$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: hwFpqJs/N3TeVYIrXGmGTG1o+zQY2+N6wTC5oMKax3s= Subject key identifier: B1:2A:81:F1:6B:0B:13:77:CE:04:4C:66:B0:57:11:AF:C3:8D:32:36 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:09:58 +0000 Manifest this update: Thu 03 Jul 2025 06:09:58 +0000 Manifest next update: Thu 10 Jul 2025 06:09:58 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: dx7nblDrNZ3U9LGYek7UMphguKA0cXWmdSE5YaC3T3c=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Jul 3 06:09:58 2025 GMT Not After : Jul 10 06:09:58 2025 GMT Subject: CN=68661eb6-30fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:aa:27:5e:45:d2:3c:22:1b:c9:90:55:03: 53:17:af:e1:d2:02:ff:59:68:e6:1f:04:de:e2:92: 44:97:48:e6:be:30:4e:1c:b5:66:ac:08:ee:39:31: e6:6b:62:36:74:0c:36:3b:6b:59:89:15:b8:68:db: a1:9f:69:b7:3c:33:8e:90:2a:70:12:b8:8c:a2:71: dc:c2:6b:75:b6:fe:1f:15:4e:9a:0f:b5:e5:41:a9: 4e:cf:c2:25:57:ec:b4:83:6c:54:c1:ac:4a:07:20: 0e:9c:2b:0f:95:87:c2:ca:e6:97:c9:89:e7:85:99: 21:c5:11:37:31:08:8f:38:32:2e:56:3a:0a:9f:0d: 9d:c9:97:ee:06:7e:2e:71:43:84:86:09:70:ae:3c: 59:3c:66:1e:2c:72:21:e5:d6:d3:7f:ae:c2:83:5f: 7e:47:23:b6:b1:81:9a:be:7f:0d:41:ce:13:a5:42: e2:b5:16:a8:b9:4d:df:0c:6e:52:c5:7c:5a:ad:11: c2:3b:f5:64:39:eb:02:9b:6d:95:d2:4a:61:2a:8e: 7f:75:2a:ed:d3:c6:7d:92:2e:ae:59:95:83:55:32: 71:ee:ab:8d:21:21:bb:a8:2d:0d:3a:94:c9:38:b9: 9f:7f:7b:c4:fd:b7:af:9f:4b:0b:99:3b:90:01:db: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2A:81:F1:6B:0B:13:77:CE:04:4C:66:B0:57:11:AF:C3:8D:32:36 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:90:22:fa:05:fc:33:15:33:60:3b:4d:ea:f4:3e:c1:e9: 56:c1:85:82:da:08:29:ab:84:ee:69:14:c4:04:ee:b0:b2:3e: c1:a6:14:fb:71:8f:c9:4f:b5:96:06:04:8d:be:6a:bb:11:8b: 45:44:98:43:21:e3:9f:43:95:50:fc:86:3f:a9:8d:84:96:7d: 1d:08:ee:8d:42:85:a8:bc:d5:ca:28:29:20:67:a9:b3:08:b5: f6:67:c9:24:40:c1:35:1c:8f:d9:6b:28:70:79:f0:74:51:7b: d2:5a:a3:81:ae:1e:f7:f6:73:81:f8:2b:fc:69:99:fe:e5:bb: 4b:67:f1:ac:b0:74:97:63:7e:4e:33:b8:d1:ee:42:10:ad:c8: 7b:c1:a4:e1:3c:4a:ff:fa:ea:aa:65:b0:d0:97:7e:4c:a5:db: 22:75:a8:84:f0:96:ef:65:c0:96:ad:fe:b3:25:b4:64:10:a9: 5c:d1:1b:dc:cb:b8:e9:c4:bb:a8:ee:e0:ec:41:c5:3d:17:17: 51:71:db:ea:27:4a:58:4d:1f:2f:fa:4b:11:d1:d2:07:84:b0: a7:e3:fb:0e:c5:df:d3:be:6c:e5:4e:7d:2b:50:bd:80:46:46: cf:35:ea:dd:b1:bb:a3:57:94:00:f6:b7:a2:33:fc:4c:f5:6c: 21:61:bf:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwNzAzMDYwOTU4WhcNMjUwNzEwMDYwOTU4WjAYMRYwFAYD VQQDEw02ODY2MWViNi0zMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHWqJ15F0jwiG8mQVQNTF6/h0gL/WWjmHwTe4pJEl0jmvjBOHLVmrAjuOTHm a2I2dAw2O2tZiRW4aNuhn2m3PDOOkCpwEriMonHcwmt1tv4fFU6aD7XlQalOz8Il V+y0g2xUwaxKByAOnCsPlYfCyuaXyYnnhZkhxRE3MQiPODIuVjoKnw2dyZfuBn4u cUOEhglwrjxZPGYeLHIh5dbTf67Cg19+RyO2sYGavn8NQc4TpULitRaouU3fDG5S xXxarRHCO/VkOesCm22V0kphKo5/dSrt08Z9ki6uWZWDVTJx7quNISG7qC0NOpTJ OLmff3vE/bevn0sLmTuQAduObQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEqgfFr CxN3zgRMZrBXEa/DjTI2MB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu+ZAi+gX8MxUzYDtN6vQ+welWwYWC2ggpq4TuaRTEBO6wsj7BphT7 cY/JT7WWBgSNvmq7EYtFRJhDIeOfQ5VQ/IY/qY2Eln0dCO6NQoWovNXKKCkgZ6mz CLX2Z8kkQME1HI/ZayhwefB0UXvSWqOBrh739nOB+Cv8aZn+5btLZ/GssHSXY35O M7jR7kIQrch7waThPEr/+uqqZbDQl35MpdsidaiE8JbvZcCWrf6zJbRkEKlc0Rvc y7jpxLuo7uDsQcU9FxdRcdvqJ0pYTR8v+ksR0dIHhLCn4/sOxd/TvmzlTn0rUL2A RkbPNerdsbujV5QA9reiM/xM9WwhYb/B -----END CERTIFICATE-----Generated at Thu Jul 3 10:17:52 2025 by rpki-client