$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft File: J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft (raw, json) Hash identifier: Qty+nNUsTUR66iH+y9p0iDwlcUHbxFK5sTS1CBZdpU8= Subject key identifier: 8D:B7:D4:24:0F:2E:35:62:F6:42:1B:88:A9:3C:99:09:07:95:4D:CE Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E Certificate issuer: /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft Manifest number: 012C Signing time: Tue 01 Jul 2025 05:10:52 +0000 Manifest this update: Tue 01 Jul 2025 05:10:52 +0000 Manifest next update: Tue 08 Jul 2025 05:10:51 +0000 Files and hashes: 1: J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl (hash: eFiOXblJ4Ns4SKTBMQ1ITqZyCoOa7wxUQGsZmGY4M1s=) 2: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (hash: 6C7RQu6L/61k8kBeOezAxwREknY0f6jdNOm/o1EQWNU=) 3: A6DB1A549BB511EEAAE01C70C4F9AE02.roa (hash: KtraNK6MUNFprY77t8YkGpzesemeP8OiSjIlbxZgo0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Validity Not Before: Jul 1 05:10:52 2025 GMT Not After : Jul 8 05:10:51 2025 GMT Subject: CN=68636ddc-92bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:ed:d6:3a:a9:9a:80:3d:5e:2f:10:e1:72: f5:3d:2f:2b:84:b6:cd:b6:30:70:21:b5:ee:7b:0c: 98:6a:f1:c9:14:74:5c:aa:50:e8:27:cf:aa:54:33: 3d:14:92:7a:4d:d8:9e:a1:86:24:89:3e:56:36:39: 81:a0:89:bd:9a:7e:6f:24:01:c2:70:13:f6:8e:a2: 7a:9c:37:1e:99:74:76:a1:17:8a:2d:3e:40:06:f7: 89:f6:04:e1:88:a6:51:8c:82:16:43:6a:b7:c7:b9: f9:a6:fa:94:b3:de:53:51:31:a8:59:6b:5b:4f:55: 9f:4b:6c:30:9c:2e:cb:dc:f6:75:a5:ff:a9:a1:94: 4e:a3:8d:cc:00:2f:25:69:e1:a5:ab:90:ac:9c:38: 95:a6:15:51:19:41:6c:f1:b2:cb:55:d7:3f:f5:49: 87:97:01:83:50:20:db:78:e2:a6:ba:f3:9c:42:11: 75:e5:72:a4:73:36:d0:5b:87:63:88:51:b0:e4:99: 8f:69:e1:12:b2:cd:fa:8e:e3:99:2e:50:97:92:27: a4:bc:a0:ba:ce:e5:5e:76:a0:03:17:fa:87:81:b1: a9:86:e4:0f:ac:ff:c2:d9:b0:fd:2f:70:60:e6:7c: ca:fc:35:02:9e:76:72:59:41:c8:fb:14:4b:dc:11: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B7:D4:24:0F:2E:35:62:F6:42:1B:88:A9:3C:99:09:07:95:4D:CE X509v3 Authority Key Identifier: keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:45:98:dc:f0:86:55:c1:df:cc:cd:c5:37:03:61:05:60:97: f8:e1:4a:6f:f5:5f:81:0f:d9:f4:4f:4d:00:93:f7:2e:83:48: 80:25:9c:3d:2e:1e:9a:38:6a:03:7b:71:82:94:1d:2b:d5:7a: d2:bd:29:77:0e:1d:a5:a4:50:d9:f7:f6:4b:50:5a:10:a9:76: 67:3c:9f:65:13:7c:5e:0a:a2:06:3f:28:1c:0a:31:de:f3:33: 8b:ad:06:9e:87:35:91:cb:d6:46:5d:a3:a4:8c:e3:be:09:71: 1e:e7:98:07:40:25:85:80:ad:6e:81:de:fa:d6:76:2d:65:f4: 39:44:50:68:b2:7f:db:bc:53:d1:ea:a4:1e:fd:25:cf:15:9e: e9:7d:18:17:63:46:52:62:cc:23:22:6a:ad:8b:03:44:90:77: 3d:83:18:fc:ff:93:8f:44:2a:bc:d4:95:2a:3c:1e:3b:ff:79: 95:ca:ef:49:ba:4c:55:f2:52:37:59:a5:bd:81:91:b8:e0:df: 3a:5d:50:5c:7d:d8:d3:87:69:ae:12:78:41:75:28:8d:4c:cb: 8c:12:fd:37:4b:88:da:cf:cc:63:f5:98:b3:49:c7:21:dd:27: 18:21:3b:4c:82:aa:fe:b2:f0:95:1d:e6:d1:97:3b:b5:0d:ea: 92:c0:77:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3ODExMTAvBgNVBAUTKDI3NjlBNEZBOTIyOTdEQ0IxREY4OTZEQUU2MzczOTk2 RkQzMTgwNkUwHhcNMjUwNzAxMDUxMDUyWhcNMjUwNzA4MDUxMDUxWjAYMRYwFAYD VQQDEw02ODYzNmRkYy05MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTft1jqpmoA9Xi8Q4XL1PS8rhLbNtjBwIbXuewyYavHJFHRcqlDoJ8+qVDM9 FJJ6TdieoYYkiT5WNjmBoIm9mn5vJAHCcBP2jqJ6nDcemXR2oReKLT5ABveJ9gTh iKZRjIIWQ2q3x7n5pvqUs95TUTGoWWtbT1WfS2wwnC7L3PZ1pf+poZROo43MAC8l aeGlq5CsnDiVphVRGUFs8bLLVdc/9UmHlwGDUCDbeOKmuvOcQhF15XKkczbQW4dj iFGw5JmPaeESss36juOZLlCXkiekvKC6zuVedqADF/qHgbGphuQPrP/C2bD9L3Bg 5nzK/DUCnnZyWUHI+xRL3BHP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI231CQP LjVi9kIbiKk8mQkHlU3OMB8GA1UdIwQYMBaAFCdppPqSKX3LHfiW2uY3OZb9MYBu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc4MS83NTA3MEE0QTk2 QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZjc2QtSmJhNWpjNWx2MHhn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oybWstcElwZmNzZC1KYmE1amM1bHYweGdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc4MS83NTA3MEE0QTk2QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZj c2QtSmJhNWpjNWx2MHhnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALRZjc8IZVwd/MzcU3A2EFYJf44Upv9V+BD9n0T00Ak/cug0iAJZw9 Lh6aOGoDe3GClB0r1XrSvSl3Dh2lpFDZ9/ZLUFoQqXZnPJ9lE3xeCqIGPygcCjHe 8zOLrQaehzWRy9ZGXaOkjOO+CXEe55gHQCWFgK1ugd761nYtZfQ5RFBosn/bvFPR 6qQe/SXPFZ7pfRgXY0ZSYswjImqtiwNEkHc9gxj8/5OPRCq81JUqPB47/3mVyu9J ukxV8lI3WaW9gZG44N86XVBcfdjTh2muEnhBdSiNTMuMEv03S4jaz8xj9ZizScch 3ScYITtMgqr+svCVHebRlzu1DeqSwHfI -----END CERTIFICATE-----Generated at Wed Jul 2 01:07:31 2025 by rpki-client