$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft File: JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json) Hash identifier: LxkVWmyWYOshtCayKR1jUkRaZbi9NXSFwG+c5sVjtLo= Subject key identifier: 07:2F:10:38:4C:F2:D1:7E:22:A9:CE:A6:FD:F5:D2:7D:FA:F9:BD:23 Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA Certificate issuer: /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft Manifest number: 47 Signing time: Sat 31 May 2025 06:56:49 +0000 Manifest this update: Sat 31 May 2025 06:56:48 +0000 Manifest next update: Sat 07 Jun 2025 06:56:48 +0000 Files and hashes: 1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: u4IC4RmLUN+pIao7DzC+rCX1gPpAqXmjB6OlidzMZOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Validity Not Before: May 31 06:56:48 2025 GMT Not After : Jun 7 06:56:48 2025 GMT Subject: CN=683aa830-f3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:4a:ec:01:5a:ab:66:c0:c7:5d:3f:8c:0e: 45:68:a0:12:12:9d:73:b5:22:53:ae:75:53:02:0c: 41:9e:05:28:39:ef:d9:26:ea:07:d2:11:cc:69:31: 0e:01:13:7f:6a:b8:ce:c5:c1:f6:d4:ef:ae:bb:22: d0:96:e8:0f:5c:0e:22:f7:d8:17:91:6b:14:39:bd: e1:bb:e1:16:91:af:45:a0:d9:dd:86:cf:98:ee:ca: 78:cc:32:41:34:d0:02:de:bf:38:8c:1d:a7:b4:20: 79:00:91:b9:a4:41:66:3d:02:4a:ab:2c:c8:98:8d: 1d:6f:dc:3f:f2:5f:f3:9a:8f:58:d9:0b:41:d3:6c: 6b:f1:9a:6f:04:58:f3:db:e5:95:1e:2a:86:f4:7f: af:62:5b:e3:f5:c6:ea:81:f5:d1:94:0e:97:49:7d: 94:54:79:ab:ea:da:13:a6:ab:ad:be:fd:d3:e4:36: 05:3c:e4:b6:38:d6:cc:f5:62:3e:46:03:58:68:2b: 01:fb:94:1c:ae:bd:2e:5e:a3:70:23:25:a6:3a:ae: 9e:4c:ae:3f:bc:b3:63:06:4b:3e:f0:8b:f1:6a:2d: 0d:b9:19:85:5d:2b:01:e4:c0:2a:9d:31:8d:05:28: 2a:89:e0:82:3f:66:fc:79:e6:35:e9:4b:f1:93:20: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:10:38:4C:F2:D1:7E:22:A9:CE:A6:FD:F5:D2:7D:FA:F9:BD:23 X509v3 Authority Key Identifier: keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d5:c7:60:ca:46:e8:6c:c1:65:f1:ed:49:2c:8c:f5:1e:db: a5:ca:f3:35:58:86:f8:84:c2:74:2a:d5:f7:39:67:ca:f9:d1: cb:4e:06:b5:c7:5f:c2:f3:7e:44:7b:99:a6:0a:11:fa:f8:21: a4:c8:62:fc:df:f5:27:55:26:37:61:32:e0:ed:be:a8:22:cc: 7a:03:0d:37:20:91:c2:f7:bd:a2:32:69:c8:02:5a:05:5a:7a: f3:f2:32:a8:3d:0c:5a:1a:14:17:9d:b5:65:ec:34:d9:0d:04: 7b:71:0b:d8:1b:39:fb:ad:4f:11:12:8d:80:3f:2b:bc:ea:a8: e2:8a:9a:ee:d9:ec:65:1d:10:85:a7:d0:42:f9:12:ff:00:30: 20:45:d3:16:7b:24:60:f5:b1:42:0c:7f:c4:7c:2a:01:e8:a3: d1:25:b3:13:13:db:42:4d:6b:34:b2:35:6b:38:96:f9:54:23: d6:81:0c:14:c6:40:7c:4c:53:45:4d:79:8e:7b:52:83:95:8f: e9:77:bc:e7:d3:ba:43:60:09:2c:8e:c2:42:5b:ac:3e:b4:29: d9:82:5c:7d:e3:bf:c3:49:91:35:c9:cd:52:42:ad:89:f7:35: 07:21:74:d0:0b:f5:f0:9c:66:3f:4d:f9:97:f0:3f:ad:4e:d7: f4:9b:0d:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoMjQ3MjJEMzFDMjUxM0U0RTdGODdFREI3MERGRTlEQzk0 Rjg0NjhCQTAeFw0yNTA1MzEwNjU2NDhaFw0yNTA2MDcwNjU2NDhaMBgxFjAUBgNV BAMTDTY4M2FhODMwLWYzZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLCErsAVqrZsDHXT+MDkVooBISnXO1IlOudVMCDEGeBSg579km6gfSEcxpMQ4B E39quM7FwfbU7667ItCW6A9cDiL32BeRaxQ5veG74RaRr0Wg2d2Gz5juynjMMkE0 0ALevziMHae0IHkAkbmkQWY9AkqrLMiYjR1v3D/yX/Oaj1jZC0HTbGvxmm8EWPPb 5ZUeKob0f69iW+P1xuqB9dGUDpdJfZRUeavq2hOmq62+/dPkNgU85LY41sz1Yj5G A1hoKwH7lByuvS5eo3AjJaY6rp5Mrj+8s2MGSz7wi/FqLQ25GYVdKwHkwCqdMY0F KCqJ4II/Zvx55jXpS/GTIGk7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBy8QOEzy 0X4iqc6m/fXSffr5vSMwHwYDVR0jBBgwFoAUJHItMcJRPk5/h+23Df6dyU+EaLow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzI1NTVCRjA2RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL0pISXRNY0pSUGs1X2gtMjNEZjZkeVUtRWFM by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkhJdE1jSlJQazVfaC0yM0RmNmR5VS1FYUxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzI1NTVCRjA2RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL0pISXRNY0pSUGs1 X2gtMjNEZjZkeVUtRWFMby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPVx2DKRuhswWXx7UksjPUe26XK8zVYhviEwnQq1fc5Z8r50ctOBrXH X8LzfkR7maYKEfr4IaTIYvzf9SdVJjdhMuDtvqgizHoDDTcgkcL3vaIyacgCWgVa evPyMqg9DFoaFBedtWXsNNkNBHtxC9gbOfutTxESjYA/K7zqqOKKmu7Z7GUdEIWn 0EL5Ev8AMCBF0xZ7JGD1sUIMf8R8KgHoo9ElsxMT20JNazSyNWs4lvlUI9aBDBTG QHxMU0VNeY57UoOVj+l3vOfTukNgCSyOwkJbrD60KdmCXH3jv8NJkTXJzVJCrYn3 NQchdNAL9fCcZj9N+ZfwP61O1/SbDY0= -----END CERTIFICATE-----Generated at Sat May 31 15:04:30 2025 by rpki-client