$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: Emr1CCChbxxuoFe27iEIIdWxm2JiQYDOdTy4z6MSATk= Subject key identifier: 00:F0:76:81:49:88:4E:F6:96:0B:1B:69:26:76:1C:6E:84:B1:EE:CA Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 04FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 04F5 Signing time: Fri 30 May 2025 23:55:11 +0000 Manifest this update: Fri 30 May 2025 23:55:10 +0000 Manifest next update: Fri 06 Jun 2025 23:55:10 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: 0eRttibKTV1Pps8RTWKEhmmMEH305heo3E2YuGc9EwY=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: May 30 23:55:10 2025 GMT Not After : Jun 6 23:55:10 2025 GMT Subject: CN=683a455f-91e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:5e:88:f4:b1:1e:98:6d:1b:fb:79:4f:c1: 5b:6b:b1:54:d9:ad:21:d0:4f:23:98:ef:d6:00:c4: 0a:3b:c8:93:cc:ce:19:1a:73:72:8b:22:28:94:8a: 19:2c:5d:0b:08:3c:94:b0:ae:d3:91:26:a2:c3:9c: a3:d7:4f:e4:e9:57:d7:94:f0:33:a7:b9:c3:94:49: 9d:6c:7f:43:65:fa:b5:11:5a:fc:b3:06:0f:cc:64: 67:ad:ea:29:7d:0e:b5:98:87:f9:f3:77:92:86:59: 75:76:a7:14:29:75:5f:ce:08:8b:e7:9e:55:43:8c: 35:94:45:54:54:65:1d:f8:19:85:4c:bb:91:50:6a: 38:92:c1:43:f8:5a:e7:93:9b:f0:b7:24:59:65:7e: ef:84:36:1e:99:9c:19:57:05:d0:99:9f:bf:b0:bc: a3:b0:dc:a9:f7:56:40:9c:81:a2:d4:84:1f:b4:f1: fb:01:52:7e:0a:3c:71:09:41:19:6f:b1:23:d1:e0: 1b:10:5f:28:bc:2a:b2:db:b0:e7:42:29:85:81:24: 49:67:64:dd:e1:8d:63:4f:d2:7e:3b:07:ad:95:6a: 05:85:11:1e:42:a4:cd:5c:ca:c7:91:14:1c:78:8b: 00:7a:54:54:ab:3c:f0:46:1c:5d:f3:d0:44:6c:b7: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F0:76:81:49:88:4E:F6:96:0B:1B:69:26:76:1C:6E:84:B1:EE:CA X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1c:22:52:a8:80:a6:e3:04:ad:7b:7b:ca:8e:62:1f:6d:6b: cd:06:55:be:53:b7:1a:92:00:a6:9c:0e:4d:6d:0e:c6:c6:21: ab:e0:b2:87:76:64:c1:1e:38:10:42:af:09:2e:6b:9d:39:fb: 11:d7:1b:a0:3f:48:a8:a9:a5:e0:80:8a:ac:6c:8f:43:97:a3: 2b:26:35:88:2d:6d:39:ec:7e:5f:a1:b4:63:8b:9b:8a:c7:9c: 4e:17:f5:10:32:d6:84:c5:6f:7e:2e:a5:f5:08:48:7d:f5:61: 5c:53:f6:3a:9c:56:18:59:8d:7b:46:aa:a0:2b:a3:60:91:00: a7:b6:26:61:ce:d8:70:75:e0:a2:6c:01:e4:d7:df:e1:a1:e6: 6d:fc:a8:4d:4d:eb:bf:5a:e3:51:57:1d:ba:c4:df:30:ed:10: aa:96:bf:40:61:ec:0b:0f:10:e3:16:3d:6c:af:da:87:75:e5: 6c:e3:f3:63:eb:41:fb:5f:18:cc:f4:5e:c7:1d:89:a7:94:c9: 15:09:b9:de:19:31:c0:be:c0:63:38:73:7e:30:44:aa:64:e3: 60:e8:36:e3:7c:17:b1:57:39:d4:26:33:49:fc:d8:83:08:23: b6:03:4b:6d:4f:64:28:ae:8d:0e:48:ba:e1:e5:09:e8:8c:04: e2:cc:d6:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUwNTMwMjM1NTEwWhcNMjUwNjA2MjM1NTEwWjAYMRYwFAYD VQQDEw02ODNhNDU1Zi05MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31ReiPSxHphtG/t5T8Fba7FU2a0h0E8jmO/WAMQKO8iTzM4ZGnNyiyIolIoZ LF0LCDyUsK7TkSaiw5yj10/k6VfXlPAzp7nDlEmdbH9DZfq1EVr8swYPzGRnreop fQ61mIf583eShll1dqcUKXVfzgiL555VQ4w1lEVUVGUd+BmFTLuRUGo4ksFD+Frn k5vwtyRZZX7vhDYemZwZVwXQmZ+/sLyjsNyp91ZAnIGi1IQftPH7AVJ+CjxxCUEZ b7Ej0eAbEF8ovCqy27DnQimFgSRJZ2Td4Y1jT9J+OwetlWoFhREeQqTNXMrHkRQc eIsAelRUqzzwRhxd89BEbLc0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADwdoFJ iE72lgsbaSZ2HG6Ese7KMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdHCJSqICm4wSte3vKjmIfbWvNBlW+U7cakgCmnA5NbQ7GxiGr4LKH dmTBHjgQQq8JLmudOfsR1xugP0ioqaXggIqsbI9Dl6MrJjWILW057H5fobRji5uK x5xOF/UQMtaExW9+LqX1CEh99WFcU/Y6nFYYWY17RqqgK6NgkQCntiZhzthwdeCi bAHk19/hoeZt/KhNTeu/WuNRVx26xN8w7RCqlr9AYewLDxDjFj1sr9qHdeVs4/Nj 60H7XxjM9F7HHYmnlMkVCbneGTHAvsBjOHN+MESqZONg6DbjfBexVznUJjNJ/NiD CCO2A0ttT2Qoro0OSLrh5QnojATizNaz -----END CERTIFICATE-----Generated at Sat May 31 17:26:11 2025 by rpki-client