$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft File: jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json) Hash identifier: tbU4kRAgv8Zn0GoJHSDQrZ9LRh/oJwvfdlNfAD0uavo= Subject key identifier: 17:7F:53:0B:57:FD:AE:4A:55:09:A9:94:CF:94:41:55:E2:8A:22:B1 Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft Manifest number: 077F Signing time: Mon 30 Jun 2025 21:51:27 +0000 Manifest this update: Mon 30 Jun 2025 21:51:27 +0000 Manifest next update: Mon 07 Jul 2025 21:51:27 +0000 Files and hashes: 1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: RgO7Sv1xZTOAXdOsLYLip4qFsseHswn5fAOK0mE0aIM=) 2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Validity Not Before: Jun 30 21:51:27 2025 GMT Not After : Jul 7 21:51:27 2025 GMT Subject: CN=686306df-b484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ed:a1:12:d6:8a:e7:2a:24:95:1d:b5:d0:78: 83:16:91:ea:5a:44:f4:e5:0c:5f:aa:03:88:59:dd: 91:8a:bc:55:05:90:e9:89:bb:a7:71:2a:ef:18:1e: 95:83:f6:5c:c4:34:02:7b:0e:34:39:fa:11:bb:46: 6d:d5:e6:69:0b:b7:27:b4:66:88:cd:b2:21:34:2a: 2c:4c:56:6b:cf:84:e8:91:f4:37:9b:3e:6b:3e:ec: f8:8c:88:bd:d7:31:e5:50:6c:7a:74:d3:fa:02:19: ac:1d:51:a5:b3:23:19:93:da:30:de:b1:80:56:40: 17:76:01:e0:54:33:79:9b:3f:41:77:ec:0e:21:c8: 5d:7d:d6:26:c2:d4:09:dd:9c:69:c5:58:ec:0b:de: 05:81:db:2b:12:6f:83:ec:95:81:10:19:9b:34:df: 7c:2f:5a:a6:94:cd:0b:52:b4:d0:ba:38:9e:10:b0: 05:ca:fb:66:ea:94:ce:d3:47:3f:59:6f:c6:82:8d: 1b:16:ac:d6:d5:1e:ba:bf:3e:c8:38:6d:56:7d:55: 79:b5:00:7c:1a:07:d4:9f:d4:93:d6:d7:8c:25:55: 5f:63:ab:14:89:56:9c:78:8c:55:ef:71:d6:81:2b: 3b:8c:1a:50:ad:b0:0f:68:da:48:89:e1:a0:90:35: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7F:53:0B:57:FD:AE:4A:55:09:A9:94:CF:94:41:55:E2:8A:22:B1 X509v3 Authority Key Identifier: keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:61:fe:f9:c8:7d:82:05:41:f9:b1:35:87:a2:19:73:30:0c: 6a:b2:98:24:41:46:c1:47:ea:2a:3b:85:66:e3:14:98:08:9d: 2d:84:0b:f2:0a:47:c2:04:50:8a:43:f0:6d:bd:56:b0:09:29: 6d:53:65:e2:c7:68:e9:72:8b:12:04:dd:44:01:9b:19:8b:69: a8:7d:7d:d8:c7:2f:ca:7d:7d:25:51:d2:68:10:f4:06:33:c1: 0e:ae:cd:56:1d:37:6c:c9:5d:62:a9:d5:e5:0d:d7:f2:8d:6c: 3a:aa:9f:26:74:d2:1b:d8:bf:8a:ba:43:24:60:7d:21:67:00: 43:1e:fb:e8:65:17:18:5b:a3:ca:0b:c5:f1:cc:5c:d8:48:10: 5d:7a:67:3d:ff:cd:16:5b:59:69:c8:8b:d7:23:30:64:7f:28: 69:a5:73:bc:8e:55:01:15:be:69:4e:d7:90:2e:e6:1a:52:2a: 98:7b:66:61:c1:e4:7c:bc:71:1a:dd:bd:25:fb:96:3b:61:5e: a1:13:4f:00:3a:a1:58:2f:49:69:83:a5:43:e0:c5:08:12:47: f0:3a:b7:36:66:cc:fd:28:80:81:21:44:32:da:ac:c9:b1:12: 3e:3f:78:4e:57:57:9f:e6:84:21:ec:a7:aa:76:ae:df:cd:82: f9:ec:f1:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx N0YyMUJFMjAwHhcNMjUwNjMwMjE1MTI3WhcNMjUwNzA3MjE1MTI3WjAYMRYwFAYD VQQDEw02ODYzMDZkZi1iNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAku2hEtaK5yoklR210HiDFpHqWkT05QxfqgOIWd2RirxVBZDpibuncSrvGB6V g/ZcxDQCew40OfoRu0Zt1eZpC7cntGaIzbIhNCosTFZrz4TokfQ3mz5rPuz4jIi9 1zHlUGx6dNP6AhmsHVGlsyMZk9ow3rGAVkAXdgHgVDN5mz9Bd+wOIchdfdYmwtQJ 3ZxpxVjsC94FgdsrEm+D7JWBEBmbNN98L1qmlM0LUrTQujieELAFyvtm6pTO00c/ WW/Ggo0bFqzW1R66vz7IOG1WfVV5tQB8GgfUn9ST1teMJVVfY6sUiVaceIxV73HW gSs7jBpQrbAPaNpIieGgkDVgtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd/UwtX /a5KVQmplM+UQVXiiiKxMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjdFRC8zMDg4Nzg5ODFGM0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9k NUNBY1RBVTFYLXNYOGh2aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMYf75yH2CBUH5sTWHohlzMAxqspgkQUbBR+oqO4Vm4xSYCJ0thAvy CkfCBFCKQ/BtvVawCSltU2Xix2jpcosSBN1EAZsZi2mofX3Yxy/KfX0lUdJoEPQG M8EOrs1WHTdsyV1iqdXlDdfyjWw6qp8mdNIb2L+KukMkYH0hZwBDHvvoZRcYW6PK C8XxzFzYSBBdemc9/80WW1lpyIvXIzBkfyhppXO8jlUBFb5pTteQLuYaUiqYe2Zh weR8vHEa3b0l+5Y7YV6hE08AOqFYL0lpg6VD4MUIEkfwOrc2Zsz9KICBIUQy2qzJ sRI+P3hOV1ef5oQh7Keqdq7fzYL57PH0 -----END CERTIFICATE-----Generated at Wed Jul 2 15:56:35 2025 by rpki-client