$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: 8DzZIEPAoRJ2wC8ZPB/5yDOnouYoFhVwx81FYCg13Dk= Subject key identifier: 2E:93:C4:FC:62:85:5F:11:8D:0F:6B:4C:B9:67:03:78:3C:24:14:5C Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0D67 Signing time: Mon 16 Jun 2025 17:56:35 +0000 Manifest this update: Mon 16 Jun 2025 17:56:34 +0000 Manifest next update: Mon 23 Jun 2025 17:56:34 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: I6M8tKV/cLl9b8UPv9K7fEIrrx4Vyg5xiBjgnZuI8Qs=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: 7nwi4xt2gy9ofefrS7G3QotlbXQ09IRHuywiHjLXzG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Jun 16 17:56:34 2025 GMT Not After : Jun 23 17:56:34 2025 GMT Subject: CN=68505ad3-7e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:f9:76:67:77:c6:3f:20:0a:a9:b6:c3:5e: 52:c5:07:0c:8a:82:60:55:64:5a:5f:f8:cc:27:1b: aa:5e:fe:04:f6:3a:f4:8c:c7:25:97:67:c0:7a:64: 34:2b:b4:54:90:d0:ca:b0:28:6f:6e:86:a0:5a:3d: 94:99:44:d0:e6:b6:83:35:f3:47:54:80:7c:65:1d: 7c:32:6d:ab:11:95:33:72:43:ec:a1:15:d7:7b:fe: 85:b4:cf:ae:83:4e:81:1f:8a:c7:4a:78:b1:6c:ee: 36:c1:5f:e5:3e:46:7f:ca:10:ec:d9:83:4b:57:f3: ba:85:5e:07:ec:09:8a:e4:49:fd:1a:6a:c3:41:83: 21:0b:5d:ec:fe:3b:80:be:2f:4a:50:a4:c7:b0:13: ee:ed:85:5d:bf:24:30:c3:43:99:cb:ba:56:e6:ec: 3a:1f:19:c8:9b:e7:4d:43:cf:08:52:01:ad:df:b2: b8:72:8f:ec:8f:10:04:4e:5b:33:4c:e1:29:eb:28: e5:66:91:37:70:3b:cd:e1:f9:8b:f6:19:e6:c4:d9: 83:ff:4e:04:c4:7b:53:f6:57:06:2c:80:a2:15:13: 0c:ac:5d:1c:09:70:4f:6a:dc:5e:22:4e:18:37:67: c5:b6:e3:f5:72:ce:cb:7f:05:96:d7:8e:94:ac:13: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:C4:FC:62:85:5F:11:8D:0F:6B:4C:B9:67:03:78:3C:24:14:5C X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3a:80:6a:7a:02:17:fb:d1:df:42:46:ba:8e:43:dc:5c:95: 38:b0:19:97:7b:b9:99:6b:7d:6c:d4:0c:b2:10:58:22:fd:6b: 10:e4:82:22:37:9e:5a:b7:89:62:dd:bf:95:e6:64:fe:a5:f9: ff:93:fd:2f:fe:ba:e8:f2:55:f8:81:b0:d5:f6:1b:10:9d:83: 59:24:c7:4f:3c:39:7f:ae:bc:df:22:04:e6:f0:0a:47:fe:4b: f6:a2:ae:8e:e6:d6:02:28:3a:31:66:af:a5:91:30:41:f1:6b: b4:60:43:a1:3d:45:44:91:0c:bc:11:44:a3:89:4e:39:cf:3f: 67:08:3d:66:a6:fb:63:9f:9d:3d:ef:55:07:a4:12:7e:b2:7a: 39:0b:51:ee:b9:fa:3b:7e:ce:65:51:10:b1:e0:14:66:c8:c7: c1:60:9b:fa:0d:7a:7c:d4:66:c1:c8:ae:46:17:1d:44:74:38: 65:28:ef:6b:a4:09:66:61:17:f1:0c:65:77:e4:5a:8e:37:f1: 4f:ba:5c:dd:db:15:6d:66:78:a0:25:a8:c0:3d:1a:34:1f:5d: e9:80:50:89:ff:79:49:81:5f:94:4a:39:4d:39:8f:ef:18:79: 69:5d:9d:1c:74:75:ec:3a:7e:61:cf:4c:d9:4e:c6:a6:37:a1: 26:03:90:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUwNjE2MTc1NjM0WhcNMjUwNjIzMTc1NjM0WjAYMRYwFAYD VQQDEw02ODUwNWFkMy03ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFT5dmd3xj8gCqm2w15SxQcMioJgVWRaX/jMJxuqXv4E9jr0jMcll2fAemQ0 K7RUkNDKsChvboagWj2UmUTQ5raDNfNHVIB8ZR18Mm2rEZUzckPsoRXXe/6FtM+u g06BH4rHSnixbO42wV/lPkZ/yhDs2YNLV/O6hV4H7AmK5En9GmrDQYMhC13s/juA vi9KUKTHsBPu7YVdvyQww0OZy7pW5uw6HxnIm+dNQ88IUgGt37K4co/sjxAETlsz TOEp6yjlZpE3cDvN4fmL9hnmxNmD/04ExHtT9lcGLICiFRMMrF0cCXBPatxeIk4Y N2fFtuP1cs7LfwWW146UrBNaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6TxPxi hV8RjQ9rTLlnA3g8JBRcMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTOoBqegIX+9HfQka6jkPcXJU4sBmXe7mZa31s1AyyEFgi/WsQ5IIi N55at4li3b+V5mT+pfn/k/0v/rro8lX4gbDV9hsQnYNZJMdPPDl/rrzfIgTm8ApH /kv2oq6O5tYCKDoxZq+lkTBB8Wu0YEOhPUVEkQy8EUSjiU45zz9nCD1mpvtjn509 71UHpBJ+sno5C1Huufo7fs5lURCx4BRmyMfBYJv6DXp81GbByK5GFx1EdDhlKO9r pAlmYRfxDGV35FqON/FPulzd2xVtZnigJajAPRo0H13pgFCJ/3lJgV+USjlNOY/v GHlpXZ0cdHXsOn5hz0zZTsamN6EmA5A+ -----END CERTIFICATE-----Generated at Tue Jun 17 18:41:30 2025 by rpki-client