$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json) Hash identifier: OUi2CwUnSxHOF7HvG4weepCAB1gnOYMwO9totteTeQs= Subject key identifier: 44:92:07:81:53:8F:E4:FF:85:63:E7:B9:56:E4:4F:85:98:FC:86:B8 Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0DF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft Manifest number: 0DD7 Signing time: Sun 20 Jul 2025 17:25:33 +0000 Manifest this update: Sun 20 Jul 2025 17:25:32 +0000 Manifest next update: Sun 27 Jul 2025 17:25:32 +0000 Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: eqtaWqh4JHq/1sFvopRMrgUz0wPxRUI+NwZO7DJZQW8=) 2: 41088D5C7CF011EFA2B7A53EC4F9AE02.roa (hash: 3gPJefn/nBhcOq5ryC0Mdn5OAkNCGxGOdgp1NnnSRSA=) 3: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3577 (0xdf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Jul 20 17:25:32 2025 GMT Not After : Jul 27 17:25:32 2025 GMT Subject: CN=687d268c-831a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:3e:3a:07:0f:50:ee:d0:92:92:36:0f:59: 58:f9:cd:f4:2a:ac:4c:80:0b:90:15:06:4c:70:61: d2:d2:ce:80:8f:6e:71:5c:ca:66:37:ea:d0:52:37: 0a:e4:f8:97:b3:13:1b:ab:7e:da:c0:65:3b:c7:78: d0:1e:95:aa:a7:88:f6:1c:6d:45:fc:1b:ec:65:f4: 43:21:4b:15:36:37:a2:a4:d4:56:3c:5b:b0:cf:d7: 45:a6:15:17:8b:7d:a1:2e:67:a3:38:c8:2b:27:b0: 13:e7:c4:44:32:9d:fd:9c:e1:a6:ee:24:af:f7:95: 8a:6b:7c:47:87:e3:9c:a1:1f:8b:b1:7a:80:ef:dc: b4:cc:de:2f:9d:9e:d8:d3:a4:3f:16:e9:ae:d5:55: fb:92:b0:6e:61:0b:18:f0:8d:5b:44:e0:19:52:2f: b2:d1:0c:d3:a8:39:d8:26:ad:2b:53:b5:db:39:dd: 83:68:5d:1b:76:64:c1:f4:a7:63:44:47:8f:1b:30: 19:8f:63:a6:c4:dd:69:93:a1:97:07:2a:ad:7a:bd: 61:36:7d:b4:0d:48:d2:66:01:c8:b0:a8:be:1b:9d: b3:59:5c:42:55:e6:03:18:61:63:5c:72:13:31:c0: da:e8:12:c7:89:aa:55:87:3b:eb:17:2a:01:04:fb: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:07:81:53:8F:E4:FF:85:63:E7:B9:56:E4:4F:85:98:FC:86:B8 X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:36:96:ba:28:10:3e:8e:71:8f:f5:40:5c:71:6b:53:44:34: 58:22:89:9c:46:fa:92:5e:f2:93:d6:77:62:e9:72:c3:bb:81: de:ed:ce:28:97:85:15:2c:33:2d:b5:96:da:34:0f:05:ae:52: 38:8a:02:6f:49:26:59:c9:98:44:36:26:d4:b8:28:25:e7:75: c0:71:0e:8d:05:ec:85:01:20:7f:0e:56:8e:c0:ae:46:c2:38: f3:73:ea:5e:85:40:ce:23:15:e4:80:37:59:04:25:55:87:c9: 18:d1:1e:54:75:6e:4f:6f:19:40:9d:61:61:a5:d2:e6:1b:a7: c4:68:f9:bc:a3:d9:7d:c0:a8:8f:ca:f9:f3:53:63:9e:5e:61: d6:f9:f1:05:6c:0b:06:ef:90:ae:5b:dd:55:f8:8f:26:6d:00: cd:d4:88:ae:e3:9a:c5:92:87:86:92:7f:22:84:82:24:5e:a2: 66:fd:06:97:05:71:47:af:7f:56:72:8f:ea:cd:a0:b4:6c:ad: cd:fd:e9:98:76:9b:dc:ca:5e:70:a9:80:53:dd:e2:52:7e:c2: f8:d0:04:9a:75:d4:c1:ef:2d:40:08:69:f9:87:7c:c7:78:a4: 86:0b:85:55:8c:a7:22:36:f4:bf:cf:01:dc:83:2d:ba:bf:1e: fb:c3:7f:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUwNzIwMTcyNTMyWhcNMjUwNzI3MTcyNTMyWjAYMRYwFAYD VQQDEw02ODdkMjY4Yy04MzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCM+OgcPUO7QkpI2D1lY+c30KqxMgAuQFQZMcGHS0s6Aj25xXMpmN+rQUjcK 5PiXsxMbq37awGU7x3jQHpWqp4j2HG1F/BvsZfRDIUsVNjeipNRWPFuwz9dFphUX i32hLmejOMgrJ7AT58REMp39nOGm7iSv95WKa3xHh+OcoR+LsXqA79y0zN4vnZ7Y 06Q/Fumu1VX7krBuYQsY8I1bROAZUi+y0QzTqDnYJq0rU7XbOd2DaF0bdmTB9Kdj REePGzAZj2OmxN1pk6GXByqter1hNn20DUjSZgHIsKi+G52zWVxCVeYDGGFjXHIT McDa6BLHiapVhzvrFyoBBPtk8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESSB4FT j+T/hWPnuVbkT4WY/Ia4MB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARNpa6KBA+jnGP9UBccWtTRDRYIomcRvqSXvKT1ndi6XLDu4He7c4o l4UVLDMttZbaNA8FrlI4igJvSSZZyZhENibUuCgl53XAcQ6NBeyFASB/DlaOwK5G wjjzc+pehUDOIxXkgDdZBCVVh8kY0R5UdW5PbxlAnWFhpdLmG6fEaPm8o9l9wKiP yvnzU2OeXmHW+fEFbAsG75CuW91V+I8mbQDN1Iiu45rFkoeGkn8ihIIkXqJm/QaX BXFHr39Wco/qzaC0bK3N/emYdpvcyl5wqYBT3eJSfsL40ASaddTB7y1ACGn5h3zH eKSGC4VVjKciNvS/zwHcgy26vx77w38p -----END CERTIFICATE-----Generated at Sun Jul 20 21:49:01 2025 by rpki-client