$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: cfmD9znsy3cTnxEXDXQ0328vvx6+2dkiYpcmR2PpDRE= Subject key identifier: EF:6C:3F:23:EA:C9:9A:95:8F:7C:4C:1D:E9:8A:E6:9F:BD:98:AC:EF Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34AF Signing time: Mon 30 Jun 2025 14:57:08 +0000 Manifest this update: Mon 30 Jun 2025 14:57:08 +0000 Manifest next update: Mon 07 Jul 2025 14:57:08 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: Er1sPuoM+Df7a1vtRVurFyww2Zh62S16k7mwz+4EJ5A=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: XcDFXjlfUG7gat5Mn2G5GUkU6QTMu4zYAY0E0LcWZ/I=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: PxQFBDt3MlLgfKc8KqwYwfOpnira0VBqCMOA9nowVeQ=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: rZN8MBWyEzHwpv4iO0Yw1pt5Vq4fsdDOBU015oji+0s=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: Tw8o51QsKWxSHOjK/psQ5MTWchWVnaRSIbAtlFB/kL8=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: qoFcoGLH5rF61ICxkb9LlHSey20FafRf8pg6MY0OMrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Jun 30 14:57:08 2025 GMT Not After : Jul 7 14:57:08 2025 GMT Subject: CN=6862a5c4-2310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:0f:c7:43:d2:5b:4c:4a:be:41:00:53:ca: 5a:90:6c:e3:84:78:1b:15:17:36:f7:4a:36:4a:84: c9:e3:41:51:d3:66:e1:c6:06:e7:05:6a:23:59:15: 01:56:20:2b:fb:7e:06:9c:4c:b5:74:95:a1:0e:9d: 08:9e:01:cc:ce:40:e4:70:2d:3a:0f:ce:72:5b:e5: b4:9a:b2:77:c7:21:97:d4:b8:e5:2f:b9:df:69:de: 43:df:a9:88:4f:f5:5b:81:79:19:02:d3:6a:dd:8e: 8e:65:aa:72:4b:98:2c:2f:76:41:19:83:ec:62:dd: b9:24:a1:a4:54:2d:29:c3:6a:88:87:22:a3:bf:b2: f8:a8:fb:aa:d3:67:65:fd:98:d3:30:af:a4:38:bc: 08:03:7b:ac:c3:65:d8:4c:cf:0b:c2:7e:03:d7:c7: e3:60:a7:86:89:8e:ac:a4:9d:8c:b1:29:99:a8:ec: 6d:76:f1:63:df:8b:44:57:9e:75:6a:51:e5:3b:eb: 52:b3:5a:9a:d3:3e:07:81:ae:92:ca:01:e9:bf:0b: 3e:0a:7a:76:64:38:e1:18:5a:88:01:cb:bf:a6:e0: 16:ec:4e:8f:c0:6a:53:67:3f:ce:01:0c:a3:b2:90: 30:a9:ca:7f:c5:55:57:d9:f9:31:76:51:5e:11:13: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6C:3F:23:EA:C9:9A:95:8F:7C:4C:1D:E9:8A:E6:9F:BD:98:AC:EF X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:15:f3:32:fc:07:98:9d:c3:d8:b5:df:85:b8:3c:84:8d:93: 72:8b:be:64:7d:ea:59:3b:f8:87:1b:7e:19:6b:70:d5:23:05: 7e:9e:6a:fe:2f:2a:e5:41:b7:79:f2:35:ba:93:71:21:b4:48: b4:40:4b:00:95:c2:48:ac:d1:6a:18:a1:29:85:6c:a3:8b:31: ee:7c:5f:f0:a1:d1:5d:f4:cc:91:d9:fd:24:87:80:5e:65:30: f4:cf:a9:8b:fc:78:c8:43:9d:d3:3e:17:68:22:9e:e9:f8:36: 09:ab:15:d0:85:78:e3:4e:5f:a0:5c:3f:5b:e8:7b:a7:ed:e0: 40:59:e6:fa:c3:49:5a:8e:19:7e:9c:15:b7:34:dd:56:68:33: f8:bf:8e:8b:1c:e4:11:76:d3:25:27:16:22:63:c6:82:e0:81: 53:f2:a0:a5:2c:5a:c7:d7:27:28:36:83:79:2e:96:ee:9a:35: ea:72:8e:17:b3:5e:d0:6d:2a:47:3e:62:96:8c:cb:6a:09:4f: d8:ac:e8:fe:b0:b0:c8:ce:2b:73:9e:eb:9f:f7:b1:7b:b2:b2: 71:bb:3e:56:0a:a0:90:f0:f8:84:d3:8b:25:b9:40:1f:e6:24: 46:8a:fc:c8:9c:37:00:88:a4:d3:48:ef:a8:6e:e7:61:21:32: 64:18:07:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwNjMwMTQ1NzA4WhcNMjUwNzA3MTQ1NzA4WjAYMRYwFAYD VQQDEw02ODYyYTVjNC0yMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKEPx0PSW0xKvkEAU8pakGzjhHgbFRc290o2SoTJ40FR02bhxgbnBWojWRUB ViAr+34GnEy1dJWhDp0IngHMzkDkcC06D85yW+W0mrJ3xyGX1LjlL7nfad5D36mI T/VbgXkZAtNq3Y6OZapyS5gsL3ZBGYPsYt25JKGkVC0pw2qIhyKjv7L4qPuq02dl /ZjTMK+kOLwIA3usw2XYTM8Lwn4D18fjYKeGiY6spJ2MsSmZqOxtdvFj34tEV551 alHlO+tSs1qa0z4Hga6SygHpvws+Cnp2ZDjhGFqIAcu/puAW7E6PwGpTZz/OAQyj spAwqcp/xVVX2fkxdlFeERMx+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9sPyPq yZqVj3xMHemK5p+9mKzvMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcFfMy/AeYncPYtd+FuDyEjZNyi75kfepZO/iHG34Za3DVIwV+nmr+ LyrlQbd58jW6k3EhtEi0QEsAlcJIrNFqGKEphWyjizHufF/wodFd9MyR2f0kh4Be ZTD0z6mL/HjIQ53TPhdoIp7p+DYJqxXQhXjjTl+gXD9b6Hun7eBAWeb6w0lajhl+ nBW3NN1WaDP4v46LHOQRdtMlJxYiY8aC4IFT8qClLFrH1ycoNoN5LpbumjXqco4X s17QbSpHPmKWjMtqCU/YrOj+sLDIzitznuuf97F7srJxuz5WCqCQ8PiE04sluUAf 5iRGivzInDcAiKTTSO+obudhITJkGAf7 -----END CERTIFICATE-----Generated at Tue Jul 1 06:13:05 2025 by rpki-client