$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: sBcj6fje4G5bxXyIrlltSCAsgpUl7QmzHunvzbxZMSg= Subject key identifier: 2A:4E:F6:DD:C3:66:E8:DF:0B:04:54:9D:44:96:E3:9C:F8:C0:7A:F7 Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0D75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0D6E Signing time: Mon 30 Jun 2025 18:10:20 +0000 Manifest this update: Mon 30 Jun 2025 18:10:19 +0000 Manifest next update: Mon 07 Jul 2025 18:10:19 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: wDi/pMprXv6AySrJdGJJmGyXbM9sUDfSlY2iJq5zjB0=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: 7nwi4xt2gy9ofefrS7G3QotlbXQ09IRHuywiHjLXzG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3445 (0xd75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Jun 30 18:10:19 2025 GMT Not After : Jul 7 18:10:19 2025 GMT Subject: CN=6862d30b-6390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:41:c3:ec:c5:c9:de:c7:20:39:62:84:98: 60:c4:8d:ae:0e:53:d1:6b:81:5d:7c:bd:7f:74:74: 93:a9:6a:ce:5b:a1:3e:de:06:23:76:e9:b1:09:87: 76:5d:8a:bd:4a:bb:5a:ef:67:e7:49:e9:ff:54:0f: 82:b8:40:2e:b8:2b:95:cd:80:49:ec:2d:99:ac:c2: 6e:9b:da:3f:49:c5:34:04:67:2e:c0:be:eb:bd:22: 95:7a:dd:86:e2:76:ac:cc:b3:d5:3e:0a:4e:ba:87: 27:be:2b:37:65:6a:31:ff:7a:81:7d:01:39:10:6f: b2:e5:7b:ad:da:60:e1:39:49:f5:3e:1e:3f:5d:b3: b6:3b:a1:39:aa:d6:be:50:4b:5d:71:66:36:77:d4: ad:e4:4e:7f:2d:9b:3d:ca:6d:9d:46:c0:0b:b2:28: fd:5b:26:0d:f7:ac:0a:03:8d:22:05:1d:61:a9:5c: 05:c0:a0:01:92:79:28:fc:0d:83:73:af:fd:cc:dd: 21:26:4a:fb:f2:f5:c1:01:fb:da:29:87:5a:ce:92: cb:bd:04:0c:10:84:d0:de:69:29:8e:dc:05:28:13: 3a:39:e3:46:7c:64:10:17:af:be:1f:e9:09:46:a5: 81:ba:91:ca:ca:c5:ae:56:94:8f:a8:74:07:a2:1b: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4E:F6:DD:C3:66:E8:DF:0B:04:54:9D:44:96:E3:9C:F8:C0:7A:F7 X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:42:29:6a:0c:e7:de:ee:e7:2c:ca:a4:05:bc:c2:43:d4:34: 55:49:e3:96:a2:82:92:eb:56:d6:c6:2a:c4:0c:f3:71:4f:33: 40:c2:42:77:2d:72:d2:5e:54:ff:41:f9:e6:b7:6f:f3:3f:3c: 25:2a:07:a8:bc:d6:cf:1d:c5:ec:82:39:16:5a:a8:a4:a2:a0: e1:5c:ef:ce:98:4c:67:4a:e8:db:97:d6:22:1e:1d:a5:c6:41: 4a:24:10:54:74:06:7d:40:e9:6b:ba:e8:69:dd:c4:3c:44:80: 26:34:ef:ac:c1:06:84:98:60:73:5b:a3:10:c5:bd:83:ab:4a: 80:40:8e:2b:4b:25:b7:f3:4c:ca:a1:e7:38:a0:9f:f7:71:c8: 95:bb:37:00:91:d6:26:f8:16:6d:e1:11:98:b1:7a:46:3b:d7: b5:1e:79:0f:ea:50:99:68:7e:33:c7:ea:fb:45:f2:ec:f6:bc: b8:7a:4c:d6:a3:8a:88:39:e5:6c:a4:22:d4:1a:3f:55:81:62: d5:1e:4d:ab:59:ae:1e:d8:2b:46:d4:be:ea:52:75:a0:b5:37: 8f:62:d9:74:c3:a5:95:5c:41:ce:31:27:8b:ec:c4:fe:33:99: c3:4f:3d:de:2a:90:5d:40:0a:ec:c8:b9:e3:f1:e2:21:32:f3: 53:98:44:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUwNjMwMTgxMDE5WhcNMjUwNzA3MTgxMDE5WjAYMRYwFAYD VQQDEw02ODYyZDMwYi02MzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaBBw+zFyd7HIDlihJhgxI2uDlPRa4FdfL1/dHSTqWrOW6E+3gYjdumxCYd2 XYq9Srta72fnSen/VA+CuEAuuCuVzYBJ7C2ZrMJum9o/ScU0BGcuwL7rvSKVet2G 4naszLPVPgpOuocnvis3ZWox/3qBfQE5EG+y5Xut2mDhOUn1Ph4/XbO2O6E5qta+ UEtdcWY2d9St5E5/LZs9ym2dRsALsij9WyYN96wKA40iBR1hqVwFwKABknko/A2D c6/9zN0hJkr78vXBAfvaKYdazpLLvQQMEITQ3mkpjtwFKBM6OeNGfGQQF6++H+kJ RqWBupHKysWuVpSPqHQHohueLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpO9t3D ZujfCwRUnUSW45z4wHr3MB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmQilqDOfe7ucsyqQFvMJD1DRVSeOWooKS61bWxirEDPNxTzNAwkJ3 LXLSXlT/Qfnmt2/zPzwlKgeovNbPHcXsgjkWWqikoqDhXO/OmExnSujbl9YiHh2l xkFKJBBUdAZ9QOlruuhp3cQ8RIAmNO+swQaEmGBzW6MQxb2Dq0qAQI4rSyW380zK oec4oJ/3cciVuzcAkdYm+BZt4RGYsXpGO9e1HnkP6lCZaH4zx+r7RfLs9ry4ekzW o4qIOeVspCLUGj9VgWLVHk2rWa4e2CtG1L7qUnWgtTePYtl0w6WVXEHOMSeL7MT+ M5nDTz3eKpBdQArsyLnj8eIhMvNTmER8 -----END CERTIFICATE-----Generated at Tue Jul 1 18:06:14 2025 by rpki-client