$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: oBJa1Ah6Dk5TiRLyBCcLCV4t5madWc9MCbUJBa+1DRQ= Subject key identifier: 9A:41:19:82:E5:E0:20:46:47:DF:A0:3C:5D:6A:42:83:D3:B2:75:7C Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 82 Signing time: Thu 03 Jul 2025 06:50:47 +0000 Manifest this update: Thu 03 Jul 2025 06:50:47 +0000 Manifest next update: Thu 10 Jul 2025 06:50:47 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: CrBjtdvoduRfhnlfotQ1gi8o/F+keluWVUkMtLeJ8ks=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Jul 3 06:50:47 2025 GMT Not After : Jul 10 06:50:47 2025 GMT Subject: CN=68662847-f7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:0f:a7:e3:76:31:22:05:9b:34:9b:d1:f4: 6a:f6:44:bf:35:5f:db:e1:ed:3b:e3:e6:f0:b9:a6: 17:a0:ba:c6:ed:8c:32:e3:14:db:27:b9:4d:de:29: e1:84:6c:b0:00:59:5d:56:0a:27:ac:28:ab:6b:ff: b1:d7:f4:cf:3e:b4:59:d3:5e:44:71:4c:7d:ee:16: bc:44:6a:0a:65:17:54:c3:80:4d:21:de:44:60:50: a3:3b:e5:95:c6:47:22:db:4e:39:49:e4:1c:f4:a0: 67:c2:92:c9:9f:22:01:b8:54:78:40:df:48:ea:4c: 31:d0:17:4e:2d:3f:ab:03:06:97:42:79:e4:7a:59: 41:a9:58:0b:d2:a7:98:de:b4:a1:4b:bb:8e:ea:4a: 7f:cf:56:cb:80:93:f2:92:fd:7f:6b:95:7e:cd:8b: e8:60:a9:99:e6:1a:f7:1c:6d:d3:78:3a:e4:a1:bb: dc:d1:99:c7:74:8d:e9:3c:3a:fb:2b:b6:af:8b:4f: 0c:dc:2d:de:df:99:fb:b9:b3:c3:ea:71:d0:dc:f3: 3e:89:94:73:a1:fc:47:ae:72:e1:fe:e6:78:ce:1f: dc:11:09:35:4a:07:f5:7d:72:50:a1:c2:e1:3a:7d: c6:89:b0:40:3f:db:f3:70:54:07:58:a9:0b:46:0f: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:41:19:82:E5:E0:20:46:47:DF:A0:3C:5D:6A:42:83:D3:B2:75:7C X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3b:58:aa:8d:ed:6e:a3:43:ad:17:de:31:be:3a:00:d1:ec: c9:05:2e:60:8b:d3:21:cb:68:c5:28:19:ad:d1:15:ba:25:a4: a5:16:7e:93:84:f9:6a:6a:c0:2b:d9:27:3f:39:eb:3e:81:ac: e2:40:1a:50:98:cb:92:d3:c0:15:47:ec:53:60:64:b1:5e:5d: b3:86:07:04:80:5c:c7:16:61:d7:a5:a1:06:17:48:03:c8:cc: 17:2b:58:d0:bb:b0:ef:78:66:8b:62:9a:2c:59:c8:52:65:b8: ac:d3:46:18:0d:97:17:5c:c8:d1:45:ac:16:14:4e:e7:34:23: 1c:0f:ed:26:dc:b0:c0:55:92:63:ae:0d:33:36:86:cd:fb:82: c4:85:60:84:8f:3a:5c:13:78:7e:e5:a1:7e:6b:dd:29:84:2c: 3a:6e:a6:e5:be:de:22:24:98:0a:61:e3:2c:58:0d:00:d5:4a: 80:c6:16:28:71:af:b6:57:99:fd:06:8c:5c:32:09:bd:33:56: 23:51:26:5d:fc:52:18:56:c0:6d:15:8f:61:a1:af:73:c7:37: a7:f5:c5:50:ea:7f:2b:35:fe:ab:4a:3b:e1:ab:66:28:8d:bc: aa:87:e9:e0:55:47:6a:3d:26:87:1c:3d:19:3e:19:e7:db:af: ac:47:b3:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0Q0MxMTAvBgNVBAUTKDI1MkE1QTU4QzJDMjM5MzY4MkJCRjJCQkM0NjEyMzQx QzExRDg0MTkwHhcNMjUwNzAzMDY1MDQ3WhcNMjUwNzEwMDY1MDQ3WjAYMRYwFAYD VQQDEw02ODY2Mjg0Ny1mN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNUPp+N2MSIFmzSb0fRq9kS/NV/b4e074+bwuaYXoLrG7Ywy4xTbJ7lN3inh hGywAFldVgonrCira/+x1/TPPrRZ015EcUx97ha8RGoKZRdUw4BNId5EYFCjO+WV xkci2045SeQc9KBnwpLJnyIBuFR4QN9I6kwx0BdOLT+rAwaXQnnkellBqVgL0qeY 3rShS7uO6kp/z1bLgJPykv1/a5V+zYvoYKmZ5hr3HG3TeDrkobvc0ZnHdI3pPDr7 K7avi08M3C3e35n7ubPD6nHQ3PM+iZRzofxHrnLh/uZ4zh/cEQk1Sgf1fXJQocLh On3GibBAP9vzcFQHWKkLRg9KcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpBGYLl 4CBGR9+gPF1qQoPTsnV8MB8GA1UdIwQYMBaAFCUqWljCwjk2grvyu8RhI0HBHYQZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjRDQy9DQzY4RTNEQTkx NDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09UYUN1X0s3eEdFalFjRWRo QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjRDQy9DQzY4RTNEQTkxNDgxMUVGODdFQURENTJDNEY5QUUwMi9KU3BhV01MQ09U YUN1X0s3eEdFalFjRWRoQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+O1iqje1uo0OtF94xvjoA0ezJBS5gi9Mhy2jFKBmt0RW6JaSlFn6T hPlqasAr2Sc/Oes+gaziQBpQmMuS08AVR+xTYGSxXl2zhgcEgFzHFmHXpaEGF0gD yMwXK1jQu7DveGaLYposWchSZbis00YYDZcXXMjRRawWFE7nNCMcD+0m3LDAVZJj rg0zNobN+4LEhWCEjzpcE3h+5aF+a90phCw6bqblvt4iJJgKYeMsWA0A1UqAxhYo ca+2V5n9BoxcMgm9M1YjUSZd/FIYVsBtFY9hoa9zxzen9cVQ6n8rNf6rSjvhq2Yo jbyqh+ngVUdqPSaHHD0ZPhnn26+sR7Nm -----END CERTIFICATE-----Generated at Thu Jul 3 23:10:57 2025 by rpki-client