$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: pWwj9wgKJbuAduvgIr/Z8fX3Jg4n0xcHzotVcuTO2Rk= Subject key identifier: 3C:16:26:69:7A:CD:A4:6E:94:D4:13:09:2A:4E:4A:76:76:7C:1E:41 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0F9B Signing time: Fri 30 May 2025 17:43:08 +0000 Manifest this update: Fri 30 May 2025 17:43:07 +0000 Manifest next update: Fri 06 Jun 2025 17:43:07 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: 4QcWsDJOYaku4l61FQSUDhygihbFIIE63j1r8Hzx5bA=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4002 (0xfa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: May 30 17:43:07 2025 GMT Not After : Jun 6 17:43:07 2025 GMT Subject: CN=6839ee2c-01e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:8a:b3:61:bf:68:b7:87:b4:f5:3b:42:20: f3:3a:2c:3d:31:f0:54:80:9f:6d:27:b2:23:1b:d6: cd:77:d0:9e:c3:59:4a:67:96:c2:c6:47:7b:22:61: c1:62:43:00:fb:20:06:f2:4a:12:74:a4:b8:00:5c: c6:4f:fa:fb:71:7d:fd:20:96:31:2f:24:5b:e3:ab: b0:47:f0:62:53:cc:b0:b7:cc:2c:1c:7b:85:43:50: 91:05:ea:de:52:4c:63:ab:a4:17:7c:8c:0f:3d:05: 0b:c0:84:54:ce:91:ba:af:24:91:47:b9:f3:84:1a: 29:2d:3d:9c:1d:ab:fb:e9:18:37:1b:cb:18:b5:c0: cc:a4:6b:c1:80:a2:8a:f6:de:56:73:54:42:b9:e4: 2e:9f:d2:77:3b:93:a5:1f:a8:c1:50:99:ca:61:9a: 42:ed:61:f4:aa:e4:91:18:e6:cb:95:eb:9c:61:b9: 63:7d:ed:b8:46:10:f3:7e:b9:e8:3c:df:c8:20:f4: 97:3a:f6:a4:ab:df:43:6f:4c:c5:15:75:9d:62:dc: 67:a0:16:16:1f:e7:72:d4:75:f1:c3:44:8a:06:0c: 0c:bb:68:f7:aa:d4:af:dc:3c:72:c6:63:25:3b:4e: 93:f6:00:30:d6:7f:26:f6:2f:68:a8:f2:ea:6c:56: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:26:69:7A:CD:A4:6E:94:D4:13:09:2A:4E:4A:76:76:7C:1E:41 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5a:cc:a6:3a:be:0e:01:a1:10:f8:b0:e8:43:f1:fb:b3:f2: 7d:51:b8:7e:33:13:b7:3a:8b:66:79:40:fb:ce:6a:2f:69:a7: db:25:fe:ba:7e:70:31:95:37:d5:b9:6f:ba:0e:d8:9b:8d:6f: df:c0:22:3a:80:97:12:9d:d2:4d:84:35:89:54:a1:06:ff:92: f7:b1:71:d7:cf:c0:19:4a:b3:2a:13:0b:31:a7:4a:a7:0d:dc: 26:28:9f:af:4d:22:3a:34:5b:fe:48:58:7a:34:32:fc:5d:89: 55:d3:80:42:68:5d:65:10:c6:d0:81:20:03:c1:89:8f:be:99: a7:78:bb:a2:da:f4:f8:64:b1:19:a4:30:c5:76:fa:69:c9:04: 97:c9:d4:11:cf:3c:0f:e9:60:31:8e:3e:1a:fd:03:5c:bc:93: 7a:8d:64:b9:4d:57:17:f9:2f:47:fd:55:fd:a6:8d:47:b5:ab: 62:8b:53:b0:9f:ce:7c:a1:49:bb:3b:71:ca:ab:ff:07:bd:2c: 73:a9:57:8a:fe:c6:67:74:ee:79:0e:7d:8d:ad:40:5e:3f:43: a0:bc:65:46:91:46:ee:f3:8c:d3:86:7e:fe:7d:2c:59:ab:0f: 9c:40:cf:0a:cc:22:ae:22:0e:63:16:d1:fb:1a:2f:77:b9:8b: 06:30:51:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNTMwMTc0MzA3WhcNMjUwNjA2MTc0MzA3WjAYMRYwFAYD VQQDEw02ODM5ZWUyYy0wMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8mKs2G/aLeHtPU7QiDzOiw9MfBUgJ9tJ7IjG9bNd9Cew1lKZ5bCxkd7ImHB YkMA+yAG8koSdKS4AFzGT/r7cX39IJYxLyRb46uwR/BiU8ywt8wsHHuFQ1CRBere Ukxjq6QXfIwPPQULwIRUzpG6rySRR7nzhBopLT2cHav76Rg3G8sYtcDMpGvBgKKK 9t5Wc1RCueQun9J3O5OlH6jBUJnKYZpC7WH0quSRGObLleucYbljfe24RhDzfrno PN/IIPSXOvakq99Db0zFFXWdYtxnoBYWH+dy1HXxw0SKBgwMu2j3qtSv3DxyxmMl O06T9gAw1n8m9i9oqPLqbFa+BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwWJml6 zaRulNQTCSpOSnZ2fB5BMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALWsymOr4OAaEQ+LDoQ/H7s/J9Ubh+MxO3OotmeUD7zmovaafbJf66 fnAxlTfVuW+6DtibjW/fwCI6gJcSndJNhDWJVKEG/5L3sXHXz8AZSrMqEwsxp0qn DdwmKJ+vTSI6NFv+SFh6NDL8XYlV04BCaF1lEMbQgSADwYmPvpmneLui2vT4ZLEZ pDDFdvppyQSXydQRzzwP6WAxjj4a/QNcvJN6jWS5TVcX+S9H/VX9po1Htatii1Ow n858oUm7O3HKq/8HvSxzqVeK/sZndO55Dn2NrUBeP0OgvGVGkUbu84zThn7+fSxZ qw+cQM8KzCKuIg5jFtH7Gi93uYsGMFFF -----END CERTIFICATE-----Generated at Sat May 31 14:39:51 2025 by rpki-client