$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json) Hash identifier: L2soEixyqtaSkd40zVM9LbAx7zWnzON6d1OY7Qq2t2A= Subject key identifier: AE:E3:FB:7B:6C:27:00:3E:B7:B8:90:CE:63:C9:2D:41:91:F5:8F:69 Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0DF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft Manifest number: 0DCE Signing time: Wed 02 Jul 2025 17:36:26 +0000 Manifest this update: Wed 02 Jul 2025 17:36:26 +0000 Manifest next update: Wed 09 Jul 2025 17:36:26 +0000 Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: mKCjCPd/f/s1cc+nDc1LtyZkAeAPUX/3c3TG6SDwdYU=) 2: 41088D5C7CF011EFA2B7A53EC4F9AE02.roa (hash: 3gPJefn/nBhcOq5ryC0Mdn5OAkNCGxGOdgp1NnnSRSA=) 3: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Jul 2 17:36:26 2025 GMT Not After : Jul 9 17:36:26 2025 GMT Subject: CN=68656e1a-7fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:72:e2:30:5b:c2:c4:2f:1e:f4:be:14:04: 34:ec:6d:43:79:ec:48:4d:69:1a:f0:8c:f8:e3:1d: f0:f8:74:cd:1a:f3:e3:6d:8c:7b:c2:2b:99:c8:7d: 3a:db:9f:25:0d:34:6c:1d:f4:66:48:6b:52:02:a7: 1f:c3:fc:73:e6:77:5d:02:7b:f3:bb:8e:05:25:ee: 9d:f0:58:bb:10:46:5a:38:cb:6b:47:cf:2a:3e:82: ac:fa:4d:94:a6:da:f7:cd:fa:bd:2b:7d:84:86:26: bb:12:bb:59:37:60:7c:64:f4:c2:a0:7d:f9:bb:99: e2:1f:8b:08:2e:4e:f3:b4:bd:aa:6e:23:b7:ed:07: 47:71:41:8c:a0:dc:12:76:2b:44:b7:46:c4:c2:a0: 79:a6:44:98:d8:6b:67:ca:a6:b7:e5:a1:69:95:29: 32:40:80:95:91:9f:d0:69:e5:f6:35:3d:66:60:46: c2:6b:4e:55:a2:eb:18:0e:a7:84:35:ec:dd:25:0d: 5a:a4:57:69:d9:7f:4a:55:09:51:ce:05:9d:05:46: 8b:b1:5c:ce:36:e0:2a:10:b5:4e:74:db:57:b4:5a: 83:89:fc:7f:4b:ac:1c:2b:b2:cb:87:4f:cf:1a:86: 72:90:33:3e:fe:76:d4:c6:e4:68:92:34:21:12:a5: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E3:FB:7B:6C:27:00:3E:B7:B8:90:CE:63:C9:2D:41:91:F5:8F:69 X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5b:bb:9d:3e:e3:53:8e:50:41:7a:d2:b0:1b:44:a5:1c:49: a4:ae:82:41:5c:ed:d8:ae:3e:3e:31:b5:4e:c8:a7:50:32:80: 4a:74:c1:21:c8:82:08:84:2c:dd:db:43:82:b3:a3:f9:7d:be: 59:3a:d8:20:8f:76:6a:3d:f0:f9:37:22:cf:22:86:0e:9f:23: e9:e8:d8:67:7d:71:cf:32:ce:58:5a:d8:32:05:38:c7:bd:c0: 77:3a:50:06:ee:61:5d:b8:1a:53:84:26:95:aa:41:14:b0:ae: 27:0f:f9:75:9a:01:4f:01:f9:13:f2:ed:24:ee:a9:eb:e5:2c: a7:da:b5:1a:ae:25:f2:ee:2c:f2:be:0a:cd:a1:2d:7f:9f:fc: 40:e4:75:17:81:a9:23:19:4b:80:41:1e:3a:bf:9b:18:22:76: 2e:c5:8b:cc:11:c4:b6:7d:dc:f5:bd:e3:80:12:cd:c0:52:81: 46:24:07:4d:26:17:71:4c:8e:03:a3:ec:1c:d4:d7:86:8d:ab: a7:fc:37:26:1b:8c:29:f9:92:50:95:07:d5:66:be:fd:78:69: c2:ce:c2:ca:51:e1:2c:64:b9:d8:d7:bd:ce:53:00:7e:fd:d9: cd:6f:5e:e5:4c:5d:cd:f7:24:62:2a:fb:ca:d3:19:39:6b:13: c0:14:de:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUwNzAyMTczNjI2WhcNMjUwNzA5MTczNjI2WjAYMRYwFAYD VQQDEw02ODY1NmUxYS03ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswRy4jBbwsQvHvS+FAQ07G1DeexITWka8Iz44x3w+HTNGvPjbYx7wiuZyH06 258lDTRsHfRmSGtSAqcfw/xz5nddAnvzu44FJe6d8Fi7EEZaOMtrR88qPoKs+k2U ptr3zfq9K32Ehia7ErtZN2B8ZPTCoH35u5niH4sILk7ztL2qbiO37QdHcUGMoNwS ditEt0bEwqB5pkSY2Gtnyqa35aFplSkyQICVkZ/QaeX2NT1mYEbCa05VousYDqeE NezdJQ1apFdp2X9KVQlRzgWdBUaLsVzONuAqELVOdNtXtFqDifx/S6wcK7LLh0/P GoZykDM+/nbUxuRokjQhEqWEOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7j+3ts JwA+t7iQzmPJLUGR9Y9pMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKW7udPuNTjlBBetKwG0SlHEmkroJBXO3Yrj4+MbVOyKdQMoBKdMEh yIIIhCzd20OCs6P5fb5ZOtggj3ZqPfD5NyLPIoYOnyPp6NhnfXHPMs5YWtgyBTjH vcB3OlAG7mFduBpThCaVqkEUsK4nD/l1mgFPAfkT8u0k7qnr5Syn2rUariXy7izy vgrNoS1/n/xA5HUXgakjGUuAQR46v5sYInYuxYvMEcS2fdz1veOAEs3AUoFGJAdN JhdxTI4Do+wc1NeGjaun/DcmG4wp+ZJQlQfVZr79eGnCzsLKUeEsZLnY173OUwB+ /dnNb17lTF3N9yRiKvvK0xk5axPAFN6Q -----END CERTIFICATE-----Generated at Thu Jul 3 06:59:55 2025 by rpki-client