$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: MB9b2K5k/cDcnTw/CFLcIBbjFI9g4yrW8L3NYEPgpGQ= Subject key identifier: 71:80:17:F4:98:EF:67:E3:FE:DB:88:E8:B7:2A:7F:57:55:39:62:A0 Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 0689 Signing time: Wed 18 Jun 2025 22:04:30 +0000 Manifest this update: Wed 18 Jun 2025 22:04:30 +0000 Manifest next update: Wed 25 Jun 2025 22:04:30 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: SrTXX1OTyatA/NHde9sEsMaztV04nObDZM8UUGg0ZoY=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Jun 18 22:04:30 2025 GMT Not After : Jun 25 22:04:30 2025 GMT Subject: CN=685337ee-b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:87:da:0a:5d:cc:4a:03:01:e8:95:be:60: f5:90:9c:ff:d4:2f:a6:07:8c:dd:98:5b:65:ed:ed: 01:f5:c1:45:c9:cc:16:40:4a:47:be:11:8b:65:97: f2:bb:56:2c:c2:55:22:2b:1a:f5:c6:96:56:f6:f1: f8:93:2a:1a:e2:99:fd:bb:66:07:35:c2:fd:87:16: 1e:23:d4:de:c1:1d:79:10:4d:ea:20:2a:42:9a:90: ec:ac:27:02:64:5a:bf:19:b8:f1:1d:22:0d:1d:32: 07:58:08:88:23:80:4b:dc:b2:06:08:a7:a3:a3:04: 52:02:1a:c7:69:9d:82:ce:3e:7b:6f:87:54:c4:88: ee:8e:92:26:51:74:eb:84:f4:ad:5d:74:f4:3c:a3: e4:99:a0:51:13:d8:1a:c1:4e:21:03:f9:fd:55:35: e2:54:3d:16:64:69:b0:ed:a5:8f:cb:ed:02:3a:28: cb:ef:c3:c7:58:70:8e:1a:6e:21:01:65:fe:54:bd: 16:3b:d3:d2:cf:a8:3b:04:96:76:42:0e:fd:16:a9: de:1e:95:74:cc:0d:1e:66:0d:1f:3b:39:f8:fa:9d: 46:63:31:5f:60:c1:73:fa:be:8b:36:7d:63:9f:2c: 52:16:77:93:a4:86:74:ba:4d:81:d4:8b:f7:53:fd: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:80:17:F4:98:EF:67:E3:FE:DB:88:E8:B7:2A:7F:57:55:39:62:A0 X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:2e:50:57:b3:8f:44:03:c5:91:9b:4b:97:7a:89:ba:4e:71: 0c:70:93:34:9f:5b:b3:42:5d:60:9c:0e:a9:36:a2:ec:69:05: 21:05:fe:13:fb:b2:fa:7b:15:9c:53:b5:a0:ea:a2:d5:d9:99: e4:94:4a:0f:51:23:a6:8a:89:87:e1:26:f8:0d:a7:96:1d:b7: 46:9f:c6:39:f9:46:6d:2b:f2:3b:27:45:52:b1:f6:b5:65:00: 8d:41:25:bf:60:f2:e9:86:ee:a5:4f:c0:cc:79:a7:9c:a7:c0: 79:e1:ca:f2:35:87:a4:b2:a0:9e:cc:10:8e:b7:fd:9d:6c:d3: a3:89:7e:49:56:1a:7b:41:5f:54:2d:34:45:71:bd:0e:04:ab: 93:59:8a:d3:8d:65:cd:2b:ef:b0:e6:9a:03:55:3b:a5:57:d6: 52:97:33:a0:09:c4:84:45:5a:e6:03:d8:c5:08:cb:67:2b:99: c8:c9:8a:a6:b4:49:58:15:86:a6:14:93:86:e3:b1:92:cd:e3: 15:93:f4:fd:cc:81:72:b0:87:da:72:6a:5a:ed:97:d0:d3:dc: 14:8e:92:c5:9f:46:f7:e6:1c:8e:b8:60:90:e1:25:e8:ac:be: 57:09:bf:77:4d:60:77:85:1d:3e:12:0d:bc:d7:8f:c7:ab:0c: 1e:c3:8e:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwNjE4MjIwNDMwWhcNMjUwNjI1MjIwNDMwWjAYMRYwFAYD VQQDEw02ODUzMzdlZS1iMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmV+H2gpdzEoDAeiVvmD1kJz/1C+mB4zdmFtl7e0B9cFFycwWQEpHvhGLZZfy u1YswlUiKxr1xpZW9vH4kyoa4pn9u2YHNcL9hxYeI9TewR15EE3qICpCmpDsrCcC ZFq/GbjxHSINHTIHWAiII4BL3LIGCKejowRSAhrHaZ2Czj57b4dUxIjujpImUXTr hPStXXT0PKPkmaBRE9gawU4hA/n9VTXiVD0WZGmw7aWPy+0COijL78PHWHCOGm4h AWX+VL0WO9PSz6g7BJZ2Qg79FqneHpV0zA0eZg0fOzn4+p1GYzFfYMFz+r6LNn1j nyxSFneTpIZ0uk2B1Iv3U/0qGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGAF/SY 72fj/tuI6Lcqf1dVOWKgMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsLlBXs49EA8WRm0uXeom6TnEMcJM0n1uzQl1gnA6pNqLsaQUhBf4T +7L6exWcU7Wg6qLV2ZnklEoPUSOmiomH4Sb4DaeWHbdGn8Y5+UZtK/I7J0VSsfa1 ZQCNQSW/YPLphu6lT8DMeaecp8B54cryNYeksqCezBCOt/2dbNOjiX5JVhp7QV9U LTRFcb0OBKuTWYrTjWXNK++w5poDVTulV9ZSlzOgCcSERVrmA9jFCMtnK5nIyYqm tElYFYamFJOG47GSzeMVk/T9zIFysIfacmpa7ZfQ09wUjpLFn0b35hyOuGCQ4SXo rL5XCb93TWB3hR0+Eg2814/Hqwwew47S -----END CERTIFICATE-----Generated at Thu Jun 19 06:14:33 2025 by rpki-client