$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft File: rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json) Hash identifier: juNiykXQyuVWOGyRCoDhCus4eIcIIj5RZUJzM4nKgeg= Subject key identifier: B3:78:55:BC:79:47:B8:64:C6:87:38:3E:DB:D2:A8:18:B9:1C:83:A3 Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 Certificate issuer: /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft Manifest number: CD Signing time: Sat 31 May 2025 05:17:51 +0000 Manifest this update: Sat 31 May 2025 05:17:50 +0000 Manifest next update: Sat 07 Jun 2025 05:17:50 +0000 Files and hashes: 1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: 6EY4tgQzlHOJa8Q/y3K9qmIHZi1bgErnUG3nK96xWio=) 2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: PMFbGoDR6epjiOKU9mJpCjoNmw0cJb5L7rzhHF+eaLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384DF, serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Validity Not Before: May 31 05:17:50 2025 GMT Not After : Jun 7 05:17:50 2025 GMT Subject: CN=683a90fe-3fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:ac:fa:17:07:53:75:0a:b1:ec:95:50:93: ae:4b:08:58:f5:13:7e:bb:2f:7f:8a:3e:c5:d7:f8: 16:9a:81:31:41:a3:6f:51:c3:fd:93:0d:bc:d8:b3: e7:bf:f3:3a:c6:66:f7:ba:a9:79:b7:e2:03:78:ac: 53:32:e0:7c:af:cc:3f:12:9a:23:92:bb:91:10:f9: 23:c3:b3:90:20:9e:37:8e:39:89:01:dd:d2:81:c9: c3:d8:6e:af:6e:f1:97:31:42:36:83:ed:83:3a:64: e0:56:96:2d:bd:b7:f8:6f:ed:d1:30:83:fa:19:47: 5f:18:0c:68:c2:67:77:70:1d:80:ce:ad:2c:f4:82: 89:78:38:e4:51:39:7c:d9:e8:0d:8a:08:28:06:ea: 90:70:21:5e:5d:12:04:51:78:8f:a5:39:5c:d7:cf: 2d:f4:69:f0:a5:2f:7e:b3:b6:f5:bc:7a:94:da:07: 8a:9e:fa:0c:75:09:36:57:d1:1c:da:80:d4:0c:62: 60:35:96:a1:51:bd:4c:4e:ee:43:72:b1:ab:e4:0a: 57:a9:2b:0a:d5:2f:7d:84:0f:c6:a1:d0:ac:b5:84: cb:71:04:29:3a:e3:9e:8c:de:23:d6:93:64:94:e3: da:99:f4:90:5f:5d:f8:29:47:84:a1:3c:3d:17:a1: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:78:55:BC:79:47:B8:64:C6:87:38:3E:DB:D2:A8:18:B9:1C:83:A3 X509v3 Authority Key Identifier: keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:61:b8:29:3b:c5:04:64:a5:0c:20:2c:5a:29:75:f3:17:23: b2:aa:1d:05:41:0e:f5:74:5c:c5:9e:36:94:c4:a7:8a:30:50: f5:3a:dd:47:71:c6:03:78:e7:e5:9a:b4:2d:b7:78:82:5b:f1: e1:93:a3:a9:a1:c5:e9:41:14:44:b3:7f:73:b3:76:f5:b8:63: 7a:39:65:a7:94:da:30:9c:74:47:27:9d:3e:0c:a6:d9:35:d4: 76:de:0f:04:32:84:0c:84:e5:bf:b7:ae:af:de:76:fa:76:2f: 58:20:57:1b:ad:32:07:0e:fd:21:2b:95:47:8d:7c:fd:2a:d5: 62:b4:bd:bf:26:ba:48:05:86:00:d7:7f:bf:6d:2f:38:c0:4d: 5e:3e:46:e1:f1:fe:db:eb:07:e9:92:39:b7:92:7d:20:38:ca: f4:45:dc:02:18:99:06:9c:97:d1:5d:22:d4:82:26:a0:c2:a3: d4:df:fc:3f:6a:93:d1:3d:e9:ca:33:98:f9:f1:75:c2:60:f9: dc:87:c0:c1:f2:b8:f1:df:56:47:96:96:c5:0a:f0:3a:13:b6: 82:f9:61:3e:ca:24:69:6e:af:bb:93:a5:d5:44:66:61:8f:6a: 7b:a0:1a:18:d6:cb:a9:d6:42:4e:97:7b:74:93:d2:1b:da:c2: 4e:a4:05:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0REYxMTAvBgNVBAUTKEFDOTc4OUYyOEFGMTY4QjI2QzUwOTY0NjE1REYwNkQ3 RUM3MjAyRTMwHhcNMjUwNTMxMDUxNzUwWhcNMjUwNjA3MDUxNzUwWjAYMRYwFAYD VQQDEw02ODNhOTBmZS0zZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5+s+hcHU3UKseyVUJOuSwhY9RN+uy9/ij7F1/gWmoExQaNvUcP9kw282LPn v/M6xmb3uql5t+IDeKxTMuB8r8w/EpojkruREPkjw7OQIJ43jjmJAd3SgcnD2G6v bvGXMUI2g+2DOmTgVpYtvbf4b+3RMIP6GUdfGAxowmd3cB2Azq0s9IKJeDjkUTl8 2egNiggoBuqQcCFeXRIEUXiPpTlc188t9GnwpS9+s7b1vHqU2geKnvoMdQk2V9Ec 2oDUDGJgNZahUb1MTu5DcrGr5ApXqSsK1S99hA/GodCstYTLcQQpOuOejN4j1pNk lOPamfSQX134KUeEoTw9F6E+owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN4Vbx5 R7hkxoc4PtvSqBi5HIOjMB8GA1UdIwQYMBaAFKyXifKK8WiybFCWRhXfBtfscgLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRERi9BRTE2NEI2MjAz NzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFMSnNVSlpHRmQ4RzEteHlB dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKZUo4b3J4YUxKc1VKWkdGZDhHMS14eUF1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRERi9BRTE2NEI2MjAzNzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFM SnNVSlpHRmQ4RzEteHlBdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASYbgpO8UEZKUMICxaKXXzFyOyqh0FQQ71dFzFnjaUxKeKMFD1Ot1H ccYDeOflmrQtt3iCW/Hhk6OpocXpQRREs39zs3b1uGN6OWWnlNownHRHJ50+DKbZ NdR23g8EMoQMhOW/t66v3nb6di9YIFcbrTIHDv0hK5VHjXz9KtVitL2/JrpIBYYA 13+/bS84wE1ePkbh8f7b6wfpkjm3kn0gOMr0RdwCGJkGnJfRXSLUgiagwqPU3/w/ apPRPenKM5j58XXCYPnch8DB8rjx31ZHlpbFCvA6E7aC+WE+yiRpbq+7k6XVRGZh j2p7oBoY1sup1kJOl3t0k9Ib2sJOpAWA -----END CERTIFICATE-----Generated at Sat May 31 15:23:11 2025 by rpki-client