$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json) Hash identifier: KqATIwm8JLzmgHYPVeh32f0yKS7J5rTNvVj1F47W6Pw= Subject key identifier: F7:90:39:15:A9:D0:BD:32:A4:B2:48:EC:81:4C:ED:AE:7E:E6:5E:55 Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft Manifest number: 81 Signing time: Sat 19 Jul 2025 06:58:35 +0000 Manifest this update: Sat 19 Jul 2025 06:58:34 +0000 Manifest next update: Sat 26 Jul 2025 06:58:34 +0000 Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: NLUYTZpaSP9RJgYm+4ov2YKOGkOravbgoV3fE+y12iA=) 2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Validity Not Before: Jul 19 06:58:34 2025 GMT Not After : Jul 26 06:58:34 2025 GMT Subject: CN=687b421a-1101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:18:40:4f:6b:8b:d7:5e:ea:a0:d2:b7:e2: da:ab:57:96:67:93:01:9e:b3:47:27:f9:ad:22:2e: b5:63:6a:df:a2:91:b1:a0:c0:c0:37:99:51:74:7d: d6:41:82:fd:23:ef:25:d1:95:12:d7:ee:92:cf:ba: c3:ff:40:81:38:17:be:71:f2:3e:ae:62:14:f7:4b: 2a:e3:44:8a:81:5f:45:ba:4f:45:0b:8c:9f:99:b2: 52:9a:d3:0c:ec:3f:f1:7e:48:7b:49:4b:4a:6d:87: 48:cc:5a:dd:72:62:ee:62:05:ca:92:eb:59:af:06: e9:d4:84:16:23:fc:74:32:9f:ab:6e:2c:42:13:3b: 1d:ee:f8:b6:7e:5a:b7:a2:cc:42:82:23:43:e4:4e: c0:18:24:a2:1c:8f:31:06:97:5f:1b:dd:60:cc:8a: 71:19:54:33:14:99:54:2e:d0:27:9f:7d:df:7d:5d: c8:09:57:56:c1:23:91:06:bd:1e:86:ce:6f:4a:7a: d3:ab:45:fb:1f:c3:45:e3:20:28:ef:23:c6:b7:b1: 37:2c:ae:67:ef:f1:4b:b4:20:ef:d0:19:88:be:e5: 09:9a:a0:19:21:9e:05:e5:fb:e7:f9:94:ff:a5:8f: 88:c6:25:38:60:c9:c6:c9:b1:7b:e0:e3:ee:0c:49: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:90:39:15:A9:D0:BD:32:A4:B2:48:EC:81:4C:ED:AE:7E:E6:5E:55 X509v3 Authority Key Identifier: keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b7:e9:fb:62:5e:c5:db:f1:0c:af:ad:f0:8e:c2:cd:51:3e: 10:4c:02:02:8f:70:d2:b9:64:a8:da:0e:87:06:f7:9a:5d:14: 13:19:91:e6:33:fb:02:53:01:27:6b:59:c2:49:2f:97:d7:d1: 1f:67:d6:0f:c3:99:5f:3b:aa:5a:99:e2:41:76:54:ec:3f:33: 5a:03:fa:67:d3:e6:b1:b8:fd:2d:8d:db:ca:56:47:1b:a2:08: ca:5f:75:24:c1:38:67:c6:e2:91:df:75:33:66:8b:97:8c:93: 01:e9:71:45:48:43:50:6b:a3:f4:c6:ed:fd:79:3a:1b:4d:85: 32:49:6a:ba:bb:99:89:e5:70:3d:b4:ee:79:e9:42:7d:68:eb: 81:4e:1c:ec:9e:52:45:c7:e7:f0:94:5c:a1:43:37:eb:16:d2: 4f:ec:e7:81:a1:42:a3:76:b6:f6:79:df:ad:d5:f6:2c:ff:b7: 92:5f:52:48:1c:6a:11:7d:f6:07:c3:c5:93:f5:ff:b9:10:28: ab:2f:13:21:98:82:6b:c1:e6:5f:06:03:a1:ed:ce:4e:9d:88: ed:9e:c0:60:e0:60:a5:d3:be:c5:35:93:f7:b8:eb:e7:4f:f3: d3:55:c3:1f:a4:e9:df:3c:65:bf:7a:7d:09:9c:5e:6e:2e:15: bf:41:3b:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4RDcxMTAvBgNVBAUTKDI2MjhFNkE4OTRDREZDOTM3M0YzREI5Q0ZDRkJDNTE0 M0ZGQTJBM0UwHhcNMjUwNzE5MDY1ODM0WhcNMjUwNzI2MDY1ODM0WjAYMRYwFAYD VQQDEw02ODdiNDIxYS0xMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssoYQE9ri9de6qDSt+Laq1eWZ5MBnrNHJ/mtIi61Y2rfopGxoMDAN5lRdH3W QYL9I+8l0ZUS1+6Sz7rD/0CBOBe+cfI+rmIU90sq40SKgV9Fuk9FC4yfmbJSmtMM 7D/xfkh7SUtKbYdIzFrdcmLuYgXKkutZrwbp1IQWI/x0Mp+rbixCEzsd7vi2flq3 osxCgiND5E7AGCSiHI8xBpdfG91gzIpxGVQzFJlULtAnn33ffV3ICVdWwSORBr0e hs5vSnrTq0X7H8NF4yAo7yPGt7E3LK5n7/FLtCDv0BmIvuUJmqAZIZ4F5fvn+ZT/ pY+IxiU4YMnGybF74OPuDEnUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeQORWp 0L0ypLJI7IFM7a5+5l5VMB8GA1UdIwQYMBaAFCYo5qiUzfyTc/PbnPz7xRQ/+io+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThENy84NjIxQUU2MkE4 NzExMUVGQUVBMUM4MzFDNEY5QUUwMi9KaWptcUpUTl9KTno4OXVjX1B2RkZEXzZL ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThENy84NjIxQUU2MkE4NzExMUVGQUVBMUM4MzFDNEY5QUUwMi9KaWptcUpUTl9K Tno4OXVjX1B2RkZEXzZLajQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUt+n7Yl7F2/EMr63wjsLNUT4QTAICj3DSuWSo2g6HBveaXRQTGZHm M/sCUwEna1nCSS+X19EfZ9YPw5lfO6pameJBdlTsPzNaA/pn0+axuP0tjdvKVkcb ogjKX3UkwThnxuKR33UzZouXjJMB6XFFSENQa6P0xu39eTobTYUySWq6u5mJ5XA9 tO556UJ9aOuBThzsnlJFx+fwlFyhQzfrFtJP7OeBoUKjdrb2ed+t1fYs/7eSX1JI HGoRffYHw8WT9f+5ECirLxMhmIJrweZfBgOh7c5OnYjtnsBg4GCl077FNZP3uOvn T/PTVcMfpOnfPGW/en0JnF5uLhW/QTsk -----END CERTIFICATE-----Generated at Mon Jul 21 07:04:27 2025 by rpki-client