$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: U0X9uEF0vS4auTMv3ErHgn6KnFbIubXYJkcV8iR0Bys= Subject key identifier: 09:78:61:E2:2C:83:38:71:35:39:1E:44:F5:15:B9:46:2D:05:0C:C4 Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 068F Signing time: Mon 30 Jun 2025 22:32:10 +0000 Manifest this update: Mon 30 Jun 2025 22:32:10 +0000 Manifest next update: Mon 07 Jul 2025 22:32:10 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: 4JbJyrXNLcy8ersGeJX6jdw6+TIJvkK6YlCdkvpBPvo=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Jun 30 22:32:10 2025 GMT Not After : Jul 7 22:32:10 2025 GMT Subject: CN=6863106a-ce57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:5b:0a:b5:4a:01:af:1d:f2:12:9d:87:c4: 58:40:35:ea:e6:ed:3e:fc:11:f8:26:6f:f7:ca:82: 22:0e:fd:2c:cd:8e:ee:76:ef:da:b5:0a:b9:25:24: cb:f0:b9:2d:d2:1d:f2:20:91:c9:20:83:49:d2:fb: e9:78:b5:6f:0c:a2:52:0f:8c:15:eb:93:02:e4:20: 26:d6:d0:f7:fa:c6:f7:96:c9:6c:d8:79:b8:b4:3f: 8b:03:62:3f:e8:4a:15:ce:72:b2:57:9d:26:65:f7: 2c:c1:82:82:64:78:bc:ae:c6:9f:a7:af:f3:35:2d: cf:28:e5:2e:be:1c:57:3b:1d:16:1c:8e:65:4d:f0: 82:a4:a5:79:1b:69:4a:b0:ec:e7:a7:23:00:40:ae: 1c:41:94:52:64:c3:f0:1e:6c:95:ea:d8:bf:4d:f9: f2:af:6b:1e:47:7f:8f:1f:62:55:bb:99:9d:b9:38: 88:cf:cc:74:d3:60:52:52:b9:b6:f7:7c:8c:dc:5f: 83:e9:46:c4:d8:53:81:7e:6d:a8:7a:c1:4f:1a:9d: 1b:dd:ff:5b:de:75:ed:b2:bf:55:3c:cd:1a:79:4f: 5c:00:f2:84:4c:ae:be:9d:a2:b5:74:de:00:1f:5a: ab:50:ae:5d:a4:33:a6:2c:d2:95:26:0d:68:b5:5c: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:78:61:E2:2C:83:38:71:35:39:1E:44:F5:15:B9:46:2D:05:0C:C4 X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:89:2e:45:54:d2:b4:65:08:9a:70:ba:b0:02:bd:e7:de:80: c5:8a:9b:fc:1a:28:20:71:c2:c9:64:b5:32:43:b8:25:e1:2f: cf:d4:a2:bb:e9:85:e1:0b:2a:fd:dd:b0:33:58:b7:0e:96:ea: 07:18:b3:0f:5b:0b:af:bc:b7:0d:34:9f:1a:c5:47:7e:18:64: 18:3f:67:56:d9:ce:a2:5d:9d:c8:43:aa:2f:d1:ca:ed:11:fb: fc:10:e9:84:01:22:4a:72:9f:c2:5c:f9:31:37:ce:6a:4d:4e: 59:e9:9d:c5:da:3e:89:3b:6f:1c:6c:e7:38:1e:fc:d9:ad:62: 53:c1:a2:a4:8e:17:82:ba:10:65:8a:86:2b:09:44:0f:3e:81: 8f:5d:a9:2c:80:08:44:b8:d3:0c:c7:6e:cf:74:2f:3f:08:f2: 33:bc:84:58:b5:65:73:23:cf:bc:3d:c3:8b:9d:ce:af:f0:fa: 3b:f3:bc:9e:2f:7b:e9:9e:57:3d:13:73:88:e1:0e:24:52:54: 29:cf:3d:c7:73:d5:62:c4:23:9d:07:61:03:c9:67:16:6c:81: 82:dd:13:fa:8a:8d:5f:e8:84:09:22:3f:dd:a6:ea:62:4a:46: b4:c4:49:fc:63:d6:4c:a2:1c:9b:72:eb:dd:14:33:6e:e3:42: ac:8f:d7:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwNjMwMjIzMjEwWhcNMjUwNzA3MjIzMjEwWjAYMRYwFAYD VQQDEw02ODYzMTA2YS1jZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGxbCrVKAa8d8hKdh8RYQDXq5u0+/BH4Jm/3yoIiDv0szY7udu/atQq5JSTL 8Lkt0h3yIJHJIINJ0vvpeLVvDKJSD4wV65MC5CAm1tD3+sb3lsls2Hm4tD+LA2I/ 6EoVznKyV50mZfcswYKCZHi8rsafp6/zNS3PKOUuvhxXOx0WHI5lTfCCpKV5G2lK sOznpyMAQK4cQZRSZMPwHmyV6ti/Tfnyr2seR3+PH2JVu5mduTiIz8x002BSUrm2 93yM3F+D6UbE2FOBfm2oesFPGp0b3f9b3nXtsr9VPM0aeU9cAPKETK6+naK1dN4A H1qrUK5dpDOmLNKVJg1otVwoKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl4YeIs gzhxNTkeRPUVuUYtBQzEMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7iS5FVNK0ZQiacLqwAr3n3oDFipv8GiggccLJZLUyQ7gl4S/P1KK7 6YXhCyr93bAzWLcOluoHGLMPWwuvvLcNNJ8axUd+GGQYP2dW2c6iXZ3IQ6ov0crt Efv8EOmEASJKcp/CXPkxN85qTU5Z6Z3F2j6JO28cbOc4HvzZrWJTwaKkjheCuhBl ioYrCUQPPoGPXaksgAhEuNMMx27PdC8/CPIzvIRYtWVzI8+8PcOLnc6v8Po787ye L3vpnlc9E3OI4Q4kUlQpzz3Hc9VixCOdB2EDyWcWbIGC3RP6io1f6IQJIj/dpupi Ska0xEn8Y9ZMohybcuvdFDNu40Ksj9e2 -----END CERTIFICATE-----Generated at Wed Jul 2 16:11:21 2025 by rpki-client