$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: ElE2bCEdxOdGEzzR+ADsgP9O6MqSIgpCsCmMHTQhOO4= Subject key identifier: B1:A1:0E:5D:5C:75:C6:14:47:F9:48:19:76:80:74:5E:E0:A3:94:EA Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C62 Signing time: Wed 04 Jun 2025 18:16:50 +0000 Manifest this update: Wed 04 Jun 2025 18:16:50 +0000 Manifest next update: Wed 11 Jun 2025 18:16:50 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: G2581h1YluxKYxfZIoC2tPshtgZaAIGGLaN9J/GcLg4=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: yPNuIBhOcR1Mr6lLidK3MeZlRO1wbqE9iAxDy/a++Gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 18:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Jun 4 18:16:50 2025 GMT Not After : Jun 11 18:16:50 2025 GMT Subject: CN=68408d92-77ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:ae:5e:39:84:98:53:97:5b:9f:06:ac:e6: 59:fc:2b:08:2f:7a:2a:1a:c5:51:8f:db:d1:f1:8c: 5d:d5:93:69:09:53:25:15:59:d4:e5:a4:ad:9c:af: de:94:99:b4:7c:d3:8b:15:c5:18:e0:4a:d9:a2:6a: bf:a4:e0:4d:62:fc:df:8f:33:ac:2b:e5:76:b5:33: 64:4a:1a:08:75:98:9e:90:15:05:7f:0b:a9:b2:8c: c4:f6:0d:22:89:0a:a0:82:0d:2a:a9:c0:2a:52:ea: 82:b5:74:2a:fc:6b:5f:1b:02:c1:a5:b6:2a:00:68: b0:cf:77:0a:6e:35:72:80:c7:1d:af:34:6c:68:2d: 2d:40:58:fa:cc:b6:e1:5d:d2:d4:50:22:79:28:b6: b6:55:65:7f:48:5b:87:ab:21:65:0c:b2:e5:9c:65: cd:e5:92:37:cf:e4:89:34:e6:7a:ea:46:32:db:06: 09:d2:aa:14:08:5b:e7:d5:73:2a:86:11:5f:5a:69: 0e:2f:8a:f3:89:94:fc:5d:dc:6a:9a:6d:5e:99:68: 7a:af:0b:f5:77:4c:ff:f7:1f:22:a9:27:6c:8f:5a: 22:19:4a:0d:f2:3d:68:e3:d6:33:19:9a:d1:f8:a3: 04:97:09:b2:5c:c9:18:a3:26:33:17:19:fd:2c:dc: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:0E:5D:5C:75:C6:14:47:F9:48:19:76:80:74:5E:E0:A3:94:EA X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1a:06:45:22:ac:b9:a9:c7:d7:d7:5b:50:09:b6:1a:ac:ad: 2c:c0:f8:79:4b:f1:90:a1:36:90:04:1c:cb:01:01:5e:7a:21: 4c:a4:2d:c3:5a:96:4e:f2:4b:a5:da:00:84:22:32:b8:0b:a2: 62:b9:f7:5e:4f:e7:f5:48:fa:7c:69:49:23:8d:57:e5:74:26: d3:9b:2c:11:04:24:d2:5d:eb:a4:2c:23:c6:82:c4:3f:6d:94: 6d:80:64:e3:98:80:da:06:aa:d4:a5:0c:9a:0e:50:aa:74:2e: 7b:de:09:18:0b:af:2a:e9:a9:32:77:a2:f3:6e:b5:7f:08:11: ad:bf:e0:95:01:a9:6c:dc:31:af:a9:c7:84:9a:c4:bc:1d:20: d7:24:1e:ef:07:06:bb:c1:97:be:58:f9:25:56:92:5b:5a:6e: ad:a3:d0:ca:8b:02:5b:fc:2f:24:fe:61:15:8b:72:06:aa:a0: 0c:fe:45:72:10:a1:f1:0b:f8:e9:0b:d8:dd:f3:47:47:fc:c4: d6:34:5b:73:f5:d5:95:5e:df:38:77:dc:e2:b4:b5:7f:e2:d2: 41:1a:a1:b2:78:71:21:0b:64:d1:97:ea:e7:1a:f3:c3:0d:94: 36:e3:18:e7:2f:6d:ad:28:ce:67:6e:2e:af:b5:22:ef:c2:8d: 80:5b:c5:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwNjA0MTgxNjUwWhcNMjUwNjExMTgxNjUwWjAYMRYwFAYD VQQDEw02ODQwOGQ5Mi03N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/KuXjmEmFOXW58GrOZZ/CsIL3oqGsVRj9vR8Yxd1ZNpCVMlFVnU5aStnK/e lJm0fNOLFcUY4ErZomq/pOBNYvzfjzOsK+V2tTNkShoIdZiekBUFfwupsozE9g0i iQqggg0qqcAqUuqCtXQq/GtfGwLBpbYqAGiwz3cKbjVygMcdrzRsaC0tQFj6zLbh XdLUUCJ5KLa2VWV/SFuHqyFlDLLlnGXN5ZI3z+SJNOZ66kYy2wYJ0qoUCFvn1XMq hhFfWmkOL4rziZT8Xdxqmm1emWh6rwv1d0z/9x8iqSdsj1oiGUoN8j1o49YzGZrR +KMElwmyXMkYoyYzFxn9LNx63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGhDl1c dcYUR/lIGXaAdF7go5TqMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6GgZFIqy5qcfX11tQCbYarK0swPh5S/GQoTaQBBzLAQFeeiFMpC3D WpZO8kul2gCEIjK4C6JiufdeT+f1SPp8aUkjjVfldCbTmywRBCTSXeukLCPGgsQ/ bZRtgGTjmIDaBqrUpQyaDlCqdC573gkYC68q6akyd6LzbrV/CBGtv+CVAals3DGv qceEmsS8HSDXJB7vBwa7wZe+WPklVpJbWm6to9DKiwJb/C8k/mEVi3IGqqAM/kVy EKHxC/jpC9jd80dH/MTWNFtz9dWVXt84d9zitLV/4tJBGqGyeHEhC2TRl+rnGvPD DZQ24xjnL22tKM5nbi6vtSLvwo2AW8WK -----END CERTIFICATE-----Generated at Fri Jun 6 17:13:54 2025 by rpki-client