$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: Cn2fgu+6NyYlaFBQjkxt64wgQOSJyXN/YEXGp4kHobg= Subject key identifier: A4:EC:D6:B9:F3:75:84:77:F7:1A:DA:C3:87:75:51:84:D2:F5:4E:AF Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1CB3 Signing time: Sat 28 Jun 2025 16:03:53 +0000 Manifest this update: Sat 28 Jun 2025 16:03:53 +0000 Manifest next update: Sat 05 Jul 2025 16:03:53 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: RiNaFhNZ9dyUmgSmOt8ljoVGupdDRBo1E87su0qtaOo=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7379 (0x1cd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Jun 28 16:03:53 2025 GMT Not After : Jul 5 16:03:53 2025 GMT Subject: CN=68601269-769a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:88:be:c2:61:09:18:eb:5c:21:aa:ff:ee: 6f:d6:8f:6a:af:6e:8a:3e:41:bb:73:5c:89:16:82: ca:29:3f:48:65:66:92:df:cc:9d:6a:c9:5a:69:eb: 52:65:38:0c:96:1f:9a:81:76:f7:e3:29:6e:12:f2: 5d:88:9e:42:38:71:bc:95:a4:40:10:f9:50:80:09: 4f:17:54:bc:9b:e6:4d:7b:ed:c8:5b:5e:4b:cc:23: 58:0b:03:82:0e:9f:ce:b6:68:e0:f3:99:fd:3d:00: f5:67:30:e7:08:a2:9f:69:12:14:87:d0:56:97:66: 2c:20:7d:88:f6:71:ef:e3:01:1d:11:9a:6a:8b:ff: a0:de:dd:ff:48:b8:a3:1f:d0:ed:20:12:6b:e2:fc: ab:db:82:f2:19:b6:b1:86:86:69:fd:f0:3c:52:04: 45:6b:16:76:e4:6a:6f:e0:97:38:9e:21:89:c5:2e: d6:77:31:e7:31:25:ae:bd:d7:24:58:79:2d:43:65: 91:6a:3d:be:d8:e3:72:c3:3d:a6:8a:88:63:ea:2c: 37:ef:26:6e:d9:31:25:d9:ee:6a:6c:e0:73:20:6f: 74:40:20:3a:25:b7:22:60:43:1a:b3:e5:56:5d:1b: 7b:f8:5e:92:d5:f1:ec:59:1f:fb:2e:b1:8d:7e:68: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EC:D6:B9:F3:75:84:77:F7:1A:DA:C3:87:75:51:84:D2:F5:4E:AF X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:64:cc:ef:ba:bd:0a:cc:88:5d:1f:b8:12:18:77:a1:6f:5c: 99:cc:72:7f:0d:5b:6c:3d:4c:e2:bf:e7:bd:c9:9b:ae:d5:24: 14:c3:a8:05:b8:b8:50:6a:34:19:74:e6:03:ee:1e:e3:52:72: 55:5a:41:fb:98:09:3c:fc:f4:f2:78:28:5e:f3:a6:9d:1e:2b: 07:54:99:01:9b:47:13:d4:b1:1a:c5:f6:13:f2:d1:12:2a:cf: 2e:29:b1:dd:87:f5:3d:cd:fa:60:7b:97:35:89:5f:04:04:10: 31:de:f4:69:46:ba:5a:bd:ac:82:7f:f9:34:ef:23:1b:46:26: 87:a7:0a:be:d6:22:94:ba:a1:32:a4:35:da:42:61:79:5b:51: 08:94:24:87:1e:82:48:73:e5:cc:d4:33:a2:43:10:b0:6e:f8: db:56:2b:77:0f:cb:c9:79:17:88:f9:4b:b8:db:7a:40:5a:1e: bb:68:76:a0:e6:0a:9d:30:d1:8c:a7:33:71:bd:6b:1f:b9:45: 38:b8:53:c6:c8:5c:3a:f9:48:7d:bb:14:76:68:24:34:cf:cb: 69:d2:e8:e3:74:1f:b5:ad:c1:41:dd:39:c7:43:48:b4:a4:29: e4:ee:63:97:dd:e3:77:a5:2d:c3:cf:35:74:a4:25:11:59:dc: e1:9b:9d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwNjI4MTYwMzUzWhcNMjUwNzA1MTYwMzUzWjAYMRYwFAYD VQQDEw02ODYwMTI2OS03NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LyIvsJhCRjrXCGq/+5v1o9qr26KPkG7c1yJFoLKKT9IZWaS38ydaslaaetS ZTgMlh+agXb34yluEvJdiJ5COHG8laRAEPlQgAlPF1S8m+ZNe+3IW15LzCNYCwOC Dp/Otmjg85n9PQD1ZzDnCKKfaRIUh9BWl2YsIH2I9nHv4wEdEZpqi/+g3t3/SLij H9DtIBJr4vyr24LyGbaxhoZp/fA8UgRFaxZ25Gpv4Jc4niGJxS7WdzHnMSWuvdck WHktQ2WRaj2+2ONywz2miohj6iw37yZu2TEl2e5qbOBzIG90QCA6JbciYEMas+VW XRt7+F6S1fHsWR/7LrGNfmioUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTs1rnz dYR39xraw4d1UYTS9U6vMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZMzvur0KzIhdH7gSGHehb1yZzHJ/DVtsPUziv+e9yZuu1SQUw6gF uLhQajQZdOYD7h7jUnJVWkH7mAk8/PTyeChe86adHisHVJkBm0cT1LEaxfYT8tES Ks8uKbHdh/U9zfpge5c1iV8EBBAx3vRpRrpavayCf/k07yMbRiaHpwq+1iKUuqEy pDXaQmF5W1EIlCSHHoJIc+XM1DOiQxCwbvjbVit3D8vJeReI+Uu423pAWh67aHag 5gqdMNGMpzNxvWsfuUU4uFPGyFw6+Uh9uxR2aCQ0z8tp0ujjdB+1rcFB3TnHQ0i0 pCnk7mOX3eN3pS3DzzV0pCURWdzhm522 -----END CERTIFICATE-----Generated at Sun Jun 29 13:42:04 2025 by rpki-client