$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: 0zEIS/nSmDaEouZnMBVP1PtmaTlGLecRaAHiflVhaxw= Subject key identifier: 56:92:E4:08:23:AD:11:AE:38:94:97:D7:F2:9D:20:2C:A5:72:65:4B Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 03E0 Signing time: Sun 15 Jun 2025 00:15:55 +0000 Manifest this update: Sun 15 Jun 2025 00:15:54 +0000 Manifest next update: Sun 22 Jun 2025 00:15:54 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: MTXvNfVO+LcNTDXtXff2sW1+E9/gl71Xe9GWLCPvSO4=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: 2QJmDZYcJvMKA1VD3KctOJhUNhu4gmHGXcVx8gxtotI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: Jun 15 00:15:54 2025 GMT Not After : Jun 22 00:15:54 2025 GMT Subject: CN=684e10bb-5bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:d3:8f:b7:33:0b:74:f3:0e:8c:ba:c9:d9: 38:71:83:e7:22:ba:8a:d7:39:ba:bf:ed:c4:3a:a5: cb:97:e8:3c:b8:50:12:13:77:72:30:7e:11:89:5f: 19:9c:cb:29:6c:16:49:ce:de:37:d8:88:77:5f:37: 17:d2:1d:6b:1e:d3:a0:fb:e6:a9:f4:d3:ce:54:cd: ba:40:bc:58:d8:d9:36:49:c9:af:6d:6a:ef:59:23: a0:39:e4:87:5d:db:98:07:3a:89:5c:d9:77:94:3e: 83:95:b5:70:2b:ab:cb:92:3b:f6:7d:e3:90:7e:3e: 2b:04:42:99:be:05:2c:56:ff:25:aa:99:e6:bc:a1: 7a:e6:5a:43:19:50:f9:e7:6a:58:41:71:f9:07:5f: 68:ee:53:2f:d1:cd:c4:fe:e9:61:bd:d9:2c:51:cc: 9e:a5:1f:9d:ff:ba:f5:39:c8:7f:5b:73:5e:62:34: 32:19:21:82:e8:4c:e0:4d:24:4f:22:8c:cf:d3:8d: b2:57:04:dc:13:8e:a1:59:13:52:8a:84:c6:dd:0d: 00:6d:d4:7a:ce:06:ac:b3:7b:2e:53:41:bb:8f:ea: 0c:a8:6f:20:07:24:aa:8e:32:48:2f:2c:34:8d:51: cc:fd:07:6e:4b:4d:eb:84:e1:03:9c:e0:77:1d:c8: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:E4:08:23:AD:11:AE:38:94:97:D7:F2:9D:20:2C:A5:72:65:4B X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:34:94:1d:08:f0:c7:3b:da:e9:72:ba:1b:e8:d2:35:74:c4: 75:91:04:09:03:16:47:7c:53:e1:fe:54:db:d2:f0:c9:3c:ba: d2:95:c3:ab:53:b2:9a:6e:dc:a1:d7:8c:b5:9f:11:81:22:1e: 3a:58:16:75:62:91:a3:1a:21:d7:f1:ee:e9:43:a4:85:40:b7: 5c:40:19:9b:49:f5:c4:d2:27:c6:b9:75:3c:48:b7:bc:5c:72: 29:40:f5:d9:a0:b2:b9:f4:dd:f6:5b:34:56:52:40:a3:3d:ef: 1d:f1:07:44:64:83:6e:ad:62:15:06:2a:be:20:3e:60:ea:50: 5a:80:ed:5c:63:37:ce:01:b3:9f:a2:31:e1:68:80:b6:c3:d8: 6f:c3:3a:9c:0b:b8:dd:60:d1:28:81:7b:a2:53:51:bc:5d:0e: bb:96:39:b6:67:58:e8:74:f3:d5:76:bf:fe:8a:8f:5f:6a:ca: 18:75:f5:a2:fc:fb:1f:72:64:94:02:c3:73:33:80:a1:cf:ff: 1d:f4:c4:a2:9f:ec:c7:17:c9:dd:a1:50:ad:7a:8c:28:bb:34: 98:da:3f:72:4a:f9:98:47:da:c5:3e:71:8c:f3:fa:19:6c:e0: cd:99:58:40:13:98:eb:55:db:df:e3:99:7c:04:d2:1b:60:1d: 92:14:68:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUwNjE1MDAxNTU0WhcNMjUwNjIyMDAxNTU0WjAYMRYwFAYD VQQDEw02ODRlMTBiYi01YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqTTj7czC3TzDoy6ydk4cYPnIrqK1zm6v+3EOqXLl+g8uFASE3dyMH4RiV8Z nMspbBZJzt432Ih3XzcX0h1rHtOg++ap9NPOVM26QLxY2Nk2ScmvbWrvWSOgOeSH XduYBzqJXNl3lD6DlbVwK6vLkjv2feOQfj4rBEKZvgUsVv8lqpnmvKF65lpDGVD5 52pYQXH5B19o7lMv0c3E/ulhvdksUcyepR+d/7r1Och/W3NeYjQyGSGC6EzgTSRP IozP042yVwTcE46hWRNSioTG3Q0AbdR6zgass3suU0G7j+oMqG8gBySqjjJILyw0 jVHM/QduS03rhOEDnOB3Hcj0HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaS5Agj rRGuOJSX1/KdICylcmVLMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwNJQdCPDHO9rpcrob6NI1dMR1kQQJAxZHfFPh/lTb0vDJPLrSlcOr U7Kabtyh14y1nxGBIh46WBZ1YpGjGiHX8e7pQ6SFQLdcQBmbSfXE0ifGuXU8SLe8 XHIpQPXZoLK59N32WzRWUkCjPe8d8QdEZINurWIVBiq+ID5g6lBagO1cYzfOAbOf ojHhaIC2w9hvwzqcC7jdYNEogXuiU1G8XQ67ljm2Z1jodPPVdr/+io9fasoYdfWi /PsfcmSUAsNzM4Chz/8d9MSin+zHF8ndoVCteowouzSY2j9ySvmYR9rFPnGM8/oZ bODNmVhAE5jrVdvf45l8BNIbYB2SFGgS -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:05 2025 by rpki-client