$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: zgt9IADxB2S5yZvFfmagAR2S+58+qXRl6zAwGvgGcTM= Subject key identifier: 0B:AE:B4:00:6B:FE:03:58:02:81:3D:79:B3:75:73:60:A7:65:DA:51 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: A5 Signing time: Tue 03 Jun 2025 05:57:18 +0000 Manifest this update: Tue 03 Jun 2025 05:57:17 +0000 Manifest next update: Tue 10 Jun 2025 05:57:17 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: +Sx6YdH74tDa/AwvJnPFpqMkjEAQPVhcf5RUhXtnxAw=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Jun 3 05:57:17 2025 GMT Not After : Jun 10 05:57:17 2025 GMT Subject: CN=683e8ebe-2be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:6e:b7:32:b7:df:19:80:5d:82:36:a4:66: 22:23:01:40:bf:fb:1d:37:05:87:6d:61:48:cf:47: d0:8e:d5:97:70:1b:9d:8d:9e:5b:f8:40:d4:59:c8: dc:80:8f:af:43:4d:49:8c:49:06:d6:6a:75:32:48: 9f:40:70:b4:5d:dc:9b:67:76:1a:fc:f3:9d:bc:63: 4b:eb:17:2a:4d:56:2b:d9:5d:c8:a9:fa:85:d3:d1: 26:7b:8f:45:c9:1d:3d:93:33:99:bd:3d:7b:10:0a: 1a:98:45:e0:33:65:77:b1:05:91:c4:f1:89:2f:c0: 34:d7:ed:c2:ba:32:60:6b:30:e6:69:9e:10:11:80: 19:55:ea:57:fd:ac:30:6d:f4:da:b0:40:9c:fb:e7: cd:ab:05:83:61:f1:3c:0d:66:be:0b:d3:2e:e4:a2: c1:6e:c4:bc:2a:d8:2f:14:bf:33:3b:c1:9b:49:5a: 9e:c8:ca:73:41:7f:bd:3a:55:c5:52:d4:7c:84:16: dd:20:7b:89:f3:7f:65:ef:45:a0:5d:a6:c9:fe:a8: 7e:81:0a:43:4e:ed:c1:42:62:0b:a3:f1:e0:22:f0: 88:8a:d2:d1:6e:d5:fd:9f:7e:60:38:c2:c1:93:50: 69:46:8c:5d:f7:7e:ce:45:d6:f8:9c:f6:80:58:58: 6d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AE:B4:00:6B:FE:03:58:02:81:3D:79:B3:75:73:60:A7:65:DA:51 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:bb:f5:88:ec:32:88:14:a5:b4:15:ba:0e:4d:ba:13:d9:e7: 0d:1d:e0:b8:56:5a:06:62:ac:0e:a4:71:a2:e3:ec:ae:08:95: fa:b1:f7:02:c7:35:94:ec:0e:64:09:57:a8:f2:3d:68:f2:f7: 19:8b:26:b0:29:1a:c3:64:1e:39:27:bc:e3:0d:02:ae:68:62: 10:33:df:57:44:b4:16:42:ac:12:0f:b7:24:09:e0:cb:0c:4d: c1:1b:a4:40:8c:a7:be:af:f3:f9:57:b0:3d:9b:07:21:b7:e9: 57:ce:7c:a7:7b:a1:74:fc:0d:49:ed:3d:d4:f9:c2:0d:21:6e: f7:59:11:1f:b7:94:b6:32:7f:9a:41:a6:a2:76:31:4c:53:6e: c3:b9:45:5d:de:6a:e5:9f:32:f8:a3:e9:d5:5c:55:06:42:07: b1:3c:c9:da:12:44:83:f9:b3:05:8e:61:b4:c3:71:2f:1c:07: 44:fb:49:a3:cc:55:44:c7:8f:ef:a5:e2:4a:85:ac:2f:be:06: a8:85:a5:e0:14:d9:00:b3:a9:d1:14:21:2d:db:f2:73:01:1e: cf:39:a2:6b:fc:20:c6:0b:ec:db:0f:ed:fa:35:1d:86:e2:b4: 91:a8:44:b2:30:0b:27:42:06:a8:45:9c:1f:15:8f:0d:b1:15: 0a:59:f6:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwNjAzMDU1NzE3WhcNMjUwNjEwMDU1NzE3WjAYMRYwFAYD VQQDEw02ODNlOGViZS0yYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA035utzK33xmAXYI2pGYiIwFAv/sdNwWHbWFIz0fQjtWXcBudjZ5b+EDUWcjc gI+vQ01JjEkG1mp1MkifQHC0XdybZ3Ya/POdvGNL6xcqTVYr2V3IqfqF09Eme49F yR09kzOZvT17EAoamEXgM2V3sQWRxPGJL8A01+3CujJgazDmaZ4QEYAZVepX/aww bfTasECc++fNqwWDYfE8DWa+C9Mu5KLBbsS8KtgvFL8zO8GbSVqeyMpzQX+9OlXF UtR8hBbdIHuJ839l70WgXabJ/qh+gQpDTu3BQmILo/HgIvCIitLRbtX9n35gOMLB k1BpRoxd937ORdb4nPaAWFhtPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuutABr /gNYAoE9ebN1c2CnZdpRMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHu/WI7DKIFKW0FboOTboT2ecNHeC4VloGYqwOpHGi4+yuCJX6sfcC xzWU7A5kCVeo8j1o8vcZiyawKRrDZB45J7zjDQKuaGIQM99XRLQWQqwSD7ckCeDL DE3BG6RAjKe+r/P5V7A9mwcht+lXznyne6F0/A1J7T3U+cINIW73WREft5S2Mn+a QaaidjFMU27DuUVd3mrlnzL4o+nVXFUGQgexPMnaEkSD+bMFjmG0w3EvHAdE+0mj zFVEx4/vpeJKhawvvgaohaXgFNkAs6nRFCEt2/JzAR7POaJr/CDGC+zbD+36NR2G 4rSRqESyMAsnQgaoRZwfFY8NsRUKWfbO -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:25 2025 by rpki-client