$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: VRlfOsZQESVJo8XBz/vnq726zHCRMp4wwIRbSzFSdE4= Subject key identifier: F9:4F:37:D2:C4:A1:05:2E:52:26:28:22:5A:ED:BE:DD:66:04:3C:BE Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 0961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 0941 Signing time: Fri 30 May 2025 20:59:52 +0000 Manifest this update: Fri 30 May 2025 20:59:51 +0000 Manifest next update: Fri 06 Jun 2025 20:59:51 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: 8S9ScBF4aMjIfQdF1JSdBfo8QPg1KDAfNWC8Iv6PICQ=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: oV5Kg/s7awHZvzZpO+JQXAELEp1giTzDedBNhKwTbhM=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: May 30 20:59:51 2025 GMT Not After : Jun 6 20:59:51 2025 GMT Subject: CN=683a1c48-847c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:7e:86:d7:de:82:59:02:98:97:fd:7a:75: 03:5c:0b:49:a9:4b:c2:e3:41:80:1c:d4:01:dc:81: da:ce:7a:28:c6:76:f7:12:4c:28:9f:cc:f4:aa:0e: 0b:9b:b4:13:dd:44:c4:2f:d4:7a:00:fb:24:81:a4: 33:8b:ad:96:ae:ed:65:e2:11:7f:d5:6c:0e:7d:84: 58:60:32:23:d8:59:01:17:b6:ea:e4:8c:16:21:29: 3f:47:cc:84:73:70:16:b6:73:78:69:e3:e0:76:f4: 1b:8b:c0:05:c0:2b:5d:36:11:72:3c:bd:b0:94:0f: 1a:b3:a1:a3:34:cd:fa:9b:b1:2a:9b:4d:7c:46:60: 3b:92:35:90:f5:07:a9:55:b4:c7:c9:f5:57:6c:79: aa:8e:93:1d:96:26:5c:2c:d0:51:c6:a8:9a:48:c5: 3c:b0:55:c3:c6:63:7f:9b:d6:7f:b4:d2:af:c1:33: ba:66:fe:4a:f3:1d:61:6b:8a:ce:59:b5:ff:e0:a2: a3:72:54:42:74:d2:47:35:19:98:2f:ff:77:9a:4f: b4:35:5d:25:64:4a:97:9b:50:e1:2c:9d:b3:80:70: cd:51:28:5e:6e:b8:65:80:5d:6f:de:9f:3c:9b:43: b9:09:0f:c0:17:05:e5:54:fb:5d:d0:01:58:e5:d7: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4F:37:D2:C4:A1:05:2E:52:26:28:22:5A:ED:BE:DD:66:04:3C:BE X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a6:66:15:4d:fc:dc:74:f7:7f:41:0d:42:15:2f:bf:c2:33: 10:5e:c5:de:cb:70:2c:37:7d:bb:05:9d:10:49:ad:78:74:93: e4:f9:81:80:19:ea:b6:af:3e:6d:ad:87:13:8d:47:fc:a1:2e: c1:15:58:c5:6c:6d:2c:44:32:37:a1:63:01:77:c4:25:86:d6: 56:7d:00:93:ae:0f:e6:ed:9f:59:4b:56:79:75:4f:33:60:0b: 86:c6:b8:74:17:b6:24:ff:60:56:9c:dd:6a:5b:ba:f7:dc:62: b1:be:c0:68:67:77:80:78:41:3a:97:3a:c5:9e:e6:60:c2:d8: 7d:19:29:82:27:6e:3d:f3:83:02:ed:39:30:cc:e0:e5:39:b6: 29:6b:d1:7b:8f:b2:bf:2d:0c:6f:0e:3b:dc:23:87:ab:83:72: 93:5d:37:1d:94:3b:1c:05:fc:e2:60:94:d7:ef:64:2c:05:bc: 7d:0b:af:1a:33:25:96:91:07:32:88:eb:bf:d1:32:09:0d:59: ec:bb:1f:1d:2b:96:35:eb:b8:ec:12:93:87:06:5e:98:ac:04: 2b:fd:1d:c6:d1:48:17:50:9b:e8:17:72:82:6d:33:25:e6:14: e6:72:ac:7e:9f:3a:8e:e1:38:e5:e4:86:02:0a:d3:39:3a:90: 39:79:ea:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUwNTMwMjA1OTUxWhcNMjUwNjA2MjA1OTUxWjAYMRYwFAYD VQQDEw02ODNhMWM0OC04NDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswZ+htfeglkCmJf9enUDXAtJqUvC40GAHNQB3IHaznooxnb3Ekwon8z0qg4L m7QT3UTEL9R6APskgaQzi62Wru1l4hF/1WwOfYRYYDIj2FkBF7bq5IwWISk/R8yE c3AWtnN4aePgdvQbi8AFwCtdNhFyPL2wlA8as6GjNM36m7Eqm018RmA7kjWQ9Qep VbTHyfVXbHmqjpMdliZcLNBRxqiaSMU8sFXDxmN/m9Z/tNKvwTO6Zv5K8x1ha4rO WbX/4KKjclRCdNJHNRmYL/93mk+0NV0lZEqXm1DhLJ2zgHDNUShebrhlgF1v3p88 m0O5CQ/AFwXlVPtd0AFY5ddR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlPN9LE oQUuUiYoIlrtvt1mBDy+MB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtpmYVTfzcdPd/QQ1CFS+/wjMQXsXey3AsN327BZ0QSa14dJPk+YGA Geq2rz5trYcTjUf8oS7BFVjFbG0sRDI3oWMBd8QlhtZWfQCTrg/m7Z9ZS1Z5dU8z YAuGxrh0F7Yk/2BWnN1qW7r33GKxvsBoZ3eAeEE6lzrFnuZgwth9GSmCJ24984MC 7TkwzODlObYpa9F7j7K/LQxvDjvcI4erg3KTXTcdlDscBfziYJTX72QsBbx9C68a MyWWkQcyiOu/0TIJDVnsux8dK5Y167jsEpOHBl6YrAQr/R3G0UgXUJvoF3KCbTMl 5hTmcqx+nzqO4Tjl5IYCCtM5OpA5eerw -----END CERTIFICATE-----Generated at Sat May 31 17:02:19 2025 by rpki-client