$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft File: j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json) Hash identifier: QEd63fr6LPTwepC5hOjGDUojv1LIYbhz9XQV5HqnaH0= Subject key identifier: CD:4B:7F:A8:09:70:F1:2B:EE:74:EF:A4:38:F2:B2:78:3D:F5:1D:E1 Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5 Certificate issuer: /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft Manifest number: 0A3E Signing time: Fri 30 May 2025 20:42:02 +0000 Manifest this update: Fri 30 May 2025 20:42:01 +0000 Manifest next update: Fri 06 Jun 2025 20:42:01 +0000 Files and hashes: 1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: 4fBGCrF4Dh0qGpwBJ0C9xjIxNa05AGRDMENQem+s3Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5 Validity Not Before: May 30 20:42:01 2025 GMT Not After : Jun 6 20:42:01 2025 GMT Subject: CN=683a181a-845b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:ac:4f:3e:9a:0e:c5:26:87:aa:9b:56:68: cd:7b:c9:0d:8d:b0:ad:92:0d:90:ac:78:1c:f0:de: 2c:48:c4:d7:98:9b:45:5a:07:2a:d4:c6:9d:01:2d: 94:62:ab:5f:d7:a0:8b:9f:75:a1:04:28:63:38:35: 37:1f:ce:73:09:2b:03:f0:ee:f7:5a:49:59:11:cf: 92:74:c6:27:d9:03:b6:5f:64:b1:16:ed:0d:cd:3d: b2:36:17:67:2a:47:a4:c0:64:37:09:16:eb:67:95: 5e:03:66:48:41:ba:fd:23:d0:7e:fe:c5:bf:ae:66: 05:77:79:a7:b3:2b:9c:e3:64:83:6c:48:19:42:ec: 32:1c:65:72:a1:d4:88:77:44:c3:30:e3:2a:2f:19: 70:5d:08:32:94:ae:51:dd:8c:80:7a:9d:6d:0c:cf: 59:8b:8d:af:46:25:6a:6a:8c:20:26:d0:a8:d5:66: 81:ab:0c:c7:97:d4:bb:4d:31:73:e2:9d:a1:03:28: 06:a6:51:de:30:86:26:99:e6:63:ae:ce:f9:ca:a0: 34:15:5f:5e:a2:d0:27:88:e3:04:49:d5:3b:72:ae: 23:aa:ec:4b:ca:05:32:bb:9f:6d:af:b1:88:ed:8f: 2d:d4:44:49:ea:8e:db:44:07:85:51:7d:75:ca:a3: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:7F:A8:09:70:F1:2B:EE:74:EF:A4:38:F2:B2:78:3D:F5:1D:E1 X509v3 Authority Key Identifier: keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b3:60:f4:0d:23:e3:80:47:c2:9d:44:e3:a5:e5:0d:1c:7c: 47:cf:ad:72:00:67:73:88:f5:54:54:40:9c:64:27:cc:94:86: 08:78:bd:cf:96:61:29:79:da:a4:0a:68:97:70:be:71:d6:47: f5:e4:21:08:47:48:6a:67:1e:cf:10:3b:7e:a2:e9:d9:b4:cd: 0a:08:95:11:40:11:c7:05:d4:62:07:20:15:a7:85:f3:8c:b8: 44:ed:ed:b4:10:40:55:c4:44:a1:b1:a8:bc:6e:49:f4:5a:44: 01:ed:cc:b0:c8:7c:6c:12:7f:0c:f1:ae:7b:6e:fe:bb:c8:d4: 02:32:7b:4d:08:0f:b1:2d:f2:3c:73:bb:a8:66:a8:db:74:2b: ce:c8:2f:8e:ca:7c:a9:3c:e8:ff:99:ed:45:87:f2:05:f9:75: 63:0e:36:96:c9:02:a6:c7:55:ed:28:e0:58:54:c7:92:a4:b0: d6:a9:5a:82:ca:dd:38:5e:00:c0:1c:5f:e0:fb:bc:b3:f4:19: 64:17:99:0e:a8:60:bb:00:4f:1a:30:66:ae:79:51:1d:27:e8: 51:7d:ec:08:f5:66:dd:c8:93:ab:01:36:bf:33:b2:18:ed:45: a1:d6:3a:2e:2b:dc:78:39:bf:f9:3e:cb:f3:7f:bc:08:16:9d: 85:ab:4f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDhGOEI1QUZDMkQzMzg4REREMjUxOEFFOUEwNzM5MDhG OEZBNUEwQTUwHhcNMjUwNTMwMjA0MjAxWhcNMjUwNjA2MjA0MjAxWjAYMRYwFAYD VQQDEw02ODNhMTgxYS04NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCCsTz6aDsUmh6qbVmjNe8kNjbCtkg2QrHgc8N4sSMTXmJtFWgcq1MadAS2U Yqtf16CLn3WhBChjODU3H85zCSsD8O73WklZEc+SdMYn2QO2X2SxFu0NzT2yNhdn KkekwGQ3CRbrZ5VeA2ZIQbr9I9B+/sW/rmYFd3mnsyuc42SDbEgZQuwyHGVyodSI d0TDMOMqLxlwXQgylK5R3YyAep1tDM9Zi42vRiVqaowgJtCo1WaBqwzHl9S7TTFz 4p2hAygGplHeMIYmmeZjrs75yqA0FV9eotAniOMESdU7cq4jquxLygUyu59tr7GI 7Y8t1ERJ6o7bRAeFUX11yqOWoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1Lf6gJ cPEr7nTvpDjysng99R3hMB8GA1UdIwQYMBaAFI+LWvwtM4jd0lGK6aBzkI+PpaCl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0MwemlOM1NVWXJwb0hPUWo0LWxv S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0dGFfQzB6aU4zU1VZcnBvSE9RajQtbG9LVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0MwemlO M1NVWXJwb0hPUWo0LWxvS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgs2D0DSPjgEfCnUTjpeUNHHxHz61yAGdziPVUVECcZCfMlIYIeL3P lmEpedqkCmiXcL5x1kf15CEIR0hqZx7PEDt+ounZtM0KCJURQBHHBdRiByAVp4Xz jLhE7e20EEBVxEShsai8bkn0WkQB7cywyHxsEn8M8a57bv67yNQCMntNCA+xLfI8 c7uoZqjbdCvOyC+OynypPOj/me1Fh/IF+XVjDjaWyQKmx1XtKOBYVMeSpLDWqVqC yt04XgDAHF/g+7yz9BlkF5kOqGC7AE8aMGaueVEdJ+hRfewI9WbdyJOrATa/M7IY 7UWh1jouK9x4Ob/5Psvzf7wIFp2Fq0+h -----END CERTIFICATE-----Generated at Sat May 31 17:30:25 2025 by rpki-client