$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: /x2D+6t4mN/UxUVnU/Wi5icTbGY2pm9WluUFfuH4A0s= Subject key identifier: 7C:13:01:5C:55:6A:DD:AC:02:FF:DC:FA:5E:BB:D5:3C:7E:CA:D0:33 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 13CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 13C3 Signing time: Wed 02 Jul 2025 17:08:14 +0000 Manifest this update: Wed 02 Jul 2025 17:08:14 +0000 Manifest next update: Wed 09 Jul 2025 17:08:14 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: GVhZ159gAyaGktjjpPdCNqCdKVm/0Q7nlS4TcVAXNSk=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5070 (0x13ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Jul 2 17:08:14 2025 GMT Not After : Jul 9 17:08:14 2025 GMT Subject: CN=6865677e-a056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:9f:56:6a:78:6a:44:ce:60:ff:77:ef:21: 2d:ab:00:f0:3e:39:c6:94:8f:59:99:7f:24:ce:de: d3:87:2f:13:33:c0:cb:42:67:2c:02:78:e6:9b:d6: dd:f2:3e:07:b1:67:f2:3a:f8:65:1d:5e:56:5a:c8: bb:1e:cf:88:9b:dc:26:41:73:64:41:5b:b8:d0:c7: 03:34:2c:bf:f9:2a:e4:01:a7:41:bd:ea:96:ca:9a: 81:de:5b:11:0a:62:70:d2:89:b0:96:c1:38:1a:dd: a1:d8:b3:e4:34:d3:5e:5a:c0:f2:b4:b3:6a:2a:65: 9d:0a:c3:1c:26:89:70:c1:96:3d:fe:dc:69:b9:7b: e5:2c:3b:d0:48:51:6d:3c:ea:94:b0:1d:21:dc:b9: 11:b9:4c:e3:56:c8:ba:69:2f:85:4d:83:ac:93:e8: f6:83:0d:77:35:28:a0:c8:bd:33:54:99:b9:2a:f1: 66:c7:eb:fa:c6:c8:b9:c1:3c:64:d8:aa:ed:4f:05: ba:bb:bb:9b:5e:09:7e:28:de:cb:7d:a5:4a:97:29: 87:3f:91:11:e2:ba:a8:95:e1:cc:fa:b1:30:d9:d8: b1:0a:3b:11:3a:9d:6e:2e:8d:44:71:7d:c0:2e:09: 20:8a:86:aa:db:0b:da:3d:2d:89:36:4b:25:cf:b4: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:13:01:5C:55:6A:DD:AC:02:FF:DC:FA:5E:BB:D5:3C:7E:CA:D0:33 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f9:72:37:fc:f2:b5:77:7d:86:7d:fa:ee:fa:4b:1d:0f:a1: 4c:fc:55:a1:83:54:b0:a1:97:4c:c6:f1:94:6e:cd:6f:8c:d8: 7f:1b:59:b9:8c:60:73:48:9e:7e:23:84:a2:bd:1c:89:f7:84: 19:1a:e5:ab:ef:10:f7:30:41:a3:e5:58:6e:d0:a4:08:89:38: 2e:25:0c:73:11:b3:0e:07:ca:2c:58:b3:b1:62:3b:b9:9a:7e: d3:b8:ce:38:23:21:1a:22:b5:0b:bf:8c:95:1b:37:ce:23:cf: 8a:2e:88:72:6e:73:96:20:d4:09:f5:46:8b:14:17:ad:92:68: b6:78:c8:7e:7f:df:63:b7:6b:b1:73:a3:55:ae:e1:ac:fe:c3: 80:fd:d7:a4:92:d1:1f:86:9d:df:16:c2:8d:05:e9:d0:0d:32: a1:78:d7:44:be:6c:7e:4e:6a:0c:77:73:15:de:94:22:da:b2: c7:dc:bb:32:9d:8f:20:e2:9e:5f:be:02:4a:03:b3:3d:de:75: 85:cc:7d:c1:8d:fa:c2:3d:e8:98:7a:15:03:3e:0c:6d:d3:3b: ec:ab:18:26:54:c6:ee:b6:ee:4d:95:ed:ed:78:8e:1b:3f:d3: ef:26:e7:49:53:14:24:f8:f0:32:35:73:03:3c:32:fb:ac:4b: e4:d3:f3:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUwNzAyMTcwODE0WhcNMjUwNzA5MTcwODE0WjAYMRYwFAYD VQQDEw02ODY1Njc3ZS1hMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFefVmp4akTOYP937yEtqwDwPjnGlI9ZmX8kzt7Thy8TM8DLQmcsAnjmm9bd 8j4HsWfyOvhlHV5WWsi7Hs+Im9wmQXNkQVu40McDNCy/+SrkAadBveqWypqB3lsR CmJw0omwlsE4Gt2h2LPkNNNeWsDytLNqKmWdCsMcJolwwZY9/txpuXvlLDvQSFFt POqUsB0h3LkRuUzjVsi6aS+FTYOsk+j2gw13NSigyL0zVJm5KvFmx+v6xsi5wTxk 2KrtTwW6u7ubXgl+KN7LfaVKlymHP5ER4rqoleHM+rEw2dixCjsROp1uLo1EcX3A Lgkgioaq2wvaPS2JNkslz7S06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwTAVxV at2sAv/c+l671Tx+ytAzMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh+XI3/PK1d32Gffru+ksdD6FM/FWhg1SwoZdMxvGUbs1vjNh/G1m5 jGBzSJ5+I4SivRyJ94QZGuWr7xD3MEGj5Vhu0KQIiTguJQxzEbMOB8osWLOxYju5 mn7TuM44IyEaIrULv4yVGzfOI8+KLohybnOWINQJ9UaLFBetkmi2eMh+f99jt2ux c6NVruGs/sOA/dekktEfhp3fFsKNBenQDTKheNdEvmx+TmoMd3MV3pQi2rLH3Lsy nY8g4p5fvgJKA7M93nWFzH3BjfrCPeiYehUDPgxt0zvsqxgmVMbutu5Nle3teI4b P9PvJudJUxQk+PAyNXMDPDL7rEvk0/Oh -----END CERTIFICATE-----Generated at Thu Jul 3 01:10:18 2025 by rpki-client