$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json) Hash identifier: aUup1aOOYrUnRUji5B9tubpAoQ59seBTRGyPRYJ2Ixs= Subject key identifier: 37:FC:1A:50:2F:89:4C:FE:46:89:FC:13:A3:49:D4:F2:A9:70:AF:86 Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft Manifest number: 0B69 Signing time: Tue 10 Jun 2025 18:58:57 +0000 Manifest this update: Tue 10 Jun 2025 18:58:57 +0000 Manifest next update: Tue 17 Jun 2025 18:58:57 +0000 Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: 2RzWOcG7cHSUJ0TpmuBjZq4zQeSV61PIIJ06nDAgR1s=) 2: A540A624378611EABE283384C4F9AE02.roa (hash: wqMWiXdgCu3cScL0mYpc0UCwGRMk2VdkUHOf3iWaHHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Validity Not Before: Jun 10 18:58:57 2025 GMT Not After : Jun 17 18:58:57 2025 GMT Subject: CN=68488071-27ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:a8:4c:fa:b4:e3:14:8a:26:ff:47:25:f9: 83:3b:80:3e:b4:0a:01:36:dc:3e:5f:b6:3d:70:9a: cf:0a:16:07:0d:0c:8a:ee:32:a0:e7:c6:93:96:87: 08:fb:79:02:36:ac:bd:f7:50:23:2c:f1:27:e8:e3: 38:69:2c:94:ec:29:05:48:e2:f2:1b:34:40:04:f5: 99:0d:19:65:69:19:29:74:ca:95:39:cf:b8:73:3f: 7a:90:c8:c9:ef:35:21:db:40:91:91:95:3c:87:ff: 8d:b4:1a:f6:bf:d4:46:ed:b1:d0:4f:b1:1d:57:8b: 0e:4f:f4:52:eb:07:a0:8d:f0:38:f5:01:13:17:3d: b3:84:47:d8:1d:8b:14:ae:d8:2f:f7:a9:1b:f7:7a: 06:1a:02:ce:d9:7e:3f:aa:68:98:dc:e0:a7:e0:25: 5c:5d:f4:b1:a1:6b:fa:da:25:75:7d:58:02:15:fb: 72:3e:dd:4a:f1:da:70:20:ac:f4:a7:53:5b:0b:31: 8b:b7:b5:1f:eb:f0:5a:fd:4c:6c:ba:f1:4e:87:99: ff:55:b0:30:74:93:5f:34:8b:ff:34:75:6d:c8:6d: a0:8c:82:26:74:2a:24:31:47:3c:63:6f:b3:6f:9b: 89:54:c2:cc:42:34:d5:16:f0:be:cb:99:db:d3:20: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:1A:50:2F:89:4C:FE:46:89:FC:13:A3:49:D4:F2:A9:70:AF:86 X509v3 Authority Key Identifier: keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:8e:00:07:52:1a:5b:3f:36:5e:e1:39:1c:4b:e1:fb:59: 5c:91:ba:52:3b:a4:c8:88:20:c1:8f:4d:d8:29:48:8e:ef:1c: 9d:05:f6:f4:94:6d:70:ab:ed:d9:38:d4:7a:d8:5d:d8:da:55: 62:4a:eb:13:eb:1a:f7:aa:ad:f6:ca:14:b2:77:0d:a0:57:1c: 3a:60:6e:4a:c0:db:f9:49:0c:32:88:6b:0f:11:8a:f9:6b:c7: 40:53:3d:34:fc:43:23:5a:ef:88:44:76:c7:f2:7a:a2:90:b2: f7:32:46:f9:cd:f1:22:2a:aa:88:82:45:00:19:ab:88:e0:46: 6b:eb:69:9d:2f:ec:8d:f7:54:8c:c2:56:da:93:cf:11:a5:db: b9:c8:d4:66:35:50:c1:9a:db:be:ea:13:f5:45:70:50:87:b8: 0c:23:22:c0:52:ac:7f:c1:ae:0e:b2:ea:31:8f:c1:df:a4:1e: 87:61:64:44:a9:e5:07:fe:ee:e9:69:9b:ef:e7:c2:b0:9d:28: 44:66:42:92:77:d1:01:bc:6a:c7:f5:92:0a:4a:24:8f:19:a8: f7:ae:56:84:51:9b:14:d0:12:0d:17:13:69:0a:68:4a:82:be: 37:f0:d8:c2:54:d0:7d:09:06:e8:aa:6c:cd:4d:76:52:8e:2e: ba:12:5d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw REUxMEY5QjkwHhcNMjUwNjEwMTg1ODU3WhcNMjUwNjE3MTg1ODU3WjAYMRYwFAYD VQQDEw02ODQ4ODA3MS0yN2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut2oTPq04xSKJv9HJfmDO4A+tAoBNtw+X7Y9cJrPChYHDQyK7jKg58aTlocI +3kCNqy991AjLPEn6OM4aSyU7CkFSOLyGzRABPWZDRllaRkpdMqVOc+4cz96kMjJ 7zUh20CRkZU8h/+NtBr2v9RG7bHQT7EdV4sOT/RS6wegjfA49QETFz2zhEfYHYsU rtgv96kb93oGGgLO2X4/qmiY3OCn4CVcXfSxoWv62iV1fVgCFftyPt1K8dpwIKz0 p1NbCzGLt7Uf6/Ba/UxsuvFOh5n/VbAwdJNfNIv/NHVtyG2gjIImdCokMUc8Y2+z b5uJVMLMQjTVFvC+y5nb0yD0TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf8GlAv iUz+Ron8E6NJ1PKpcK+GMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3 d1pySWI4RTJFek1ONFEtYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3Y4AB1IaWz82XuE5HEvh+1lckbpSO6TIiCDBj03YKUiO7xydBfb0 lG1wq+3ZONR62F3Y2lViSusT6xr3qq32yhSydw2gVxw6YG5KwNv5SQwyiGsPEYr5 a8dAUz00/EMjWu+IRHbH8nqikLL3Mkb5zfEiKqqIgkUAGauI4EZr62mdL+yN91SM wlbak88Rpdu5yNRmNVDBmtu+6hP1RXBQh7gMIyLAUqx/wa4Osuoxj8HfpB6HYWRE qeUH/u7paZvv58KwnShEZkKSd9EBvGrH9ZIKSiSPGaj3rlaEUZsU0BINFxNpCmhK gr438NjCVNB9CQboqmzNTXZSji66El3w -----END CERTIFICATE-----Generated at Thu Jun 12 01:37:08 2025 by rpki-client