$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: +nPX0l1HZ7diGjfpeXMKtRNuqJ6Lfoip1Mo2MoRQUWM= Subject key identifier: 85:87:62:37:B5:FD:4E:78:4F:91:4D:97:14:4B:9E:5B:74:9B:64:A2 Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 062F Signing time: Mon 30 Jun 2025 23:07:26 +0000 Manifest this update: Mon 30 Jun 2025 23:07:26 +0000 Manifest next update: Mon 07 Jul 2025 23:07:26 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: MngcX4gHcr91+yK+GsTkM1V1FjFlgvOmTR86FSgUCTk=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: mwRP961xtY2lPq9MW+s5fgbFnCinGV45dL2366gga8s=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: W99oRxw3I+qxKmMA4BJDWXe3wvdXS+ZW2rGIK9SdBKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: Jun 30 23:07:26 2025 GMT Not After : Jul 7 23:07:26 2025 GMT Subject: CN=686318ae-64ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:aa:26:f0:0f:cd:3d:84:24:88:51:d1:0e: 60:d7:12:af:e6:18:3f:04:8f:d5:25:5b:64:a1:d0: 2c:da:6e:a7:12:9c:7b:f7:89:15:e3:d3:00:08:b1: 93:22:e2:a5:31:68:30:c4:ad:62:5d:82:e3:8b:d5: a3:3c:e0:6f:1b:ec:06:83:0d:e7:cb:fa:30:0b:df: c9:e8:39:3a:aa:4e:34:9a:59:48:7d:bf:25:fc:21: a9:7e:99:30:c9:11:99:95:eb:df:f9:2f:36:f4:ad: 4c:a9:70:d7:1e:7c:b3:ba:14:f3:f7:fb:4c:cd:bf: 3d:89:f7:90:76:95:06:14:be:94:85:4f:1d:15:54: c8:10:db:38:d0:b3:15:c1:4d:0b:ca:8a:6f:cf:a4: 54:af:eb:4a:1c:74:63:05:cf:07:c4:07:f4:e3:0d: be:15:5b:fa:4a:54:a0:3e:2e:eb:4e:cb:4e:0e:9c: 19:6b:91:3d:ec:01:29:47:49:5b:dc:28:cd:9b:e1: d4:77:07:38:e7:7e:9b:79:bc:c5:70:f6:f6:0c:ae: e3:99:2f:c0:cc:f3:24:48:53:ff:b3:f1:e2:c0:16: bc:db:b5:23:14:af:10:64:cd:5e:40:62:15:2f:de: b5:eb:fc:85:c2:ab:45:7a:fa:b8:f7:be:9a:0c:77: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:62:37:B5:FD:4E:78:4F:91:4D:97:14:4B:9E:5B:74:9B:64:A2 X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:74:d4:e3:b7:6f:5c:4e:34:c0:ba:c8:a9:2a:83:0a:c0:bf: d8:ce:6f:ff:b2:8b:6e:0e:a6:15:92:03:ad:58:48:17:e9:cd: 85:84:84:22:ee:b0:77:da:b1:f5:b9:10:d1:df:87:9d:15:76: 5c:c8:61:07:3e:d0:47:08:9d:82:c0:11:90:a9:09:13:fe:1c: 11:6c:a9:dc:d0:b2:3c:7d:f8:db:33:27:31:6e:a8:eb:68:4f: 00:67:27:cd:b7:35:ae:a6:c7:e6:4e:8b:9f:66:a0:f1:32:da: 3a:10:15:fb:75:10:60:e2:37:53:58:22:a5:77:1b:76:b4:b2: 9c:b5:aa:06:fa:69:74:42:85:0c:d6:fc:8e:33:91:8a:48:61: 6b:1b:1e:f5:63:69:9a:99:fc:9f:5d:06:6d:ba:d0:85:33:81: 4b:13:d8:93:ba:77:d5:5c:68:af:ad:f4:cb:87:11:2f:2c:f7: e7:ab:8e:34:05:44:76:3b:26:13:53:a1:f6:7f:42:46:01:86: bf:3e:6a:5f:df:ef:6b:b3:a6:ea:23:93:c3:92:9a:7a:02:72: 60:d8:61:a5:7f:e2:21:63:e0:e8:5b:b8:82:62:da:26:a2:2f: 98:23:84:f0:af:a9:17:06:cd:b0:42:19:44:eb:c9:6c:14:6c: 75:99:cf:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjUwNjMwMjMwNzI2WhcNMjUwNzA3MjMwNzI2WjAYMRYwFAYD VQQDEw02ODYzMThhZS02NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG6qJvAPzT2EJIhR0Q5g1xKv5hg/BI/VJVtkodAs2m6nEpx794kV49MACLGT IuKlMWgwxK1iXYLji9WjPOBvG+wGgw3ny/owC9/J6Dk6qk40mllIfb8l/CGpfpkw yRGZlevf+S829K1MqXDXHnyzuhTz9/tMzb89ifeQdpUGFL6UhU8dFVTIENs40LMV wU0Lyopvz6RUr+tKHHRjBc8HxAf04w2+FVv6SlSgPi7rTstODpwZa5E97AEpR0lb 3CjNm+HUdwc4536bebzFcPb2DK7jmS/AzPMkSFP/s/HiwBa827UjFK8QZM1eQGIV L9616/yFwqtFevq4976aDHedEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWHYje1 /U54T5FNlxRLnlt0m2SiMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBddNTjt29cTjTAusipKoMKwL/Yzm//sotuDqYVkgOtWEgX6c2FhIQi 7rB32rH1uRDR34edFXZcyGEHPtBHCJ2CwBGQqQkT/hwRbKnc0LI8ffjbMycxbqjr aE8AZyfNtzWupsfmToufZqDxMto6EBX7dRBg4jdTWCKldxt2tLKctaoG+ml0QoUM 1vyOM5GKSGFrGx71Y2mamfyfXQZtutCFM4FLE9iTunfVXGivrfTLhxEvLPfnq440 BUR2OyYTU6H2f0JGAYa/Pmpf3+9rs6bqI5PDkpp6AnJg2GGlf+IhY+DoW7iCYtom oi+YI4Twr6kXBs2wQhlE68lsFGx1mc+B -----END CERTIFICATE-----Generated at Wed Jul 2 19:45:42 2025 by rpki-client