$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: LXdRKs8i+GP1mV1ime5XA9VgAaXG093x3zfhacj4G/w= Subject key identifier: 0A:51:5E:67:1A:6E:C2:33:64:83:CB:DC:82:86:F5:CB:25:58:A1:51 Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 058A Signing time: Fri 30 May 2025 23:27:26 +0000 Manifest this update: Fri 30 May 2025 23:27:25 +0000 Manifest next update: Fri 06 Jun 2025 23:27:25 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: Iff0ft4AEUViBAx/3R2aPT+QXY+ltyEyFWyWLLi6iMs=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: bvi2PqNlW+oMVQ1UwJQ0bSEdv/ndyrJ9LYRWbNa29XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: May 30 23:27:25 2025 GMT Not After : Jun 6 23:27:25 2025 GMT Subject: CN=683a3edd-def6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:dd:a2:e3:94:57:d9:99:b4:cc:d6:32:72: 25:31:72:24:d4:43:69:18:32:4e:91:94:c6:9a:ca: 2f:e9:d6:4e:4e:db:a1:60:b7:ff:f4:77:31:c5:83: ee:d3:ab:43:7f:eb:d2:f5:75:72:fe:dd:84:e0:3f: d2:f2:c1:53:70:84:58:2d:de:76:0f:66:46:e6:e1: 75:de:b5:4a:28:8b:d3:88:ba:fc:c2:b1:80:1e:7a: 6a:52:41:a5:af:2e:30:73:4f:39:a4:c3:ee:73:17: 78:cf:a1:f3:ae:3e:69:b0:88:79:6a:5b:74:bc:02: 20:ba:a3:5f:d1:10:f0:39:b5:97:0f:1a:3d:73:f8: 81:5c:43:b4:02:3b:97:b6:f0:ba:93:4d:3e:b4:90: 5d:b0:c3:b7:6d:de:de:95:42:56:33:b6:2a:7f:b1: 07:49:a3:d5:5a:73:03:98:30:16:eb:2c:84:e4:ee: 4d:a9:57:ca:65:79:8f:38:40:23:c1:0d:01:6a:a2: 8b:6b:70:2c:61:ce:f4:20:17:64:c7:51:6b:d4:e2: 1f:6c:f8:17:b6:ed:61:d4:9e:bc:e8:4b:ac:2c:3e: d7:25:a2:79:ae:e1:a1:3e:80:ad:9d:06:d6:72:89: bd:df:1b:90:87:e8:93:6f:05:50:76:bf:72:85:92: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:5E:67:1A:6E:C2:33:64:83:CB:DC:82:86:F5:CB:25:58:A1:51 X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9c:77:df:eb:9e:a7:4a:07:bb:8a:6e:d5:d5:03:0e:e3:a6: a8:a1:76:a7:c1:33:ff:91:2b:58:21:e1:1a:91:88:e7:30:ab: bc:7a:a5:43:e9:d9:9a:2c:f8:2c:6c:6e:db:65:c2:08:27:f4: cc:65:23:0b:cb:81:8b:7d:35:ca:86:b8:ad:d5:98:e1:e6:04: e9:99:b5:db:aa:d6:97:8c:c1:97:5f:bf:97:ab:1f:ca:1e:b6: 3e:9b:70:2f:c7:25:a6:c6:66:f0:fa:0b:ba:d4:aa:46:26:84: 09:5d:81:f0:46:75:a6:80:88:c3:8d:46:2c:17:30:f1:31:e1: 6f:84:14:6c:07:96:0b:a2:0f:95:61:39:39:00:d0:0c:6f:32: 71:56:4e:c1:34:40:c3:17:98:55:56:f2:ce:86:1b:7c:1e:68: 80:50:67:d3:a7:e4:fd:8a:9b:bc:03:b4:c5:53:ad:bd:fb:92: 3f:be:42:c0:7e:94:b9:5a:c6:4b:2a:de:34:cd:6c:76:c5:d7: c4:8e:0e:ab:76:a9:f7:7d:8c:6c:eb:6e:3a:8e:9a:13:fe:80: 3e:e0:f1:d9:38:95:10:09:1f:ab:b8:a3:c1:f8:a1:20:15:b8: c2:8b:95:c0:0a:77:b8:88:e7:cd:c2:c9:05:6e:a5:59:a1:be: fe:db:01:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUwNTMwMjMyNzI1WhcNMjUwNjA2MjMyNzI1WjAYMRYwFAYD VQQDEw02ODNhM2VkZC1kZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJrdouOUV9mZtMzWMnIlMXIk1ENpGDJOkZTGmsov6dZOTtuhYLf/9HcxxYPu 06tDf+vS9XVy/t2E4D/S8sFTcIRYLd52D2ZG5uF13rVKKIvTiLr8wrGAHnpqUkGl ry4wc085pMPucxd4z6Hzrj5psIh5alt0vAIguqNf0RDwObWXDxo9c/iBXEO0AjuX tvC6k00+tJBdsMO3bd7elUJWM7Yqf7EHSaPVWnMDmDAW6yyE5O5NqVfKZXmPOEAj wQ0BaqKLa3AsYc70IBdkx1Fr1OIfbPgXtu1h1J686EusLD7XJaJ5ruGhPoCtnQbW com93xuQh+iTbwVQdr9yhZJvPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApRXmca bsIzZIPL3IKG9cslWKFRMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdnHff656nSge7im7V1QMO46aooXanwTP/kStYIeEakYjnMKu8eqVD 6dmaLPgsbG7bZcIIJ/TMZSMLy4GLfTXKhrit1Zjh5gTpmbXbqtaXjMGXX7+Xqx/K HrY+m3AvxyWmxmbw+gu61KpGJoQJXYHwRnWmgIjDjUYsFzDxMeFvhBRsB5YLog+V YTk5ANAMbzJxVk7BNEDDF5hVVvLOhht8HmiAUGfTp+T9ipu8A7TFU629+5I/vkLA fpS5WsZLKt40zWx2xdfEjg6rdqn3fYxs6246jpoT/oA+4PHZOJUQCR+ruKPB+KEg FbjCi5XACne4iOfNwskFbqVZob7+2wFE -----END CERTIFICATE-----Generated at Sat May 31 17:31:58 2025 by rpki-client