$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: +0MSAJ8Csly3LfLwEDMHw058TKkUMpKNE6YANPCFijA= Subject key identifier: 68:47:64:F2:E9:3B:0B:7B:FA:86:EA:57:A7:06:09:6A:6F:26:35:91 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 011E Signing time: Sat 31 May 2025 04:27:30 +0000 Manifest this update: Sat 31 May 2025 04:27:29 +0000 Manifest next update: Sat 07 Jun 2025 04:27:29 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: RQPQINyMr3z37apVMb63vnS6LsJoWse5i3n9yRKKsLA=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: May 31 04:27:29 2025 GMT Not After : Jun 7 04:27:29 2025 GMT Subject: CN=683a8532-d97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:da:f2:5e:b1:37:f9:4e:7a:81:de:91:c3: 66:f0:ba:c7:4e:94:e5:df:0f:91:e0:62:46:0f:75: 98:e2:ac:f8:52:41:6c:8e:91:a9:11:92:60:5a:86: 3f:26:4c:46:45:54:43:f7:33:09:87:80:6b:4c:bf: 08:5a:38:44:a7:36:e2:6c:63:9c:87:8f:ac:08:41: 06:3b:20:30:ca:50:80:6f:37:e1:fe:11:3c:0f:0c: a9:e8:85:fa:b3:8b:ef:49:77:ca:80:38:c4:b8:be: 1d:fe:f1:e4:7c:8d:17:b2:e0:61:26:bc:1b:db:ca: 35:d5:23:89:d5:8a:73:2d:e1:bb:ea:58:01:04:12: ad:06:b3:96:38:4a:ec:13:61:73:65:17:52:09:7e: a0:fa:6c:9e:ee:7f:cd:c2:03:fc:77:ad:ba:88:f0: 4b:a3:3c:9c:24:65:79:a5:19:e4:0c:e9:e7:42:31: 28:eb:1b:88:cb:e3:b8:f7:bb:3b:aa:19:d1:5b:b2: 2a:a3:32:4d:0b:90:0d:5d:09:97:88:5c:57:8a:e9: 97:4c:4d:b3:73:76:74:86:26:a1:e3:45:69:99:6d: 04:77:73:d0:ec:36:0e:ea:25:78:ee:53:af:5f:c1: a8:5e:d0:92:1f:55:8c:6f:38:88:df:9d:33:31:22: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:64:F2:E9:3B:0B:7B:FA:86:EA:57:A7:06:09:6A:6F:26:35:91 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a3:10:cd:24:ef:7d:13:fc:fb:d5:7c:34:11:31:cf:83:9b: 3f:ce:0c:bc:9e:71:74:5e:ef:4d:09:58:1e:ab:49:0f:e7:b1: b3:9b:bd:98:60:3b:68:68:ee:79:7b:1c:c4:84:49:6a:6c:b9: cf:39:dd:d9:b4:91:8b:d3:14:7e:ec:11:4e:65:22:b5:85:2e: 42:00:ba:bf:be:f6:40:54:c1:66:41:ea:b8:c3:8c:48:c3:a5: 83:9e:11:b5:03:dd:36:6a:0a:1c:55:94:66:53:ab:1a:a3:82: 8b:cb:5e:a9:54:77:9b:e4:27:bd:8a:9b:03:07:3d:df:41:58: 8b:fe:f9:86:73:ea:1f:68:05:72:0e:05:92:5c:cc:d8:a7:4c: 00:c3:4a:6c:5e:a8:a0:d8:9e:be:4d:80:24:84:4a:30:e8:56: 58:3c:2b:81:3e:62:3c:b7:81:c2:fc:9b:ed:75:4f:f0:45:92: 7f:d1:2b:cb:b7:4e:6d:04:f2:45:cb:58:ae:59:3b:07:c7:03: f2:05:cd:81:c2:ac:28:1f:6c:6a:bb:09:b1:32:f6:36:8f:57: 78:8d:e3:34:2b:af:d3:b2:3f:16:ad:af:88:a1:31:09:53:4a: 52:e0:a7:93:e4:d6:ce:64:88:4f:46:66:31:f3:31:b7:e5:13: 9e:b8:c4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjUwNTMxMDQyNzI5WhcNMjUwNjA3MDQyNzI5WjAYMRYwFAYD VQQDEw02ODNhODUzMi1kOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nDa8l6xN/lOeoHekcNm8LrHTpTl3w+R4GJGD3WY4qz4UkFsjpGpEZJgWoY/ JkxGRVRD9zMJh4BrTL8IWjhEpzbibGOch4+sCEEGOyAwylCAbzfh/hE8Dwyp6IX6 s4vvSXfKgDjEuL4d/vHkfI0XsuBhJrwb28o11SOJ1YpzLeG76lgBBBKtBrOWOErs E2FzZRdSCX6g+mye7n/NwgP8d626iPBLozycJGV5pRnkDOnnQjEo6xuIy+O497s7 qhnRW7IqozJNC5ANXQmXiFxXiumXTE2zc3Z0hiah40VpmW0Ed3PQ7DYO6iV47lOv X8GoXtCSH1WMbziI350zMSICjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhHZPLp Owt7+obqV6cGCWpvJjWRMB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASoxDNJO99E/z71Xw0ETHPg5s/zgy8nnF0Xu9NCVgeq0kP57Gzm72Y YDtoaO55exzEhElqbLnPOd3ZtJGL0xR+7BFOZSK1hS5CALq/vvZAVMFmQeq4w4xI w6WDnhG1A902agocVZRmU6sao4KLy16pVHeb5Ce9ipsDBz3fQViL/vmGc+ofaAVy DgWSXMzYp0wAw0psXqig2J6+TYAkhEow6FZYPCuBPmI8t4HC/JvtdU/wRZJ/0SvL t05tBPJFy1iuWTsHxwPyBc2BwqwoH2xquwmxMvY2j1d4jeM0K6/Tsj8Wra+IoTEJ U0pS4KeT5NbOZIhPRmYx8zG35ROeuMQ1 -----END CERTIFICATE-----Generated at Sat May 31 16:44:57 2025 by rpki-client