$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft File: JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json) Hash identifier: FNMMOmQniA6W6r4z1YHL6FZJhPzP7gJSPVRB+W2miJY= Subject key identifier: 56:DA:6D:FB:4B:38:BB:10:84:36:AA:67:08:7E:8E:49:D1:BD:29:04 Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft Manifest number: 0CA3 Signing time: Sat 14 Jun 2025 18:03:16 +0000 Manifest this update: Sat 14 Jun 2025 18:03:16 +0000 Manifest next update: Sat 21 Jun 2025 18:03:16 +0000 Files and hashes: 1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: Raken8vQfUhe0RGS9Ps99aIcs2/jRkzDO8MB5HNviMA=) 2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=) 3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Validity Not Before: Jun 14 18:03:16 2025 GMT Not After : Jun 21 18:03:16 2025 GMT Subject: CN=684db964-b490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:98:9a:8e:72:4c:86:02:0c:22:02:82:e1: b7:19:10:c6:9e:5f:34:b2:7b:b7:70:e0:32:b5:89: 16:67:42:36:3f:6f:8b:41:c8:ea:16:d1:a7:35:2a: c5:96:e2:7b:43:e2:de:59:0e:bb:b6:9b:8d:15:81: 58:ee:80:52:2d:1c:28:80:98:4c:7f:21:37:ab:44: 6a:98:c4:ae:55:72:02:d6:07:cd:e0:a6:85:4d:37: 7a:94:94:00:1c:19:93:4d:b1:74:5e:76:c8:6f:9d: 96:e9:e2:d1:a6:73:04:80:f2:5b:57:f7:0f:dc:a1: 55:11:a6:9b:c3:e0:70:8b:54:53:3f:53:b0:07:ea: bd:4e:44:fb:ff:de:59:f2:cc:1f:90:58:85:c1:85: b1:82:fc:51:61:c0:08:50:06:a3:fb:20:74:ba:5a: 48:63:44:7a:93:44:10:6b:db:78:e3:84:85:41:42: cb:4b:d8:55:ae:08:af:1a:b8:5d:dc:30:bb:58:b4: 12:6f:5d:99:22:f4:ec:91:66:af:c3:48:df:6c:f6: c0:3a:7f:f5:f6:21:79:96:f6:33:b5:bf:83:20:66: 4d:b7:a5:73:a3:2c:f4:4e:a0:f8:99:aa:3f:2c:20: 74:95:c6:82:a6:fd:92:19:62:22:ec:9e:b9:2b:14: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DA:6D:FB:4B:38:BB:10:84:36:AA:67:08:7E:8E:49:D1:BD:29:04 X509v3 Authority Key Identifier: keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ca:0e:37:dc:25:c6:ad:25:ec:24:af:84:09:4e:a5:85:11: b3:d1:17:cd:9b:fe:7e:72:3b:52:95:50:53:7b:7c:26:06:d1: 97:1a:97:e1:16:76:2d:65:ca:5f:23:5b:74:91:58:d9:04:17: 6f:37:70:63:36:aa:fa:df:2e:46:84:28:88:1d:5c:d4:49:72: 20:b9:15:41:76:8a:1e:f5:a2:a1:30:66:82:43:e9:a0:ec:82: a0:a6:88:09:d4:9c:7c:57:47:2c:38:0c:63:fc:e6:50:78:11: a3:39:5f:27:65:61:1c:fd:55:eb:06:e1:63:40:1d:82:2b:0a: f6:5b:92:7b:32:30:b5:fa:1f:27:e1:a2:d0:1f:6a:aa:9c:33: a3:55:38:74:72:5f:ad:a6:80:fb:c0:fc:c0:d3:af:03:e6:6b: f2:57:bc:2d:8d:7a:68:69:74:15:67:f9:89:d0:21:4c:b1:59: a9:7d:9f:59:da:54:a7:46:fc:53:cb:2c:18:47:de:a2:a6:98: 36:6d:f1:5f:ee:79:67:08:86:bd:bd:c8:3b:36:a0:b7:23:0c: 58:18:c0:16:07:56:ef:54:af:cb:e6:76:51:b2:a4:09:d9:f1: 44:a4:2a:65:0f:30:f4:6c:4e:d7:9b:a9:53:2e:88:7d:0c:1e: 9e:6b:64:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD RjQxN0M5M0YwHhcNMjUwNjE0MTgwMzE2WhcNMjUwNjIxMTgwMzE2WjAYMRYwFAYD VQQDEw02ODRkYjk2NC1iNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3d2Ymo5yTIYCDCICguG3GRDGnl80snu3cOAytYkWZ0I2P2+LQcjqFtGnNSrF luJ7Q+LeWQ67tpuNFYFY7oBSLRwogJhMfyE3q0RqmMSuVXIC1gfN4KaFTTd6lJQA HBmTTbF0XnbIb52W6eLRpnMEgPJbV/cP3KFVEaabw+Bwi1RTP1OwB+q9TkT7/95Z 8swfkFiFwYWxgvxRYcAIUAaj+yB0ulpIY0R6k0QQa9t444SFQULLS9hVrgivGrhd 3DC7WLQSb12ZIvTskWavw0jfbPbAOn/19iF5lvYztb+DIGZNt6Vzoyz0TqD4mao/ LCB0lcaCpv2SGWIi7J65KxSXJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbabftL OLsQhDaqZwh+jknRvSkEMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V QjVXNkc2bXgzYV9QUVh5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVyg433CXGrSXsJK+ECU6lhRGz0RfNm/5+cjtSlVBTe3wmBtGXGpfh FnYtZcpfI1t0kVjZBBdvN3BjNqr63y5GhCiIHVzUSXIguRVBdooe9aKhMGaCQ+mg 7IKgpogJ1Jx8V0csOAxj/OZQeBGjOV8nZWEc/VXrBuFjQB2CKwr2W5J7MjC1+h8n 4aLQH2qqnDOjVTh0cl+tpoD7wPzA068D5mvyV7wtjXpoaXQVZ/mJ0CFMsVmpfZ9Z 2lSnRvxTyywYR96ippg2bfFf7nlnCIa9vcg7NqC3IwxYGMAWB1bvVK/L5nZRsqQJ 2fFEpCplDzD0bE7Xm6lTLoh9DB6ea2Ro -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:45 2025 by rpki-client