$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft File: jiZ6MV35Dplf9M1LLPj8TDMksts.mft (raw, json) Hash identifier: 9RVXDu6mvN/uzHyFhm+zQ5aivajd9BxfJwljL2MdEsg= Subject key identifier: 4F:6A:8C:B7:F3:C5:BC:56:09:51:F0:0E:33:EF:E0:E2:F3:51:4C:CB Authority key identifier: 8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB Certificate issuer: /CN=A91B35DF/serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:01:25 +0000 Manifest this update: Sat 31 May 2025 07:01:25 +0000 Manifest next update: Sat 07 Jun 2025 07:01:25 +0000 Files and hashes: 1: jiZ6MV35Dplf9M1LLPj8TDMksts.crl (hash: jB11QfmYWag+jHG2H02Q9KWN1beMLX50P871Oz5sbDM=) 2: EF714C70D89F11EFA1D2E672C4F9AE02.roa (hash: RQguTQm7u/HopEKGt5+xwJ/Yt9Fvm6tqRZ2uC++bhEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35DF, serialNumber=8E267A315DF90E995FF4CD4B2CF8FC4C3324B2DB Validity Not Before: May 31 07:01:25 2025 GMT Not After : Jun 7 07:01:25 2025 GMT Subject: CN=683aa945-4f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:8e:97:79:7c:b3:6b:63:19:11:fc:54:c1: ea:e3:ba:01:3a:eb:4b:bf:23:6a:a6:0b:4c:e9:26: de:5c:d9:2c:95:f5:25:8f:19:44:53:a2:73:a0:9b: 46:5b:ae:33:b4:21:f1:ad:2d:ef:2f:4e:7d:ad:31: c3:a5:ce:52:ca:80:ff:a4:91:95:a9:35:2a:ab:c2: 45:01:72:b5:83:24:e2:4c:df:69:e6:48:ba:fc:04: a3:1d:f3:ec:10:fb:c0:7a:4d:65:5d:c9:7e:80:5d: 59:21:82:7d:9c:70:b9:a7:6a:86:ff:31:51:b8:39: 5a:cb:0c:9c:42:19:a9:4b:e9:88:9f:24:fd:6d:55: 70:6b:d7:72:5a:c2:e2:63:b8:03:a1:97:e3:19:a4: 83:e5:52:19:d6:e8:d6:6a:7c:14:79:99:1c:09:43: af:c1:69:c5:5e:8d:e7:81:9e:e2:e1:c0:fa:fe:d8: af:6a:a1:99:7d:d5:17:64:eb:21:3c:fd:e4:4b:86: 6c:a5:34:5b:e0:87:5d:f0:95:31:a6:3c:7a:5e:c4: a8:48:fb:0a:e7:61:04:b4:5d:9a:cc:2f:52:54:24: e9:c0:61:30:f4:f2:ff:f4:a1:0e:85:11:6c:77:74: 03:d2:0c:3a:1d:6c:ac:d0:ce:13:47:15:bc:5c:79: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6A:8C:B7:F3:C5:BC:56:09:51:F0:0E:33:EF:E0:E2:F3:51:4C:CB X509v3 Authority Key Identifier: keyid:8E:26:7A:31:5D:F9:0E:99:5F:F4:CD:4B:2C:F8:FC:4C:33:24:B2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jiZ6MV35Dplf9M1LLPj8TDMksts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35DF/1EA0199CD89E11EFB4212C56C4F9AE02/jiZ6MV35Dplf9M1LLPj8TDMksts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e4:1a:06:b2:a7:80:48:e8:ef:9f:de:cd:73:8c:18:1f:1b: d5:93:80:16:1c:18:b3:4e:d5:4d:db:3a:68:28:5a:d6:65:2e: ac:25:66:b4:62:08:a5:18:09:bd:3e:bf:49:0b:dd:14:32:94: c1:16:03:b6:4e:1b:26:dc:5f:51:8c:11:0b:55:c6:86:46:51: 57:1f:e3:3e:4b:be:ab:c2:d2:48:90:72:aa:aa:80:1f:ab:f9: dd:a1:a8:11:f3:cc:61:59:5e:81:da:0a:32:2a:07:dc:d0:f7: 28:85:e1:63:a4:16:b7:4f:c6:12:20:d7:c3:0e:19:2e:df:5f: a2:04:08:b6:d3:2f:0a:66:64:0b:96:9b:12:1c:0f:47:1f:35: e0:d7:27:8a:0f:8b:a1:65:78:b5:da:ec:4d:cb:cb:c1:86:ec: f6:e7:07:d6:db:58:97:3e:7f:ae:d3:24:fe:d4:fa:b9:b3:04: f2:95:c2:7f:e8:00:51:5b:24:1c:5d:ba:ef:57:f5:2d:c5:00: 2a:9c:22:45:4b:c9:59:c9:ca:8d:85:b9:53:cd:ed:d1:a6:23: 56:89:4e:76:a8:6e:06:ef:53:0d:80:db:b1:7e:d9:7d:28:11: f1:29:9d:15:22:dc:ec:c8:ac:6e:4e:e9:21:c9:9c:77:33:83: e5:d7:db:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzVERjExMC8GA1UEBRMoOEUyNjdBMzE1REY5MEU5OTVGRjRDRDRCMkNGOEZDNEMz MzI0QjJEQjAeFw0yNTA1MzEwNzAxMjVaFw0yNTA2MDcwNzAxMjVaMBgxFjAUBgNV BAMTDTY4M2FhOTQ1LTRmNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCll46XeXyza2MZEfxUwerjugE660u/I2qmC0zpJt5c2SyV9SWPGURTonOgm0Zb rjO0IfGtLe8vTn2tMcOlzlLKgP+kkZWpNSqrwkUBcrWDJOJM32nmSLr8BKMd8+wQ +8B6TWVdyX6AXVkhgn2ccLmnaob/MVG4OVrLDJxCGalL6YifJP1tVXBr13JawuJj uAOhl+MZpIPlUhnW6NZqfBR5mRwJQ6/BacVejeeBnuLhwPr+2K9qoZl91Rdk6yE8 /eRLhmylNFvgh13wlTGmPHpexKhI+wrnYQS0XZrML1JUJOnAYTD08v/0oQ6FEWx3 dAPSDDodbKzQzhNHFbxced3LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT2qMt/PF vFYJUfAOM+/g4vNRTMswHwYDVR0jBBgwFoAUjiZ6MV35Dplf9M1LLPj8TDMkstsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzNURGLzFFQTAxOTlDRDg5 RTExRUZCNDIxMkM1NkM0RjlBRTAyL2ppWjZNVjM1RHBsZjlNMUxMUGo4VERNa3N0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamlaNk1WMzVEcGxmOU0xTExQajhURE1rc3RzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz NURGLzFFQTAxOTlDRDg5RTExRUZCNDIxMkM1NkM0RjlBRTAyL2ppWjZNVjM1RHBs ZjlNMUxMUGo4VERNa3N0cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/kGgayp4BI6O+f3s1zjBgfG9WTgBYcGLNO1U3bOmgoWtZlLqwlZrRi CKUYCb0+v0kL3RQylMEWA7ZOGybcX1GMEQtVxoZGUVcf4z5LvqvC0kiQcqqqgB+r +d2hqBHzzGFZXoHaCjIqB9zQ9yiF4WOkFrdPxhIg18MOGS7fX6IECLbTLwpmZAuW mxIcD0cfNeDXJ4oPi6FleLXa7E3Ly8GG7PbnB9bbWJc+f67TJP7U+rmzBPKVwn/o AFFbJBxduu9X9S3FACqcIkVLyVnJyo2FuVPN7dGmI1aJTnaobgbvUw2A27F+2X0o EfEpnRUi3OzIrG5O6SHJnHczg+XX26w= -----END CERTIFICATE-----Generated at Sat May 31 15:21:31 2025 by rpki-client