$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft File: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft (raw, json) Hash identifier: CM82E4NrMvRnATheoPiX42+C/41K2dzwI8Apiz3qNfY= Subject key identifier: A5:1E:1A:C0:1A:A0:B2:C6:9B:B5:BD:FA:99:B3:53:B9:37:51:0C:8C Authority key identifier: 26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F Certificate issuer: /CN=A91275FB/serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Certificate serial: 1807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft Manifest number: 17EB Signing time: Fri 30 May 2025 16:44:54 +0000 Manifest this update: Fri 30 May 2025 16:44:53 +0000 Manifest next update: Fri 06 Jun 2025 16:44:53 +0000 Files and hashes: 1: JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl (hash: aK/jDg1ocAAO4KdLwPBwR3ZPDkkbr876wT+Jygtjdes=) 2: 1E76B980C4BA11E78E05EE70C4F9AE02.roa (hash: AJVJFbnvPCGmDcQ1w9Ifor0vZahtLKDl6qkkbnsRLEw=) 3: FCD95792C21111E792F4785EC4F9AE02.roa (hash: vQNKqM+IPJTV8w/FcMbZHdV0h0wCR5wUymZdMLOlrMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6151 (0x1807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FB, serialNumber=26199C5F6189E02EC516853919E15BA601D7C85F Validity Not Before: May 30 16:44:53 2025 GMT Not After : Jun 6 16:44:53 2025 GMT Subject: CN=6839e085-7f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:4c:30:a4:76:d4:92:70:fb:d4:79:ed:42: cb:ce:8f:b7:ad:b6:f4:f4:10:08:3c:63:c1:0b:d0: eb:6a:36:92:c6:37:06:84:03:a6:e1:b0:b5:b7:27: d1:fd:7a:39:3b:fb:11:4c:64:4a:e4:2f:f0:07:38: 8c:c3:b4:dd:2c:8a:fc:d6:31:f6:82:66:4f:a6:c5: a4:85:6f:df:60:65:cd:70:ec:6e:98:80:4f:58:57: 32:ba:5f:6e:f9:ec:c5:69:28:e4:16:8e:36:4c:b9: 5f:da:90:de:bf:16:91:57:20:b6:9b:35:5b:47:a6: be:86:de:18:85:a4:93:f5:b2:ab:2b:0e:c9:5c:11: 5a:46:5e:5f:31:c9:be:51:10:3c:6f:ff:5d:53:04: ec:a6:97:dd:e0:08:37:4b:1a:83:0f:61:de:79:49: 38:d5:c4:c0:c0:bc:88:eb:08:ca:cf:7d:4e:0a:dc: 15:05:b6:8b:fb:b4:62:f0:30:3e:a7:47:87:c1:d1: 6a:6b:b1:fb:7f:79:95:fc:22:02:7c:2a:69:e5:d2: dc:81:3a:ea:e2:a0:01:73:4f:63:58:ed:4b:a7:aa: ea:d3:fe:a3:53:7b:24:cc:89:0d:15:22:63:be:90: 47:02:66:75:ab:31:08:73:5a:48:62:d4:d7:47:ca: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:1A:C0:1A:A0:B2:C6:9B:B5:BD:FA:99:B3:53:B9:37:51:0C:8C X509v3 Authority Key Identifier: keyid:26:19:9C:5F:61:89:E0:2E:C5:16:85:39:19:E1:5B:A6:01:D7:C8:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FB/FDDB88DCC21011E7920A955DC4F9AE02/JhmcX2GJ4C7FFoU5GeFbpgHXyF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2e:d4:36:e4:f4:c7:57:33:e3:d2:55:80:a1:6a:a7:09:99: 0d:8f:26:38:e1:8c:ef:39:31:de:3a:cf:fe:a7:d8:0e:09:b1: 9e:7f:98:63:54:79:de:18:01:c9:23:af:18:a9:10:37:55:f2: 3a:64:89:78:6c:1f:d4:61:5e:74:7f:35:e6:d9:02:ea:47:37: 38:2a:cc:4f:cd:49:52:9a:5f:4e:cf:89:32:51:6a:75:90:18: a8:ae:0b:97:f0:ff:f3:ff:6a:95:b8:ad:8e:0a:72:5a:51:e3: a6:8d:ba:39:c2:2f:90:5f:99:b8:e3:11:b5:5d:bd:4d:81:7d: cd:33:d3:54:d4:c6:9b:69:8c:0c:7e:a6:1f:2e:96:a8:b1:c3: d8:21:51:50:12:3f:b8:a2:df:e8:cd:9e:dd:96:33:f7:43:95: 8a:87:51:d3:53:18:73:fe:8b:81:7f:96:3f:28:4b:64:15:dd: 4f:04:7a:9e:88:a8:27:8f:e9:3c:b8:5d:7f:2b:2f:7b:20:64: be:1f:e7:f9:f7:2a:06:08:1c:52:0e:d6:b5:f9:7c:87:3b:a7: d5:83:eb:2a:03:23:b1:50:db:3c:5b:6a:9e:b1:50:3d:ac:26: eb:ab:54:67:3e:09:65:4f:01:f0:4d:0d:c0:68:8d:82:f5:c4: 88:2c:a6:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkIxMTAvBgNVBAUTKDI2MTk5QzVGNjE4OUUwMkVDNTE2ODUzOTE5RTE1QkE2 MDFEN0M4NUYwHhcNMjUwNTMwMTY0NDUzWhcNMjUwNjA2MTY0NDUzWjAYMRYwFAYD VQQDEw02ODM5ZTA4NS03ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtFMMKR21JJw+9R57ULLzo+3rbb09BAIPGPBC9DrajaSxjcGhAOm4bC1tyfR /Xo5O/sRTGRK5C/wBziMw7TdLIr81jH2gmZPpsWkhW/fYGXNcOxumIBPWFcyul9u +ezFaSjkFo42TLlf2pDevxaRVyC2mzVbR6a+ht4YhaST9bKrKw7JXBFaRl5fMcm+ URA8b/9dUwTsppfd4Ag3SxqDD2HeeUk41cTAwLyI6wjKz31OCtwVBbaL+7Ri8DA+ p0eHwdFqa7H7f3mV/CICfCpp5dLcgTrq4qABc09jWO1Lp6rq0/6jU3skzIkNFSJj vpBHAmZ1qzEIc1pIYtTXR8q9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUeGsAa oLLGm7W9+pmzU7k3UQyMMB8GA1UdIwQYMBaAFCYZnF9hieAuxRaFORnhW6YB18hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGQi9GRERCODhEQ0My MTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRDN0ZGb1U1R2VGYnBnSFh5 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pobWNYMkdKNEM3RkZvVTVHZUZicGdIWHlGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGQi9GRERCODhEQ0MyMTAxMUU3OTIwQTk1NURDNEY5QUUwMi9KaG1jWDJHSjRD N0ZGb1U1R2VGYnBnSFh5RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChLtQ25PTHVzPj0lWAoWqnCZkNjyY44YzvOTHeOs/+p9gOCbGef5hj VHneGAHJI68YqRA3VfI6ZIl4bB/UYV50fzXm2QLqRzc4KsxPzUlSml9Oz4kyUWp1 kBiorguX8P/z/2qVuK2OCnJaUeOmjbo5wi+QX5m44xG1Xb1NgX3NM9NU1MabaYwM fqYfLpaoscPYIVFQEj+4ot/ozZ7dljP3Q5WKh1HTUxhz/ouBf5Y/KEtkFd1PBHqe iKgnj+k8uF1/Ky97IGS+H+f59yoGCBxSDta1+XyHO6fVg+sqAyOxUNs8W2qesVA9 rCbrq1RnPgllTwHwTQ3AaI2C9cSILKYZ -----END CERTIFICATE-----Generated at Sat May 31 16:36:55 2025 by rpki-client