$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json) Hash identifier: p/XxY3bQXcnBBT+cqpbDTlXmQ8UxEmOhHiQ2Dn/4iMY= Subject key identifier: A2:22:7C:B4:8E:9D:E1:26:19:03:AA:0C:55:76:28:19:80:20:98:5C Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0DDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft Manifest number: 0DBD Signing time: Fri 30 May 2025 17:35:23 +0000 Manifest this update: Fri 30 May 2025 17:35:22 +0000 Manifest next update: Fri 06 Jun 2025 17:35:22 +0000 Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: ivmSfCVf7pIeB0bvwGR7Z4+WwsL98XXjmcDz/29Ugxw=) 2: 41088D5C7CF011EFA2B7A53EC4F9AE02.roa (hash: 3gPJefn/nBhcOq5ryC0Mdn5OAkNCGxGOdgp1NnnSRSA=) 3: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: May 30 17:35:22 2025 GMT Not After : Jun 6 17:35:22 2025 GMT Subject: CN=6839ec5b-f3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:78:26:2e:0e:49:48:00:e9:31:1b:59:5f: 92:27:77:e0:de:4f:a1:b5:83:e5:a3:8a:7f:9d:d5: 33:03:41:64:f5:50:e6:f9:a6:59:32:cf:4a:58:54: 68:8a:56:da:7c:16:66:8f:a1:7e:bd:73:f4:51:d6: ca:03:a2:73:bc:5c:1f:3e:ba:e7:24:83:4b:41:d7: 1f:29:09:de:2a:65:02:db:90:97:81:d9:c0:55:94: 26:79:24:cf:26:58:0d:88:26:16:55:e5:30:18:5a: 17:51:67:e1:38:f0:97:04:ed:7f:c1:c8:c5:2b:f0: 27:25:30:f0:82:2a:95:b0:22:82:4b:7e:a7:1c:38: 28:8b:de:eb:c8:d0:ec:6e:36:d3:d2:50:a7:59:4f: 23:4b:d1:b2:8a:a5:e8:1f:70:ab:fb:87:b7:dd:e2: 41:be:88:19:fe:50:0f:6c:fa:21:da:ee:e5:38:73: 25:bc:ac:de:b4:5f:aa:a4:0c:e1:31:ea:79:c0:19: af:f2:64:54:fb:52:37:a5:41:50:bf:27:0e:86:79: 46:0d:66:43:3d:0a:53:98:e2:3c:90:2e:95:be:a3: ad:50:95:75:5e:ed:25:80:d7:e3:44:f3:56:6d:24: e6:d3:41:68:37:cb:a4:0c:b4:fe:6e:4a:44:15:7b: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:22:7C:B4:8E:9D:E1:26:19:03:AA:0C:55:76:28:19:80:20:98:5C X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:45:f1:40:c2:00:fa:78:cb:3a:80:9d:d8:52:34:24:65:6e: 03:aa:52:5f:e6:bf:5f:a8:a8:87:a8:79:52:75:ee:a8:02:91: 9a:eb:cb:b0:be:66:02:90:87:e8:bd:2d:50:1d:80:01:59:67: 5c:4c:8a:42:1e:a7:b0:2a:ee:86:c8:79:e4:25:54:ef:5c:1a: 34:63:3b:17:c8:ed:ae:dd:e4:39:d0:97:03:71:9e:f5:c2:b3: 75:e8:06:99:3e:1f:84:ce:f9:2f:96:74:a9:c3:f9:d7:af:af: 32:51:e4:b6:5e:9a:8c:26:20:b6:bf:ca:2b:59:bb:5a:01:f3: d3:99:af:95:d8:77:8e:1a:02:d1:3e:aa:c1:2b:f6:9e:fb:44: 2a:ff:b6:46:4c:2a:a8:c9:fd:23:02:e9:cf:c1:4d:16:f3:b9: 02:34:e0:67:fe:a3:55:0c:b4:e4:14:d3:58:72:bc:1c:c4:bd: bf:15:e1:9d:c4:90:5a:48:08:15:8b:3a:e3:a6:53:5e:5b:14: 6f:54:f1:cb:db:9b:8e:d7:24:b2:5c:c1:6b:a5:d4:22:bf:ce: 4e:32:40:99:a5:ff:81:46:bf:c4:4d:04:df:cc:99:4a:68:23: 80:0c:7e:05:3a:16:98:a6:93:c8:0c:5b:72:1c:63:6c:b8:7f: 6e:9c:84:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUwNTMwMTczNTIyWhcNMjUwNjA2MTczNTIyWjAYMRYwFAYD VQQDEw02ODM5ZWM1Yi1mM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYl4Ji4OSUgA6TEbWV+SJ3fg3k+htYPlo4p/ndUzA0Fk9VDm+aZZMs9KWFRo ilbafBZmj6F+vXP0UdbKA6JzvFwfPrrnJINLQdcfKQneKmUC25CXgdnAVZQmeSTP JlgNiCYWVeUwGFoXUWfhOPCXBO1/wcjFK/AnJTDwgiqVsCKCS36nHDgoi97ryNDs bjbT0lCnWU8jS9GyiqXoH3Cr+4e33eJBvogZ/lAPbPoh2u7lOHMlvKzetF+qpAzh Mep5wBmv8mRU+1I3pUFQvycOhnlGDWZDPQpTmOI8kC6VvqOtUJV1Xu0lgNfjRPNW bSTm00FoN8ukDLT+bkpEFXty3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIifLSO neEmGQOqDFV2KBmAIJhcMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9RfFAwgD6eMs6gJ3YUjQkZW4DqlJf5r9fqKiHqHlSde6oApGa68uw vmYCkIfovS1QHYABWWdcTIpCHqewKu6GyHnkJVTvXBo0YzsXyO2u3eQ50JcDcZ71 wrN16AaZPh+EzvkvlnSpw/nXr68yUeS2XpqMJiC2v8orWbtaAfPTma+V2HeOGgLR PqrBK/ae+0Qq/7ZGTCqoyf0jAunPwU0W87kCNOBn/qNVDLTkFNNYcrwcxL2/FeGd xJBaSAgVizrjplNeWxRvVPHL25uO1ySyXMFrpdQiv85OMkCZpf+BRr/ETQTfzJlK aCOADH4FOhaYppPIDFtyHGNsuH9unIRD -----END CERTIFICATE-----Generated at Sat May 31 16:45:47 2025 by rpki-client