$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: /z6qvo68Sa/iMyjcFVkDoMFYNpsSGK+jFZU+P2ZOc4Y= Subject key identifier: 16:87:54:AA:0F:80:F5:50:03:1F:7C:F8:E2:F2:17:4E:11:29:02:25 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 04B8 Signing time: Sat 31 May 2025 00:04:46 +0000 Manifest this update: Sat 31 May 2025 00:04:45 +0000 Manifest next update: Sat 07 Jun 2025 00:04:45 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: L8u2i0OTfifoWdKGs/51Y+f0uTRUb9blXipM/bx1/R4=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E, serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: May 31 00:04:45 2025 GMT Not After : Jun 7 00:04:45 2025 GMT Subject: CN=683a479e-a57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:d9:c7:eb:22:09:73:83:e7:3d:82:54:56: 8a:2b:8c:92:b4:08:3f:d0:30:4a:7f:d6:52:b2:65: 3f:a1:8f:ca:d4:3d:bd:4e:6d:1d:fd:3e:56:2f:6b: 58:db:11:90:9c:fb:87:1e:cd:38:61:6d:e2:03:ba: 4d:cc:4e:69:29:d5:af:92:ce:d8:40:4c:1b:34:cf: ea:c7:a2:e0:5e:ae:66:5d:4b:26:9a:38:06:86:7e: 9a:16:d6:d1:d4:ed:6f:e6:d8:f0:cc:00:87:9d:9f: 2a:49:3d:bf:0e:06:33:e3:f2:81:a8:a1:74:82:cc: 5c:70:90:20:4f:55:39:83:9d:fa:f9:4e:83:4a:d2: a0:af:36:a6:bf:f8:56:87:5b:fe:ac:ca:f8:96:6f: 51:f0:27:0d:40:ab:1f:30:c4:62:60:03:98:70:45: 56:f9:2f:fd:a3:fa:ed:0b:3f:d1:df:58:6a:7b:6c: 9f:17:c2:6c:73:e8:ab:bf:82:35:d5:b0:36:fe:6b: ad:80:fa:41:d4:a7:d6:25:68:9f:83:ef:c6:2d:99: a5:99:a6:e6:90:94:12:d6:2f:a1:55:9a:a3:53:f1: cd:7e:05:2c:33:79:df:e2:48:93:f1:cf:34:46:cf: 3f:bd:f0:04:be:46:31:1a:9c:ab:f2:b6:25:3e:5b: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:87:54:AA:0F:80:F5:50:03:1F:7C:F8:E2:F2:17:4E:11:29:02:25 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c8:e9:69:17:fb:a8:d0:13:8c:2b:1a:cc:9f:6e:28:99:65: 92:d4:84:b9:60:e8:fe:66:13:c3:ad:9a:7d:3a:ce:8b:ce:d1: 04:63:fb:7d:69:03:d1:8e:b0:56:e3:0e:ea:7a:f4:16:d1:ec: 88:05:77:4e:db:24:e7:94:a8:fc:c7:f8:b0:30:d7:a7:b4:03: ef:42:9e:00:d8:37:42:a0:f6:bb:94:87:b9:ba:25:ee:27:9f: 69:cd:98:aa:5d:73:23:f5:d5:20:64:c8:b1:db:ba:5d:03:a7: ee:72:00:ed:6f:63:34:ec:2e:22:4d:7e:b6:76:ad:38:fa:ea: 9c:93:ae:78:6b:9b:4d:b0:81:76:00:f6:0f:68:05:6a:75:30: bc:03:cb:fc:47:47:74:56:c9:03:72:dc:38:f1:a7:47:a5:6e: 5a:16:49:3a:64:a1:4b:3e:53:86:ab:79:d2:5f:60:63:e0:fc: 7f:4c:ab:b9:e4:a2:19:53:84:1c:15:58:1c:4f:a5:63:74:97: 07:89:ae:93:e2:53:26:66:4b:dd:42:83:e1:f6:8a:04:12:bb: 17:e0:65:66:d0:97:ec:84:95:e1:78:9d:91:ce:87:93:7d:c6: f8:b5:f6:20:5d:93:47:b0:43:d4:da:6e:16:04:22:cb:4e:1f: ad:9a:62:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUwNTMxMDAwNDQ1WhcNMjUwNjA3MDAwNDQ1WjAYMRYwFAYD VQQDEw02ODNhNDc5ZS1hNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KHZx+siCXOD5z2CVFaKK4yStAg/0DBKf9ZSsmU/oY/K1D29Tm0d/T5WL2tY 2xGQnPuHHs04YW3iA7pNzE5pKdWvks7YQEwbNM/qx6LgXq5mXUsmmjgGhn6aFtbR 1O1v5tjwzACHnZ8qST2/DgYz4/KBqKF0gsxccJAgT1U5g536+U6DStKgrzamv/hW h1v+rMr4lm9R8CcNQKsfMMRiYAOYcEVW+S/9o/rtCz/R31hqe2yfF8Jsc+irv4I1 1bA2/mutgPpB1KfWJWifg+/GLZmlmabmkJQS1i+hVZqjU/HNfgUsM3nf4kiT8c80 Rs8/vfAEvkYxGpyr8rYlPlvCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaHVKoP gPVQAx98+OLyF04RKQIlMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7yOlpF/uo0BOMKxrMn24omWWS1IS5YOj+ZhPDrZp9Os6LztEEY/t9 aQPRjrBW4w7qevQW0eyIBXdO2yTnlKj8x/iwMNentAPvQp4A2DdCoPa7lIe5uiXu J59pzZiqXXMj9dUgZMix27pdA6fucgDtb2M07C4iTX62dq04+uqck654a5tNsIF2 APYPaAVqdTC8A8v8R0d0VskDctw48adHpW5aFkk6ZKFLPlOGq3nSX2Bj4Px/TKu5 5KIZU4QcFVgcT6VjdJcHia6T4lMmZkvdQoPh9ooEErsX4GVm0JfshJXheJ2RzoeT fcb4tfYgXZNHsEPU2m4WBCLLTh+tmmK+ -----END CERTIFICATE-----Generated at Sat May 31 16:55:10 2025 by rpki-client