$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: qKJENTWN5VwoVeD9cdMpLHEb/cOVpyX5pPHMUut9pwg= Subject key identifier: 3C:7A:C7:FD:73:CA:DB:56:9B:77:A1:21:36:C3:42:27:B0:04:DE:5D Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 0106 Signing time: Thu 05 Jun 2025 04:29:14 +0000 Manifest this update: Thu 05 Jun 2025 04:29:13 +0000 Manifest next update: Thu 12 Jun 2025 04:29:13 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: iDbg+K2ukxMgVhxGZYll9DN1lb8GeGqB1cw+MoRWN/I=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Jun 5 04:29:13 2025 GMT Not After : Jun 12 04:29:13 2025 GMT Subject: CN=68411d19-0f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:07:73:d1:e5:58:dd:83:72:45:37:1a:85: 2e:cd:7f:65:63:96:a9:20:9a:6f:67:ca:95:7b:67: d0:bf:db:5c:e9:1e:75:0e:e4:5e:85:fa:60:5c:e2: 59:b1:86:c2:ee:8f:96:c3:23:f4:83:53:f4:d1:fd: 66:10:e4:8e:44:ee:2c:c4:79:bc:85:43:95:87:c7: 28:13:b9:cb:a5:31:83:61:b4:c5:2f:99:73:dd:d8: 05:2c:9b:98:98:67:3f:55:46:a3:48:b0:3b:f7:d8: ed:0f:98:28:63:36:7f:96:cf:54:90:63:ea:43:54: b0:94:e7:36:a4:7f:86:58:87:93:47:43:d4:68:02: 38:1e:ff:6f:44:fe:1a:30:a9:6e:83:97:37:6a:84: f1:d2:0e:a1:a9:93:ba:c1:f4:55:28:3b:15:23:52: c1:b3:c0:47:c7:1b:2e:cd:3f:3a:50:b8:74:22:d8: 43:a3:ad:62:f9:37:fd:5a:d8:b6:f7:b1:d8:fd:e5: f9:78:9b:4a:96:56:32:c8:51:fc:a5:ec:03:a6:ff: ed:5a:54:26:4d:51:23:80:c5:7c:cc:b6:86:64:da: 85:c6:2e:b9:b7:4a:86:59:04:fd:62:2c:85:3c:c4: ef:e3:d3:c3:43:1b:ef:43:4d:5a:6c:75:45:4d:9c: 87:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7A:C7:FD:73:CA:DB:56:9B:77:A1:21:36:C3:42:27:B0:04:DE:5D X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2f:1e:dc:23:6d:47:96:69:71:74:b4:5a:e8:d1:c6:07:7e: 8b:81:65:ba:4d:fa:f6:4f:7f:90:c5:ad:5a:94:03:f4:5a:02: f3:e6:48:18:67:79:db:1b:d7:31:fa:05:e7:db:09:b6:6b:79: 04:46:81:bd:47:fd:bd:65:49:dd:b8:89:08:9a:73:51:f7:8d: d3:8f:eb:bb:0f:25:e0:f6:15:23:2d:bb:5c:dd:d8:38:99:19: ad:a5:69:3b:0a:60:d5:28:62:63:63:1c:29:df:2c:a2:17:8c: bf:f8:bd:0e:59:a7:74:06:22:d8:ce:9d:ae:5b:e4:15:18:ec: b1:4e:36:51:f7:63:fb:7e:f9:00:0d:9c:e7:b0:18:9d:ab:ab: 9b:be:19:c7:21:58:47:c5:bc:25:d5:3f:c3:15:93:8d:d0:3a: aa:0b:23:6c:5d:57:8b:5a:76:f4:5d:f5:b3:a0:0e:15:3e:0f: dd:27:17:ca:7a:63:a1:aa:49:5a:36:94:50:ab:ac:3b:9a:ce: 5b:37:72:05:1a:bb:00:ce:3f:70:5a:01:ce:79:4a:69:c5:f0: 9d:0d:68:34:09:bc:f6:a3:88:4b:cc:f2:cc:00:a0:94:e6:83: 3c:f4:2e:72:db:48:26:9c:bc:7b:85:81:0d:2e:9c:71:a8:43: 1c:a9:25:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwNjA1MDQyOTEzWhcNMjUwNjEyMDQyOTEzWjAYMRYwFAYD VQQDEw02ODQxMWQxOS0wZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2isHc9HlWN2DckU3GoUuzX9lY5apIJpvZ8qVe2fQv9tc6R51DuRehfpgXOJZ sYbC7o+WwyP0g1P00f1mEOSORO4sxHm8hUOVh8coE7nLpTGDYbTFL5lz3dgFLJuY mGc/VUajSLA799jtD5goYzZ/ls9UkGPqQ1SwlOc2pH+GWIeTR0PUaAI4Hv9vRP4a MKlug5c3aoTx0g6hqZO6wfRVKDsVI1LBs8BHxxsuzT86ULh0IthDo61i+Tf9Wti2 97HY/eX5eJtKllYyyFH8pewDpv/tWlQmTVEjgMV8zLaGZNqFxi65t0qGWQT9YiyF PMTv49PDQxvvQ01abHVFTZyH5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx6x/1z yttWm3ehITbDQiewBN5dMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Lx7cI21HlmlxdLRa6NHGB36LgWW6Tfr2T3+Qxa1alAP0WgLz5kgY Z3nbG9cx+gXn2wm2a3kERoG9R/29ZUnduIkImnNR943Tj+u7DyXg9hUjLbtc3dg4 mRmtpWk7CmDVKGJjYxwp3yyiF4y/+L0OWad0BiLYzp2uW+QVGOyxTjZR92P7fvkA DZznsBidq6ubvhnHIVhHxbwl1T/DFZON0DqqCyNsXVeLWnb0XfWzoA4VPg/dJxfK emOhqklaNpRQq6w7ms5bN3IFGrsAzj9wWgHOeUppxfCdDWg0Cbz2o4hLzPLMAKCU 5oM89C5y20gmnLx7hYENLpxxqEMcqSVy -----END CERTIFICATE-----Generated at Sat Jun 7 05:48:11 2025 by rpki-client