$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: rA3YCF1G2s7RELcVCOuwM8/4BoEJ4sckobRLjt9jLsM= Subject key identifier: AC:6B:34:89:95:4B:65:55:D0:CD:C8:00:D1:1B:F8:DD:29:7D:EF:5B Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 0681 Signing time: Mon 02 Jun 2025 22:30:42 +0000 Manifest this update: Mon 02 Jun 2025 22:30:41 +0000 Manifest next update: Mon 09 Jun 2025 22:30:41 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: m/ObCcN7nJK+geZKRLWxsRcIRchZ1q0sLL/5On1AHaY=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Jun 2 22:30:41 2025 GMT Not After : Jun 9 22:30:41 2025 GMT Subject: CN=683e2612-489a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:20:d7:61:18:02:40:30:44:bf:e8:a3:97: b5:8c:57:92:48:83:e7:27:83:68:26:9f:d6:3c:86: 47:d2:fc:ee:e5:5e:c1:a0:3b:dd:5f:dc:0e:51:31: 2b:ae:96:f3:cd:19:07:5e:ca:11:30:ae:4d:1e:83: 86:32:17:1c:09:bc:cb:ec:ac:1b:35:fb:1e:f3:ee: ed:31:2e:df:2c:83:25:aa:f7:26:d6:79:43:65:f0: cf:89:60:04:c3:fb:0e:0d:c6:f3:24:a1:b5:17:91: 1d:41:3c:96:cc:a2:8a:65:07:e9:d7:c9:fb:72:78: d0:78:84:81:f1:97:e7:78:ab:aa:fa:8b:ea:8a:55: 93:8d:ae:fe:6a:61:eb:63:c3:14:99:97:47:24:b8: e3:22:1b:b9:ba:85:bd:39:10:99:fb:03:f4:77:df: 23:b6:34:06:57:fa:52:21:32:a3:2a:ba:ae:2c:10: 2a:4d:17:c3:52:73:2f:34:f3:1b:75:f9:ff:c2:cb: 3f:3e:6b:fd:f0:c5:73:e2:41:94:5c:5b:b6:bc:4d: ca:dd:44:18:88:7e:0d:81:91:05:8b:25:06:ef:7b: 85:d2:51:f5:dd:0b:12:81:2b:4d:da:c3:6b:ea:ff: 01:63:43:bb:e2:ae:34:4d:b9:b3:c2:9f:67:1c:ee: df:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6B:34:89:95:4B:65:55:D0:CD:C8:00:D1:1B:F8:DD:29:7D:EF:5B X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:87:75:38:5b:6e:19:3c:51:93:bf:35:41:7d:5b:fc:9d:ab: fd:37:09:d1:1d:68:f9:55:af:b2:00:44:1a:e9:bd:85:ba:13: 7a:73:61:5b:ff:67:fc:68:c7:3a:1b:1b:43:d2:bb:e8:88:68: 3a:f9:23:74:0e:81:79:f0:47:31:bb:9a:fe:e4:40:6d:7e:b4: 4e:1e:e5:6e:e0:b1:cb:27:bd:b4:53:0d:37:26:c2:cd:08:ce: 77:6e:aa:d3:8a:0f:be:47:de:83:76:37:2b:7c:d8:ad:25:98: 2a:2a:73:a8:6d:03:95:bd:27:f8:27:04:08:1a:c8:59:73:f9: e1:f0:5d:f1:72:d9:c3:2f:39:7a:14:78:89:88:c0:41:6f:85: 70:62:99:b4:31:20:65:96:20:a9:d8:b4:c9:c2:65:7b:d6:ab: 3f:83:7c:9c:b4:6b:13:30:cd:46:0c:d8:52:b0:58:32:d0:8f: 28:a8:df:4b:67:cd:b1:b9:8d:6d:88:f3:f5:55:3f:0e:5a:2f: 75:49:bd:d9:8f:dd:6a:d2:2b:83:c9:75:d2:27:5b:b0:31:8b: fa:df:88:3c:c4:87:5e:73:0f:b1:35:d7:eb:61:4f:ba:ff:ea: c3:9b:2b:f6:8c:c5:90:b1:b5:80:a4:49:76:12:d1:25:f8:a3: 45:63:bd:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwNjAyMjIzMDQxWhcNMjUwNjA5MjIzMDQxWjAYMRYwFAYD VQQDEw02ODNlMjYxMi00ODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HEg12EYAkAwRL/oo5e1jFeSSIPnJ4NoJp/WPIZH0vzu5V7BoDvdX9wOUTEr rpbzzRkHXsoRMK5NHoOGMhccCbzL7KwbNfse8+7tMS7fLIMlqvcm1nlDZfDPiWAE w/sODcbzJKG1F5EdQTyWzKKKZQfp18n7cnjQeISB8ZfneKuq+ovqilWTja7+amHr Y8MUmZdHJLjjIhu5uoW9ORCZ+wP0d98jtjQGV/pSITKjKrquLBAqTRfDUnMvNPMb dfn/wss/Pmv98MVz4kGUXFu2vE3K3UQYiH4NgZEFiyUG73uF0lH13QsSgStN2sNr 6v8BY0O74q40Tbmzwp9nHO7fyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxrNImV S2VV0M3IANEb+N0pfe9bMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWh3U4W24ZPFGTvzVBfVv8nav9NwnRHWj5Va+yAEQa6b2FuhN6c2Fb /2f8aMc6GxtD0rvoiGg6+SN0DoF58Ecxu5r+5EBtfrROHuVu4LHLJ720Uw03JsLN CM53bqrTig++R96DdjcrfNitJZgqKnOobQOVvSf4JwQIGshZc/nh8F3xctnDLzl6 FHiJiMBBb4VwYpm0MSBlliCp2LTJwmV71qs/g3yctGsTMM1GDNhSsFgy0I8oqN9L Z82xuY1tiPP1VT8OWi91Sb3Zj91q0iuDyXXSJ1uwMYv634g8xIdecw+xNdfrYU+6 /+rDmyv2jMWQsbWApEl2EtEl+KNFY709 -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:19 2025 by rpki-client