$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json) Hash identifier: xyy44CvorCJ5FfwT4hdYRSVdN/NfHxbsRS1IJi/fsgk= Subject key identifier: 0D:27:62:D0:43:07:D7:6B:2F:8A:28:AB:E0:E9:C2:E5:DD:77:4C:36 Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft Manifest number: 0132 Signing time: Sat 31 May 2025 04:16:07 +0000 Manifest this update: Sat 31 May 2025 04:16:06 +0000 Manifest next update: Sat 07 Jun 2025 04:16:06 +0000 Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: rucOcwZ+QPtW8M4WElRHFNMIob3V99ti4uuET2QvT24=) 2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: XlNDLwL1s4PNyju0F9J/L57gx4vJtRRqq2V9lyDq2Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Validity Not Before: May 31 04:16:06 2025 GMT Not After : Jun 7 04:16:06 2025 GMT Subject: CN=683a8286-9d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:05:a1:15:ff:d5:54:fa:97:d3:9d:e2:c9: e8:3a:6e:2d:ba:6d:b5:89:93:fb:37:eb:fc:39:ec: e9:cb:e5:84:0d:ce:fa:35:a5:8d:44:73:a3:93:2d: df:7e:8d:f3:f8:95:59:7c:3b:38:b1:4b:15:02:e3: c9:f6:f5:b8:4f:ea:da:fc:ae:33:88:eb:4d:2e:d6: 5f:29:73:a8:20:31:22:85:77:ae:bd:5e:ff:0e:57: 96:4c:c4:78:8f:0c:39:64:ae:8f:b3:bf:81:65:14: 08:89:5f:a7:b8:ba:92:af:85:39:95:ba:5a:af:0f: 10:a3:58:3c:8c:26:6b:17:13:dd:51:65:e7:d1:1c: 17:47:ca:75:0b:50:5c:4e:86:a6:f4:86:62:ed:78: d3:7f:dd:76:54:66:5e:e2:87:87:70:e5:0e:7b:68: e4:f5:0c:32:49:26:1c:01:e0:11:98:88:1b:8b:ed: 28:08:d5:40:8b:fe:d9:a5:e6:58:ce:19:c3:17:a7: 7b:0a:a7:41:51:fe:67:0c:1b:a3:b8:c8:bf:f0:8c: 0d:66:36:8c:47:b5:8d:40:fb:ea:4a:a7:c6:68:3b: f9:02:05:1a:aa:fa:50:d0:0d:b6:f6:ea:b2:66:af: 6f:6d:88:00:66:ac:f1:f5:88:39:17:64:c7:19:29: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:27:62:D0:43:07:D7:6B:2F:8A:28:AB:E0:E9:C2:E5:DD:77:4C:36 X509v3 Authority Key Identifier: keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ff:70:1a:b3:98:8c:6b:eb:b0:f4:80:b7:5e:5e:2c:e4:75: 09:52:78:d1:38:cd:e2:5f:86:63:8f:24:a5:a2:29:55:a8:7a: f5:23:15:10:3d:81:d4:60:f6:4b:d0:c8:de:b7:48:1b:d1:2e: 03:f8:59:2a:1e:b6:f0:4c:02:e9:1a:57:8f:69:23:a1:0c:c1: ed:f2:1e:2f:4e:34:3c:d1:ab:9f:92:1f:7f:19:58:aa:09:14: d1:a7:50:07:63:3a:ba:16:45:c0:db:69:3d:be:79:74:6d:dc: bd:29:18:9e:e6:99:66:67:82:dc:ce:67:7e:1d:fb:97:31:d4: 49:f7:16:e8:5a:7f:6f:b3:32:78:91:f5:48:aa:04:91:0d:89: 81:a7:ca:c7:b3:c8:bd:f1:25:ff:11:5b:4d:76:89:b7:1e:36: 20:0e:13:2a:18:29:8e:a0:70:24:6b:06:8f:8f:f0:64:4d:1d: 24:e3:9a:51:2b:eb:37:f8:23:6d:e6:4e:fe:6f:e5:b9:3b:a4: 14:67:66:9e:bb:d2:d2:b0:cd:e6:80:16:a3:09:0c:b3:f0:48: 1b:73:2a:87:6c:04:8e:1d:13:7a:db:cc:b1:35:73:89:0f:99: 43:d0:b8:86:9e:b5:c0:4f:d2:b3:23:78:ac:c0:15:e8:b6:86: 08:0f:90:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNDgxMTAvBgNVBAUTKDI2MTU5NkI1NTZFOTJDMTJEMkVCQzhERDhCMjVDRkI4 NzU4RTA3OEMwHhcNMjUwNTMxMDQxNjA2WhcNMjUwNjA3MDQxNjA2WjAYMRYwFAYD VQQDEw02ODNhODI4Ni05ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMwFoRX/1VT6l9Od4snoOm4tum21iZP7N+v8Oezpy+WEDc76NaWNRHOjky3f fo3z+JVZfDs4sUsVAuPJ9vW4T+ra/K4ziOtNLtZfKXOoIDEihXeuvV7/DleWTMR4 jww5ZK6Ps7+BZRQIiV+nuLqSr4U5lbparw8Qo1g8jCZrFxPdUWXn0RwXR8p1C1Bc Toam9IZi7XjTf912VGZe4oeHcOUOe2jk9QwySSYcAeARmIgbi+0oCNVAi/7ZpeZY zhnDF6d7CqdBUf5nDBujuMi/8IwNZjaMR7WNQPvqSqfGaDv5AgUaqvpQ0A229uqy Zq9vbYgAZqzx9Yg5F2THGSn8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0nYtBD B9drL4ooq+DpwuXdd0w2MB8GA1UdIwQYMBaAFCYVlrVW6SwS0uvI3Yslz7h1jgeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0OC9EQkJEODFGRTc1 M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExCTFM2OGpkaXlYUHVIV09C NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poV1d0VmJwTEJMUzY4amRpeVhQdUhXT0I0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0OC9EQkJEODFGRTc1M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExC TFM2OGpkaXlYUHVIV09CNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd/3Aas5iMa+uw9IC3Xl4s5HUJUnjROM3iX4ZjjySloilVqHr1IxUQ PYHUYPZL0Mjet0gb0S4D+FkqHrbwTALpGlePaSOhDMHt8h4vTjQ80aufkh9/GViq CRTRp1AHYzq6FkXA22k9vnl0bdy9KRie5plmZ4Lczmd+HfuXMdRJ9xboWn9vszJ4 kfVIqgSRDYmBp8rHs8i98SX/EVtNdom3HjYgDhMqGCmOoHAkawaPj/BkTR0k45pR K+s3+CNt5k7+b+W5O6QUZ2aeu9LSsM3mgBajCQyz8EgbcyqHbASOHRN628yxNXOJ D5lD0LiGnrXAT9KzI3iswBXotoYID5Bw -----END CERTIFICATE-----Generated at Sat May 31 16:35:51 2025 by rpki-client