$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json) Hash identifier: ujse3B8p1OQGE53ltitoS2ujX7M69IaSbfTFF6LlCzk= Subject key identifier: A3:B0:07:13:A8:12:EA:C8:CC:1F:42:67:79:5A:CD:68:E3:CD:31:B2 Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft Manifest number: 60 Signing time: Tue 13 May 2025 06:21:16 +0000 Manifest this update: Tue 13 May 2025 06:21:15 +0000 Manifest next update: Tue 20 May 2025 06:21:15 +0000 Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: TdsF7jGXl3M0FSccCF7RB3H0FINgQ87iqA4j+JlqUyg=) 2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Validity Not Before: May 13 06:21:15 2025 GMT Not After : May 20 06:21:15 2025 GMT Subject: CN=6822e4db-75c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:5f:df:6b:8c:e4:42:d7:6b:25:f4:10:63: 6b:da:6f:86:4c:fd:1e:45:3f:04:6b:f9:e8:9e:c8: cc:d4:97:88:4d:39:b9:64:72:a4:11:cb:c0:33:66: cc:59:ba:d3:54:61:35:1d:b2:00:80:fb:4c:a8:11: aa:75:64:60:bb:b6:22:df:db:d0:45:d4:77:f3:68: d5:a9:a2:27:22:89:94:2d:0a:85:a7:2d:07:65:fd: 72:60:1a:22:40:76:6e:21:b9:81:53:0b:2c:22:d4: 37:8f:a5:6c:34:99:13:61:b3:de:d2:04:ec:43:d1: 5b:dc:b3:37:ab:c6:0d:1c:f7:20:c0:7e:bc:0c:7a: 91:6a:94:68:03:6e:dd:6e:b5:94:1f:dd:77:dc:3d: 07:bf:58:9d:ea:67:60:c3:b8:ea:17:f0:9d:d5:ea: fe:82:d6:17:dc:6c:3b:00:75:af:f6:81:b9:b4:fa: b7:dd:1e:e6:7c:a3:eb:20:c1:cb:17:ba:a0:8a:69: 83:f3:85:bf:18:70:6e:e0:7f:7a:d1:6d:e5:6c:e7: 63:50:b5:0a:ac:07:9a:2e:b5:76:02:25:20:f9:a3: f4:50:1d:17:fd:a6:ea:b8:d1:07:79:40:5a:b3:6f: 4e:fc:59:95:1e:3f:47:ca:37:ae:b9:46:a3:a8:31: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B0:07:13:A8:12:EA:C8:CC:1F:42:67:79:5A:CD:68:E3:CD:31:B2 X509v3 Authority Key Identifier: keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:bf:84:6f:96:5b:3b:fa:a8:c1:31:ca:c4:e8:33:c3:7f:d0: c0:06:1b:cf:aa:c5:6b:ff:fd:63:21:97:f1:55:36:2d:56:07: ae:bc:e1:62:c2:8c:98:36:f5:e9:3b:12:cb:f7:db:5e:84:a3: c2:6b:f2:29:3a:34:ab:2e:9c:30:96:67:86:aa:13:11:c9:05: e6:48:fd:ce:68:cd:da:c6:bf:d3:17:e8:93:8a:5e:86:4a:43: d2:a1:1e:bc:bd:c7:95:5e:ec:ce:b1:00:53:fd:5f:0c:c0:fc: c7:03:6c:22:8f:48:12:91:f9:41:79:bf:52:3c:fc:0f:47:d7: 96:ba:88:b8:8d:0f:4e:31:60:65:ad:f9:4f:0f:f7:d2:96:1a: 29:18:15:3d:8b:a7:e4:6b:cb:8c:d7:09:39:cd:80:35:3a:14: 05:80:8b:05:0b:26:e5:84:3a:ba:6b:2a:06:1f:10:7c:ea:69: 89:3d:fa:44:88:e4:31:1b:48:c5:2c:55:e1:67:7a:60:34:68: 12:d3:9d:5c:52:64:4a:a9:42:5a:ea:30:40:37:28:b6:b4:47: 10:65:db:47:35:c4:7e:65:45:1a:c6:b7:4d:8f:cf:b4:10:36: 79:0c:21:ac:af:b7:27:d0:c2:28:d5:45:9d:8c:3e:53:a1:9d: c8:1b:be:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThENzExMC8GA1UEBRMoMjYyOEU2QTg5NENERkM5MzczRjNEQjlDRkNGQkM1MTQz RkZBMkEzRTAeFw0yNTA1MTMwNjIxMTVaFw0yNTA1MjAwNjIxMTVaMBgxFjAUBgNV BAMTDTY4MjJlNGRiLTc1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiRl/fa4zkQtdrJfQQY2vab4ZM/R5FPwRr+eieyMzUl4hNOblkcqQRy8AzZsxZ utNUYTUdsgCA+0yoEap1ZGC7tiLf29BF1HfzaNWpoiciiZQtCoWnLQdl/XJgGiJA dm4huYFTCywi1DePpWw0mRNhs97SBOxD0Vvcszerxg0c9yDAfrwMepFqlGgDbt1u tZQf3XfcPQe/WJ3qZ2DDuOoX8J3V6v6C1hfcbDsAda/2gbm0+rfdHuZ8o+sgwcsX uqCKaYPzhb8YcG7gf3rRbeVs52NQtQqsB5outXYCJSD5o/RQHRf9puq40Qd5QFqz b078WZUeP0fKN665RqOoMTVXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo7AHE6gS 6sjMH0JneVrNaOPNMbIwHwYDVR0jBBgwFoAUJijmqJTN/JNz89uc/PvFFD/6Kj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEQ3Lzg2MjFBRTYyQTg3 MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmlqbXFKVE5fSk56ODl1Y19QdkZGRF82S2o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEQ3Lzg2MjFBRTYyQTg3MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pO ejg5dWNfUHZGRkRfNktqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIe/hG+WWzv6qMExysToM8N/0MAGG8+qxWv//WMhl/FVNi1WB6684WLC jJg29ek7Esv3216Eo8Jr8ik6NKsunDCWZ4aqExHJBeZI/c5ozdrGv9MX6JOKXoZK Q9KhHry9x5Ve7M6xAFP9XwzA/McDbCKPSBKR+UF5v1I8/A9H15a6iLiND04xYGWt +U8P99KWGikYFT2Lp+Rry4zXCTnNgDU6FAWAiwULJuWEOrprKgYfEHzqaYk9+kSI 5DEbSMUsVeFnemA0aBLTnVxSZEqpQlrqMEA3KLa0RxBl20c1xH5lRRrGt02Pz7QQ NnkMIayvtyfQwijVRZ2MPlOhncgbvho= -----END CERTIFICATE-----Generated at Wed May 14 07:59:30 2025 by rpki-client