$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: MuStvyp7jOE7mp+TG7j8Sa9ChgmZwhk7IL55NzY6OwQ= Subject key identifier: 55:E8:FB:ED:C0:E1:4C:8E:50:7F:0C:0F:E3:0E:47:B3:29:69:B3:81 Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0C1E Signing time: Fri 30 May 2025 18:55:10 +0000 Manifest this update: Fri 30 May 2025 18:55:09 +0000 Manifest next update: Fri 06 Jun 2025 18:55:09 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: pcXaCLFyJBh7rtxUAOIiZ6LjH3su0FiysApgDXjuQio=) 2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: May 30 18:55:09 2025 GMT Not After : Jun 6 18:55:09 2025 GMT Subject: CN=6839ff0e-5558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b7:cc:d7:a2:b7:b5:ba:56:b8:58:4c:86:e4: 16:44:78:8e:ae:97:e4:7d:a1:be:33:b1:ef:3f:d5: fe:3f:7f:d2:00:ee:47:6b:5d:ea:81:f1:b2:08:bb: 14:59:84:90:dd:7e:80:1d:89:8b:3f:82:5d:c3:7e: c0:68:2d:5b:56:07:7b:fd:da:13:3f:1e:19:b8:03: 45:8f:3f:6b:c2:47:3a:bb:41:a9:a0:88:92:cf:be: 0f:eb:e7:4d:eb:98:d6:be:25:f9:62:7c:92:88:3c: c9:40:0b:f6:f1:e6:70:f7:49:1a:f9:70:56:5e:24: d6:5d:f6:91:82:db:b8:49:6b:c8:ec:23:09:1b:3b: 0e:61:71:1f:8e:a1:65:93:00:99:3b:51:83:8a:f7: 3e:7f:f5:86:a9:d8:fd:7f:b4:3e:5d:97:e5:dc:12: b2:7b:e3:c9:e2:01:49:fc:f1:ae:8a:9a:d5:5f:1e: 4a:1a:a2:42:a4:6e:09:4d:e2:2a:34:8f:cb:7a:19: 6c:ad:3e:6e:72:0c:ba:cf:3b:fa:82:43:ea:9d:8f: d8:60:d1:55:1d:34:a9:82:af:ac:ee:66:68:d6:46: 77:31:de:44:44:c3:03:d9:4e:e7:c8:77:65:96:1b: ca:7a:ba:c4:b9:c9:30:cf:24:95:2e:1c:1c:3f:42: cb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E8:FB:ED:C0:E1:4C:8E:50:7F:0C:0F:E3:0E:47:B3:29:69:B3:81 X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:02:2d:a5:ee:89:db:be:13:5d:3c:c2:e1:6e:3f:47:a4:62: 56:44:09:77:da:b4:9b:d5:16:e5:f5:df:9b:11:69:59:5b:37: f1:b8:79:ff:28:0b:07:70:54:bb:92:1b:2d:77:de:8b:62:70: 4d:35:b5:7f:e9:39:1f:90:77:16:62:fe:54:25:e4:82:0b:ab: dc:41:9c:39:83:e1:77:9d:7c:e7:06:c2:7d:eb:05:90:25:b1: 91:c5:a5:d4:bc:ea:9e:e0:7f:37:99:4a:e2:14:fc:9a:8f:1d: ed:66:c0:6f:e8:5d:3b:dc:61:d5:e9:4d:27:6f:44:ce:4f:16: cd:b0:3e:7e:89:a0:fc:5a:09:4a:ee:3f:fb:8a:ce:6d:65:29: d5:5a:5f:65:28:c0:20:05:f0:ed:94:b0:2b:47:78:2f:9b:85: d2:8b:bd:58:a9:5f:6b:44:c9:25:7d:5d:42:7c:a3:cf:ad:ce: a9:8d:98:1e:f1:b9:d4:3e:a0:33:c2:97:a5:bc:f5:38:65:4a: 4a:ca:80:df:42:53:ce:8b:8b:c6:ca:2d:1c:18:12:47:c9:06: 9f:83:48:a7:8a:c0:59:10:2c:b5:1b:5e:00:a7:e3:c4:be:cc: a1:76:df:2f:4b:d5:28:60:94:88:e6:4f:cc:f3:23:5c:73:6c: 94:57:cc:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjUwNTMwMTg1NTA5WhcNMjUwNjA2MTg1NTA5WjAYMRYwFAYD VQQDEw02ODM5ZmYwZS01NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bfM16K3tbpWuFhMhuQWRHiOrpfkfaG+M7HvP9X+P3/SAO5Ha13qgfGyCLsU WYSQ3X6AHYmLP4Jdw37AaC1bVgd7/doTPx4ZuANFjz9rwkc6u0GpoIiSz74P6+dN 65jWviX5YnySiDzJQAv28eZw90ka+XBWXiTWXfaRgtu4SWvI7CMJGzsOYXEfjqFl kwCZO1GDivc+f/WGqdj9f7Q+XZfl3BKye+PJ4gFJ/PGuiprVXx5KGqJCpG4JTeIq NI/LehlsrT5ucgy6zzv6gkPqnY/YYNFVHTSpgq+s7mZo1kZ3Md5ERMMD2U7nyHdl lhvKerrEuckwzySVLhwcP0LL3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXo++3A 4UyOUH8MD+MOR7MpabOBMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAAi2l7onbvhNdPMLhbj9HpGJWRAl32rSb1Rbl9d+bEWlZWzfxuHn/ KAsHcFS7khstd96LYnBNNbV/6TkfkHcWYv5UJeSCC6vcQZw5g+F3nXznBsJ96wWQ JbGRxaXUvOqe4H83mUriFPyajx3tZsBv6F073GHV6U0nb0TOTxbNsD5+iaD8WglK 7j/7is5tZSnVWl9lKMAgBfDtlLArR3gvm4XSi71YqV9rRMklfV1CfKPPrc6pjZge 8bnUPqAzwpelvPU4ZUpKyoDfQlPOi4vGyi0cGBJHyQafg0inisBZECy1G14Ap+PE vsyhdt8vS9UoYJSI5k/M8yNcc2yUV8xa -----END CERTIFICATE-----Generated at Sat May 31 17:12:59 2025 by rpki-client