$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: 9tUQN0+5Qev67a8drBCrwv5CmKUzHUK7oLTD7qhNOMo= Subject key identifier: 11:A8:DD:95:E4:E8:59:B5:25:01:D6:8D:2F:2E:5F:3C:35:2C:54:08 Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 1817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 17FB Signing time: Mon 30 Jun 2025 16:42:52 +0000 Manifest this update: Mon 30 Jun 2025 16:42:51 +0000 Manifest next update: Mon 07 Jul 2025 16:42:51 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: IdFEn3hxFC/fsrW36g6hVAF0ijGQR3RXI2N4L+DPpQg=) 2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: AJVJFbnvPCGmDcQ1w9Ifor0vZahtLKDl6qkkbnsRLEw=) 3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6167 (0x1817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: Jun 30 16:42:51 2025 GMT Not After : Jul 7 16:42:51 2025 GMT Subject: CN=6862be8c-807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:1c:f2:bb:f8:54:69:9c:c2:72:95:07:55: 14:c8:35:1f:a5:c0:47:82:59:6c:f5:ac:70:c4:38: e1:d0:6c:57:f9:09:73:e6:e3:75:61:42:13:0b:ba: af:27:b6:46:c4:89:b1:a6:6a:80:c3:cf:e0:6c:58: 98:c2:af:25:88:1e:95:b0:4b:c1:47:4f:9f:ee:d9: db:e4:6c:8b:22:92:03:ef:00:0c:00:6e:95:37:28: a3:cf:bc:47:fb:59:e7:93:e0:f9:97:a3:49:a1:21: 2e:d9:1d:d5:97:e0:4c:7e:c4:6e:ee:85:b0:2e:51: 63:06:c1:06:c9:59:e1:36:53:cf:1e:05:45:a6:4e: 3e:46:87:fb:4e:ec:cb:dd:a5:74:c4:a6:a2:31:65: c2:b7:c5:31:54:e4:83:8e:27:ec:a7:a1:7f:41:c5: b2:2a:ce:32:fe:6a:b3:c0:4a:89:fa:ef:d5:1b:80: ba:45:d3:c5:fc:3d:c8:42:c8:52:69:7b:c8:d7:86: bc:52:68:b2:d6:f6:65:55:a8:c9:3a:c9:0b:18:06: 8c:48:dd:27:13:12:d2:f6:d2:78:08:00:67:05:ec: 5e:1e:47:f3:46:0f:d6:c9:60:58:58:15:2a:f9:da: 7e:35:61:ff:69:14:a7:0d:ee:39:00:84:a6:44:43: 77:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:DD:95:E4:E8:59:B5:25:01:D6:8D:2F:2E:5F:3C:35:2C:54:08 X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b4:29:e9:09:d2:3b:28:1f:e3:af:c9:a5:a2:7f:65:a2:3a: 28:c6:0e:72:1c:51:4e:cd:08:d5:08:49:f3:96:e8:52:2f:6a: aa:59:f6:a0:b8:79:7c:f8:0e:fc:03:00:4c:8c:98:e6:41:92: 37:57:9f:86:b2:3c:c3:7b:17:ff:fc:14:2c:c0:cd:fe:18:7c: 48:8c:a7:7f:6a:60:8e:9a:58:5e:3e:dc:a2:e1:5b:42:1d:b5: 03:3b:05:ff:61:f6:80:e8:60:34:d4:d3:ba:71:bd:e4:ad:61: 23:36:e9:03:91:36:11:fb:8e:81:5a:54:a6:cd:59:2e:72:46: 5f:a1:ec:9a:99:69:89:c9:7c:88:a9:62:d4:c1:d1:d2:38:99: e2:22:c2:f5:64:ba:b2:3e:fa:ca:21:c0:a9:f9:2a:c1:d9:94: 29:ac:49:da:92:30:ac:97:77:2c:8f:45:91:2c:5d:fb:05:c7: 3c:db:ed:ce:6c:8b:d5:f9:51:9e:f8:70:47:64:bc:b4:c0:7e: 41:27:45:b8:9d:ce:a6:c2:c9:3d:5b:02:b5:59:3f:10:5c:89: 09:44:d8:a7:48:a0:c5:e2:9e:aa:fd:95:73:73:48:57:c4:d0: ac:e6:89:90:17:16:e6:37:b7:14:fa:da:d0:b5:32:b9:36:c9: f0:31:4d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjUwNjMwMTY0MjUxWhcNMjUwNzA3MTY0MjUxWjAYMRYwFAYD VQQDEw02ODYyYmU4Yy04MDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssUc8rv4VGmcwnKVB1UUyDUfpcBHglls9axwxDjh0GxX+Qlz5uN1YUITC7qv J7ZGxImxpmqAw8/gbFiYwq8liB6VsEvBR0+f7tnb5GyLIpID7wAMAG6VNyijz7xH +1nnk+D5l6NJoSEu2R3Vl+BMfsRu7oWwLlFjBsEGyVnhNlPPHgVFpk4+Rof7TuzL 3aV0xKaiMWXCt8UxVOSDjifsp6F/QcWyKs4y/mqzwEqJ+u/VG4C6RdPF/D3IQshS aXvI14a8Umiy1vZlVajJOskLGAaMSN0nExLS9tJ4CABnBexeHkfzRg/WyWBYWBUq +dp+NWH/aRSnDe45AISmREN3qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGo3ZXk 6Fm1JQHWjS8uXzw1LFQIMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChtCnpCdI7KB/jr8mlon9lojooxg5yHFFOzQjVCEnzluhSL2qqWfag uHl8+A78AwBMjJjmQZI3V5+GsjzDexf//BQswM3+GHxIjKd/amCOmlhePtyi4VtC HbUDOwX/YfaA6GA01NO6cb3krWEjNukDkTYR+46BWlSmzVkuckZfoeyamWmJyXyI qWLUwdHSOJniIsL1ZLqyPvrKIcCp+SrB2ZQprEnakjCsl3csj0WRLF37Bcc82+3O bIvV+VGe+HBHZLy0wH5BJ0W4nc6mwsk9WwK1WT8QXIkJRNinSKDF4p6q/ZVzc0hX xNCs5omQFxbmN7cU+trQtTK5NsnwMU2L -----END CERTIFICATE-----Generated at Tue Jul 1 12:59:21 2025 by rpki-client