$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft File: jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json) Hash identifier: Da9mYXnPs1AtM1Uv2Rvh8uEMKusXdgevtfKGL/2H9Bk= Subject key identifier: DF:25:66:4B:2E:7F:BE:25:0D:27:70:A1:09:11:E9:01:9B:04:79:CC Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55 Certificate issuer: /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft Manifest number: 3E Signing time: Sat 31 May 2025 07:04:34 +0000 Manifest this update: Sat 31 May 2025 07:04:34 +0000 Manifest next update: Sat 07 Jun 2025 07:04:34 +0000 Files and hashes: 1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: 3BqSuUlfYmmNJyKRYcBjsvTHNv7dHeC6jdCQDdsGCEg=) 2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955 Validity Not Before: May 31 07:04:34 2025 GMT Not After : Jun 7 07:04:34 2025 GMT Subject: CN=683aaa02-b601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:b3:f7:ce:25:f5:61:fb:bd:d3:c6:b1:b3: 7e:3e:07:08:c9:98:60:c0:e5:37:f0:ee:3e:ea:81: f9:5a:e0:27:04:ab:f1:ec:c1:f4:60:b6:d5:20:81: 56:2d:b2:fd:a8:24:a7:98:f7:a0:e9:b8:4e:bd:6e: 62:03:0f:7d:28:f3:7c:e6:7c:bf:0b:e8:8a:71:bc: 94:ce:31:4b:12:de:4a:fb:ea:ba:45:20:38:fa:7c: 1b:32:a4:6f:a9:66:c4:b7:50:3b:40:b6:59:fa:de: 86:91:df:83:a7:9d:3d:36:3e:e3:33:87:d8:28:24: 39:55:58:5b:24:29:47:9f:bd:5a:95:f4:8c:dc:58: 31:a7:9e:62:06:0f:72:5a:82:51:9b:02:8e:a0:bd: a8:c3:5b:39:1c:38:08:69:a6:fe:3b:6c:7c:e7:95: 78:e5:57:a3:43:1f:07:db:cf:97:ce:5b:65:89:f5: 7e:23:6d:c3:9b:b3:71:ae:81:65:32:94:46:c1:86: a6:46:06:9d:60:73:d4:ba:9b:ba:82:bf:86:b8:57: 4c:55:f0:0c:55:d5:ab:28:36:82:93:d1:82:f5:03: 9b:f4:31:13:00:c2:d6:c1:2c:bb:d0:cd:37:61:bb: ab:0c:f1:69:81:cd:c5:fc:96:13:92:98:be:22:4a: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:66:4B:2E:7F:BE:25:0D:27:70:A1:09:11:E9:01:9B:04:79:CC X509v3 Authority Key Identifier: keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:83:cc:17:2b:48:49:ba:03:b8:71:e5:59:c7:2e:f6:b1:30: b6:dc:e9:47:07:b7:e7:ba:5c:df:ce:6e:84:6f:9f:c0:a8:3c: 99:cd:eb:06:06:e1:fc:c3:a3:20:18:0e:85:31:30:1b:fd:01: 7d:b5:77:03:64:3a:5b:3c:4a:cf:5a:f6:e8:e7:cb:d9:c0:81: b1:af:43:bd:dd:46:ab:26:d5:25:bc:5b:c3:e9:2f:a2:a2:8e: ea:19:4e:2c:e3:62:e6:43:a8:2d:a3:0f:78:83:b2:19:97:8a: bb:77:af:81:fa:fb:37:3b:61:0f:e7:1a:42:c9:42:56:06:44: 35:39:32:77:f9:ae:ca:dc:38:c2:0c:5b:90:a0:96:fc:e6:80: d2:c6:1c:bf:4b:f9:89:42:f0:63:4a:1a:52:3d:38:9a:84:38: 1b:d4:4a:17:45:82:d9:56:24:ea:69:d1:0f:a5:3f:82:19:de: 16:c7:76:bd:bf:b7:f0:86:f3:43:fd:bd:f9:ad:c7:d5:90:cd: 8c:6d:c4:71:0b:17:45:2a:28:dd:4f:3a:dd:5c:fe:87:96:bb: aa:12:ed:c9:91:a7:93:62:80:e5:52:1a:cc:99:0a:17:75:41: 11:24:02:47:57:e9:03:38:b1:4d:b2:28:22:6b:8e:20:6a:c3: 8c:76:d2:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkM5MDExMC8GA1UEBRMoOEYyMkQxRjU2MkEwNTA3QjExMzU4RjA1M0RBNDJDODA1 MkQ0Qjk1NTAeFw0yNTA1MzEwNzA0MzRaFw0yNTA2MDcwNzA0MzRaMBgxFjAUBgNV BAMTDTY4M2FhYTAyLWI2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDsEbP3ziX1Yfu908axs34+BwjJmGDA5Tfw7j7qgfla4CcEq/HswfRgttUggVYt sv2oJKeY96DpuE69bmIDD30o83zmfL8L6IpxvJTOMUsS3kr76rpFIDj6fBsypG+p ZsS3UDtAtln63oaR34OnnT02PuMzh9goJDlVWFskKUefvVqV9IzcWDGnnmIGD3Ja glGbAo6gvajDWzkcOAhppv47bHznlXjlV6NDHwfbz5fOW2WJ9X4jbcObs3GugWUy lEbBhqZGBp1gc9S6m7qCv4a4V0xV8AxV1asoNoKT0YL1A5v0MRMAwtbBLLvQzTdh u6sM8WmBzcX8lhOSmL4iSiM7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3yVmSy5/ viUNJ3ChCRHpAZsEecwwHwYDVR0jBBgwFoAUjyLR9WKgUHsRNY8FPaQsgFLUuVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QzkwLzMxQjQ1RkVDRTIx RDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhzUk5ZOEZQYVFzZ0ZMVXVW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanlMUjlXS2dVSHNSTlk4RlBhUXNnRkxVdVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QzkwLzMxQjQ1RkVDRTIxRDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhz Uk5ZOEZQYVFzZ0ZMVXVWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+DzBcrSEm6A7hx5VnHLvaxMLbc6UcHt+e6XN/OboRvn8CoPJnN6wYG 4fzDoyAYDoUxMBv9AX21dwNkOls8Ss9a9ujny9nAgbGvQ73dRqsm1SW8W8PpL6Ki juoZTizjYuZDqC2jD3iDshmXirt3r4H6+zc7YQ/nGkLJQlYGRDU5Mnf5rsrcOMIM W5CglvzmgNLGHL9L+YlC8GNKGlI9OJqEOBvUShdFgtlWJOpp0Q+lP4IZ3hbHdr2/ t/CG80P9vfmtx9WQzYxtxHELF0UqKN1POt1c/oeWu6oS7cmRp5NigOVSGsyZChd1 QREkAkdX6QM4sU2yKCJrjiBqw4x20gc= -----END CERTIFICATE-----Generated at Sat May 31 16:55:01 2025 by rpki-client