$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: W7gPe0H9fIfZxYV01+rR+i2XotmZoSrwIicSOxpMLVA= Subject key identifier: AA:A3:EC:E3:1A:5A:AC:8A:6B:F1:35:EF:CA:42:93:F9:18:38:68:6F Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 0394 Signing time: Sat 31 May 2025 00:59:21 +0000 Manifest this update: Sat 31 May 2025 00:59:20 +0000 Manifest next update: Sat 07 Jun 2025 00:59:20 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: ablM1qExeZUN9WTpqnM4e3mEVsIKmWaBJZ3/mANGXbA=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: May 31 00:59:20 2025 GMT Not After : Jun 7 00:59:20 2025 GMT Subject: CN=683a5469-7d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:ed:1a:38:68:82:ce:d9:09:27:76:80:44: 07:9a:c1:84:77:d7:5d:6c:3a:dd:93:2b:dc:58:fb: 6b:12:9e:1c:b0:76:59:44:34:ee:ac:9c:bc:e5:97: 4f:49:1f:f3:5e:c0:34:b3:99:86:f0:41:b0:94:81: a2:c3:49:b1:e4:e4:09:2f:5f:1e:f2:a5:6c:f7:ba: da:93:72:23:2b:49:eb:20:9a:af:f7:e8:46:ce:b7: bc:75:88:99:ab:a0:0b:54:8a:56:ff:c9:6d:6d:ce: 47:51:c5:85:4c:d6:70:23:fa:d5:ca:46:4c:9f:46: 33:4f:38:dc:34:9d:6c:fb:bb:43:7f:97:11:34:d1: 4f:4a:f7:44:aa:17:93:b3:f4:12:a2:d7:8a:9b:bf: c2:bb:d0:8d:32:61:58:31:8f:7a:35:ee:94:12:ba: ac:3b:2e:5a:39:f0:c2:a8:9e:e4:c7:c2:9f:91:17: c4:a2:2a:40:66:0b:87:e8:2c:25:06:31:9c:54:25: a3:f1:2c:fb:a5:42:af:b3:b7:ec:e2:9c:ed:e1:5d: bc:f2:7c:e0:30:c4:e5:f1:d1:c6:e0:e0:36:f9:32: b1:27:b2:54:55:dd:72:d2:89:68:d6:7b:60:6b:ff: a2:27:68:84:4f:f7:d3:35:0c:5e:f4:ab:73:f8:70: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A3:EC:E3:1A:5A:AC:8A:6B:F1:35:EF:CA:42:93:F9:18:38:68:6F X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b4:52:54:72:f4:95:8a:64:f7:5d:70:80:ac:05:45:a4:0f: 49:e1:fb:d3:c5:31:32:a8:1a:44:de:c8:55:3b:5e:e8:5d:c1: 1e:34:38:da:4b:8e:d2:a9:9c:38:e5:99:87:58:01:7e:7b:11: 3d:75:71:83:8d:c4:66:1c:62:71:1a:55:9c:02:6c:9d:01:00: fc:24:48:58:1e:b2:04:c4:ce:1b:e7:ff:bd:c5:67:c9:29:24: 25:56:69:4a:45:52:ec:44:3c:2e:6f:a2:6a:4c:2f:55:15:bd: 8c:7d:0d:64:7a:2d:24:ef:75:70:63:62:f0:5f:fc:f1:49:e2: 44:42:2e:b8:74:90:ce:6f:6c:da:66:dd:92:d2:6d:46:47:04: 4d:96:05:92:b2:37:d7:67:20:d1:29:f1:98:61:f4:10:21:d1: e1:87:33:3f:39:53:57:23:bf:14:65:85:db:30:de:c9:9b:e4: 3c:f9:b9:be:76:8e:cf:1b:af:72:67:9f:54:cb:6a:73:f9:bd: 7c:3b:96:ec:f7:09:fd:91:b2:44:5e:fc:7f:9c:31:c4:f4:b0: 0a:ed:08:a1:2d:d9:0f:88:c3:19:1a:85:71:52:8a:bd:06:f1: 7a:af:aa:5f:1b:2b:66:14:8a:7a:61:c7:e9:65:fd:0e:be:87: 05:b8:fb:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUwNTMxMDA1OTIwWhcNMjUwNjA3MDA1OTIwWjAYMRYwFAYD VQQDEw02ODNhNTQ2OS03ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux/tGjhogs7ZCSd2gEQHmsGEd9ddbDrdkyvcWPtrEp4csHZZRDTurJy85ZdP SR/zXsA0s5mG8EGwlIGiw0mx5OQJL18e8qVs97rak3IjK0nrIJqv9+hGzre8dYiZ q6ALVIpW/8ltbc5HUcWFTNZwI/rVykZMn0YzTzjcNJ1s+7tDf5cRNNFPSvdEqheT s/QSoteKm7/Cu9CNMmFYMY96Ne6UErqsOy5aOfDCqJ7kx8KfkRfEoipAZguH6Cwl BjGcVCWj8Sz7pUKvs7fs4pzt4V288nzgMMTl8dHG4OA2+TKxJ7JUVd1y0olo1ntg a/+iJ2iET/fTNQxe9Ktz+HBAuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqj7OMa WqyKa/E178pCk/kYOGhvMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBitFJUcvSVimT3XXCArAVFpA9J4fvTxTEyqBpE3shVO17oXcEeNDja S47SqZw45ZmHWAF+exE9dXGDjcRmHGJxGlWcAmydAQD8JEhYHrIExM4b5/+9xWfJ KSQlVmlKRVLsRDwub6JqTC9VFb2MfQ1kei0k73VwY2LwX/zxSeJEQi64dJDOb2za Zt2S0m1GRwRNlgWSsjfXZyDRKfGYYfQQIdHhhzM/OVNXI78UZYXbMN7Jm+Q8+bm+ do7PG69yZ59Uy2pz+b18O5bs9wn9kbJEXvx/nDHE9LAK7QihLdkPiMMZGoVxUoq9 BvF6r6pfGytmFIp6YcfpZf0OvocFuPvO -----END CERTIFICATE-----Generated at Sat May 31 17:02:14 2025 by rpki-client