$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: EDInlkPN/vFXNJ1w6YzHdBxPerw0sT63t7ZBM77xrQ4= Subject key identifier: E0:37:75:0E:DF:F3:BF:19:FE:9F:90:BF:12:24:80:61:F3:FC:65:10 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 13EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 13E0 Signing time: Sun 24 Aug 2025 16:54:36 +0000 Manifest this update: Sun 24 Aug 2025 16:54:36 +0000 Manifest next update: Sun 31 Aug 2025 16:54:36 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: sST2foyv2JngyoaW6uh+G+VDSsFPYILqUBARkP4vrKs=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: IqvtwPczbHtONnp7/SjDoKiW5eTz+eR8wc9lCI4pYs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:54:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5100 (0x13ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Aug 24 16:54:36 2025 GMT Not After : Aug 31 16:54:36 2025 GMT Subject: CN=68ab43cc-eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:ce:e4:36:2c:9b:49:27:56:48:69:84:3c: 60:c2:d5:33:b9:4a:cd:27:d9:10:32:19:0d:c9:d5: 7e:c3:19:70:a3:e4:ec:2a:7f:7a:63:f3:85:96:e8: 96:77:db:ee:7e:d6:bd:64:40:a0:7f:6d:5b:c8:05: 97:fc:4c:bf:db:49:59:50:b2:1f:cb:6f:1e:65:f5: f3:f6:f9:1b:ba:b9:7c:33:11:d6:bf:8e:60:1c:c2: f3:5e:f3:aa:9a:f3:e7:6a:db:ca:a1:fe:ac:b7:db: 89:2e:36:cd:ec:47:32:5d:56:9c:6f:eb:a0:40:b8: fb:99:de:81:db:8a:d8:95:aa:a7:62:91:aa:2b:c8: 8a:46:aa:5e:65:f3:5d:4b:3d:e9:71:35:14:e5:4f: b4:e9:0c:e5:9e:36:bb:85:f6:a9:25:1d:b0:c6:4c: f6:a0:93:3f:f4:ab:69:ac:64:2c:2c:ea:f5:ed:5b: 2d:fc:e2:04:c4:ad:13:75:02:cd:38:42:e8:6e:c7: 0d:54:d8:11:82:00:fb:c4:c5:23:eb:2e:32:5d:ff: a5:39:d0:61:21:e3:bc:1e:0f:f8:72:c1:c6:07:70: d2:9a:13:35:a6:10:6f:3a:ee:15:a5:d6:a9:9b:ed: 4e:56:c5:71:6b:c4:b4:7d:ce:ee:9e:d7:aa:48:2c: 56:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:37:75:0E:DF:F3:BF:19:FE:9F:90:BF:12:24:80:61:F3:FC:65:10 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ae:b2:d9:c9:67:e2:ce:e8:b7:60:96:1f:84:ec:cd:4d:94: ed:fe:84:f8:33:53:fd:2e:a7:b4:0f:21:7e:49:00:a1:ef:b5: d7:10:ee:85:4c:c8:e9:c1:fb:dc:de:65:e8:ef:08:99:a5:fe: 58:d0:72:9b:14:6a:81:f6:2c:b8:48:80:83:d3:3c:53:90:2a: d5:8a:9b:aa:51:0d:60:bf:00:51:2f:97:54:d0:8c:a8:89:33: 05:95:47:08:6d:43:33:e2:98:ae:44:24:8e:d8:0e:25:a4:4b: c3:05:6c:bd:e0:bb:6c:88:2c:ed:dd:60:19:a6:df:7c:f4:5b: 70:96:89:a2:51:b7:3f:16:cb:6e:22:a9:b9:74:bc:8d:1d:c9: dd:2d:01:85:73:39:74:52:31:1f:0c:ec:59:75:4c:ca:39:23: 75:1d:e5:64:61:b3:77:b9:ec:91:ff:bf:87:e3:b1:32:ae:63: 6a:d0:a1:74:5f:5d:a9:e8:c5:08:bb:28:df:3f:68:8d:b5:a1: b9:66:c3:a7:0e:88:91:74:44:30:02:ec:4b:16:b8:c4:4d:68: 1b:a0:e9:9b:de:c3:3c:e5:33:d4:56:a3:c9:4b:b7:fa:b9:14: 3d:11:f3:92:45:44:bb:b1:60:f9:3f:31:5a:7b:88:aa:f2:f3: b7:47:63:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUwODI0MTY1NDM2WhcNMjUwODMxMTY1NDM2WjAYMRYwFAYD VQQDEw02OGFiNDNjYy1lYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeDO5DYsm0knVkhphDxgwtUzuUrNJ9kQMhkNydV+wxlwo+TsKn96Y/OFluiW d9vufta9ZECgf21byAWX/Ey/20lZULIfy28eZfXz9vkburl8MxHWv45gHMLzXvOq mvPnatvKof6st9uJLjbN7EcyXVacb+ugQLj7md6B24rYlaqnYpGqK8iKRqpeZfNd Sz3pcTUU5U+06Qzlnja7hfapJR2wxkz2oJM/9KtprGQsLOr17Vst/OIExK0TdQLN OELobscNVNgRggD7xMUj6y4yXf+lOdBhIeO8Hg/4csHGB3DSmhM1phBvOu4Vpdap m+1OVsVxa8S0fc7unteqSCxWfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOA3dQ7f 878Z/p+QvxIkgGHz/GUQMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFrrLZyWfizui3YJYfhOzNTZTt/oT4M1P9Lqe0DyF+SQCh77XXEO6F TMjpwfvc3mXo7wiZpf5Y0HKbFGqB9iy4SICD0zxTkCrVipuqUQ1gvwBRL5dU0Iyo iTMFlUcIbUMz4piuRCSO2A4lpEvDBWy94LtsiCzt3WAZpt989FtwlomiUbc/Fstu Iqm5dLyNHcndLQGFczl0UjEfDOxZdUzKOSN1HeVkYbN3ueyR/7+H47EyrmNq0KF0 X12p6MUIuyjfP2iNtaG5ZsOnDoiRdEQwAuxLFrjETWgboOmb3sM85TPUVqPJS7f6 uRQ9EfOSRUS7sWD5PzFae4iq8vO3R2P4 -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:11 2025 by rpki-client