$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft File: J-OLvrji2ycfz6F8E0feawaDRGA.mft (raw, json) Hash identifier: ZbHMTCKtSB0kfZux1iOm5Qs1+79IqTnnDnlHB4LrjVA= Subject key identifier: DF:D6:EF:DC:A6:F7:0C:13:A0:C5:69:55:C1:9B:B4:87:DB:9F:49:7B Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft Manifest number: 0541 Signing time: Fri 30 May 2025 23:38:42 +0000 Manifest this update: Fri 30 May 2025 23:38:42 +0000 Manifest next update: Fri 06 Jun 2025 23:38:42 +0000 Files and hashes: 1: J-OLvrji2ycfz6F8E0feawaDRGA.crl (hash: 0o1xA9hKDrh31kTigmmQkq1g9OEUX1PEvJg59FdKNlM=) 2: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (hash: C7jDphWDYFgMA4L/08ep7MPFd0RKLP2oweu77NqfdxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460 Validity Not Before: May 30 23:38:42 2025 GMT Not After : Jun 6 23:38:42 2025 GMT Subject: CN=683a4182-4ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:07:3e:74:8d:0d:d2:d7:0c:e8:87:06:cc: cd:b8:72:26:10:13:56:46:a8:f0:be:d5:6a:77:71: 14:72:de:5f:da:2b:f8:9e:da:74:93:6c:15:c9:38: 27:01:ec:ff:c5:bc:ba:5c:8e:77:67:80:c1:ff:41: 2e:0b:49:1e:85:0f:c2:04:57:fc:d0:c1:67:63:a9: ae:a8:e3:26:8c:98:a0:61:86:68:56:70:c5:bb:d5: b8:1d:f6:ba:4e:25:12:2a:c7:83:b6:23:1f:2f:8c: 01:6e:53:03:55:2c:37:cb:80:21:97:78:14:b5:cc: 1b:11:fb:0d:17:be:8e:2e:82:dc:a5:46:58:1b:d5: 33:39:69:db:f0:13:39:fe:f4:14:10:99:9d:4c:8f: 4b:21:e0:0d:95:a1:e5:89:c4:a5:a7:b8:91:33:89: d6:bb:80:ac:3b:4a:98:13:b6:c6:fa:1e:0e:00:5f: cd:7c:c4:12:59:b6:9a:c7:68:ba:12:3c:47:c1:8a: 50:bc:5b:2c:da:b2:d2:33:5b:71:55:1b:6e:50:3d: de:75:0e:12:b6:52:34:63:44:94:c6:c1:9e:a6:9c: 34:33:ec:28:ef:f2:cd:30:4a:0a:25:ac:fa:5a:bd: 89:2d:94:ed:cd:92:ec:cf:40:6d:b1:6d:0f:32:99: bc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:EF:DC:A6:F7:0C:13:A0:C5:69:55:C1:9B:B4:87:DB:9F:49:7B X509v3 Authority Key Identifier: keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:06:a1:5e:6d:be:91:f6:b4:dd:9d:62:27:54:27:1e:8d:a0: d2:27:41:03:2d:cb:90:d9:8d:c8:40:1a:ed:30:7f:6e:cd:55: db:0d:a1:c7:37:ef:60:69:4e:b8:e6:b8:47:30:8e:d9:2a:ad: 1c:be:26:17:03:91:7e:f1:be:bd:a0:58:49:f6:97:39:d7:c6: eb:18:04:b0:d6:1a:15:5b:fd:fc:09:84:b6:9d:e0:55:f1:4a: 89:6d:b3:66:27:d7:12:b0:7a:8f:28:a6:8a:71:e7:7b:d4:ee: 2c:cd:ad:db:21:72:10:e0:c4:98:bf:ca:07:69:e6:de:ce:7b: d1:0c:d0:08:5e:a9:0a:ee:e0:c9:ed:b2:01:cf:3a:41:39:3a: c5:3c:6d:d1:4e:3d:1c:16:4c:82:5c:6a:05:a3:49:65:81:29: fa:a9:cc:e3:27:20:61:61:2c:eb:00:9b:e2:69:18:b7:9e:db: a1:c1:9f:be:e0:72:e9:50:47:2f:a9:84:52:2e:76:f1:6b:af: b4:21:28:51:41:91:ae:3e:47:40:96:17:f0:3e:a0:5c:d3:9a: 80:f8:13:5f:f1:c3:d2:13:9e:f0:14:9e:84:f4:3e:37:b9:62: b2:bf:05:8f:d1:bc:47:0e:d0:63:5f:34:f0:df:1a:37:c3:87: 7c:a6:7b:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFNTQxMTAvBgNVBAUTKDI3RTM4QkJFQjhFMkRCMjcxRkNGQTE3QzEzNDdERTZC MDY4MzQ0NjAwHhcNMjUwNTMwMjMzODQyWhcNMjUwNjA2MjMzODQyWjAYMRYwFAYD VQQDEw02ODNhNDE4Mi00Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaUHPnSNDdLXDOiHBszNuHImEBNWRqjwvtVqd3EUct5f2iv4ntp0k2wVyTgn Aez/xby6XI53Z4DB/0EuC0kehQ/CBFf80MFnY6muqOMmjJigYYZoVnDFu9W4Hfa6 TiUSKseDtiMfL4wBblMDVSw3y4Ahl3gUtcwbEfsNF76OLoLcpUZYG9UzOWnb8BM5 /vQUEJmdTI9LIeANlaHlicSlp7iRM4nWu4CsO0qYE7bG+h4OAF/NfMQSWbaax2i6 EjxHwYpQvFss2rLSM1txVRtuUD3edQ4StlI0Y0SUxsGeppw0M+wo7/LNMEoKJaz6 Wr2JLZTtzZLsz0BtsW0PMpm8MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/W79ym 9wwToMVpVcGbtIfbn0l7MB8GA1UdIwQYMBaAFCfji7644tsnH8+hfBNH3msGg0Rg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUU1NC9BRkQxN0EzNkYz RTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5Y2Z6NkY4RTBmZWF3YURS R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otT0x2cmppMnljZno2RjhFMGZlYXdhRFJHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUU1NC9BRkQxN0EzNkYzRTIxMUVCQUFDRUE3MURDNEY5QUUwMi9KLU9MdnJqaTJ5 Y2Z6NkY4RTBmZWF3YURSR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzBqFebb6R9rTdnWInVCcejaDSJ0EDLcuQ2Y3IQBrtMH9uzVXbDaHH N+9gaU645rhHMI7ZKq0cviYXA5F+8b69oFhJ9pc518brGASw1hoVW/38CYS2neBV 8UqJbbNmJ9cSsHqPKKaKced71O4sza3bIXIQ4MSYv8oHaebeznvRDNAIXqkK7uDJ 7bIBzzpBOTrFPG3RTj0cFkyCXGoFo0llgSn6qczjJyBhYSzrAJviaRi3ntuhwZ++ 4HLpUEcvqYRSLnbxa6+0IShRQZGuPkdAlhfwPqBc05qA+BNf8cPSE57wFJ6E9D43 uWKyvwWP0bxHDtBjXzTw3xo3w4d8pntl -----END CERTIFICATE-----Generated at Sat May 31 17:17:34 2025 by rpki-client