$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: DgXuMn4ggOyZvdorK9dcgIJ1CSRDtyMaFjXzDpsArJc= Subject key identifier: 55:A4:69:CA:40:6D:6B:03:4C:BD:C9:E3:0B:FE:BF:39:CE:DA:CC:80 Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 03EB Signing time: Thu 03 Jul 2025 00:51:58 +0000 Manifest this update: Thu 03 Jul 2025 00:51:57 +0000 Manifest next update: Thu 10 Jul 2025 00:51:57 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: pYwxDeIEW01haGGvHe67jm/8DyYkIO+6guyEo16qbVM=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: aEYNM6Phn31D8FyeIqNiot79wvPM4Ab/EZ23BGQS/EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: Jul 3 00:51:57 2025 GMT Not After : Jul 10 00:51:57 2025 GMT Subject: CN=6865d42e-d678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:e7:48:71:e7:4f:02:3f:69:6c:cc:59:22: c1:c6:15:09:a7:65:58:5c:70:0c:20:be:38:b3:a3: 9d:9b:e2:bb:28:80:ef:56:95:0d:ee:ac:14:9d:20: 9b:b4:7f:c8:d6:12:3b:ab:af:50:99:ac:90:58:dc: 8e:34:92:1a:15:68:a7:c0:fe:ea:17:c5:bf:39:2e: 54:ff:92:eb:71:ab:37:76:11:db:7e:0f:9b:0b:6b: dd:9e:05:89:16:a6:98:c1:94:dd:a4:36:5c:fa:92: c1:27:35:3d:36:30:63:6c:06:ea:df:12:db:8b:58: cd:a3:02:91:16:bb:c5:e8:7d:74:f1:f8:bf:36:74: 53:42:12:5f:1a:27:47:f9:db:2d:8d:16:d1:f3:cf: 23:9f:8f:24:8d:45:56:ff:cd:d2:f7:d0:40:fa:22: a7:87:03:42:55:1e:48:87:b5:81:58:67:ef:00:b6: 1a:36:6f:63:2a:c1:ac:2e:2b:9f:51:1b:ae:bb:a3: 3f:1c:6e:a5:9e:4c:2a:21:a7:41:6d:89:54:23:c1: 1f:d5:d8:a7:b0:83:ba:04:5f:22:19:a5:da:24:f8: ae:1f:75:58:1e:90:d1:8c:ce:0e:22:c6:20:d0:7e: db:4a:40:39:bb:9e:64:1f:fc:01:46:45:fe:fd:b9: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:69:CA:40:6D:6B:03:4C:BD:C9:E3:0B:FE:BF:39:CE:DA:CC:80 X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3a:d1:a8:24:e3:46:50:ce:08:f2:0f:37:51:53:05:9c:1b: bd:d9:96:3e:b5:10:db:17:86:8b:e0:53:95:c4:81:10:2f:c1: 7b:b1:02:e6:a8:95:6a:38:e1:0e:b6:86:fa:f4:9e:b4:fa:39: 5f:f6:7f:8c:74:e3:5e:a6:4f:34:44:fc:69:d9:3b:4b:4b:20: be:e9:bb:b4:8b:5e:df:22:96:27:b5:a5:14:ac:86:4d:fe:a6: df:24:58:0d:09:2f:6e:91:93:f7:e4:6b:0a:12:d7:66:70:a2: c1:68:d2:bc:10:bf:0d:29:cc:8a:c2:6d:d0:89:52:48:db:bc: 0f:9c:ea:5b:2b:85:c3:ca:74:47:4b:30:9f:2f:da:2e:a4:4d: 4b:92:1a:89:a4:84:d7:64:49:34:09:2a:71:e4:36:2c:34:e9: 3c:82:c4:40:f6:43:dd:14:51:9f:17:fb:f4:1f:2b:c0:15:d9: c0:71:64:60:d1:f3:ca:b0:e9:26:ce:3c:e1:10:64:f1:6a:46: b8:b3:06:23:43:5a:8d:db:7c:47:fa:65:11:8c:21:b9:6d:e8: 07:6d:4a:17:02:2e:2d:50:7b:f6:ae:86:54:26:0b:fa:c6:58: 8b:e9:c1:3f:d6:da:ca:2d:a5:7b:5a:95:83:73:cb:21:31:d1: 30:c9:cd:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUwNzAzMDA1MTU3WhcNMjUwNzEwMDA1MTU3WjAYMRYwFAYD VQQDEw02ODY1ZDQyZS1kNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdvnSHHnTwI/aWzMWSLBxhUJp2VYXHAMIL44s6Odm+K7KIDvVpUN7qwUnSCb tH/I1hI7q69QmayQWNyONJIaFWinwP7qF8W/OS5U/5Lrcas3dhHbfg+bC2vdngWJ FqaYwZTdpDZc+pLBJzU9NjBjbAbq3xLbi1jNowKRFrvF6H108fi/NnRTQhJfGidH +dstjRbR888jn48kjUVW/83S99BA+iKnhwNCVR5Ih7WBWGfvALYaNm9jKsGsLiuf URuuu6M/HG6lnkwqIadBbYlUI8Ef1dinsIO6BF8iGaXaJPiuH3VYHpDRjM4OIsYg 0H7bSkA5u55kH/wBRkX+/bli+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWkacpA bWsDTL3J4wv+vznO2syAMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuOtGoJONGUM4I8g83UVMFnBu92ZY+tRDbF4aL4FOVxIEQL8F7sQLm qJVqOOEOtob69J60+jlf9n+MdONepk80RPxp2TtLSyC+6bu0i17fIpYntaUUrIZN /qbfJFgNCS9ukZP35GsKEtdmcKLBaNK8EL8NKcyKwm3QiVJI27wPnOpbK4XDynRH SzCfL9oupE1LkhqJpITXZEk0CSpx5DYsNOk8gsRA9kPdFFGfF/v0HyvAFdnAcWRg 0fPKsOkmzjzhEGTxaka4swYjQ1qN23xH+mURjCG5begHbUoXAi4tUHv2roZUJgv6 xliL6cE/1trKLaV7WpWDc8shMdEwyc3N -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:21 2025 by rpki-client