$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: 2DiYdLCXHrt6qSAAxpKxRklpNHBSNzd81AWvFO3xluQ= Subject key identifier: B1:77:05:87:E6:89:56:55:83:55:18:C4:F8:39:80:AC:31:3C:E1:22 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0104 Signing time: Sat 07 Jun 2025 04:38:26 +0000 Manifest this update: Sat 07 Jun 2025 04:38:26 +0000 Manifest next update: Sat 14 Jun 2025 04:38:26 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: asaaWzKck+vdvmVjHVhTRheqVYvmcFZG781mTMycXFY=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 04:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Jun 7 04:38:26 2025 GMT Not After : Jun 14 04:38:26 2025 GMT Subject: CN=6843c242-5234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:f1:a4:11:72:b9:12:c9:d3:da:75:1f:f4: e6:2f:51:a9:28:4b:3c:c0:8b:c2:8b:21:2b:56:6a: 55:a4:8d:5b:8e:ee:7d:7f:21:0b:c0:74:8b:3f:43: aa:32:7c:a4:1f:57:71:89:86:13:87:9f:9e:2c:31: 66:0e:87:3b:e4:c4:a0:9f:5d:1c:87:03:54:54:2b: f0:3d:3e:b7:8f:f6:18:5d:30:05:39:ec:10:68:5e: 0c:90:03:28:9f:b4:1b:0e:75:47:cf:20:6d:c0:dd: f0:94:0f:65:c2:2f:a4:47:e3:fc:01:2f:84:bf:24: 86:76:eb:c5:37:de:2c:5e:57:12:72:d9:16:8b:28: 57:cd:1f:3b:67:3b:06:56:d0:03:1d:f5:59:73:c9: d4:58:29:a8:57:09:27:ab:63:2d:fd:ce:28:1a:12: fd:dc:42:80:7d:ac:8a:b2:8a:bb:6d:a6:60:63:ea: e4:c4:2e:ec:69:c6:0c:ec:3f:a4:a6:5f:ea:f4:b4: c5:bb:1e:cd:02:98:7a:35:fc:91:d4:68:27:f3:57: 43:9f:13:f0:a8:db:7a:a1:06:c2:20:ce:7a:c8:ca: 9c:a9:36:ea:81:1e:f0:de:2e:f1:1c:b0:31:62:28: 94:41:87:80:02:37:38:40:db:5d:ae:b9:46:37:c3: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:77:05:87:E6:89:56:55:83:55:18:C4:F8:39:80:AC:31:3C:E1:22 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:83:c5:cc:ea:dd:ce:27:16:8f:1a:d3:46:f8:7f:f2:71:39: 15:75:89:f2:8a:e1:96:7b:98:8b:86:38:17:06:32:78:45:f4: 42:f4:e7:d3:0a:b6:0b:6d:d2:53:7f:c3:d4:f0:d8:bd:3f:1d: 84:87:aa:ee:22:a4:2c:01:14:b2:24:dc:7b:e2:02:50:71:7c: 21:25:3b:46:43:9b:78:a8:cb:fb:52:3a:3d:1a:24:69:a7:6b: 97:19:6b:d3:9b:dc:d2:b0:15:17:85:bd:b0:c0:3e:57:46:ac: f0:a1:83:a7:7c:ca:bd:bb:68:fa:de:fd:11:ce:47:da:69:e4: ca:bb:bb:0b:cc:fc:06:db:c5:99:5e:ee:1f:95:42:77:61:8f: 28:2d:98:d1:78:63:96:d6:9d:b2:63:d1:f4:90:7e:5f:4f:73: 81:ec:c8:59:fc:a2:0f:29:9e:00:ce:72:e1:f6:20:b9:bc:54: eb:d7:76:c9:49:de:2c:6e:ad:d0:3f:c3:cf:ba:f0:1e:0f:55: 86:a9:29:f0:5c:d1:9e:70:48:f6:49:06:83:ed:7e:ff:6a:9b: 92:4b:19:78:77:1e:5b:45:b2:34:8d:3d:b5:c5:b7:88:7c:c7: 40:fd:6f:9c:61:19:ce:22:3e:86:20:f8:75:70:99:68:f1:2b: a7:ff:ff:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNjA3MDQzODI2WhcNMjUwNjE0MDQzODI2WjAYMRYwFAYD VQQDEw02ODQzYzI0Mi01MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01TxpBFyuRLJ09p1H/TmL1GpKEs8wIvCiyErVmpVpI1bju59fyELwHSLP0Oq MnykH1dxiYYTh5+eLDFmDoc75MSgn10chwNUVCvwPT63j/YYXTAFOewQaF4MkAMo n7QbDnVHzyBtwN3wlA9lwi+kR+P8AS+EvySGduvFN94sXlcSctkWiyhXzR87ZzsG VtADHfVZc8nUWCmoVwknq2Mt/c4oGhL93EKAfayKsoq7baZgY+rkxC7sacYM7D+k pl/q9LTFux7NAph6NfyR1Ggn81dDnxPwqNt6oQbCIM56yMqcqTbqgR7w3i7xHLAx YiiUQYeAAjc4QNtdrrlGN8PafwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF3BYfm iVZVg1UYxPg5gKwxPOEiMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcg8XM6t3OJxaPGtNG+H/ycTkVdYnyiuGWe5iLhjgXBjJ4RfRC9OfT CrYLbdJTf8PU8Ni9Px2Eh6ruIqQsARSyJNx74gJQcXwhJTtGQ5t4qMv7Ujo9GiRp p2uXGWvTm9zSsBUXhb2wwD5XRqzwoYOnfMq9u2j63v0RzkfaaeTKu7sLzPwG28WZ Xu4flUJ3YY8oLZjReGOW1p2yY9H0kH5fT3OB7MhZ/KIPKZ4AznLh9iC5vFTr13bJ Sd4sbq3QP8PPuvAeD1WGqSnwXNGecEj2SQaD7X7/apuSSxl4dx5bRbI0jT21xbeI fMdA/W+cYRnOIj6GIPh1cJlo8Sun///H -----END CERTIFICATE-----Generated at Mon Jun 9 01:44:04 2025 by rpki-client