$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: Z5RF+X2hshhQnvoESunYuVAa8rXUOAAq2gCtL531/bc= Subject key identifier: BC:1D:7A:1F:26:90:75:9E:87:F8:E2:C5:F6:04:00:FF:09:93:2A:F2 Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 03D8 Signing time: Sat 31 May 2025 00:45:49 +0000 Manifest this update: Sat 31 May 2025 00:45:48 +0000 Manifest next update: Sat 07 Jun 2025 00:45:48 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: NrTqVFQR9AmP4D3hYTk/n/1WyZncRx9Y0apSmaXiLzc=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: 2QJmDZYcJvMKA1VD3KctOJhUNhu4gmHGXcVx8gxtotI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: May 31 00:45:48 2025 GMT Not After : Jun 7 00:45:48 2025 GMT Subject: CN=683a513d-b393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:51:aa:d3:19:f7:14:70:41:70:94:33:e7: dc:e4:97:19:72:7d:a6:17:bc:78:ce:eb:99:79:40: 46:48:58:1b:93:7f:84:13:4e:1e:0c:9e:d4:9c:45: f3:bd:aa:85:95:9d:4f:81:59:43:87:57:e2:9c:42: e4:64:54:1c:b9:6d:e8:92:41:60:b6:65:ff:89:f2: ef:ef:c2:c4:3a:21:17:da:21:f1:2e:02:9f:e3:49: 15:04:d8:5f:cf:c1:82:a0:3f:1b:5b:ab:7f:35:e7: 4c:f3:3d:e9:cc:ff:14:f4:50:b9:66:80:65:4c:b5: ec:81:67:1a:fe:a0:5d:3f:b8:2f:2f:97:86:d1:0d: c9:8e:32:d6:da:d3:7b:18:fb:e4:31:5b:42:f5:4d: 93:e0:d7:26:7e:78:e4:ff:a1:e5:6f:73:c0:c1:f0: 4f:6d:6a:52:38:66:32:5e:1b:bd:05:c2:66:ee:d9: 67:17:b8:a3:0f:77:f4:38:97:20:5a:db:c1:ee:4e: 33:2c:5e:7d:b7:09:75:4c:b7:66:a0:1f:f8:e8:31: 1c:36:24:60:24:38:33:40:57:0a:b4:03:03:f5:43: 55:2b:2c:bf:6c:f0:b8:b4:10:aa:05:93:58:22:c6: 31:d8:de:c0:fb:dd:ab:c1:97:8a:d0:58:69:f2:30: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1D:7A:1F:26:90:75:9E:87:F8:E2:C5:F6:04:00:FF:09:93:2A:F2 X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c6:d3:12:44:aa:a1:bf:32:de:f6:bf:3b:70:24:6d:2d:ef: b7:29:d4:2f:06:ad:c9:79:c0:de:4b:02:fd:0a:03:e8:b6:d3: db:6a:d1:ab:0e:0b:a1:a9:01:76:b2:3a:cf:f9:a9:94:ea:ee: de:79:bb:85:dd:a7:75:a0:64:c4:b2:0b:8e:37:7b:ae:6e:ff: 2c:ad:61:b5:a8:7d:cd:31:1f:31:e2:35:42:a8:5c:b8:9b:98: 98:7b:0d:0e:12:01:59:52:ca:56:5b:d7:eb:ab:aa:94:99:cb: 81:68:30:87:d1:5b:49:cd:30:97:02:fb:09:44:0b:36:8c:1e: e6:29:47:ed:3f:12:81:8e:f1:69:04:fc:ba:b3:a7:6c:a9:76: b9:2d:cd:13:40:c3:d7:02:23:ad:a9:84:73:36:3f:47:ac:7d: 74:3c:fc:18:f9:aa:34:12:54:50:a0:6b:6b:25:2f:8c:64:1a: 8c:54:3a:b5:8b:8c:ad:fc:53:8c:23:f7:77:d6:e9:f2:40:a4: f8:34:95:dd:cb:9e:de:d3:3d:25:bf:84:a8:ba:f3:d0:51:a4: 77:46:3c:fc:8b:c0:e9:de:0c:21:63:15:e1:54:4d:80:a0:5e: f6:21:0b:ef:99:48:5f:ce:94:ca:a6:c5:ea:81:f0:2c:f3:53: c7:7c:88:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUwNTMxMDA0NTQ4WhcNMjUwNjA3MDA0NTQ4WjAYMRYwFAYD VQQDEw02ODNhNTEzZC1iMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyydRqtMZ9xRwQXCUM+fc5JcZcn2mF7x4zuuZeUBGSFgbk3+EE04eDJ7UnEXz vaqFlZ1PgVlDh1finELkZFQcuW3okkFgtmX/ifLv78LEOiEX2iHxLgKf40kVBNhf z8GCoD8bW6t/NedM8z3pzP8U9FC5ZoBlTLXsgWca/qBdP7gvL5eG0Q3JjjLW2tN7 GPvkMVtC9U2T4Ncmfnjk/6Hlb3PAwfBPbWpSOGYyXhu9BcJm7tlnF7ijD3f0OJcg WtvB7k4zLF59twl1TLdmoB/46DEcNiRgJDgzQFcKtAMD9UNVKyy/bPC4tBCqBZNY IsYx2N7A+92rwZeK0Fhp8jAsEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwdeh8m kHWeh/jixfYEAP8JkyryMB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7xtMSRKqhvzLe9r87cCRtLe+3KdQvBq3JecDeSwL9CgPottPbatGr DguhqQF2sjrP+amU6u7eebuF3ad1oGTEsguON3uubv8srWG1qH3NMR8x4jVCqFy4 m5iYew0OEgFZUspWW9frq6qUmcuBaDCH0VtJzTCXAvsJRAs2jB7mKUftPxKBjvFp BPy6s6dsqXa5Lc0TQMPXAiOtqYRzNj9HrH10PPwY+ao0ElRQoGtrJS+MZBqMVDq1 i4yt/FOMI/d31unyQKT4NJXdy57e0z0lv4SouvPQUaR3Rjz8i8Dp3gwhYxXhVE2A oF72IQvvmUhfzpTKpsXqgfAs81PHfIi6 -----END CERTIFICATE-----Generated at Sat May 31 17:16:22 2025 by rpki-client