$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json) Hash identifier: 4j43GqfYAxKvJ6pdBjV6H7hx8i94S1coyJ3VX6P08hg= Subject key identifier: 50:A4:7C:6D:DC:4D:A4:22:B0:C1:11:6E:47:82:0F:BD:17:FE:75:D3 Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft Manifest number: 78 Signing time: Tue 01 Jul 2025 07:36:33 +0000 Manifest this update: Tue 01 Jul 2025 07:36:32 +0000 Manifest next update: Tue 08 Jul 2025 07:36:32 +0000 Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: mH/tTKMQ1UKmGC/guX5/JAtOBDcPkXOhX8mmElk0o7w=) 2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Validity Not Before: Jul 1 07:36:32 2025 GMT Not After : Jul 8 07:36:32 2025 GMT Subject: CN=68639001-44d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:91:8a:c7:b8:62:aa:37:0d:a0:e9:43:64: e5:e5:28:86:8c:51:c7:a1:c6:ab:ae:8c:09:53:32: 2b:5e:47:3a:70:fd:b4:d4:83:88:42:8b:c9:ed:58: 8a:f7:65:6a:a1:1e:0e:40:f2:5a:b6:b8:82:29:93: 82:cb:5d:99:5e:19:49:be:78:3d:24:43:3f:6a:d0: f1:6d:18:78:43:43:11:89:c5:1a:7a:eb:54:21:22: c7:0f:75:44:cc:0b:72:d4:55:10:43:25:63:6e:ff: e5:f3:ef:eb:0b:2c:b7:1a:2c:15:59:54:1e:63:c0: af:36:65:5a:c6:58:b3:8b:44:d5:2d:6f:b3:6b:2d: 7d:54:3a:1b:89:5b:7e:dd:91:e8:ac:0c:d2:a8:20: c0:ab:b6:68:f9:30:3a:57:eb:ad:94:0c:86:52:68: b9:61:1d:6a:65:5e:c3:65:82:a7:52:16:b7:13:d8: a5:98:52:43:d7:fd:22:19:58:10:49:72:14:84:f4: 5e:bf:09:74:e8:ce:de:93:fb:82:53:64:05:ba:37: d0:b6:09:7c:5a:32:96:b9:c5:d4:f6:c8:44:2e:18: 3f:97:71:ed:b3:ec:9c:09:fa:ff:c2:1b:58:90:39: f7:ba:2b:7e:2e:1b:40:cd:5e:80:bb:aa:7a:c0:53: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:7C:6D:DC:4D:A4:22:B0:C1:11:6E:47:82:0F:BD:17:FE:75:D3 X509v3 Authority Key Identifier: keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7e:6d:76:e3:e1:b3:db:17:f5:6b:3b:e9:fa:cd:2a:fc:d4: 67:07:78:29:66:c0:6a:a3:4d:9f:2a:1c:46:20:28:3a:7d:37: 23:e3:2c:48:31:66:42:d3:ea:67:55:38:21:22:19:25:fa:cd: f6:95:eb:fd:e3:9e:34:d5:32:d0:15:4b:b3:f3:47:0d:4c:00: 1d:17:ed:57:14:f8:a5:68:c2:c3:f9:d3:d7:73:4b:35:51:e9: da:18:49:eb:0f:39:61:e1:d0:93:fa:e9:fa:e8:2a:e3:bc:b8: 65:66:af:a8:be:d1:60:60:1d:90:62:bb:93:8e:6f:64:7c:ed: 2b:f8:e9:a1:a0:53:c4:d2:e4:a0:c0:28:93:13:61:8a:d8:a3: 91:3e:07:87:8e:36:6c:33:f4:76:47:d2:bb:08:b6:04:c1:3a: e1:c9:c4:6f:a7:4a:89:06:0a:c3:4a:b0:7a:c7:0c:0d:b1:b6: 0d:9e:34:8c:6f:85:70:dc:43:4a:4b:e5:7d:fb:7d:54:d0:2a: 0d:34:9c:04:b0:11:2f:c3:a7:6c:e3:b9:a3:ed:18:fa:9e:1f: 52:c9:b8:b3:54:3e:c4:82:fe:bd:f3:43:25:01:32:75:93:45: 30:67:df:23:2f:a8:69:8a:67:b0:e9:a3:e4:00:90:63:ee:76: 89:65:2e:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThENzExMC8GA1UEBRMoMjYyOEU2QTg5NENERkM5MzczRjNEQjlDRkNGQkM1MTQz RkZBMkEzRTAeFw0yNTA3MDEwNzM2MzJaFw0yNTA3MDgwNzM2MzJaMBgxFjAUBgNV BAMTDTY4NjM5MDAxLTQ0ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPpZGKx7hiqjcNoOlDZOXlKIaMUcehxquujAlTMiteRzpw/bTUg4hCi8ntWIr3 ZWqhHg5A8lq2uIIpk4LLXZleGUm+eD0kQz9q0PFtGHhDQxGJxRp661QhIscPdUTM C3LUVRBDJWNu/+Xz7+sLLLcaLBVZVB5jwK82ZVrGWLOLRNUtb7NrLX1UOhuJW37d keisDNKoIMCrtmj5MDpX662UDIZSaLlhHWplXsNlgqdSFrcT2KWYUkPX/SIZWBBJ chSE9F6/CXTozt6T+4JTZAW6N9C2CXxaMpa5xdT2yEQuGD+Xce2z7JwJ+v/CG1iQ Ofe6K34uG0DNXoC7qnrAU1trAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUKR8bdxN pCKwwRFuR4IPvRf+ddMwHwYDVR0jBBgwFoAUJijmqJTN/JNz89uc/PvFFD/6Kj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEQ3Lzg2MjFBRTYyQTg3 MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmlqbXFKVE5fSk56ODl1Y19QdkZGRF82S2o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEQ3Lzg2MjFBRTYyQTg3MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pO ejg5dWNfUHZGRkRfNktqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5+bXbj4bPbF/VrO+n6zSr81GcHeClmwGqjTZ8qHEYgKDp9NyPjLEgx ZkLT6mdVOCEiGSX6zfaV6/3jnjTVMtAVS7PzRw1MAB0X7VcU+KVowsP509dzSzVR 6doYSesPOWHh0JP66froKuO8uGVmr6i+0WBgHZBiu5OOb2R87Sv46aGgU8TS5KDA KJMTYYrYo5E+B4eONmwz9HZH0rsItgTBOuHJxG+nSokGCsNKsHrHDA2xtg2eNIxv hXDcQ0pL5X37fVTQKg00nASwES/Dp2zjuaPtGPqeH1LJuLNUPsSC/r3zQyUBMnWT RTBn3yMvqGmKZ7Dpo+QAkGPudollLok= -----END CERTIFICATE-----Generated at Wed Jul 2 23:36:48 2025 by rpki-client