$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft File: JYXaC5gKR_66DiNSBd7uQC8gs8s.mft (raw, json) Hash identifier: qmQM6e+TZxJNllRL0wqjeZA+v5kbYi1cfbU9CiuDN1c= Subject key identifier: BE:86:45:B0:D3:A4:ED:A0:94:BB:B8:6B:F7:13:FD:42:05:CA:BA:91 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 34C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft Manifest number: 34A3 Signing time: Fri 06 Jun 2025 14:56:25 +0000 Manifest this update: Fri 06 Jun 2025 14:56:24 +0000 Manifest next update: Fri 13 Jun 2025 14:56:24 +0000 Files and hashes: 1: JYXaC5gKR_66DiNSBd7uQC8gs8s.crl (hash: ec/woSDjolpCXqyjizuZOO4mFYvA4nbpOjUGu9nsYnc=) 2: AE0AC88EBBF511ECAA816D52C4F9AE02.roa (hash: XcDFXjlfUG7gat5Mn2G5GUkU6QTMu4zYAY0E0LcWZ/I=) 3: B054EA98BBF511ECAA816D52C4F9AE02.roa (hash: PxQFBDt3MlLgfKc8KqwYwfOpnira0VBqCMOA9nowVeQ=) 4: AF00AECABBF511ECAA816D52C4F9AE02.roa (hash: rZN8MBWyEzHwpv4iO0Yw1pt5Vq4fsdDOBU015oji+0s=) 5: 547D2C14BBDF11ECA1F12A0DC4F9AE02.roa (hash: Tw8o51QsKWxSHOjK/psQ5MTWchWVnaRSIbAtlFB/kL8=) 6: 9343CE6EE07211E7995BD42EC4F9AE02.roa (hash: qoFcoGLH5rF61ICxkb9LlHSey20FafRf8pg6MY0OMrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13511 (0x34c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Jun 6 14:56:24 2025 GMT Not After : Jun 13 14:56:24 2025 GMT Subject: CN=68430198-f30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:22:5b:cf:bd:9b:1c:0a:94:03:fb:1b:4a: f5:6e:84:c8:79:94:ae:76:71:27:7b:d0:ca:14:54: de:8f:11:77:43:63:ad:38:fd:8a:40:48:12:6f:ce: 21:0d:ed:75:67:89:78:52:b0:04:06:b7:86:ac:55: 28:6c:33:b9:83:9e:f0:4d:d2:89:ff:a3:e1:c8:ce: 88:b5:47:e8:57:42:e2:11:26:7f:a2:cc:1c:38:76: dc:3e:88:78:bc:e3:31:f3:0d:88:88:80:a5:a1:1d: 9f:96:12:ee:a1:b0:0e:a9:20:63:a4:55:4a:df:5a: 52:83:4e:ad:a9:93:50:3e:4e:6f:2a:54:9f:1c:fe: 8c:8a:12:d7:59:6f:19:55:0b:1c:9d:6d:25:47:45: 10:1f:a0:f9:70:49:86:75:45:29:bb:a1:ac:e0:69: 0f:10:6e:41:d7:1f:4b:82:92:88:25:07:0f:c2:98: 5b:95:8f:a0:d7:bf:37:a6:4d:9a:d1:22:e6:8e:bb: fb:42:6a:70:29:2c:1c:5e:b4:10:46:98:8f:a4:6c: db:db:71:7e:a8:14:eb:fb:0c:41:c9:72:1b:1a:42: 13:31:0b:38:76:04:e8:bd:74:3f:37:ca:49:9a:17: 17:a8:36:90:df:d7:7e:3a:ed:0a:88:6f:00:1f:bd: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:45:B0:D3:A4:ED:A0:94:BB:B8:6B:F7:13:FD:42:05:CA:BA:91 X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c7:5a:1c:60:87:22:3e:36:d2:4c:23:c3:42:c1:8a:af:75: 51:e5:e4:df:ff:dc:c8:5b:5e:e0:57:bf:7a:55:20:b4:a1:45: 13:ec:fb:5a:d4:02:91:5a:c5:f9:a3:e4:34:45:48:0c:ec:bc: 8a:0e:ed:46:84:4b:5b:1d:35:56:b8:32:32:b0:ca:29:cb:d5: ac:f5:b9:29:97:15:a3:6d:ec:88:e7:86:71:25:d9:29:99:cd: 03:97:94:c1:37:13:be:8b:ae:1f:b3:4e:99:af:e3:9a:a5:e8: e2:2b:71:1a:a0:0a:6b:fa:71:a4:e1:16:3a:3d:e7:f8:d7:fd: 63:2e:e3:62:ec:6a:a2:cb:61:db:fb:8b:3d:c1:73:43:03:7e: 53:b4:31:b6:74:5e:a9:d8:d5:12:5d:a9:c2:a6:3d:82:a7:41: 3a:15:6a:7c:62:fd:29:ab:0c:c1:1b:fd:bc:70:39:15:ee:a5: a1:30:1f:51:a4:75:1a:cc:40:d3:2b:dc:f8:f8:87:96:78:3d: 43:1c:e5:d7:1d:77:44:ce:6a:ae:ad:e6:eb:f7:d9:ef:14:e4: bc:86:ee:a3:4b:7f:dd:f2:1f:47:ed:bf:e6:9a:01:36:c5:24: ca:88:e0:f8:2a:55:af:e8:e6:2e:28:72:5a:b8:12:eb:3f:1d: b3:84:ce:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwNjA2MTQ1NjI0WhcNMjUwNjEzMTQ1NjI0WjAYMRYwFAYD VQQDEw02ODQzMDE5OC1mMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslsiW8+9mxwKlAP7G0r1boTIeZSudnEne9DKFFTejxF3Q2OtOP2KQEgSb84h De11Z4l4UrAEBreGrFUobDO5g57wTdKJ/6PhyM6ItUfoV0LiESZ/oswcOHbcPoh4 vOMx8w2IiICloR2flhLuobAOqSBjpFVK31pSg06tqZNQPk5vKlSfHP6MihLXWW8Z VQscnW0lR0UQH6D5cEmGdUUpu6Gs4GkPEG5B1x9LgpKIJQcPwphblY+g1783pk2a 0SLmjrv7QmpwKSwcXrQQRpiPpGzb23F+qBTr+wxByXIbGkITMQs4dgTovXQ/N8pJ mhcXqDaQ39d+Ou0KiG8AH72ZPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6GRbDT pO2glLu4a/cT/UIFyrqRMB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjYzQy9CN0FDQzI2QzFEOTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1Jf NjZEaU5TQmQ3dVFDOGdzOHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWx1ocYIciPjbSTCPDQsGKr3VR5eTf/9zIW17gV796VSC0oUUT7Pta 1AKRWsX5o+Q0RUgM7LyKDu1GhEtbHTVWuDIysMopy9Ws9bkplxWjbeyI54ZxJdkp mc0Dl5TBNxO+i64fs06Zr+OapejiK3EaoApr+nGk4RY6Pef41/1jLuNi7Gqiy2Hb +4s9wXNDA35TtDG2dF6p2NUSXanCpj2Cp0E6FWp8Yv0pqwzBG/28cDkV7qWhMB9R pHUazEDTK9z4+IeWeD1DHOXXHXdEzmqurebr99nvFOS8hu6jS3/d8h9H7b/mmgE2 xSTKiOD4KlWv6OYuKHJauBLrPx2zhM6p -----END CERTIFICATE-----Generated at Sat Jun 7 17:46:40 2025 by rpki-client