$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: w/9eu6oEI6EGGnpmam4+oeSkRFJIP/3LF9vbeSZegUg= Subject key identifier: C0:D5:CB:5E:40:C6:5A:37:A8:67:D9:BA:92:AE:6E:14:E0:1E:7D:AF Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 13 Signing time: Sat 31 May 2025 07:35:05 +0000 Manifest this update: Sat 31 May 2025 07:35:05 +0000 Manifest next update: Sat 07 Jun 2025 07:35:05 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: oGwtE1x1JEaQphhImHmwlBdZ1LCiIqgtwexcBSWXWaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: May 31 07:35:05 2025 GMT Not After : Jun 7 07:35:05 2025 GMT Subject: CN=683ab129-717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:a3:56:7e:69:3c:c3:8a:15:1b:b6:7d:f5: e7:9d:ea:dc:64:22:66:58:5b:ca:59:ce:ab:f5:f1: 17:db:32:49:62:c0:6a:33:b4:2f:c3:98:9a:65:8d: ed:1c:94:3e:bd:51:1a:1e:46:e0:81:2a:d9:41:9e: 27:1f:2f:59:28:c1:d5:8d:4c:6e:21:38:f2:4a:63: 32:4c:5b:c4:88:ca:b0:37:c7:9e:03:8a:4a:31:74: 47:a5:10:32:56:a3:1f:3c:1a:c8:fe:29:43:2a:a3: 49:bd:e3:6d:bf:6c:38:12:bd:c0:cf:97:8e:49:7e: 6f:fa:40:7e:88:21:f9:27:4e:ef:d7:db:56:de:f9: 9d:ec:3d:bc:c0:44:93:45:37:7a:ca:0e:af:79:12: 76:77:4d:e6:1f:12:4d:ff:11:19:44:e8:b0:b7:48: cd:73:36:9c:7d:1b:27:0e:b6:e6:3d:30:5d:d5:d3: 9c:ae:13:4d:b6:3e:ce:d6:b2:cd:a6:5b:fa:a0:b8: 50:81:43:d0:ad:52:44:91:8a:e0:5c:79:66:b5:34: f8:e2:ab:9a:b4:38:60:ae:58:6a:c0:a7:35:7f:39: bd:ba:0a:93:41:7b:2f:0d:3d:84:d0:21:3c:72:65: 25:0a:b1:11:c8:e8:bd:a4:2a:16:81:d2:b3:db:0f: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D5:CB:5E:40:C6:5A:37:A8:67:D9:BA:92:AE:6E:14:E0:1E:7D:AF X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:5d:00:70:82:91:cc:34:d9:0e:62:a8:fb:3d:ab:e5:87: 92:46:00:98:2e:e9:22:6b:d5:ed:11:0b:9c:ac:cf:07:22:78: 15:01:7a:22:76:42:b9:0b:08:f1:d0:18:88:fc:f8:4a:de:0d: 40:9c:90:b2:b7:2b:13:2f:ab:d4:f7:9b:75:d7:ac:0a:df:74: d3:a6:81:b3:33:9d:96:05:8d:9b:48:bc:f6:a8:fc:8a:6d:a5: d6:3d:83:9c:33:6e:26:1b:5b:0c:f7:2c:64:12:a4:96:ba:7d: b5:54:87:16:ca:2c:75:20:7d:14:81:0e:52:30:b9:f0:a9:81: 4c:87:37:ce:28:de:81:6f:a3:29:af:82:ff:b4:b1:5e:30:8d: 30:96:83:ae:8e:eb:48:23:24:4b:51:62:ad:8d:3e:1a:02:9a: a2:b8:94:8e:8e:0e:b7:21:21:a8:68:42:f5:a8:d3:04:14:02: 0b:94:0f:53:db:65:3c:99:c1:59:40:c0:e2:dd:65:0b:59:46: 41:d2:18:e6:1d:30:d0:4e:2c:08:67:67:f4:6b:fe:fd:8f:27: 48:22:eb:3f:5d:ef:a8:eb:ca:cd:27:a2:a5:98:d5:40:0f:c2: 8d:8c:63:c8:20:2d:3f:fc:e2:18:1e:2e:ba:9c:44:84:88:4c: 18:ee:e3:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTA1MzEwNzM1MDVaFw0yNTA2MDcwNzM1MDVaMBgxFjAUBgNV BAMTDTY4M2FiMTI5LTcxN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClNaNWfmk8w4oVG7Z99eed6txkImZYW8pZzqv18RfbMkliwGoztC/DmJplje0c lD69URoeRuCBKtlBnicfL1kowdWNTG4hOPJKYzJMW8SIyrA3x54DikoxdEelEDJW ox88Gsj+KUMqo0m9422/bDgSvcDPl45Jfm/6QH6IIfknTu/X21be+Z3sPbzARJNF N3rKDq95EnZ3TeYfEk3/ERlE6LC3SM1zNpx9GycOtuY9MF3V05yuE022Ps7Wss2m W/qguFCBQ9CtUkSRiuBceWa1NPjiq5q0OGCuWGrApzV/Ob26CpNBey8NPYTQITxy ZSUKsRHI6L2kKhaB0rPbD7pTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwNXLXkDG WjeoZ9m6kq5uFOAefa8wHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJa6XQBwgpHMNNkOYqj7Pavlh5JGAJgu6SJr1e0RC5yszwcieBUBeiJ2 QrkLCPHQGIj8+EreDUCckLK3KxMvq9T3m3XXrArfdNOmgbMznZYFjZtIvPao/Ipt pdY9g5wzbiYbWwz3LGQSpJa6fbVUhxbKLHUgfRSBDlIwufCpgUyHN84o3oFvoymv gv+0sV4wjTCWg66O60gjJEtRYq2NPhoCmqK4lI6ODrchIahoQvWo0wQUAguUD1Pb ZTyZwVlAwOLdZQtZRkHSGOYdMNBOLAhnZ/Rr/v2PJ0gi6z9d76jrys0noqWY1UAP wo2MY8ggLT/84hgeLrqcRISITBju444= -----END CERTIFICATE-----Generated at Sat May 31 17:32:03 2025 by rpki-client