$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: WYf78lBGzoC9zrpPzIykcXW01v/gS8hAM9SN/UbiNFU= Subject key identifier: B0:BC:1E:8A:8F:09:FD:B5:60:57:AC:5D:2F:B2:7D:26:64:F3:87:06 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 13EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 13DF Signing time: Fri 22 Aug 2025 17:03:57 +0000 Manifest this update: Fri 22 Aug 2025 17:03:57 +0000 Manifest next update: Fri 29 Aug 2025 17:03:57 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: qvwlUd5cwprz/szfx7n2dBYoVYyEwdZtXPTBMBKgYV8=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: IqvtwPczbHtONnp7/SjDoKiW5eTz+eR8wc9lCI4pYs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5099 (0x13eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Aug 22 17:03:57 2025 GMT Not After : Aug 29 17:03:57 2025 GMT Subject: CN=68a8a2fd-e82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:4a:98:75:f2:37:b6:a2:fb:c5:44:16:b3: 5d:3c:b9:8c:fa:25:d0:2f:b3:73:b7:53:9b:9f:48: 78:4d:87:3a:da:12:8b:2f:e1:c6:ee:a1:ab:c8:f6: c0:f8:34:c4:f4:c1:da:1d:d7:d0:c7:a1:6c:9f:f0: 4c:7c:a7:47:de:d1:4f:b6:73:e9:8f:54:0e:a1:b7: 48:a6:8b:d7:e7:40:cb:b1:1c:c1:b0:fa:c1:52:ce: ca:9d:3e:b3:02:83:2a:d6:e7:bd:c7:9e:ae:1f:bb: 4c:f0:33:a4:ff:5a:31:ce:b8:cd:f0:3f:ae:0f:81: 43:9c:fa:84:55:88:ef:94:33:7b:20:e7:46:fd:23: 2d:97:ed:67:a5:55:32:9a:30:88:e1:73:6f:2e:6b: 94:06:4a:4e:a5:3e:7e:a0:76:ca:74:1d:f3:c9:7c: 70:38:8a:9c:27:f2:55:85:42:51:a9:5e:3f:8b:07: 9d:66:46:0b:dd:31:6a:40:0d:63:e4:72:4e:07:5a: 96:2e:2d:6a:a1:47:41:a3:be:b8:71:86:db:3a:f3: 5b:2e:1b:54:11:1e:3f:d0:13:5f:65:2f:33:f5:77: 1e:97:02:73:2f:68:42:45:08:d2:10:49:1e:1e:45: b9:e7:7d:cc:be:36:29:ba:d5:61:27:7e:cb:9c:b3: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:1E:8A:8F:09:FD:B5:60:57:AC:5D:2F:B2:7D:26:64:F3:87:06 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:39:84:07:8b:1f:c3:f1:c1:3e:c4:4e:24:d0:8d:90:43:c3: 02:04:0d:27:b5:ef:a4:54:62:01:d1:02:f0:cb:6c:a4:3c:61: 35:28:36:bf:8c:70:c3:03:a6:bc:99:8b:f9:87:bf:36:f8:b1: d2:03:d8:e4:f7:f7:0c:64:42:cf:43:fe:ad:1d:8c:25:15:41: 58:ae:8d:4c:d6:16:c3:dd:bd:48:5c:bc:9b:ae:b7:44:09:3d: 3c:e8:88:15:74:c4:92:85:f6:93:c5:56:56:04:bd:5c:8c:72: b0:70:9b:9b:38:93:12:ae:f0:78:a4:15:4d:da:93:27:2e:79: 26:7b:eb:4d:b9:d0:39:7e:3b:77:5d:67:fe:06:a5:37:60:dc: 1d:16:05:3c:00:a5:c0:ab:9c:48:55:25:4b:84:e4:61:47:5d: 20:cc:67:f1:3d:fb:66:7b:4c:97:2f:ff:9d:48:53:25:cb:ac: cd:7c:2c:d5:fd:6c:cb:37:9d:5a:9a:72:d0:a4:37:dc:9f:3a: 36:95:4c:b8:26:aa:50:40:ba:5b:e1:3d:35:29:31:00:b0:b2: 8c:64:1a:c9:7f:b1:c5:ba:71:7c:f3:2a:28:d4:cf:a7:26:bb: 9b:59:ab:52:88:9b:70:ff:63:7c:6c:51:f2:82:58:d6:e3:27: 74:8d:d7:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUwODIyMTcwMzU3WhcNMjUwODI5MTcwMzU3WjAYMRYwFAYD VQQDEw02OGE4YTJmZC1lODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5hKmHXyN7ai+8VEFrNdPLmM+iXQL7Nzt1Obn0h4TYc62hKLL+HG7qGryPbA +DTE9MHaHdfQx6Fsn/BMfKdH3tFPtnPpj1QOobdIpovX50DLsRzBsPrBUs7KnT6z AoMq1ue9x56uH7tM8DOk/1oxzrjN8D+uD4FDnPqEVYjvlDN7IOdG/SMtl+1npVUy mjCI4XNvLmuUBkpOpT5+oHbKdB3zyXxwOIqcJ/JVhUJRqV4/iwedZkYL3TFqQA1j 5HJOB1qWLi1qoUdBo764cYbbOvNbLhtUER4/0BNfZS8z9XcelwJzL2hCRQjSEEke HkW5533MvjYputVhJ37LnLOe/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8HoqP Cf21YFesXS+yfSZk84cGMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoOYQHix/D8cE+xE4k0I2QQ8MCBA0nte+kVGIB0QLwy2ykPGE1KDa/ jHDDA6a8mYv5h782+LHSA9jk9/cMZELPQ/6tHYwlFUFYro1M1hbD3b1IXLybrrdE CT086IgVdMSShfaTxVZWBL1cjHKwcJubOJMSrvB4pBVN2pMnLnkme+tNudA5fjt3 XWf+BqU3YNwdFgU8AKXAq5xIVSVLhORhR10gzGfxPftme0yXL/+dSFMly6zNfCzV /WzLN51amnLQpDfcnzo2lUy4JqpQQLpb4T01KTEAsLKMZBrJf7HFunF88yoo1M+n JrubWatSiJtw/2N8bFHygljW4yd0jdfg -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:33 2025 by rpki-client