$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json) Hash identifier: of//sWueRZOFuDrVfEGecSq4h8kAReOsn7NrmuIfRbM= Subject key identifier: F6:19:39:DD:EB:1C:67:A2:2A:3F:90:D3:30:D2:0F:B2:16:99:AE:E4 Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Certificate serial: 0E24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft Manifest number: 0E19 Signing time: Fri 04 Jul 2025 18:07:09 +0000 Manifest this update: Fri 04 Jul 2025 18:07:08 +0000 Manifest next update: Fri 11 Jul 2025 18:07:08 +0000 Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: NitqaO7GW6uY7Z/aIs+qLMW7QN1hZ/7bt+kfovYv6Dg=) 2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: 6yiyih3iYU5SXCZve8BQVAbNfjgN61udEXmY/BbF0dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Validity Not Before: Jul 4 18:07:08 2025 GMT Not After : Jul 11 18:07:08 2025 GMT Subject: CN=6868184c-6ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:85:9f:08:12:fb:86:9d:4e:e8:b7:38:31:46: c7:44:34:8e:b5:10:c4:d1:af:18:a8:91:5b:99:89: 51:28:ba:b2:64:65:56:54:48:a7:c3:4f:d1:30:4d: cd:8b:1d:cf:02:fc:07:5d:5f:47:03:39:2c:53:3b: e2:6c:02:f6:5c:7f:84:0d:7e:1e:72:db:46:1c:0c: ac:7c:c6:7e:0b:8c:9b:48:6d:5c:ba:28:dd:e3:fd: ea:5f:3b:d5:af:b8:10:0b:05:a9:a0:69:3e:24:08: dc:b1:c2:7c:39:b3:89:de:7d:d3:ff:a8:42:05:45: 08:bf:1c:2c:9e:bc:2a:6d:e6:13:b5:4c:46:ba:d2: aa:d5:d4:9c:12:c1:d1:84:dc:dc:0c:b9:c1:7b:46: 51:d0:41:cb:23:9c:3b:6e:9b:6c:a8:43:79:29:19: 77:0d:f5:0e:6e:08:ca:cc:5d:8b:00:14:3d:79:d8: f2:18:f2:ba:5f:4a:60:25:57:2e:f5:7e:7a:b5:7c: 5a:2a:00:e9:e1:a4:7e:d1:26:31:61:5f:8c:64:bd: 7c:8f:cf:6a:63:1a:13:c1:49:a3:df:65:d8:9e:2e: 4d:ba:a6:53:d2:11:04:35:5a:de:6c:a0:45:6e:b9: 9b:51:da:64:d6:51:be:47:f8:51:dd:ea:05:37:73: 45:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:39:DD:EB:1C:67:A2:2A:3F:90:D3:30:D2:0F:B2:16:99:AE:E4 X509v3 Authority Key Identifier: keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ac:fe:1b:a7:85:cf:56:cb:38:24:53:fa:13:e7:02:12:21: a2:51:57:30:61:d3:4a:b1:5f:7d:e9:81:4b:62:d5:64:60:4a: 64:0d:5a:eb:01:81:84:5b:c5:47:32:79:66:3a:0e:b3:51:fd: 17:7c:a5:e7:f8:83:15:e2:c3:a5:44:d0:7e:8a:71:1f:f7:c3: b5:bf:fd:49:0b:13:4f:26:4d:01:ba:df:3d:9b:55:a1:7e:1f: e5:2d:f1:c0:30:6e:a4:68:a7:9b:91:7c:fc:3b:ae:fa:e4:31: 66:d6:e9:8f:25:7e:6a:e2:f4:7e:7e:d1:2a:9e:8d:78:a7:28: ae:0d:17:64:b4:64:ba:61:a4:a0:b8:8a:a2:6f:5c:18:1a:ac: 2e:df:b6:6d:b8:60:f0:64:fa:2f:df:4e:ba:07:9c:ee:06:1c: cb:83:2f:5e:97:d7:aa:4a:84:93:4d:01:4c:bc:a6:df:14:83: e7:e9:b5:2d:df:66:c1:0c:b2:37:4d:5c:e2:5f:04:d2:23:8b: 11:39:94:a5:40:e4:4d:ee:dd:80:b1:c5:00:75:1e:4c:5a:aa: 27:fe:4b:8a:80:70:87:3a:25:78:e3:aa:16:2b:77:e7:8a:94: 3f:d3:d8:04:cf:fd:0e:5e:ef:9c:66:74:09:ac:fb:b2:e9:f4: 63:2b:11:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVGRDI5M0MyQTYz ODFCNUM0MjYwHhcNMjUwNzA0MTgwNzA4WhcNMjUwNzExMTgwNzA4WjAYMRYwFAYD VQQDEw02ODY4MTg0Yy02ZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYWfCBL7hp1O6Lc4MUbHRDSOtRDE0a8YqJFbmYlRKLqyZGVWVEinw0/RME3N ix3PAvwHXV9HAzksUzvibAL2XH+EDX4ecttGHAysfMZ+C4ybSG1cuijd4/3qXzvV r7gQCwWpoGk+JAjcscJ8ObOJ3n3T/6hCBUUIvxwsnrwqbeYTtUxGutKq1dScEsHR hNzcDLnBe0ZR0EHLI5w7bptsqEN5KRl3DfUObgjKzF2LABQ9edjyGPK6X0pgJVcu 9X56tXxaKgDp4aR+0SYxYV+MZL18j89qYxoTwUmj32XYni5NuqZT0hEENVrebKBF brmbUdpk1lG+R/hR3eoFN3NFUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYZOd3r HGeiKj+Q0zDSD7IWma7kMB8GA1UdIwQYMBaAFCQ9kkN84jBQPlSO/Sk8KmOBtcQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNDNS8wMzY2RDdBRUFD RTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1GQS1WSTc5S1R3cVk0RzF4 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEMlNRM3ppTUZBLVZJNzlLVHdxWTRHMXhDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjNDNS8wMzY2RDdBRUFDRTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1G QS1WSTc5S1R3cVk0RzF4Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLrP4bp4XPVss4JFP6E+cCEiGiUVcwYdNKsV996YFLYtVkYEpkDVrr AYGEW8VHMnlmOg6zUf0XfKXn+IMV4sOlRNB+inEf98O1v/1JCxNPJk0But89m1Wh fh/lLfHAMG6kaKebkXz8O6765DFm1umPJX5q4vR+ftEqno14pyiuDRdktGS6YaSg uIqib1wYGqwu37ZtuGDwZPov3066B5zuBhzLgy9el9eqSoSTTQFMvKbfFIPn6bUt 32bBDLI3TVziXwTSI4sROZSlQORN7t2AscUAdR5MWqon/kuKgHCHOiV446oWK3fn ipQ/09gEz/0OXu+cZnQJrPuy6fRjKxFM -----END CERTIFICATE-----Generated at Sat Jul 5 05:34:52 2025 by rpki-client