$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft File: j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json) Hash identifier: lr8FkdOLPyofLYQoOjrafuhRdG4EDhPQPtV9nQbdryE= Subject key identifier: 81:81:E3:4A:22:7B:70:B2:56:69:B6:D7:EA:54:21:20:3D:9F:CB:4A Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9 Certificate issuer: /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft Manifest number: 029A Signing time: Sat 31 May 2025 01:44:47 +0000 Manifest this update: Sat 31 May 2025 01:44:47 +0000 Manifest next update: Sat 07 Jun 2025 01:44:47 +0000 Files and hashes: 1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: 4h4FkkKl7tcw/8HlSc6yuSTKMOvUoLMJKriz3LaguyA=) 2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: UP0rzzGm1RNNAwSNVW6RQ9A/3hrn3jElJIPxPVvX0ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9 Validity Not Before: May 31 01:44:47 2025 GMT Not After : Jun 7 01:44:47 2025 GMT Subject: CN=683a5f0f-7c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:26:38:71:f1:be:6b:5d:d8:cc:37:71:8a: 35:4e:29:bf:e0:85:26:db:40:2f:76:7c:86:c1:86: 67:ab:b3:7a:d5:fe:7c:fd:cb:c5:57:b4:78:b0:af: 80:f1:84:cd:cf:82:56:12:1c:91:19:ae:54:93:26: b0:4f:ed:54:32:f2:4a:57:67:db:c9:f0:91:e5:49: f1:32:31:26:a8:f2:90:cb:eb:c9:8b:7f:3c:be:70: 3f:72:bc:2b:ec:ab:c8:a2:3e:ba:2b:e5:d4:fb:91: dc:56:32:da:aa:40:df:2e:a6:85:ca:ed:71:ca:a8: e7:14:15:96:91:63:db:6c:38:8f:54:9c:b5:8c:9f: d4:7b:d7:5d:d8:ff:2d:61:e0:41:3b:49:e1:a8:17: d5:e3:62:21:5b:13:cc:ad:a8:23:57:46:4d:26:0b: 5f:55:da:ae:e5:0e:f3:56:e0:83:d6:3f:83:f9:12: 41:85:50:0b:25:d3:0a:19:60:b5:73:f4:40:2f:3a: 8a:50:aa:d2:92:42:65:c3:9d:cb:b9:50:f2:4f:f7: bc:82:e6:b0:68:10:4f:18:80:3c:db:f1:ef:75:93: 41:4a:b6:14:8f:a0:81:17:7b:6d:b2:dd:b5:60:78: 1c:79:4d:e5:ea:f8:e6:91:e6:fc:a8:32:8f:d6:88: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:E3:4A:22:7B:70:B2:56:69:B6:D7:EA:54:21:20:3D:9F:CB:4A X509v3 Authority Key Identifier: keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:78:6c:c7:cc:0e:20:84:a2:e2:cc:0f:e1:aa:ca:5f:ee:e4: a1:c9:64:f2:45:ad:0b:d6:64:1a:25:91:00:be:7e:bf:3f:1d: 29:02:84:2d:0f:e7:88:1d:ed:66:41:3b:91:bb:81:9f:39:13: ba:13:e4:b1:a1:f5:bc:d8:16:a0:e6:39:f4:07:0e:63:50:7c: fe:e5:5e:1a:f7:bb:a2:c2:b6:83:d6:39:f7:14:b4:4d:93:65: 30:f4:0d:75:0f:c6:cb:dd:bb:45:ed:59:58:2e:ed:c8:cd:53: dc:56:77:8d:99:46:81:4a:76:e7:5d:1f:f9:2b:4a:40:0e:0b: 12:c4:c5:20:31:9a:28:85:2f:9f:a3:0f:ee:67:47:1a:9c:3b: da:46:b1:32:80:12:eb:15:0a:91:85:47:01:d1:c6:20:e5:af: de:bd:0f:bd:be:cc:90:4d:d5:52:90:05:ae:a4:3c:b2:92:00: 02:8b:67:e1:06:ab:5b:f8:59:60:b4:0e:a2:52:a6:b6:97:d2: cc:98:56:08:60:cb:40:3a:dc:14:0c:51:96:24:56:14:92:64: 34:d9:18:ee:84:5e:dc:f0:d0:c7:4d:d3:a7:1c:ca:a3:b6:aa: 77:90:45:e9:b2:2e:1f:ef:be:14:33:4a:28:68:53:5d:4c:7c: 01:c0:7b:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ0QTQxMTAvBgNVBAUTKDhGQzY2MUExOTMzMkFFODY0QkM4NzkwMDc0NERBMzM3 RjlBNzAwQTkwHhcNMjUwNTMxMDE0NDQ3WhcNMjUwNjA3MDE0NDQ3WjAYMRYwFAYD VQQDEw02ODNhNWYwZi03YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa0mOHHxvmtd2Mw3cYo1Tim/4IUm20AvdnyGwYZnq7N61f58/cvFV7R4sK+A 8YTNz4JWEhyRGa5UkyawT+1UMvJKV2fbyfCR5UnxMjEmqPKQy+vJi388vnA/crwr 7KvIoj66K+XU+5HcVjLaqkDfLqaFyu1xyqjnFBWWkWPbbDiPVJy1jJ/Ue9dd2P8t YeBBO0nhqBfV42IhWxPMragjV0ZNJgtfVdqu5Q7zVuCD1j+D+RJBhVALJdMKGWC1 c/RALzqKUKrSkkJlw53LuVDyT/e8guawaBBPGIA82/HvdZNBSrYUj6CBF3ttst21 YHgceU3l6vjmkeb8qDKP1oh/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGB40oi e3CyVmm21+pUISA9n8tKMB8GA1UdIwQYMBaAFI/GYaGTMq6GS8h5AHRNozf5pwCp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDRBNC8yRDIzQTRDQzAy MDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJvWkx5SGtBZEUyak5fbW5B S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4WmhvWk15cm9aTHlIa0FkRTJqTl9tbkFLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDRBNC8yRDIzQTRDQzAyMDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJv Wkx5SGtBZEUyak5fbW5BS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUeGzHzA4ghKLizA/hqspf7uShyWTyRa0L1mQaJZEAvn6/Px0pAoQt D+eIHe1mQTuRu4GfORO6E+SxofW82Bag5jn0Bw5jUHz+5V4a97uiwraD1jn3FLRN k2Uw9A11D8bL3btF7VlYLu3IzVPcVneNmUaBSnbnXR/5K0pADgsSxMUgMZoohS+f ow/uZ0canDvaRrEygBLrFQqRhUcB0cYg5a/evQ+9vsyQTdVSkAWupDyykgACi2fh Bqtb+FlgtA6iUqa2l9LMmFYIYMtAOtwUDFGWJFYUkmQ02RjuhF7c8NDHTdOnHMqj tqp3kEXpsi4f774UM0ooaFNdTHwBwHuK -----END CERTIFICATE-----Generated at Sat May 31 16:47:50 2025 by rpki-client