$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: fFzTMtPIXIrllTJxYMq2KSaj5uzY2l5tHg9ts879BW8= Subject key identifier: 86:93:23:81:DD:32:17:CE:FE:FE:7B:AD:6A:29:DB:FC:E7:59:E2:AD Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: E2 Signing time: Sat 31 May 2025 05:08:00 +0000 Manifest this update: Sat 31 May 2025 05:08:00 +0000 Manifest next update: Sat 07 Jun 2025 05:08:00 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: UTM1OGtov2a1tpHiaspGfpAW2GaelbcKSUd3PE2l9a4=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: dc2h2jrx/pzY7NawNYOcmGXVTRsJnjaghC5xI/+fBaQ=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: M93I+sdFWlIBfdq9LG68VSm5ThgyN+STMXDJdl1g8Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: May 31 05:08:00 2025 GMT Not After : Jun 7 05:08:00 2025 GMT Subject: CN=683a8eb0-0b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:08:28:d7:cb:4d:6c:a1:ce:0d:b2:a0:4a: 32:53:21:38:6f:3f:66:b1:e3:80:c1:64:73:29:26: 2c:00:de:30:e8:23:b9:0f:5f:b9:27:40:be:11:04: 69:da:58:4d:54:9b:7a:f5:06:4d:77:61:4b:86:03: 4e:00:05:cc:48:e1:43:00:b4:26:e3:ea:a6:0f:bc: 95:23:06:06:cf:68:bc:c1:49:04:f6:64:10:a1:4f: 17:a0:98:c4:11:b9:70:b4:f4:e1:8d:a3:e6:7f:0e: 24:a0:9c:2c:f1:c5:67:50:81:69:39:a5:78:c6:18: 44:02:50:01:71:a2:32:a4:ff:45:7b:6e:bd:b1:ec: 7d:34:e2:74:8f:7d:e5:be:02:18:4e:66:33:92:0d: e0:ee:7d:9a:00:78:dd:97:0f:08:c2:b0:11:ca:b3: 93:e1:20:17:5c:e5:3a:2b:fd:aa:01:30:84:d9:8f: de:1b:49:2f:f8:05:33:57:43:74:bb:8b:b5:9f:d0: 25:2e:0c:4a:39:6c:e6:ca:ab:aa:06:25:e7:ee:16: 7a:9b:04:e9:c9:ae:d3:9f:2a:e6:03:56:52:c0:c8: f9:69:65:af:66:0a:f0:6b:4c:c8:b0:75:82:26:17: e1:bb:79:23:c7:ac:a4:64:86:5c:b9:ad:c0:a9:28: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:93:23:81:DD:32:17:CE:FE:FE:7B:AD:6A:29:DB:FC:E7:59:E2:AD X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:09:83:18:60:35:62:fd:aa:67:4c:43:cd:61:ac:c7:30:52: 4c:43:3e:e3:a9:f5:72:de:c9:82:1e:7f:01:cd:b0:30:e5:33: cf:8e:b4:79:f2:a8:30:a8:61:6d:66:7a:cc:58:30:c3:af:33: b3:47:d4:a0:eb:48:d4:52:e8:cf:ae:14:b8:ef:aa:1c:54:bb: 64:ab:37:5f:73:a3:44:68:a4:eb:a2:b9:32:1f:2f:1e:53:58: 16:22:62:1a:c8:90:f9:57:0d:f9:78:71:aa:87:20:0b:d3:76: 1a:68:04:28:d6:73:e2:11:3f:f1:59:cc:0b:04:0f:84:0a:29: d5:f5:62:b5:8e:52:ed:a3:3d:ef:a2:ab:32:e9:5e:1a:b0:71: 8d:d5:05:0e:38:08:f6:1c:f6:44:4e:a0:da:6b:17:c3:6c:a3: eb:3d:51:1a:e7:ae:f6:cf:b2:a4:da:40:eb:53:d9:3e:7b:50: b7:63:b9:7a:31:1d:62:6b:b3:01:e1:8d:68:d3:65:4f:c2:6e: db:79:ad:5a:65:4a:b7:a6:eb:d1:94:e6:12:c6:7d:ea:47:2e: c7:95:c6:e2:55:46:47:ea:3c:ca:19:62:a1:6a:c7:49:6e:4a: 04:03:4e:da:21:09:87:03:71:e4:b0:da:15:ec:94:74:a0:26: 7b:08:08:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwNTMxMDUwODAwWhcNMjUwNjA3MDUwODAwWjAYMRYwFAYD VQQDEw02ODNhOGViMC0wYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25UIKNfLTWyhzg2yoEoyUyE4bz9mseOAwWRzKSYsAN4w6CO5D1+5J0C+EQRp 2lhNVJt69QZNd2FLhgNOAAXMSOFDALQm4+qmD7yVIwYGz2i8wUkE9mQQoU8XoJjE EblwtPThjaPmfw4koJws8cVnUIFpOaV4xhhEAlABcaIypP9Fe269sex9NOJ0j33l vgIYTmYzkg3g7n2aAHjdlw8IwrARyrOT4SAXXOU6K/2qATCE2Y/eG0kv+AUzV0N0 u4u1n9AlLgxKOWzmyquqBiXn7hZ6mwTpya7TnyrmA1ZSwMj5aWWvZgrwa0zIsHWC Jhfhu3kjx6ykZIZcua3AqShbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaTI4Hd MhfO/v57rWop2/znWeKtMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3CYMYYDVi/apnTEPNYazHMFJMQz7jqfVy3smCHn8BzbAw5TPPjrR5 8qgwqGFtZnrMWDDDrzOzR9Sg60jUUujPrhS476ocVLtkqzdfc6NEaKTrorkyHy8e U1gWImIayJD5Vw35eHGqhyAL03YaaAQo1nPiET/xWcwLBA+ECinV9WK1jlLtoz3v oqsy6V4asHGN1QUOOAj2HPZETqDaaxfDbKPrPVEa5672z7Kk2kDrU9k+e1C3Y7l6 MR1ia7MB4Y1o02VPwm7bea1aZUq3puvRlOYSxn3qRy7HlcbiVUZH6jzKGWKhasdJ bkoEA07aIQmHA3HksNoV7JR0oCZ7CAik -----END CERTIFICATE-----Generated at Sat May 31 14:33:35 2025 by rpki-client