$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: 3zDCln3lWDW+XfvWjhJEfuBLALR+hqS6jySvU+w6DMQ= Subject key identifier: A0:78:CC:61:50:DB:D6:9C:10:8F:FB:7A:5B:09:83:D1:5B:C5:A6:6A Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 48 Signing time: Sun 01 Jun 2025 07:06:06 +0000 Manifest this update: Sun 01 Jun 2025 07:06:05 +0000 Manifest next update: Sun 08 Jun 2025 07:06:05 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: TcmOMUoCp2ZP21ZX3s+XMt6m73xv/g7pTJWD+a5pSeI=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Jun 1 07:06:05 2025 GMT Not After : Jun 8 07:06:05 2025 GMT Subject: CN=683bfbdd-361a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:91:00:33:7c:4d:7b:7b:c4:5c:6c:8f:06: 35:03:3f:78:e4:80:b9:21:6e:43:94:56:06:6f:1d: 4d:4b:6b:a7:0a:62:20:e2:b2:2f:46:4e:65:08:aa: c2:49:08:f3:09:1a:75:4f:03:ca:07:d6:14:59:df: 61:20:7a:8e:28:48:ac:8e:d3:bb:8e:ca:48:c6:d8: 23:7b:59:7f:63:a3:b0:69:c6:ab:dd:4e:06:9d:9f: 81:68:1d:1a:7a:08:cf:a1:5f:b1:b5:e5:4e:be:62: f7:f9:34:4d:37:eb:0c:78:f2:49:b4:fe:52:70:f9: f6:db:15:6e:ed:07:3a:31:27:df:27:51:4a:56:80: 6d:4e:88:cd:51:fe:d2:5d:47:98:1b:d6:31:4b:92: 7f:cb:94:0f:90:d9:eb:d3:e9:01:f5:a1:b6:cf:bb: 9d:30:4e:26:fe:bb:3a:f5:68:7b:9e:05:b7:d4:54: 96:0f:3a:23:2f:c2:b9:dd:17:d9:93:0a:bf:e4:39: 2a:25:93:d3:40:d1:dc:f8:95:ee:6f:0c:f6:58:66: 1c:5e:8f:ba:c4:6b:11:c9:db:94:8b:1b:7a:80:34: 25:ec:39:45:52:15:7e:cd:ab:55:05:c4:cd:17:c3: db:59:4f:7d:2f:b9:ea:ab:32:e1:08:b8:6e:3b:e1: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:78:CC:61:50:DB:D6:9C:10:8F:FB:7A:5B:09:83:D1:5B:C5:A6:6A X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3d:d8:cb:34:cd:d9:84:e3:f5:c8:4a:5f:31:59:d4:9f:9d: 3d:ee:79:21:c1:00:34:c2:99:78:f2:af:79:25:77:56:38:b2: 86:56:fe:99:ff:c3:cb:b0:48:69:ec:69:c6:fc:9f:1a:90:bc: 0b:00:57:cc:5c:18:d5:e4:a2:b5:bd:ff:d3:1b:ad:6f:fc:fe: 23:67:e7:4a:f9:59:21:4e:9c:a5:23:2f:2f:ca:bf:82:bc:db: 40:fc:1e:b1:e0:5d:d5:14:4a:fb:c8:30:fc:cd:58:52:d9:63: 81:75:bb:3e:62:37:32:91:05:5b:31:df:fe:2e:2c:f1:0c:db: 26:68:46:41:5f:4d:1e:92:aa:c9:10:28:bd:25:e1:e7:8f:4f: 53:66:78:82:98:39:59:60:21:57:09:6a:44:d0:02:7f:94:f8: 4b:ee:e6:7b:09:31:22:7f:7e:70:47:2c:94:31:80:81:e1:2f: c4:62:03:93:73:fb:6e:19:9f:f0:bd:5d:3e:ec:3f:55:7f:f2: ad:a9:a7:85:1f:ec:25:4a:52:55:6b:71:fc:91:4a:03:87:0f: 68:a3:7e:93:37:65:4d:ff:b7:52:c3:35:31:17:17:70:02:13: 61:91:93:83:bc:34:72:31:2d:f8:3c:93:fb:3a:05:a3:0d:0d: 31:58:25:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDRCOTExMC8GA1UEBRMoMjc2RENGM0YyMzQxQURDN0QwQkM0NkYzNjM0NEY3MTU2 MDBEOUE1ODAeFw0yNTA2MDEwNzA2MDVaFw0yNTA2MDgwNzA2MDVaMBgxFjAUBgNV BAMTDTY4M2JmYmRkLTM2MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCytJEAM3xNe3vEXGyPBjUDP3jkgLkhbkOUVgZvHU1La6cKYiDisi9GTmUIqsJJ CPMJGnVPA8oH1hRZ32Egeo4oSKyO07uOykjG2CN7WX9jo7BpxqvdTgadn4FoHRp6 CM+hX7G15U6+Yvf5NE036wx48km0/lJw+fbbFW7tBzoxJ98nUUpWgG1OiM1R/tJd R5gb1jFLkn/LlA+Q2evT6QH1obbPu50wTib+uzr1aHueBbfUVJYPOiMvwrndF9mT Cr/kOSolk9NA0dz4le5vDPZYZhxej7rEaxHJ25SLG3qANCXsOUVSFX7Nq1UFxM0X w9tZT30vueqrMuEIuG474cPNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoHjMYVDb 1pwQj/t6WwmD0VvFpmowHwYDVR0jBBgwFoAUJ23PPyNBrcfQvEbzY0T3FWANmlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNEI5L0NFODQwNTY4RDIz NTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1s Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjIzUFB5TkJyY2ZRdkVielkwVDNGV0FObWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw NEI5L0NFODQwNTY4RDIzNTExRUY4RkUyOUM1Q0M0RjlBRTAyL0oyM1BQeU5CcmNm UXZFYnpZMFQzRldBTm1sZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGA92Ms0zdmE4/XISl8xWdSfnT3ueSHBADTCmXjyr3kld1Y4soZW/pn/ w8uwSGnsacb8nxqQvAsAV8xcGNXkorW9/9MbrW/8/iNn50r5WSFOnKUjLy/Kv4K8 20D8HrHgXdUUSvvIMPzNWFLZY4F1uz5iNzKRBVsx3/4uLPEM2yZoRkFfTR6SqskQ KL0l4eePT1NmeIKYOVlgIVcJakTQAn+U+Evu5nsJMSJ/fnBHLJQxgIHhL8RiA5Nz +24Zn/C9XT7sP1V/8q2pp4Uf7CVKUlVrcfyRSgOHD2ijfpM3ZU3/t1LDNTEXF3AC E2GRk4O8NHIxLfg8k/s6BaMNDTFYJXY= -----END CERTIFICATE-----Generated at Mon Jun 2 21:53:56 2025 by rpki-client