05:c0:a3:83:5c:21:a1:38:82:12:72: 86:b8:fb:81:2b:a1:3c:be:19:43:9e:5f:40:a4:83:b7:c5:38: 65:50:8a:b6:05:d5:62:92:91:58:8d:50:09:e5:49:c7:33:e1: 78:fc:0b:22:4b:77:1d:d1:04:a0:2b:23:51:3a:0b:02:db:34: d6:af:f0:c6:d2:ac:e4:b9:6c:a0:14:74:a1:6c:82:e6:a0:88: d7:91:98:9e:bd:b7:28:42:36:85:bc:1e:91:fc:ab:74:8c:e5: 67:d9:ba:fc:84:36:df:a3:57:fe:be:a4:d3:57:b0:cb:8f:52: 1b:89:aa:76:b8:b2:19:35:c8:fd:34:a3:b9:d9:63:f6:f4:a2: e2:b3:ac:1d:06:4b:0b:2e:a4:ba:91:3e:a8:39:aa:64:8c:f0: fb:b8:20:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUwNjE0MTY1NDEwWhcNMjUwNjIxMTY1NDEwWjAYMRYwFAYD VQQDEw02ODRkYTkzMy0xMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsChTFS22ZDBRFr0Y76iEgFV4sL3GWMotz0s1vH3iBQ8Ymgbxq4TySYl8rxw/ ewOfYOavpU6fpapnLcFzAJCuyaZkM3Iy3NStPOCkr8gLWbufZ9I0ATDCp5ojsmOt t9TwwEijMZ1VUnIiO9RQtpMZpjC+u7A/iV6skiLqrryf4eEssbUjJBY/GC3myW8E +X39+DUL74iF4O6eNc6/B23LssoeNz+iA1zaEsX4qZGdomZhI3bjSBJN+QLwr5tC 1K6Ofx5ItMZACLn1M36lg4SFeLn4ElkXvxIkFPLwNkFlnrbJq8b8OptjKWe0cn4B 7bcqg2/8j4VLBsKgyHJxGRuFVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJs5vJud TbW5LqE7F75aZFMrxOSEMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbXH0zA6E9la6vVnGxgsbR+iWdp3e1ZsLJP6E5Tw237ZmR6PaFkB1 HiVWC9sQlbo1RdlnEuyl8G/4zzE9qmz68BpkJfgs/uqfS7xTHT6DG7AxutEeLaGh YSnt6DkhzkWUBcCjg1whoTiCEnKGuPuBK6E8vhlDnl9ApIO3xThlUIq2BdVikpFY jVAJ5UnHM+F4/AsiS3cd0QSgKyNROgsC2zTWr/DG0qzkuWygFHShbILmoIjXkZie vbcoQjaFvB6R/Kt0jOVn2br8hDbfo1f+vqTTV7DLj1Ibiap2uLIZNcj9NKO52WP2 9KLis6wdBksLLqS6kT6oOapkjPD7uCBy -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:48 2025 by rpki-client