$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: vulscs7WOR/+KkW7OacjJryFIjabnAItaIXt3A621ko= Subject key identifier: F8:65:BE:29:89:2E:15:0F:54:60:C8:E6:0B:B7:29:D6:D4:0A:71:FD Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0976 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0961 Signing time: Wed 02 Jul 2025 20:26:08 +0000 Manifest this update: Wed 02 Jul 2025 20:26:08 +0000 Manifest next update: Wed 09 Jul 2025 20:26:08 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: 5xfnbFgcern+Iqs/hThd8Q+xqpYBuRz9B49Tw1p+7Ko=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: G50IgyVtJtFjbRe7GXXuAS+YYFAlwWX6MNmoWMFn7H8=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: UDel8k9RgGctC+s9ZLuCO5lpL1soQPWhGXE8LLODT5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2422 (0x976) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jul 2 20:26:08 2025 GMT Not After : Jul 9 20:26:08 2025 GMT Subject: CN=686595e0-1247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:be:92:81:31:7f:d8:48:48:11:47:55:d7:3b: 40:d7:51:01:be:1d:2d:b4:99:a9:40:d6:bb:35:a4: 9e:2d:97:f3:9c:f2:95:34:1d:4c:24:0b:db:1a:3c: f5:98:58:45:10:74:87:68:15:a2:bc:62:21:7f:98: 45:34:2e:ab:e6:bb:72:ac:6a:18:13:f1:b6:f7:74: 18:40:f5:7e:3d:4d:60:a3:cc:30:28:8f:65:75:c1: 0e:d4:fc:72:fd:18:13:8b:0f:ea:77:2e:19:10:65: 0e:be:75:23:19:2f:d8:a3:58:2c:ae:5d:5c:fc:7d: c5:24:92:6b:2b:b3:cc:a5:8d:e4:19:c0:da:7e:4a: e9:68:d9:2c:71:cd:19:a1:03:a0:b9:34:ee:d8:3f: 58:19:61:8e:9f:c0:60:ca:8e:0d:1b:bd:6c:e0:27: 4b:02:ab:94:46:7d:b1:95:7e:bd:d7:c5:6a:93:3b: b4:86:4f:35:42:b6:c1:03:7b:31:e0:80:69:28:a4: 59:45:60:68:d4:1e:7c:60:7c:d1:ad:cf:29:c1:6d: fb:b7:b0:c7:e1:47:25:d6:b8:c9:8b:d5:2e:12:57: 58:73:da:18:55:eb:dc:65:cc:4f:6b:f8:94:f6:55: a5:bf:d0:9a:94:a0:df:21:23:16:e8:fe:32:73:76: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:65:BE:29:89:2E:15:0F:54:60:C8:E6:0B:B7:29:D6:D4:0A:71:FD X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e5:5e:d4:7d:42:c4:e9:88:ac:05:05:e2:32:e3:e8:60:89: b8:73:82:94:6c:0e:71:48:27:a7:75:e8:60:35:d9:d5:14:f0: cc:03:88:7b:11:36:66:fd:89:4b:35:1d:81:b4:b8:7d:34:80: 05:04:c4:70:75:f0:c5:03:de:50:94:8f:b9:78:74:62:ba:17: 5c:72:1e:3e:a4:26:15:6a:c3:29:71:63:b2:9b:a2:38:73:f6: b6:df:a3:e8:59:6e:2e:50:9c:02:a8:86:f0:1c:a9:3b:c1:a4: d9:cc:18:33:31:08:9b:3f:73:45:22:fe:36:01:7f:f6:44:25: 41:37:b6:10:41:38:9a:dd:f6:9e:a1:d9:94:d9:91:d3:f5:83: 03:88:93:40:9b:57:52:cc:b1:17:fb:92:5f:fe:df:68:04:7c: 52:9f:8e:e0:de:78:8f:e1:f6:1e:bc:e6:d7:a4:15:fe:2a:0b: c1:42:37:c2:b5:16:b0:65:a5:66:fd:66:19:aa:dc:32:c0:0d: bb:8c:31:90:38:db:9e:18:22:d1:7a:93:50:76:c2:6b:e4:a5: 7c:bb:58:7f:37:f7:80:e7:ba:0d:9a:4b:9f:a1:92:7f:7c:d7: bc:93:f4:a4:5b:9b:87:c9:2e:64:cd:1d:68:15:57:ac:75:9e: f6:7b:c7:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUwNzAyMjAyNjA4WhcNMjUwNzA5MjAyNjA4WjAYMRYwFAYD VQQDEw02ODY1OTVlMC0xMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5b6SgTF/2EhIEUdV1ztA11EBvh0ttJmpQNa7NaSeLZfznPKVNB1MJAvbGjz1 mFhFEHSHaBWivGIhf5hFNC6r5rtyrGoYE/G293QYQPV+PU1go8wwKI9ldcEO1Pxy /RgTiw/qdy4ZEGUOvnUjGS/Yo1gsrl1c/H3FJJJrK7PMpY3kGcDafkrpaNkscc0Z oQOguTTu2D9YGWGOn8Bgyo4NG71s4CdLAquURn2xlX6918Vqkzu0hk81QrbBA3sx 4IBpKKRZRWBo1B58YHzRrc8pwW37t7DH4Ucl1rjJi9UuEldYc9oYVevcZcxPa/iU 9lWlv9CalKDfISMW6P4yc3aySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhlvimJ LhUPVGDI5gu3KdbUCnH9MB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI5V7UfULE6YisBQXiMuPoYIm4c4KUbA5xSCendehgNdnVFPDMA4h7 ETZm/YlLNR2BtLh9NIAFBMRwdfDFA95QlI+5eHRiuhdcch4+pCYVasMpcWOym6I4 c/a236PoWW4uUJwCqIbwHKk7waTZzBgzMQibP3NFIv42AX/2RCVBN7YQQTia3fae odmU2ZHT9YMDiJNAm1dSzLEX+5Jf/t9oBHxSn47g3niP4fYevObXpBX+KgvBQjfC tRawZaVm/WYZqtwywA27jDGQONueGCLRepNQdsJr5KV8u1h/N/eA57oNmkufoZJ/ fNe8k/SkW5uHyS5kzR1oFVesdZ72e8fp -----END CERTIFICATE-----Generated at Fri Jul 4 08:20:54 2025 by rpki-client