$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft File: JyyuXyHIv2trSRWvAATH78_H2z0.mft (raw, json) Hash identifier: fjxTWdKl0KkFc8Kn4Z0k+upJowTFQbDV+sMGGPxSz+s= Subject key identifier: D5:9B:6F:B2:62:3E:0D:5B:49:64:0C:36:B4:15:BA:7B:72:65:70:42 Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D Certificate issuer: /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft Manifest number: 02B1 Signing time: Sat 05 Jul 2025 02:01:58 +0000 Manifest this update: Sat 05 Jul 2025 02:01:57 +0000 Manifest next update: Sat 12 Jul 2025 02:01:57 +0000 Files and hashes: 1: JyyuXyHIv2trSRWvAATH78_H2z0.crl (hash: Fj07s+crHh/ACjP8qttM3xmdt8Qqb2AYDllcDXWXorc=) 2: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (hash: 8amN8Nk9oVQpcGLG743ZVOV+dvrusSJP1h0AZ4Q+u2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Validity Not Before: Jul 5 02:01:57 2025 GMT Not After : Jul 12 02:01:57 2025 GMT Subject: CN=68688796-543d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:38:21:e3:a0:74:a1:3f:6c:64:f7:cf:9b: 02:23:5b:b8:a6:5b:d1:df:e0:2a:83:16:98:c7:d5: 31:50:ce:33:23:9e:f7:b8:7d:35:25:ca:fc:69:13: 21:b0:be:cb:f0:39:f5:47:e0:b1:d9:11:6c:b6:6d: 60:1b:af:51:38:44:ab:d1:b3:b2:1e:2e:a5:65:25: 5b:fb:ce:87:c4:00:a9:cc:5e:84:ba:7c:31:bb:2b: e0:bb:f9:83:84:4a:e9:95:f0:f9:40:db:20:2b:8c: 16:d1:06:b2:dc:ac:b8:2e:2c:97:c6:8e:05:74:f5: aa:9f:92:5b:10:e5:69:7b:af:f7:ff:b5:43:2d:4a: 4e:b4:1d:00:6d:4f:6e:0c:85:b1:ba:be:b4:15:63: f4:8c:2c:5a:9c:be:7c:1a:cc:24:c7:be:2f:14:c2: d1:40:5a:d7:c2:bf:d9:d7:49:27:e3:2e:57:46:32: ae:ea:63:33:c2:a8:12:11:7d:97:e5:c0:90:a5:3c: 42:d1:f8:de:73:d9:fa:45:31:57:b9:29:b8:2d:51: ff:6c:a1:8d:3d:53:9d:70:70:24:22:67:56:1a:e2: 10:ab:9f:9f:1d:eb:44:b2:73:df:7a:ca:b6:e7:60: 47:19:5b:c6:af:77:1a:f6:5f:a7:c5:77:b1:52:a1: b4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9B:6F:B2:62:3E:0D:5B:49:64:0C:36:B4:15:BA:7B:72:65:70:42 X509v3 Authority Key Identifier: keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:dd:fe:5f:da:30:bc:18:91:18:e7:cb:2c:f0:4b:6b:c6:ee: 18:40:67:ef:90:81:3d:bf:e6:64:6b:7f:38:17:2f:f1:db:04: 9f:4c:8f:9d:2a:81:e6:ca:f0:f2:88:d0:f5:26:e0:00:c9:1f: fe:64:00:05:de:f8:c8:bf:cc:cc:22:3a:55:1b:a0:6b:89:5f: 8f:5b:be:f3:93:f4:25:08:44:d6:28:89:b5:94:68:6f:07:65: 42:8f:3e:89:5d:02:ff:d3:2f:ba:f9:43:18:ce:51:87:5d:0b: da:3f:34:b5:7d:fa:50:4c:1a:9e:4f:36:e3:5f:31:d1:51:2f: 97:a0:a5:5c:ae:4f:da:b8:ea:86:2d:ce:ce:aa:2c:4a:30:21: f1:cc:06:2c:58:08:45:6d:1f:52:44:27:e4:3b:3a:e5:d9:b0: e8:dc:e2:71:46:ed:28:ad:ca:c9:04:f3:c2:d9:09:e2:7d:30: c0:0d:ad:d6:83:fe:12:f0:4d:37:c5:45:40:df:ca:5f:4a:dd: 7e:07:ea:32:33:98:76:82:ec:60:b4:ff:d1:3b:ce:10:bc:ff: d1:e1:d7:c7:b2:88:69:08:95:c9:a4:96:e7:6a:3d:f0:f1:f7: 68:4f:11:cf:02:47:db:2d:9d:1d:72:21:00:41:3b:03:66:40: 00:c8:52:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNEExMTAvBgNVBAUTKDI3MkNBRTVGMjFDOEJGNkI2QjQ5MTVBRjAwMDRDN0VG Q0ZDN0RCM0QwHhcNMjUwNzA1MDIwMTU3WhcNMjUwNzEyMDIwMTU3WjAYMRYwFAYD VQQDEw02ODY4ODc5Ni01NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hc4IeOgdKE/bGT3z5sCI1u4plvR3+AqgxaYx9UxUM4zI573uH01Jcr8aRMh sL7L8Dn1R+Cx2RFstm1gG69ROESr0bOyHi6lZSVb+86HxACpzF6Eunwxuyvgu/mD hErplfD5QNsgK4wW0Qay3Ky4LiyXxo4FdPWqn5JbEOVpe6/3/7VDLUpOtB0AbU9u DIWxur60FWP0jCxanL58Gswkx74vFMLRQFrXwr/Z10kn4y5XRjKu6mMzwqgSEX2X 5cCQpTxC0fjec9n6RTFXuSm4LVH/bKGNPVOdcHAkImdWGuIQq5+fHetEsnPfesq2 52BHGVvGr3ca9l+nxXexUqG0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWbb7Ji Pg1bSWQMNrQVuntyZXBCMB8GA1UdIwQYMBaAFCcsrl8hyL9ra0kVrwAEx+/Px9s9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE0QS81RUY4QTkxNjAw RUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYydHJTUld2QUFUSDc4X0gy ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5eXVYeUhJdjJ0clNSV3ZBQVRINzhfSDJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE0QS81RUY4QTkxNjAwRUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYy dHJTUld2QUFUSDc4X0gyejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq3f5f2jC8GJEY58ss8Etrxu4YQGfvkIE9v+Zka384Fy/x2wSfTI+d KoHmyvDyiND1JuAAyR/+ZAAF3vjIv8zMIjpVG6BriV+PW77zk/QlCETWKIm1lGhv B2VCjz6JXQL/0y+6+UMYzlGHXQvaPzS1ffpQTBqeTzbjXzHRUS+XoKVcrk/auOqG Lc7OqixKMCHxzAYsWAhFbR9SRCfkOzrl2bDo3OJxRu0orcrJBPPC2QnifTDADa3W g/4S8E03xUVA38pfSt1+B+oyM5h2guxgtP/RO84QvP/R4dfHsohpCJXJpJbnaj3w 8fdoTxHPAkfbLZ0dciEAQTsDZkAAyFJk -----END CERTIFICATE-----Generated at Sat Jul 5 22:56:46 2025 by rpki-client