$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: yizZDEC4X3/fbPIaBmejLMgUd7jxHMKLqckDfSqq/cI= Subject key identifier: E3:7A:AA:8E:58:5E:C0:50:92:F6:D7:2B:22:47:26:44:88:A0:FE:C8 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 349C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 3495 Signing time: Mon 02 Jun 2025 14:23:18 +0000 Manifest this update: Mon 02 Jun 2025 14:23:17 +0000 Manifest next update: Mon 09 Jun 2025 14:23:17 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: T6uoAo9p2bl5XoHD1Nr4zCiolot57yAwmE0HQH85BGU=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Jun 2 14:23:17 2025 GMT Not After : Jun 9 14:23:17 2025 GMT Subject: CN=683db3d5-ad42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:c3:84:4c:fc:58:bb:02:7e:fe:dc:ff:0d: e6:83:20:75:c2:35:b5:38:20:1b:18:f3:34:f8:16: 2a:d5:f1:e1:32:13:22:85:ab:13:bd:46:1a:dd:74: bd:0f:95:c6:64:8e:54:70:ab:07:56:91:87:70:8b: 08:57:81:96:a7:a2:d3:46:18:79:ca:a9:c8:d7:ac: 06:c7:a7:06:e8:56:4e:02:76:89:b1:6d:ce:6f:f2: 72:ff:13:9a:b1:07:86:22:b3:1c:37:c7:9b:0a:a6: 69:48:93:ec:64:4a:60:99:b2:b4:e1:98:eb:d6:f8: fd:c6:86:41:97:8d:10:1c:88:f5:10:27:3f:b2:e5: 89:1e:e5:38:5c:7b:c0:4a:d1:a9:6f:50:e4:25:42: cf:8c:64:9c:d6:2d:49:66:19:65:cb:1d:03:e4:e0: 62:ce:74:d5:54:3a:fa:19:9f:c1:59:f5:a9:e4:da: f6:75:dd:a9:0a:9b:17:bd:0a:55:b7:e3:64:54:44: e6:f4:db:d4:cd:5a:e6:8e:db:aa:ff:27:27:84:a0: 3e:71:d4:e9:ff:c3:5c:10:9f:ed:d9:29:fb:d7:5d: 85:3a:55:02:e6:f4:5a:98:bf:f0:bf:d3:cc:af:1a: ca:9f:4b:8d:52:50:96:2a:8a:2c:c9:81:7a:99:f0: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7A:AA:8E:58:5E:C0:50:92:F6:D7:2B:22:47:26:44:88:A0:FE:C8 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5b:52:3f:70:dd:3b:4d:c7:1f:e4:c9:12:38:4f:b8:8c:da: d4:db:3d:0c:c7:30:76:d8:f5:f9:22:40:a9:6f:1e:61:b6:a2: 2e:57:d2:0d:37:5c:29:64:a4:b4:99:b6:e0:d6:0f:d4:82:77: 03:ee:a5:6a:d2:1b:e0:12:b0:d9:25:86:0d:2f:bf:ae:0e:7f: bf:72:35:63:fc:e8:3b:2a:d4:42:eb:a5:5e:86:5e:24:64:26: 95:6a:b9:1b:90:ad:3b:f7:66:47:5a:5d:27:cd:47:bf:35:f2: 37:36:9d:fb:63:e9:d9:3c:c5:bd:b2:1d:0d:00:99:bf:ec:aa: 5f:fd:63:db:69:8e:ec:21:3f:27:e1:da:cf:38:9e:44:7e:ee: f4:b3:ae:e6:94:1e:74:1c:bb:03:2f:4a:23:71:e7:18:26:3c: bf:c2:31:82:1a:97:1d:4a:f2:b1:38:48:1c:d6:41:45:d4:04: fa:aa:b1:77:a4:56:20:64:90:b9:c2:6b:e0:91:f1:f8:db:70: 94:93:46:d6:89:8f:0c:92:c2:f7:1f:28:94:1b:dd:04:c9:65: 71:6a:0a:6f:b8:bc:87:87:05:b1:4d:d6:42:c0:a6:8f:0e:3b: 87:f0:19:cd:d5:56:c0:ad:99:83:38:f8:c3:cb:cf:94:0c:93: 9c:1e:e3:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwNjAyMTQyMzE3WhcNMjUwNjA5MTQyMzE3WjAYMRYwFAYD VQQDEw02ODNkYjNkNS1hZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8nDhEz8WLsCfv7c/w3mgyB1wjW1OCAbGPM0+BYq1fHhMhMihasTvUYa3XS9 D5XGZI5UcKsHVpGHcIsIV4GWp6LTRhh5yqnI16wGx6cG6FZOAnaJsW3Ob/Jy/xOa sQeGIrMcN8ebCqZpSJPsZEpgmbK04Zjr1vj9xoZBl40QHIj1ECc/suWJHuU4XHvA StGpb1DkJULPjGSc1i1JZhllyx0D5OBiznTVVDr6GZ/BWfWp5Nr2dd2pCpsXvQpV t+NkVETm9NvUzVrmjtuq/ycnhKA+cdTp/8NcEJ/t2Sn7112FOlUC5vRamL/wv9PM rxrKn0uNUlCWKoosyYF6mfAdwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON6qo5Y XsBQkvbXKyJHJkSIoP7IMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEW1I/cN07Tccf5MkSOE+4jNrU2z0MxzB22PX5IkCpbx5htqIuV9IN N1wpZKS0mbbg1g/UgncD7qVq0hvgErDZJYYNL7+uDn+/cjVj/Og7KtRC66Vehl4k ZCaVarkbkK0792ZHWl0nzUe/NfI3Np37Y+nZPMW9sh0NAJm/7Kpf/WPbaY7sIT8n 4drPOJ5Efu70s67mlB50HLsDL0ojcecYJjy/wjGCGpcdSvKxOEgc1kFF1AT6qrF3 pFYgZJC5wmvgkfH423CUk0bWiY8MksL3HyiUG90EyWVxagpvuLyHhwWxTdZCwKaP DjuH8BnN1VbArZmDOPjDy8+UDJOcHuNP -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:22 2025 by rpki-client