$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: wqu/5oJQ413VGk6wVnENme7TRRBet0cs75gZYnTPOVk= Subject key identifier: C7:25:73:46:13:12:4B:8E:7E:DD:C2:1B:E4:F1:D2:DE:6F:14:9B:D0 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: 88 Signing time: Tue 03 Jun 2025 06:22:30 +0000 Manifest this update: Tue 03 Jun 2025 06:22:29 +0000 Manifest next update: Tue 10 Jun 2025 06:22:29 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: HGkmNq3AO6yYSvvDOE4zX0SQMFtJSIUrR93x57oGib4=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Jun 3 06:22:29 2025 GMT Not After : Jun 10 06:22:29 2025 GMT Subject: CN=683e94a6-cf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:07:16:8e:0e:4c:ca:74:df:ee:12:40:48: 65:4e:5e:b9:75:67:b6:6d:33:12:5a:ad:22:1a:b1: 01:90:e1:8a:b9:4b:0a:eb:26:f4:c3:c7:bc:74:9c: 76:7c:90:3a:19:75:7c:6a:09:11:b2:c1:3e:6b:3b: 48:a7:ee:2a:1b:df:01:1e:e9:40:d3:58:a9:35:b6: b3:7c:de:e1:2e:84:a5:d7:d4:d1:3f:72:54:84:cc: c8:a2:8f:d6:8e:fb:40:59:c4:58:d6:9e:ec:55:9c: b2:1f:28:9e:40:da:ff:3a:8e:2f:23:f8:5c:a2:18: e3:0e:7f:a3:7a:d9:77:ca:51:38:64:d4:e6:8c:be: 4b:db:8c:b9:45:c5:9a:ef:ea:ca:95:db:65:70:b2: c2:86:50:ee:dd:ea:6d:11:96:89:6c:af:de:13:7e: 29:40:72:82:5b:42:8c:2a:3a:1d:1a:b2:65:c4:ec: bc:2f:6a:5b:78:28:97:50:fb:5c:d4:7d:76:62:cb: 65:fb:0d:d5:7d:8c:1a:e9:bb:bb:7f:86:14:7a:9d: 5f:e4:90:b9:55:39:ff:5e:e9:0d:4a:b1:3f:d4:8a: 49:12:5d:d9:37:7a:18:cb:c1:65:c4:4f:fc:96:55: 9f:a2:6c:b4:65:b9:48:82:70:fb:8d:cd:4a:27:3f: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:25:73:46:13:12:4B:8E:7E:DD:C2:1B:E4:F1:D2:DE:6F:14:9B:D0 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:77:aa:cf:da:78:4f:8e:58:37:59:d7:73:5b:a5:40:84: a6:96:74:cf:fb:15:79:39:17:90:47:8b:e2:9b:a1:1d:47:82: ec:e4:6d:8d:3b:e9:b9:ab:ca:90:b8:b5:7b:71:d3:fe:e7:fb: 0a:f6:73:67:e7:01:67:30:72:b1:e6:31:57:92:e6:fe:ea:e0: 68:cf:dc:1d:d3:44:1d:55:0b:e8:33:e4:ad:ce:22:99:0e:3f: 0b:80:b5:ee:f1:67:9b:53:73:9b:b4:23:ff:fa:f8:e6:5a:6a: 3a:ae:ff:16:5c:6a:24:61:ab:05:be:4f:5c:de:b8:1a:3b:5d: c6:55:66:b7:4f:5d:93:5d:30:de:5d:91:b1:f0:0f:92:c3:3c: 8e:6f:10:85:60:08:93:85:4f:9f:06:14:3e:e1:38:0c:76:8d: 0f:96:f4:02:ff:5c:ed:bb:da:e4:24:c3:e8:31:4c:6e:04:b6: ef:83:79:ea:c2:32:1c:84:d5:5a:f9:45:57:d7:db:3a:af:50: a3:41:b6:56:70:61:e5:b0:2c:31:70:30:9f:1d:dd:aa:13:23: 25:78:07:14:ce:ec:0b:bc:02:b3:a3:34:9e:0b:0f:8e:24:cf: 8f:1e:cd:d5:69:5a:d4:41:b5:c3:fa:f6:19:3f:93:32:e2:56: 8b:47:68:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2 NDZCMDY3MjUwHhcNMjUwNjAzMDYyMjI5WhcNMjUwNjEwMDYyMjI5WjAYMRYwFAYD VQQDEw02ODNlOTRhNi1jZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws0HFo4OTMp03+4SQEhlTl65dWe2bTMSWq0iGrEBkOGKuUsK6yb0w8e8dJx2 fJA6GXV8agkRssE+aztIp+4qG98BHulA01ipNbazfN7hLoSl19TRP3JUhMzIoo/W jvtAWcRY1p7sVZyyHyieQNr/Oo4vI/hcohjjDn+jetl3ylE4ZNTmjL5L24y5RcWa 7+rKldtlcLLChlDu3eptEZaJbK/eE34pQHKCW0KMKjodGrJlxOy8L2pbeCiXUPtc 1H12Ystl+w3VfYwa6bu7f4YUep1f5JC5VTn/XukNSrE/1IpJEl3ZN3oYy8FlxE/8 llWfomy0ZblIgnD7jc1KJz+rIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMclc0YT EkuOft3CG+Tx0t5vFJvQMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpV eUFGbnZhR2Rja2xrYXdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuHeqz9p4T45YN1nXc1ulQISmlnTP+xV5OReQR4vim6EdR4Ls5G2N O+m5q8qQuLV7cdP+5/sK9nNn5wFnMHKx5jFXkub+6uBoz9wd00QdVQvoM+StziKZ Dj8LgLXu8WebU3ObtCP/+vjmWmo6rv8WXGokYasFvk9c3rgaO13GVWa3T12TXTDe XZGx8A+SwzyObxCFYAiThU+fBhQ+4TgMdo0PlvQC/1ztu9rkJMPoMUxuBLbvg3nq wjIchNVa+UVX19s6r1CjQbZWcGHlsCwxcDCfHd2qEyMleAcUzuwLvAKzozSeCw+O JM+PHs3VaVrUQbXD+vYZP5My4laLR2h8 -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:29 2025 by rpki-client