$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: aZXYeb4P6/7a7ZO4tj9E2Top/kLcHV1NJtPpEEVji0E= Subject key identifier: 61:6A:CF:C0:EB:81:BE:35:87:12:A0:B4:22:E4:02:A4:BF:2B:C0:DE Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 12CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 12BD Signing time: Fri 30 May 2025 17:14:36 +0000 Manifest this update: Fri 30 May 2025 17:14:36 +0000 Manifest next update: Fri 06 Jun 2025 17:14:36 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: 2k/Q2IfhXmvBlbH7J5DldfC5zCz7myK/lMduhpvs+1k=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: KCnIrYwfu7lFXb4I5Fn3ggrFhAeTiDDSoEEewMbwbp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4810 (0x12ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: May 30 17:14:36 2025 GMT Not After : Jun 6 17:14:36 2025 GMT Subject: CN=6839e77c-956a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:19:06:41:b9:4e:a8:b6:b7:9e:f2:6f:1d: dd:5d:8d:bf:da:99:42:3f:79:67:ea:d2:b3:39:a2: 7a:70:53:31:0d:40:d1:4a:fc:0c:a0:85:48:8e:ab: dd:9c:10:10:cc:7d:1a:ee:5f:ae:13:93:d4:20:d7: 34:2d:c4:d0:d4:3c:09:03:4f:ac:e0:ff:77:16:76: 49:69:1e:87:2b:31:50:f1:2b:c6:d0:a7:7c:52:9c: 9c:7b:3a:17:7c:04:a4:47:54:89:e8:03:c5:41:b6: eb:20:49:11:ea:46:d3:46:57:83:fb:88:cb:ff:5b: 57:2f:c0:fa:07:b8:c0:b1:fd:a9:eb:59:33:0d:9c: 62:8a:2a:97:e9:c1:c5:93:4c:4a:6f:f0:d4:73:36: 24:ab:c0:e9:54:44:5d:8c:0d:1b:4e:7a:c5:96:3c: 44:8a:39:27:d4:ec:18:6d:9f:d4:19:31:89:4a:06: 9d:ec:1a:68:d3:e9:04:7a:3f:1c:14:34:61:70:9a: 74:4c:08:cb:ca:00:c4:fc:9f:1b:99:aa:ff:fc:b5: 4c:4d:50:03:7d:5e:66:cf:19:87:71:91:c9:35:3b: d9:cf:eb:a0:2f:39:29:bb:36:6d:cf:f1:d9:d0:0b: 9b:a4:87:91:e6:f7:1b:0f:2d:0b:c9:37:14:f8:43: e2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6A:CF:C0:EB:81:BE:35:87:12:A0:B4:22:E4:02:A4:BF:2B:C0:DE X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:b4:55:5a:af:1d:07:29:7c:39:43:75:47:d6:a8:81:5d: e2:38:2b:eb:a1:13:0c:ba:33:70:bc:2f:65:9d:9c:c6:14:8c: 7a:5f:80:4f:24:a3:3b:bc:c1:6e:51:9f:43:49:c7:1b:4d:66: 8d:75:0f:f9:d7:67:79:cd:1e:bb:ca:06:a0:ab:2e:91:f4:dc: d9:63:70:b5:b8:c0:1e:b4:11:94:b5:0f:51:4f:73:ca:a4:c6: a4:1f:2c:d3:cb:9a:35:2f:c9:34:16:b6:a7:6f:3d:30:87:ac: 96:5b:bc:42:91:a6:f7:bc:7d:ae:af:3a:d6:7b:8a:89:fb:8b: a6:63:bf:45:b8:30:76:43:18:50:28:34:90:ae:68:1e:ce:36: 8d:db:7e:8a:f0:d5:3e:17:da:ca:f7:85:a9:9c:1f:b4:f7:f0: 95:fe:8e:e4:4f:2a:04:98:6e:02:aa:c4:d4:4f:eb:6e:10:86: c8:3f:91:f3:c6:a2:91:da:10:bb:b2:10:db:a5:2c:df:b0:b4: 8e:76:84:f2:5a:3a:4d:61:30:1f:80:99:f0:e0:fd:68:78:b0: 0d:9f:c0:15:d0:04:ed:00:77:39:c3:67:f3:7b:49:6a:93:19: 4e:8f:a2:0e:8b:5f:10:06:a7:a3:e0:29:77:b9:8d:0a:ee:20: 20:f9:bf:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwNTMwMTcxNDM2WhcNMjUwNjA2MTcxNDM2WjAYMRYwFAYD VQQDEw02ODM5ZTc3Yy05NTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonQZBkG5Tqi2t57ybx3dXY2/2plCP3ln6tKzOaJ6cFMxDUDRSvwMoIVIjqvd nBAQzH0a7l+uE5PUINc0LcTQ1DwJA0+s4P93FnZJaR6HKzFQ8SvG0Kd8UpycezoX fASkR1SJ6APFQbbrIEkR6kbTRleD+4jL/1tXL8D6B7jAsf2p61kzDZxiiiqX6cHF k0xKb/DUczYkq8DpVERdjA0bTnrFljxEijkn1OwYbZ/UGTGJSgad7Bpo0+kEej8c FDRhcJp0TAjLygDE/J8bmar//LVMTVADfV5mzxmHcZHJNTvZz+ugLzkpuzZtz/HZ 0AubpIeR5vcbDy0LyTcU+EPi0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFqz8Dr gb41hxKgtCLkAqS/K8DeMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnuLRVWq8dByl8OUN1R9aogV3iOCvroRMMujNwvC9lnZzGFIx6X4BP JKM7vMFuUZ9DSccbTWaNdQ/512d5zR67ygagqy6R9NzZY3C1uMAetBGUtQ9RT3PK pMakHyzTy5o1L8k0Franbz0wh6yWW7xCkab3vH2urzrWe4qJ+4umY79FuDB2QxhQ KDSQrmgezjaN236K8NU+F9rK94WpnB+09/CV/o7kTyoEmG4CqsTUT+tuEIbIP5Hz xqKR2hC7shDbpSzfsLSOdoTyWjpNYTAfgJnw4P1oeLANn8AV0ATtAHc5w2fze0lq kxlOj6IOi18QBqej4Cl3uY0K7iAg+b+R -----END CERTIFICATE-----Generated at Sat May 31 14:36:45 2025 by rpki-client