$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: AgF9HIotb1GtLGFAhA3oyz1BMO+QwLr3GpPEKFKXo0M= Subject key identifier: 68:37:E3:B8:D0:F0:33:B1:00:45:22:1C:B0:27:D3:72:31:35:3B:A6 Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C70 Signing time: Wed 02 Jul 2025 18:29:45 +0000 Manifest this update: Wed 02 Jul 2025 18:29:44 +0000 Manifest next update: Wed 09 Jul 2025 18:29:44 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: Knwwrug78A0CyH4cVTxQ8Ib6U9hsOeN1koTwyHZmJXY=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Jul 2 18:29:44 2025 GMT Not After : Jul 9 18:29:44 2025 GMT Subject: CN=68657a99-2d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:10:5b:9d:d7:d0:83:82:38:37:21:ba:53: 38:f2:97:e7:33:4a:83:3b:be:71:b6:6c:ed:8e:37: 6e:f5:b6:e5:a1:82:84:53:fa:64:a8:70:40:98:52: f9:33:4d:17:aa:9c:79:64:cb:97:28:46:d7:4a:ee: f9:7e:c7:12:19:2a:2c:82:90:87:89:e8:d2:54:c8: 9e:fc:1e:2c:da:9a:6b:ec:5a:a9:ec:12:5a:db:ff: c4:2d:95:ec:01:63:25:9b:7c:cc:b0:a5:b8:d1:1a: b6:04:59:de:ce:ee:94:9f:87:56:77:61:a5:ef:a6: f2:3c:56:a5:a8:78:8f:4a:5e:05:d6:b3:09:b5:99: 76:70:dc:a0:59:c8:8c:e5:7b:94:ae:63:06:fb:64: 0c:c7:f3:ee:ff:3c:1a:ce:07:c0:bc:1d:36:77:73: ae:3d:81:cb:74:d5:11:4a:12:72:63:03:9c:b4:6b: db:00:7d:18:cf:76:29:78:6a:b9:bc:c3:d6:45:19: b6:7c:54:6b:0d:12:db:3f:07:1e:69:f9:52:6e:5e: e0:1d:40:ec:a9:74:31:5c:fa:43:e7:58:2d:4c:fb: 52:34:6f:3b:2f:ad:9e:21:bd:47:e1:85:e3:29:b1: bf:e9:2e:f2:da:1b:bc:f1:9a:e1:f2:51:1f:b7:87: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:E3:B8:D0:F0:33:B1:00:45:22:1C:B0:27:D3:72:31:35:3B:A6 X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:66:63:da:6f:2d:06:07:e8:a5:3b:8e:42:45:57:00:63:96: f9:b9:ce:36:07:41:ce:3a:ce:01:09:3c:66:be:ed:a6:50:3b: ab:a4:7b:e8:78:d0:8e:8c:82:33:ed:e0:06:eb:bd:22:f5:f2: fb:32:3a:b7:1b:fb:88:00:5f:c6:51:23:86:b8:45:47:9f:31: 8d:09:a0:63:b6:db:25:af:f8:0d:73:53:d2:07:f6:f8:3d:50: 4d:59:f3:9f:79:80:c4:7a:08:7d:78:d5:9f:30:5f:9d:ed:a0: cf:6a:1b:5f:5f:1f:5b:c8:bf:b0:ed:7c:c1:ec:9d:b3:a7:a9: 1a:f5:53:f4:9b:26:95:ef:7d:0a:e7:05:7e:b1:68:a5:f4:33: 2f:d2:3d:6a:b4:9f:20:08:ab:d5:47:3d:98:7a:0c:5e:eb:2a: 8b:0f:42:3d:c4:71:d5:19:01:50:07:c7:a6:f8:52:cb:77:f8: 81:70:08:21:2f:5d:f6:53:c3:ee:4f:0d:e1:00:0a:67:76:48: 40:47:e4:e5:a9:69:de:07:05:19:c7:69:29:a5:d0:b7:94:41: fd:ab:a2:54:62:d9:a8:3b:94:3f:03:5b:55:88:ae:f2:5a:d0: 76:93:52:0b:4d:7f:31:a9:05:62:a1:2e:56:64:00:c0:5f:85: e4:a6:1c:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwNzAyMTgyOTQ0WhcNMjUwNzA5MTgyOTQ0WjAYMRYwFAYD VQQDEw02ODY1N2E5OS0yZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymgQW53X0IOCODchulM48pfnM0qDO75xtmztjjdu9bbloYKEU/pkqHBAmFL5 M00Xqpx5ZMuXKEbXSu75fscSGSosgpCHiejSVMie/B4s2ppr7Fqp7BJa2//ELZXs AWMlm3zMsKW40Rq2BFnezu6Un4dWd2Gl76byPFalqHiPSl4F1rMJtZl2cNygWciM 5XuUrmMG+2QMx/Pu/zwazgfAvB02d3OuPYHLdNURShJyYwOctGvbAH0Yz3YpeGq5 vMPWRRm2fFRrDRLbPwceaflSbl7gHUDsqXQxXPpD51gtTPtSNG87L62eIb1H4YXj KbG/6S7y2hu88Zrh8lEft4ffKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg347jQ 8DOxAEUiHLAn03IxNTumMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiZmPaby0GB+ilO45CRVcAY5b5uc42B0HOOs4BCTxmvu2mUDurpHvo eNCOjIIz7eAG670i9fL7Mjq3G/uIAF/GUSOGuEVHnzGNCaBjttslr/gNc1PSB/b4 PVBNWfOfeYDEegh9eNWfMF+d7aDPahtfXx9byL+w7XzB7J2zp6ka9VP0myaV730K 5wV+sWil9DMv0j1qtJ8gCKvVRz2Yegxe6yqLD0I9xHHVGQFQB8em+FLLd/iBcAgh L132U8PuTw3hAApndkhAR+TlqWneBwUZx2kppdC3lEH9q6JUYtmoO5Q/A1tViK7y WtB2k1ILTX8xqQVioS5WZADAX4XkphzP -----END CERTIFICATE-----Generated at Thu Jul 3 07:02:27 2025 by rpki-client