$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft File: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json) Hash identifier: 1u9EdOkYhY6xLubBiyOstIwV1Tv3VwFel0+HCkL0Iq8= Subject key identifier: 58:F9:97:E2:A8:B1:98:36:D4:19:DC:7C:51:14:FA:B5:02:04:80:83 Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 Certificate issuer: /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft Manifest number: 0AA9 Signing time: Fri 30 May 2025 19:43:51 +0000 Manifest this update: Fri 30 May 2025 19:43:50 +0000 Manifest next update: Fri 06 Jun 2025 19:43:50 +0000 Files and hashes: 1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: n93SprF+LFOY8tOX+4IKSCAwT4NhSDKNqE9M4k7HTdM=) 2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=) 3: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=) 4: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7 Validity Not Before: May 30 19:43:50 2025 GMT Not After : Jun 6 19:43:50 2025 GMT Subject: CN=683a0a76-3888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:f9:de:54:35:e7:d0:93:8d:99:42:10:d6: 8a:23:20:8e:60:05:fd:fb:5d:f8:3a:44:54:b3:e4: 98:23:a6:7c:f9:de:5e:e6:56:da:0b:d1:22:67:99: 31:d7:30:56:32:6e:e4:42:99:04:eb:6c:49:77:95: 17:ee:d6:f7:2b:68:b3:d0:47:0d:3a:ca:1c:30:11: 71:89:59:91:d6:00:ac:a6:d3:30:39:3d:50:27:a0: 6a:67:f7:ea:dd:b3:eb:9d:d9:53:e0:0f:a7:b4:ac: 83:b9:4f:44:3f:47:48:18:4f:fe:cb:6f:4f:9f:ba: 66:7b:d9:d7:b3:2d:15:f6:73:51:78:28:db:18:13: 25:ef:22:36:78:e7:80:e2:6b:5b:37:63:5e:eb:3a: 02:40:1d:82:bb:70:f4:99:31:fa:60:b3:3b:62:72: 96:b6:60:ec:50:f3:7e:2c:27:3e:04:5e:18:f7:dd: 93:68:4f:3d:1d:ca:8e:39:fd:b4:9f:fc:01:e1:c9: 88:ae:73:97:68:d4:bb:cd:f3:7e:20:02:e2:73:ff: fd:d1:b4:a8:43:e0:a7:82:15:13:77:71:91:5d:b9: ef:9d:26:45:87:6b:20:d4:b8:fc:14:5d:d1:a2:be: b8:8d:12:c5:6f:e5:ec:5b:2a:dc:b5:ac:29:52:b0: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F9:97:E2:A8:B1:98:36:D4:19:DC:7C:51:14:FA:B5:02:04:80:83 X509v3 Authority Key Identifier: keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:97:9c:4d:9b:5e:11:4e:68:96:1c:d3:30:99:76:21:fb:23: 71:c5:cc:19:22:87:43:94:7c:c5:21:dd:e6:02:b8:ff:be:09: 85:35:96:9a:d3:1e:05:19:5b:6c:a6:7d:0a:96:f3:ee:75:c1: e8:8b:d4:b7:8e:25:27:df:f2:dd:e1:37:2a:ff:eb:b3:2c:59: c7:0a:5f:8f:d2:7b:73:80:00:9b:07:5c:56:8d:11:cd:ab:1a: cc:e6:c3:25:1c:b6:ec:7c:9c:19:f3:64:b6:1b:30:2d:2e:6a: 74:fe:78:d7:07:aa:79:d5:25:e4:1b:90:5b:ff:02:4c:c8:75: 77:27:84:6c:0f:78:a2:74:ea:5b:06:b3:d4:c4:e1:95:89:21: c3:11:3c:38:17:3f:40:31:85:6f:8d:e0:89:da:22:80:91:32: 77:c8:95:ee:93:98:f2:5a:e7:80:59:ba:ec:a0:24:3a:79:e4: 4b:13:3f:c6:04:00:ee:08:71:9d:b6:b6:0b:05:ab:5d:25:32: 28:8a:e3:a1:c1:17:aa:77:6b:22:40:d0:09:51:ec:02:18:10: 86:ab:b0:34:02:1d:83:5b:68:c9:3b:5a:84:df:8c:9d:bd:1c: 43:17:f1:24:a6:01:86:c0:fc:77:78:ec:fb:02:ef:3c:0c:b8: 01:96:c0:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE MEMzOTYyRTcwHhcNMjUwNTMwMTk0MzUwWhcNMjUwNjA2MTk0MzUwWjAYMRYwFAYD VQQDEw02ODNhMGE3Ni0zODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lL53lQ159CTjZlCENaKIyCOYAX9+134OkRUs+SYI6Z8+d5e5lbaC9EiZ5kx 1zBWMm7kQpkE62xJd5UX7tb3K2iz0EcNOsocMBFxiVmR1gCsptMwOT1QJ6BqZ/fq 3bPrndlT4A+ntKyDuU9EP0dIGE/+y29Pn7pme9nXsy0V9nNReCjbGBMl7yI2eOeA 4mtbN2Ne6zoCQB2Cu3D0mTH6YLM7YnKWtmDsUPN+LCc+BF4Y992TaE89HcqOOf20 n/wB4cmIrnOXaNS7zfN+IALic//90bSoQ+CnghUTd3GRXbnvnSZFh2sg1Lj8FF3R or64jRLFb+XsWyrctawpUrD62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj5l+Ko sZg21BncfFEU+rUCBICDMB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2 OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXl5xNm14RTmiWHNMwmXYh+yNxxcwZIodDlHzFId3mArj/vgmFNZaa 0x4FGVtspn0KlvPudcHoi9S3jiUn3/Ld4Tcq/+uzLFnHCl+P0ntzgACbB1xWjRHN qxrM5sMlHLbsfJwZ82S2GzAtLmp0/njXB6p51SXkG5Bb/wJMyHV3J4RsD3iidOpb BrPUxOGViSHDETw4Fz9AMYVvjeCJ2iKAkTJ3yJXuk5jyWueAWbrsoCQ6eeRLEz/G BADuCHGdtrYLBatdJTIoiuOhwReqd2siQNAJUewCGBCGq7A0Ah2DW2jJO1qE34yd vRxDF/EkpgGGwPx3eOz7Au88DLgBlsBR -----END CERTIFICATE-----Generated at Sat May 31 17:34:26 2025 by rpki-client