$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: voPKeAIQ8tSYmuD17r95N8/V2DXb4TIc2klMhDVISOE= Subject key identifier: F1:D5:5B:FF:23:0D:0B:65:19:30:03:12:2F:B2:03:9C:5A:BF:FC:A7 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: BD Signing time: Mon 21 Jul 2025 06:01:32 +0000 Manifest this update: Mon 21 Jul 2025 06:01:31 +0000 Manifest next update: Mon 28 Jul 2025 06:01:31 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: aBJQFuqfya2W7Z2bIEbmh+0hbDsYkGWeLmLPbapN2ZY=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Jul 21 06:01:31 2025 GMT Not After : Jul 28 06:01:31 2025 GMT Subject: CN=687dd7bb-2560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9c:b7:7d:21:9a:8c:bf:88:86:02:e7:00:4a: d8:79:4f:e0:e4:90:74:6b:04:4b:e1:c4:03:6b:82: 73:05:39:e3:12:f9:76:b7:b9:92:27:a9:91:5a:2b: ea:dc:34:b8:64:21:3c:8c:f3:78:60:e8:a2:a3:57: b8:7c:84:4f:40:9c:11:9d:4a:a3:56:a4:b0:3d:37: 11:cf:4e:b0:b7:0e:fa:81:66:d9:6a:59:4c:4a:d3: 98:98:29:f3:00:4a:60:f5:28:46:5c:44:b0:5a:a0: ee:8c:e0:b5:12:ac:8c:e2:2d:d5:5b:78:8f:61:3a: c7:bd:dd:e0:5f:9e:c4:b0:4b:a1:e8:46:1e:a1:16: 0a:21:2c:11:02:0c:1a:a6:6b:96:9d:e7:52:f7:83: f9:03:50:03:8e:e6:4d:a0:da:08:f6:76:b4:a0:9b: e9:df:b4:ff:c3:29:11:a0:e0:30:84:29:88:4e:77: 32:d7:8d:3c:f4:5e:11:33:81:98:38:89:0c:d5:d2: ed:d1:84:e8:4c:a1:fe:26:a4:6a:5a:c3:34:0c:5f: 97:84:6a:32:7e:74:29:e1:f3:c8:63:5c:ae:09:55: 58:46:12:fe:14:95:28:ce:0a:46:5c:ff:58:8c:a3: 30:84:3a:28:d4:45:eb:75:06:0d:12:6c:a0:e0:ba: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D5:5B:FF:23:0D:0B:65:19:30:03:12:2F:B2:03:9C:5A:BF:FC:A7 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:12:0a:75:a3:8f:1c:46:8e:6a:16:27:17:d2:38:21:65:8c: e6:02:e6:81:5a:7b:2e:85:68:d2:97:99:1d:ee:93:95:7e:bb: e0:1a:f6:1d:fc:1a:db:3c:0f:b1:ab:26:bd:87:48:af:26:1d: ff:80:36:97:87:8b:f8:e8:10:92:9f:2f:24:bd:f1:ff:dc:c7: 38:bc:dd:95:ee:83:9c:d8:dd:b9:39:d1:ab:a8:6f:d6:9f:2c: 83:dd:cd:09:fa:ef:c3:24:bd:ee:05:40:32:dc:29:e5:40:be: 9f:59:30:35:31:b5:ee:f7:91:0d:b9:d6:1f:e1:96:f7:f3:a1: 91:0d:8f:c0:e8:df:55:d6:01:4b:d0:be:65:e6:de:bc:16:fe: 8f:7c:92:9f:9d:5c:7d:df:cb:e6:fb:89:87:eb:aa:47:14:0f: c0:5d:4a:40:49:c1:b1:b0:32:f8:b3:4d:62:eb:03:d2:d1:79: 46:c8:72:cd:a1:9d:f5:12:35:af:8b:f7:17:fd:50:34:a0:27: c7:82:5d:d9:30:f0:c9:8b:42:7e:9c:06:37:4b:3c:69:25:af: 7c:81:f1:70:94:c9:27:2e:9e:24:d5:fc:60:28:c2:9f:0f:be: 5c:4d:52:14:ac:62:d0:65:56:a5:6d:be:4c:15:5b:7a:a0:3f: 4b:bd:6a:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwNzIxMDYwMTMxWhcNMjUwNzI4MDYwMTMxWjAYMRYwFAYD VQQDEw02ODdkZDdiYi0yNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspy3fSGajL+IhgLnAErYeU/g5JB0awRL4cQDa4JzBTnjEvl2t7mSJ6mRWivq 3DS4ZCE8jPN4YOiio1e4fIRPQJwRnUqjVqSwPTcRz06wtw76gWbZallMStOYmCnz AEpg9ShGXESwWqDujOC1EqyM4i3VW3iPYTrHvd3gX57EsEuh6EYeoRYKISwRAgwa pmuWnedS94P5A1ADjuZNoNoI9na0oJvp37T/wykRoOAwhCmITncy14089F4RM4GY OIkM1dLt0YToTKH+JqRqWsM0DF+XhGoyfnQp4fPIY1yuCVVYRhL+FJUozgpGXP9Y jKMwhDoo1EXrdQYNEmyg4LrGXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHVW/8j DQtlGTADEi+yA5xav/ynMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzEgp1o48cRo5qFicX0jghZYzmAuaBWnsuhWjSl5kd7pOVfrvgGvYd /BrbPA+xqya9h0ivJh3/gDaXh4v46BCSny8kvfH/3Mc4vN2V7oOc2N25OdGrqG/W nyyD3c0J+u/DJL3uBUAy3CnlQL6fWTA1MbXu95ENudYf4Zb386GRDY/A6N9V1gFL 0L5l5t68Fv6PfJKfnVx938vm+4mH66pHFA/AXUpAScGxsDL4s01i6wPS0XlGyHLN oZ31EjWvi/cX/VA0oCfHgl3ZMPDJi0J+nAY3SzxpJa98gfFwlMknLp4k1fxgKMKf D75cTVIUrGLQZValbb5MFVt6oD9LvWqZ -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:13 2025 by rpki-client