$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: pExk29RUCluXt+ZZJMbJD0BHGbHWOI3QLoD9szcyoP8= Subject key identifier: E7:09:84:1C:B8:84:FA:12:FB:98:74:2B:72:D3:5C:F6:F0:E7:8D:5A Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 160A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 1600 Signing time: Fri 30 May 2025 16:57:08 +0000 Manifest this update: Fri 30 May 2025 16:57:08 +0000 Manifest next update: Fri 06 Jun 2025 16:57:08 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: yqSEpC5kPwVDGZxgQJ4/lxVuDDpSs/NQoH29JM7DaSc=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5642 (0x160a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: May 30 16:57:08 2025 GMT Not After : Jun 6 16:57:08 2025 GMT Subject: CN=6839e364-4689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:c8:21:05:ca:ae:bb:6d:f0:aa:9a:bd:ce: 8d:93:50:d2:84:5d:34:4e:70:aa:60:fc:eb:cd:1d: 87:ac:0e:02:ef:e2:bd:10:ad:d9:16:47:2a:42:35: 27:d4:38:64:36:a6:b5:db:1f:82:78:65:52:fd:d0: 0d:21:2b:f0:ba:32:a7:66:45:a9:16:df:6a:01:1f: d5:72:7a:f2:e8:33:12:1d:16:fa:b3:ea:ad:dd:64: c6:1e:ff:dc:74:45:c2:fc:bc:46:be:aa:c5:f9:7d: d8:8e:09:05:93:2d:9e:d7:4e:06:84:ab:67:ed:59: 51:66:79:84:9b:e2:c8:fb:4a:4c:12:39:56:88:c2: 31:d5:ac:15:f8:cd:28:e5:b7:c2:a1:8a:b4:c3:5d: c6:96:98:84:9e:2a:ae:c6:16:5c:05:94:f6:85:12: 2f:0a:24:34:ef:e5:ad:66:89:7c:c3:82:6e:c3:ef: 8a:b7:8b:5a:59:80:a8:cf:cf:e1:48:93:0c:ee:2f: 49:36:31:7f:a1:6b:a2:a9:ef:17:14:37:81:34:ba: b8:ce:14:e9:0a:6a:53:8e:54:2b:62:60:5f:48:aa: 9f:1b:42:71:e6:19:ca:09:b7:20:18:ac:f5:d3:1c: f6:ac:af:be:da:29:19:fa:4a:d8:60:d5:b0:36:bd: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:09:84:1C:B8:84:FA:12:FB:98:74:2B:72:D3:5C:F6:F0:E7:8D:5A X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:7c:4a:b8:6f:f8:72:d9:0f:1a:0f:ec:b7:fe:54:f2:d0:1f: 06:77:10:58:fe:5f:d2:9b:03:12:46:e7:88:c5:55:e3:ae:5a: 75:cb:2f:44:0e:ae:32:08:05:0a:9f:0e:ec:0e:45:fb:91:ab: be:37:be:1e:1c:5c:d6:a5:c0:47:30:9d:0d:d0:40:63:2e:21: 2a:83:73:e9:ca:80:2d:3c:f4:3f:23:01:38:7a:2f:21:4a:ef: 8c:29:26:ac:20:06:7e:48:7e:3f:dd:52:cb:38:ff:85:2a:e9: c3:54:2c:a4:4b:c3:f5:0b:75:86:a6:13:dc:86:68:33:79:1e: f5:e2:42:be:54:6f:61:9a:a2:de:e9:50:63:b0:1d:08:68:de: cd:b6:3c:ed:5a:02:a6:66:fe:11:50:4a:74:c0:ab:2e:cb:9d: 3f:d5:72:e1:e6:cc:fe:55:34:9f:49:54:63:8f:07:98:f6:c3: 2d:73:6d:f4:6d:7c:57:2d:2a:5b:46:3c:2e:8e:32:7d:bf:62: c7:f2:88:2a:f9:85:04:3e:ce:b5:c5:09:cb:f7:9a:53:56:fa: e9:df:95:19:ad:53:92:92:61:e9:13:ff:b7:d5:ec:d9:42:1a: fc:e7:eb:fd:f9:28:06:9e:2a:db:26:01:90:19:bb:10:f4:89: 47:28:0b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwNTMwMTY1NzA4WhcNMjUwNjA2MTY1NzA4WjAYMRYwFAYD VQQDEw02ODM5ZTM2NC00Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlPIIQXKrrtt8Kqavc6Nk1DShF00TnCqYPzrzR2HrA4C7+K9EK3ZFkcqQjUn 1DhkNqa12x+CeGVS/dANISvwujKnZkWpFt9qAR/Vcnry6DMSHRb6s+qt3WTGHv/c dEXC/LxGvqrF+X3YjgkFky2e104GhKtn7VlRZnmEm+LI+0pMEjlWiMIx1awV+M0o 5bfCoYq0w13GlpiEniquxhZcBZT2hRIvCiQ07+WtZol8w4Juw++Kt4taWYCoz8/h SJMM7i9JNjF/oWuiqe8XFDeBNLq4zhTpCmpTjlQrYmBfSKqfG0Jx5hnKCbcgGKz1 0xz2rK++2ikZ+krYYNWwNr1sxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcJhBy4 hPoS+5h0K3LTXPbw541aMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTfEq4b/hy2Q8aD+y3/lTy0B8GdxBY/l/SmwMSRueIxVXjrlp1yy9E Dq4yCAUKnw7sDkX7kau+N74eHFzWpcBHMJ0N0EBjLiEqg3PpyoAtPPQ/IwE4ei8h Su+MKSasIAZ+SH4/3VLLOP+FKunDVCykS8P1C3WGphPchmgzeR714kK+VG9hmqLe 6VBjsB0IaN7NtjztWgKmZv4RUEp0wKsuy50/1XLh5sz+VTSfSVRjjweY9sMtc230 bXxXLSpbRjwujjJ9v2LH8ogq+YUEPs61xQnL95pTVvrp35UZrVOSkmHpE/+31ezZ Qhr85+v9+SgGnirbJgGQGbsQ9IlHKAup -----END CERTIFICATE-----Generated at Sat May 31 15:11:16 2025 by rpki-client