$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: oomh3HrrrFDQRMcmNNDRw+JL6OaAQW8dUdO5LbbHOjE= Subject key identifier: E4:88:1C:C6:B8:AA:EC:6F:3E:04:C4:7D:59:DA:04:DE:AA:9F:26:DA Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0B09 Signing time: Fri 30 May 2025 19:29:04 +0000 Manifest this update: Fri 30 May 2025 19:29:03 +0000 Manifest next update: Fri 06 Jun 2025 19:29:03 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: oyCFhJIkgZp3cTZ6uTC7vuQPzbXMdxkehDOfhP1msbg=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: WrNvje3c+z7lsqTQqXn/sqPriUfd4/uYt7v0A72LhYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: May 30 19:29:03 2025 GMT Not After : Jun 6 19:29:03 2025 GMT Subject: CN=683a0700-377b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:f0:90:b1:78:56:84:1e:86:20:b4:fd:16: 9f:5e:6b:8a:b1:be:f2:19:bb:05:2c:1e:f6:98:64: ef:12:1e:a3:db:c5:19:86:52:47:b4:e4:29:8d:f8: 0c:bf:6f:2e:d0:04:52:b4:5a:42:17:72:49:f4:48: b3:32:df:c0:d1:31:4d:15:90:0e:5c:a1:a9:4f:18: 3b:6a:1f:cd:4b:1d:2f:f2:a3:a4:67:d1:2b:fb:8b: 49:92:23:1d:a9:1a:16:42:98:23:d2:50:3e:2d:ab: 21:6f:94:99:8e:7e:fb:4f:3f:e8:0b:1b:7b:62:31: 16:c9:a7:3d:08:96:fb:b9:c7:b9:5a:4d:c0:26:36: 22:c6:cf:f3:d0:0f:bf:9e:5a:d9:36:aa:3c:b6:68: c2:8d:a6:2d:6c:f8:fe:f5:5e:0c:ed:73:c9:65:b1: fe:4f:c0:f8:0d:a6:c5:77:1f:7c:61:d9:7f:c1:37: 0a:50:a6:11:95:ec:f8:41:76:d8:d6:45:ce:e5:4c: a3:08:ed:98:cd:3d:94:ce:20:6d:98:8a:67:41:21: 48:00:a8:8f:23:c3:0a:a9:1a:84:bb:94:a7:a8:a7: f8:52:be:f9:80:81:49:a8:c7:aa:46:ef:a6:5f:c1: 42:6a:cf:c7:e3:e9:85:51:f6:5d:d9:b8:ca:bb:cf: 6e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:88:1C:C6:B8:AA:EC:6F:3E:04:C4:7D:59:DA:04:DE:AA:9F:26:DA X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:16:eb:bf:c7:83:91:bc:d6:a9:5f:d4:2c:15:d9:65:21:b9: d9:f6:68:1a:ea:77:15:52:b1:4c:2e:cd:9c:cd:16:38:05:62: 00:bd:e0:23:69:6b:18:e0:cb:f9:b9:f5:84:18:e9:df:32:e4: ee:f6:11:7d:52:f6:5d:6e:d1:4b:bc:46:b2:79:a8:99:16:71: 06:67:1c:9a:86:f8:99:ec:db:1f:4e:e2:c2:33:ff:ae:b2:14: 11:dc:24:93:81:dd:c9:90:bf:3a:56:fe:ae:91:8f:65:a5:b3: eb:59:2f:d3:48:f6:3c:f0:23:6b:ab:7b:3b:0e:99:f9:a1:66: d5:ef:b0:76:05:36:a1:dd:c5:e6:04:ff:8a:8f:88:14:9d:a4: c6:54:c2:df:a2:fc:67:05:af:d4:28:7a:ed:41:35:c1:ed:a8: a0:6f:1b:9e:7c:6b:14:61:e8:b5:12:c1:1a:ca:47:cd:0c:82: 31:77:77:4b:14:e8:2f:93:17:f8:65:fa:c9:8b:27:e8:59:d2: 99:3f:4c:72:55:52:0a:7f:c8:ce:97:ff:26:2f:39:20:cc:1f: 3f:c2:bd:4d:92:a5:9f:d4:98:cb:fe:7e:77:d3:fd:43:0c:3e: 2f:bd:59:ce:f5:13:e1:91:12:4e:2c:ef:e7:8a:2c:16:ba:ae: cc:b5:6f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjUwNTMwMTkyOTAzWhcNMjUwNjA2MTkyOTAzWjAYMRYwFAYD VQQDEw02ODNhMDcwMC0zNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSPwkLF4VoQehiC0/RafXmuKsb7yGbsFLB72mGTvEh6j28UZhlJHtOQpjfgM v28u0ARStFpCF3JJ9EizMt/A0TFNFZAOXKGpTxg7ah/NSx0v8qOkZ9Er+4tJkiMd qRoWQpgj0lA+Lashb5SZjn77Tz/oCxt7YjEWyac9CJb7uce5Wk3AJjYixs/z0A+/ nlrZNqo8tmjCjaYtbPj+9V4M7XPJZbH+T8D4DabFdx98Ydl/wTcKUKYRlez4QXbY 1kXO5UyjCO2YzT2UziBtmIpnQSFIAKiPI8MKqRqEu5SnqKf4Ur75gIFJqMeqRu+m X8FCas/H4+mFUfZd2bjKu89uNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSIHMa4 quxvPgTEfVnaBN6qnybaMB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Fuu/x4ORvNapX9QsFdllIbnZ9mga6ncVUrFMLs2czRY4BWIAveAj aWsY4Mv5ufWEGOnfMuTu9hF9UvZdbtFLvEayeaiZFnEGZxyahviZ7NsfTuLCM/+u shQR3CSTgd3JkL86Vv6ukY9lpbPrWS/TSPY88CNrq3s7Dpn5oWbV77B2BTah3cXm BP+Kj4gUnaTGVMLfovxnBa/UKHrtQTXB7aigbxuefGsUYei1EsEaykfNDIIxd3dL FOgvkxf4ZfrJiyfoWdKZP0xyVVIKf8jOl/8mLzkgzB8/wr1NkqWf1JjL/n530/1D DD4vvVnO9RPhkRJOLO/niiwWuq7MtW+x -----END CERTIFICATE-----Generated at Sat May 31 17:44:05 2025 by rpki-client