$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: SBMzZ6jdIZckvPw40WxzD3+BTPxFjASYFLuB/YX2UxY= Subject key identifier: 52:9E:9D:AB:72:60:53:E3:92:1B:D9:7E:0C:9B:B5:58:56:60:13:31 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 98 Signing time: Sat 31 May 2025 05:53:31 +0000 Manifest this update: Sat 31 May 2025 05:53:30 +0000 Manifest next update: Sat 07 Jun 2025 05:53:30 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: lzYETvDqsDyF0SICf3k7BkxbdZqRJZau4G9bqDqxPHY=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: May 31 05:53:30 2025 GMT Not After : Jun 7 05:53:30 2025 GMT Subject: CN=683a995a-2c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f7:af:d6:34:f3:8f:7a:41:6f:36:c2:77:b9: 86:22:fe:d2:be:38:2d:a6:35:19:5b:b1:75:12:9d: 41:36:e1:94:7f:33:f9:7a:87:22:ad:17:ac:b9:c9: 82:64:89:56:e7:02:aa:ca:64:ad:8c:a0:04:c3:5e: 38:da:21:0d:5e:05:c8:47:15:d7:82:5a:1e:86:40: a5:b5:81:65:eb:b4:67:7f:10:18:70:1c:d8:c3:3e: b2:d4:80:be:80:9a:4f:9d:a3:41:41:d7:13:45:29: 24:78:85:5b:d1:16:ad:00:2b:ba:d3:43:cd:4c:8e: 7e:5f:13:67:9b:8d:33:8f:6a:f8:98:cc:7b:34:90: 9c:bc:ae:27:5d:a3:78:f3:32:77:b8:df:8f:cc:c7: d6:d6:8f:64:07:0c:85:c1:76:c5:4c:4c:8d:5a:2e: b2:a7:dd:d5:41:c9:f1:00:d7:d3:b1:23:94:5c:15: 4d:94:f0:7e:d3:98:fd:13:5a:45:ff:c1:ef:ab:3e: cd:c5:20:59:15:5e:a3:0d:02:e8:cd:a1:ff:e1:77: 30:2f:4f:ca:ac:5d:4c:b0:76:a6:d9:0e:ea:f8:25: f5:95:1a:51:aa:96:d8:56:4a:f5:6a:b8:89:55:41: 54:a6:29:ed:d3:fb:a2:cb:03:d7:d1:cb:dd:8d:b3: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:9D:AB:72:60:53:E3:92:1B:D9:7E:0C:9B:B5:58:56:60:13:31 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:79:75:0f:82:fe:08:08:6b:0d:17:31:9f:41:71:a3:82:d0: 50:fd:7b:9f:4d:8d:2e:de:28:0d:e8:a9:99:e5:d6:dc:91:46: 83:9a:44:7c:84:c2:87:c9:5f:ea:a8:dd:47:b5:7c:a1:11:b1: 93:cb:cb:a0:08:68:10:76:ec:19:03:1a:ba:55:46:72:33:a8: 3a:32:7f:9f:b8:ca:9c:ab:c4:e8:a3:71:5c:fb:2a:bf:97:2d: 5f:5c:2b:2e:c3:6d:45:a4:b5:96:94:f6:ba:32:c2:b6:9d:0e: 85:45:19:31:b5:88:5b:b8:ce:7a:90:7f:4b:6c:6a:65:46:f1: 60:83:84:8d:69:05:1f:ae:10:d7:62:c8:02:b9:f2:32:e6:fd: f4:98:19:a2:01:5a:19:46:a7:07:b0:cb:8f:55:36:cd:3d:a9: b5:43:32:cb:03:96:a3:cd:bb:e9:03:51:15:60:1b:5c:32:c5: 65:f2:41:fd:90:67:a3:a2:7f:3d:5b:6c:d6:f7:ce:d6:09:e4: dc:a2:d0:a1:64:36:77:f0:a3:75:ba:49:a7:80:ba:23:85:00: c3:2b:11:c1:18:be:ef:d5:59:bb:c8:8b:e6:da:1a:3b:3e:76: f6:91:fe:f6:cb:44:fd:35:e5:f0:da:37:cd:07:85:0e:d9:e3: 00:3e:65:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwNTMxMDU1MzMwWhcNMjUwNjA3MDU1MzMwWjAYMRYwFAYD VQQDEw02ODNhOTk1YS0yYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvev1jTzj3pBbzbCd7mGIv7SvjgtpjUZW7F1Ep1BNuGUfzP5eocirResucmC ZIlW5wKqymStjKAEw1442iENXgXIRxXXgloehkCltYFl67RnfxAYcBzYwz6y1IC+ gJpPnaNBQdcTRSkkeIVb0RatACu600PNTI5+XxNnm40zj2r4mMx7NJCcvK4nXaN4 8zJ3uN+PzMfW1o9kBwyFwXbFTEyNWi6yp93VQcnxANfTsSOUXBVNlPB+05j9E1pF /8Hvqz7NxSBZFV6jDQLozaH/4XcwL0/KrF1MsHam2Q7q+CX1lRpRqpbYVkr1ariJ VUFUpint0/uiywPX0cvdjbMDFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKenaty YFPjkhvZfgybtVhWYBMxMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0eXUPgv4ICGsNFzGfQXGjgtBQ/XufTY0u3igN6KmZ5dbckUaDmkR8 hMKHyV/qqN1HtXyhEbGTy8ugCGgQduwZAxq6VUZyM6g6Mn+fuMqcq8Too3Fc+yq/ ly1fXCsuw21FpLWWlPa6MsK2nQ6FRRkxtYhbuM56kH9LbGplRvFgg4SNaQUfrhDX YsgCufIy5v30mBmiAVoZRqcHsMuPVTbNPam1QzLLA5ajzbvpA1EVYBtcMsVl8kH9 kGejon89W2zW987WCeTcotChZDZ38KN1ukmngLojhQDDKxHBGL7v1Vm7yIvm2ho7 Pnb2kf72y0T9NeXw2jfNB4UO2eMAPmUX -----END CERTIFICATE-----Generated at Sat May 31 16:44:50 2025 by rpki-client