$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: PTDjCEvx3U2Mk+PV7Pe/6ehm+Y4/yeYUQHDxUbQmbc8= Subject key identifier: 89:A4:35:2E:9F:A4:D1:AC:E5:28:57:57:FB:52:F2:2D:C2:A4:68:7A Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 017A Signing time: Sat 31 May 2025 03:23:42 +0000 Manifest this update: Sat 31 May 2025 03:23:41 +0000 Manifest next update: Sat 07 Jun 2025 03:23:41 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: xUy+noV7HASzNDsAXI+Pf7P0XL37ShyYnatf23t2wok=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: May 31 03:23:41 2025 GMT Not After : Jun 7 03:23:41 2025 GMT Subject: CN=683a763e-3d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:ae:64:15:0d:c2:e2:b8:f4:9d:f9:99:f5: eb:e4:84:68:38:c2:00:9e:ba:2c:63:58:29:de:61: 19:db:f3:b3:cb:64:d0:92:1e:5a:1a:20:58:c6:e6: c3:89:bb:99:f5:8c:06:97:4c:a0:92:48:02:87:a4: 6b:91:86:9d:3a:32:1a:77:b9:ce:62:6a:d3:c8:13: 3c:e6:11:08:84:bf:cf:fb:d2:3e:e1:25:a4:6e:bc: af:1d:e5:49:41:6b:99:31:e1:23:1d:a2:06:6f:1f: fc:4f:02:ed:f0:da:03:64:8e:0e:27:43:fe:14:2d: a2:81:d6:46:fa:6a:cb:ed:4e:ad:0e:b1:c2:fd:4a: e5:f4:d7:27:08:c1:d3:d1:44:4b:21:f5:9e:39:c6: fa:75:c4:dc:ec:16:28:ee:24:e3:1b:77:b5:c7:44: f1:62:92:66:b5:23:8c:1c:c3:45:85:b4:cc:08:35: 3c:e2:27:85:40:84:39:71:c7:a6:9f:2c:e7:36:9f: f6:c5:f1:58:69:0e:d1:e0:7d:2b:7b:fa:b8:4e:37: 4a:7d:22:c0:e2:08:7e:fa:24:de:16:79:0c:81:b3: 0c:dd:c6:5a:08:62:ad:02:ec:91:87:f8:5e:40:7e: e4:5f:41:0f:a0:de:ee:c8:cd:c2:0b:7a:7d:51:e8: 8b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A4:35:2E:9F:A4:D1:AC:E5:28:57:57:FB:52:F2:2D:C2:A4:68:7A X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:a3:a9:57:53:56:cc:00:c4:13:f2:2f:5d:ff:09:5f:18:2a: f4:6d:9e:74:3f:9c:b6:fb:8f:b6:9d:55:a4:83:d2:d6:7e:dd: 12:0c:ac:b3:bf:a9:af:4b:a7:f3:24:4f:e8:32:e8:49:cb:4f: 52:79:2c:33:d4:89:c4:cc:e6:51:0c:de:23:b7:9b:88:ac:28: 5e:67:a8:39:7f:53:ac:cb:c0:a8:c7:f4:f9:28:5b:26:85:cf: 9c:23:87:59:ea:62:0d:87:2b:08:37:51:02:67:b6:0c:6b:dc: 61:44:0a:8a:f0:66:b1:b1:f1:83:41:b9:92:f4:29:a7:99:73: 6d:43:67:2a:96:4e:8f:b3:9f:99:18:d2:fe:2b:6f:a3:b3:b0: e5:6c:68:10:26:32:d6:dc:4b:d9:87:53:e7:94:d6:3d:a3:9e: d9:a2:48:17:ad:db:2c:8e:3e:58:8f:54:ea:e4:43:2c:ec:7b: 88:ef:91:fd:97:e6:ea:a7:18:50:66:47:1b:0b:e8:64:71:12: a5:19:41:00:cf:46:8c:d1:05:c4:1a:15:88:c6:e5:8f:1a:4e: a1:e7:aa:55:1b:dd:05:09:0c:0c:b7:08:d9:fd:5d:80:d6:f7: 3a:be:2c:56:64:1a:41:73:4f:67:5c:9f:13:08:ee:49:ee:ce: 73:54:17:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUwNTMxMDMyMzQxWhcNMjUwNjA3MDMyMzQxWjAYMRYwFAYD VQQDEw02ODNhNzYzZS0zZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvSuZBUNwuK49J35mfXr5IRoOMIAnrosY1gp3mEZ2/Ozy2TQkh5aGiBYxubD ibuZ9YwGl0ygkkgCh6RrkYadOjIad7nOYmrTyBM85hEIhL/P+9I+4SWkbryvHeVJ QWuZMeEjHaIGbx/8TwLt8NoDZI4OJ0P+FC2igdZG+mrL7U6tDrHC/Url9NcnCMHT 0URLIfWeOcb6dcTc7BYo7iTjG3e1x0TxYpJmtSOMHMNFhbTMCDU84ieFQIQ5ccem nyznNp/2xfFYaQ7R4H0re/q4TjdKfSLA4gh++iTeFnkMgbMM3cZaCGKtAuyRh/he QH7kX0EPoN7uyM3CC3p9UeiLgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImkNS6f pNGs5ShXV/tS8i3CpGh6MB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwo6lXU1bMAMQT8i9d/wlfGCr0bZ50P5y2+4+2nVWkg9LWft0SDKyz v6mvS6fzJE/oMuhJy09SeSwz1InEzOZRDN4jt5uIrCheZ6g5f1Osy8Cox/T5KFsm hc+cI4dZ6mINhysIN1ECZ7YMa9xhRAqK8GaxsfGDQbmS9CmnmXNtQ2cqlk6Ps5+Z GNL+K2+js7DlbGgQJjLW3EvZh1PnlNY9o57ZokgXrdssjj5Yj1Tq5EMs7HuI75H9 l+bqpxhQZkcbC+hkcRKlGUEAz0aM0QXEGhWIxuWPGk6h56pVG90FCQwMtwjZ/V2A 1vc6vixWZBpBc09nXJ8TCO5J7s5zVBcK -----END CERTIFICATE-----Generated at Sat May 31 17:00:20 2025 by rpki-client