$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: YrCxSRM6bzV2E97jDTFkIe4r8avWh4NsLUkUPMANmRE= Subject key identifier: 0E:09:37:69:A0:1D:5B:93:31:AD:74:0C:73:F5:5E:0A:18:54:30:54 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1CA4 Signing time: Fri 30 May 2025 16:21:18 +0000 Manifest this update: Fri 30 May 2025 16:21:17 +0000 Manifest next update: Fri 06 Jun 2025 16:21:17 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: vTos1tbJYTMycjbVOJQdXrRnNcotthXue6lGIHSJLuk=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7364 (0x1cc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: May 30 16:21:17 2025 GMT Not After : Jun 6 16:21:17 2025 GMT Subject: CN=6839dafe-4a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:b3:eb:33:96:5f:8b:20:4b:52:8e:ee:3f: c1:36:b9:d7:a8:ad:78:a6:9f:e5:63:ea:85:ac:53: a6:b9:41:88:6e:8d:76:f5:9a:44:ef:62:e3:14:6a: ce:e5:4e:2f:d2:4f:15:e8:79:9f:9e:fd:4f:42:ee: 84:34:de:32:30:72:71:35:20:05:73:db:f0:55:0a: 6a:df:18:64:65:20:19:ec:25:59:4f:76:ab:31:54: fb:51:9a:ce:6e:05:c6:ad:af:f2:02:25:83:1e:27: 43:73:ad:2b:ff:8d:d8:6b:b6:52:71:cd:7e:9f:11: b2:2f:9b:11:97:ff:3e:0b:ee:2a:f5:5d:8e:a1:0e: 27:43:e1:03:05:77:80:d2:e2:fe:55:51:fa:5e:2c: 09:72:2c:a1:03:d6:c4:66:5a:78:d9:7a:5c:31:2c: 6f:a4:ad:a2:82:71:2c:b3:8f:3c:2b:aa:3e:e8:9b: 0f:6e:70:dd:c6:eb:b0:71:48:7b:df:56:c0:42:44: 68:bc:a7:27:b8:35:ac:43:9a:29:61:18:df:b4:fc: 13:0b:42:d3:b1:82:7d:31:0d:62:08:1a:25:d3:41: f7:dd:7f:d8:e4:ae:a4:36:c6:cb:08:d4:a0:1f:40: 88:5a:6c:f7:f5:a8:c9:36:cf:85:1e:d7:04:a5:60: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:09:37:69:A0:1D:5B:93:31:AD:74:0C:73:F5:5E:0A:18:54:30:54 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0f:90:e3:22:97:c4:c9:f2:a6:52:fa:16:81:80:34:6d:0a: 34:df:03:62:89:56:12:a2:fa:3a:82:4a:32:24:51:b7:35:92: 22:c5:f8:7a:9b:97:79:d9:ce:b4:98:4e:ff:87:33:ed:61:f9: 79:18:ed:7a:1d:02:3b:b9:b4:fb:89:75:f3:7f:40:d8:20:a0: 56:f8:e5:e3:7c:a3:6d:2d:3e:fd:cf:46:a5:26:3e:65:eb:eb: 5a:f3:ad:57:0b:9f:bd:5c:a2:24:09:00:b8:e4:02:d0:a4:66: 85:25:67:f6:d8:36:13:36:79:66:4f:7c:fb:27:f9:75:fb:af: 08:50:58:cd:34:aa:ba:1d:5b:93:43:96:d8:74:bb:c2:13:9c: 82:2c:85:78:1d:a2:ad:5d:2e:9a:fd:f2:b2:26:45:87:0c:0d: 92:a2:80:2d:eb:29:46:49:ba:38:12:4f:38:19:a2:2c:c0:7d: cb:01:19:76:52:ce:74:bd:cc:9e:97:5a:f1:76:48:12:bb:8a: 60:0c:2d:2e:fb:f2:2c:80:6b:7a:76:e2:21:b0:13:e6:15:4f: cf:fd:51:16:e6:21:f7:aa:22:bc:90:64:4b:ea:10:d9:9e:8e: 1d:22:4a:5e:eb:d3:d2:a7:5b:72:28:87:a9:29:30:fe:be:fe: fe:b9:82:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwNTMwMTYyMTE3WhcNMjUwNjA2MTYyMTE3WjAYMRYwFAYD VQQDEw02ODM5ZGFmZS00YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkl6z6zOWX4sgS1KO7j/BNrnXqK14pp/lY+qFrFOmuUGIbo129ZpE72LjFGrO 5U4v0k8V6Hmfnv1PQu6ENN4yMHJxNSAFc9vwVQpq3xhkZSAZ7CVZT3arMVT7UZrO bgXGra/yAiWDHidDc60r/43Ya7ZScc1+nxGyL5sRl/8+C+4q9V2OoQ4nQ+EDBXeA 0uL+VVH6XiwJciyhA9bEZlp42XpcMSxvpK2ignEss488K6o+6JsPbnDdxuuwcUh7 31bAQkRovKcnuDWsQ5opYRjftPwTC0LTsYJ9MQ1iCBol00H33X/Y5K6kNsbLCNSg H0CIWmz39ajJNs+FHtcEpWCjXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4JN2mg HVuTMa10DHP1XgoYVDBUMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9D5DjIpfEyfKmUvoWgYA0bQo03wNiiVYSovo6gkoyJFG3NZIixfh6 m5d52c60mE7/hzPtYfl5GO16HQI7ubT7iXXzf0DYIKBW+OXjfKNtLT79z0alJj5l 6+ta861XC5+9XKIkCQC45ALQpGaFJWf22DYTNnlmT3z7J/l1+68IUFjNNKq6HVuT Q5bYdLvCE5yCLIV4HaKtXS6a/fKyJkWHDA2SooAt6ylGSbo4Ek84GaIswH3LARl2 Us50vcyel1rxdkgSu4pgDC0u+/IsgGt6duIhsBPmFU/P/VEW5iH3qiK8kGRL6hDZ no4dIkpe69PSp1tyKIepKTD+vv7+uYJr -----END CERTIFICATE-----Generated at Sat May 31 16:27:49 2025 by rpki-client