$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: Scff9FhbaEr2DChY7U5hgHO77Ig86izFqcMHu5xvSqg= Subject key identifier: FA:C4:17:F0:6E:A2:F9:91:8B:81:69:CD:D6:95:DC:66:08:25:59:C2 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 071F Signing time: Fri 30 May 2025 22:05:14 +0000 Manifest this update: Fri 30 May 2025 22:05:13 +0000 Manifest next update: Fri 06 Jun 2025 22:05:13 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: H2c5MoLUkVUnargWPCKl5ac4InnGxpfypfnGKPm3guA=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: May 30 22:05:13 2025 GMT Not After : Jun 6 22:05:13 2025 GMT Subject: CN=683a2b99-a1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:e7:6e:c3:2f:e1:78:20:cf:3f:23:98:41: 34:43:c0:0c:d6:09:2b:70:4e:a4:d3:25:24:09:29: d4:85:3b:15:0d:0d:3a:5d:b3:cc:86:cc:f3:b2:41: dd:80:b7:87:4d:01:09:1a:68:f4:b7:c2:a5:b8:38: 7c:07:69:bc:d7:55:26:89:13:bf:30:1d:f4:ec:6b: da:60:f0:39:9e:c9:9e:6e:35:75:18:ec:dc:8d:4e: d1:53:e2:db:0e:9d:1f:ff:3d:5e:37:3c:81:5f:ef: 23:9d:2e:71:26:6c:eb:e0:e3:63:1e:f5:04:f4:cd: f7:ee:93:cc:9f:a9:5d:24:a1:ae:75:31:6d:01:c5: 12:61:99:72:8d:81:24:05:d5:70:a4:d9:a8:43:a5: 49:8e:98:cf:66:7b:2a:87:90:72:d7:5d:1f:2e:33: ed:0a:15:69:94:fb:7b:6b:5d:5d:20:2a:fd:78:85: 08:06:00:f8:ce:9c:e2:24:09:85:02:61:54:bb:cd: f4:cc:3e:50:e9:e4:d5:9f:27:ee:9d:b5:f1:71:01: 47:2d:21:00:15:22:2b:60:00:93:0e:3d:a8:cc:e8: 24:9b:a3:7d:15:02:ce:01:aa:87:36:4e:e0:27:ec: bb:41:81:40:b7:53:dd:d1:4b:61:22:ac:9f:b9:4b: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C4:17:F0:6E:A2:F9:91:8B:81:69:CD:D6:95:DC:66:08:25:59:C2 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a5:3f:23:90:ff:d6:2d:d3:cb:f9:12:e3:e9:f1:9c:c8:92: ab:2b:95:86:26:7f:22:33:3e:61:c0:8f:5a:28:b3:70:8c:86: d0:5d:7f:81:64:7d:06:1e:59:c2:c4:1b:0f:b8:50:61:2e:1a: c5:c7:d8:de:77:8b:53:d1:31:a6:3a:95:e9:a4:7a:44:30:8e: 25:46:45:a6:2e:84:fb:df:b7:51:dd:48:43:24:c8:94:58:8a: 3a:13:14:e6:97:60:4a:fc:b9:cd:21:e6:4f:d1:b0:66:57:06: b7:18:b1:ba:0e:68:48:40:8e:95:10:09:8d:fe:22:7a:3d:05: 25:04:ed:3c:48:73:8a:21:58:d3:01:3f:65:a6:fb:52:be:26: 24:20:7d:1e:5a:05:1b:d5:ad:1e:b0:aa:41:a8:98:5b:8d:6d: 10:af:36:ea:f5:bf:d7:de:b9:7f:ca:dd:41:92:78:2c:26:9f: b0:aa:ec:49:aa:5e:02:c0:5d:b8:33:57:d7:eb:d2:88:1f:e2: 78:3a:ea:12:46:4e:ea:1c:43:0c:5f:9a:0c:cd:dc:d4:c4:ef: 3f:18:5c:33:11:0b:0f:34:77:c3:c8:c7:84:9c:20:39:e9:90: ad:c6:0e:a9:54:3f:70:df:ae:d5:43:de:ae:2e:3b:79:5b:32: 2f:af:55:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUwNTMwMjIwNTEzWhcNMjUwNjA2MjIwNTEzWjAYMRYwFAYD VQQDEw02ODNhMmI5OS1hMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNXnbsMv4Xggzz8jmEE0Q8AM1gkrcE6k0yUkCSnUhTsVDQ06XbPMhszzskHd gLeHTQEJGmj0t8KluDh8B2m811UmiRO/MB307GvaYPA5nsmebjV1GOzcjU7RU+Lb Dp0f/z1eNzyBX+8jnS5xJmzr4ONjHvUE9M337pPMn6ldJKGudTFtAcUSYZlyjYEk BdVwpNmoQ6VJjpjPZnsqh5By110fLjPtChVplPt7a11dICr9eIUIBgD4zpziJAmF AmFUu830zD5Q6eTVnyfunbXxcQFHLSEAFSIrYACTDj2ozOgkm6N9FQLOAaqHNk7g J+y7QYFAt1Pd0UthIqyfuUt7GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrEF/Bu ovmRi4FpzdaV3GYIJVnCMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBApT8jkP/WLdPL+RLj6fGcyJKrK5WGJn8iMz5hwI9aKLNwjIbQXX+B ZH0GHlnCxBsPuFBhLhrFx9jed4tT0TGmOpXppHpEMI4lRkWmLoT737dR3UhDJMiU WIo6ExTml2BK/LnNIeZP0bBmVwa3GLG6DmhIQI6VEAmN/iJ6PQUlBO08SHOKIVjT AT9lpvtSviYkIH0eWgUb1a0esKpBqJhbjW0Qrzbq9b/X3rl/yt1BkngsJp+wquxJ ql4CwF24M1fX69KIH+J4OuoSRk7qHEMMX5oMzdzUxO8/GFwzEQsPNHfDyMeEnCA5 6ZCtxg6pVD9w367VQ96uLjt5WzIvr1Ve -----END CERTIFICATE-----Generated at Sat May 31 17:39:18 2025 by rpki-client