$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: iqJT8anUpn85ra1pgz2dqcZMYCQA9+Bi9UyX9Ad3hSU= Subject key identifier: AB:55:36:22:45:0E:99:89:30:1E:8D:FB:10:67:27:CF:CC:D3:4C:2A Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: 64 Signing time: Sat 31 May 2025 06:47:38 +0000 Manifest this update: Sat 31 May 2025 06:47:37 +0000 Manifest next update: Sat 07 Jun 2025 06:47:37 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: +E8uANprxHNFrA32PNQHQDH7VnV9urBRCMM6f24TRGU=) 2: 50B13360267F11F0A061882DC4F9AE02.roa (hash: wZklMFDoQMrom29zHe2kxQjdWsUnZaq+ROOmp4NlaH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Validity Not Before: May 31 06:47:37 2025 GMT Not After : Jun 7 06:47:37 2025 GMT Subject: CN=683aa60a-f138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:e8:0a:c6:7f:dd:14:05:93:7f:d1:b0:88: d9:ac:ca:4e:ad:6f:49:84:58:04:b9:61:69:79:44: 70:b6:84:86:ec:61:dc:21:58:48:41:28:0d:ad:6a: 30:43:d2:56:0c:f4:9e:5f:8a:35:00:1d:bd:b1:17: 59:8f:cf:2b:f1:f5:6b:cf:39:70:1e:7e:5c:91:65: 60:df:7a:03:5f:2c:ee:80:5f:14:19:e9:ee:5d:22: d2:ec:21:08:09:be:05:4c:dd:63:8d:fc:7f:ea:70: 02:e7:53:d9:76:60:8a:6e:c6:aa:45:b1:8d:b9:a8: 32:c5:b1:62:d4:75:64:96:55:92:61:d8:43:28:1b: 26:13:62:6e:0d:2d:f9:4f:06:90:83:5b:59:36:0d: 22:fb:0d:46:05:0d:f1:ce:b7:f9:86:ec:3c:25:47: 45:8a:b9:e5:b7:fc:0d:34:ae:4c:8c:b0:66:6c:63: 80:fa:aa:7d:2e:e6:c4:97:c4:7a:6b:51:ad:88:70: 90:a1:54:f8:bd:f8:28:b5:e3:07:be:15:69:3d:bc: 33:52:6f:89:d9:9d:c9:28:97:23:28:4c:01:18:0f: 85:da:74:19:a3:e4:5b:71:ba:ad:38:13:f0:99:ee: 52:53:9c:03:75:13:4f:be:35:bd:34:90:55:ad:8f: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:36:22:45:0E:99:89:30:1E:8D:FB:10:67:27:CF:CC:D3:4C:2A X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:6e:47:16:65:0f:8d:e4:8a:00:b0:75:a4:0c:ba:a3:c5: ef:c6:2e:31:d4:21:8a:ac:aa:1b:bb:47:6a:cb:96:64:09:0f: 5d:ea:bb:73:21:d4:e7:90:93:3c:cb:4c:4f:46:44:da:b1:b2: 4c:7d:9a:09:5b:32:ce:60:46:80:0d:fc:5c:6c:23:8f:d8:b2: b5:a8:48:0b:2a:3e:41:da:c0:ec:f1:5e:f4:82:d0:69:78:a0: 92:b7:60:79:c1:0d:49:39:de:1a:26:35:96:47:eb:97:6a:c6: aa:68:3f:bb:c5:63:8e:f0:af:b7:8b:9a:52:a6:56:af:28:98: 3f:81:a9:8a:47:c7:1a:95:bd:36:cb:92:ec:6b:49:88:cc:ef: df:3e:45:90:a9:b7:f7:3d:7c:5e:37:1e:55:6d:a6:52:0b:48: 45:92:8a:f6:e0:ae:90:68:6b:91:15:be:1e:0c:f1:d5:f5:5a: f8:36:0b:d9:e1:bb:44:16:82:d5:2d:e7:da:61:97:e9:b4:33: 66:18:c9:6e:5d:70:45:3e:24:a1:2b:f4:79:7e:46:14:9d:98: 17:45:f7:40:1f:0e:72:b6:91:a0:0b:a1:51:68:db:d1:61:96: c7:8f:a0:f3:bb:c2:52:ec:ef:d9:98:34:51:3f:02:f3:d6:e8: 38:6b:65:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODlBQTExMC8GA1UEBRMoMjc3RjEyMjQ0QTUwQkM2NTRFRTU2M0ZFNzM5RkU0RUI3 MTk5NjZCNjAeFw0yNTA1MzEwNjQ3MzdaFw0yNTA2MDcwNjQ3MzdaMBgxFjAUBgNV BAMTDTY4M2FhNjBhLWYxMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWiegKxn/dFAWTf9GwiNmsyk6tb0mEWAS5YWl5RHC2hIbsYdwhWEhBKA2tajBD 0lYM9J5fijUAHb2xF1mPzyvx9WvPOXAeflyRZWDfegNfLO6AXxQZ6e5dItLsIQgJ vgVM3WON/H/qcALnU9l2YIpuxqpFsY25qDLFsWLUdWSWVZJh2EMoGyYTYm4NLflP BpCDW1k2DSL7DUYFDfHOt/mG7DwlR0WKueW3/A00rkyMsGZsY4D6qn0u5sSXxHpr Ua2IcJChVPi9+Ci14we+FWk9vDNSb4nZnckolyMoTAEYD4XadBmj5Ftxuq04E/CZ 7lJTnAN1E0++Nb00kFWtj4njAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq1U2IkUO mYkwHo37EGcnz8zTTCowHwYDVR0jBBgwFoAUJ38SJEpQvGVO5WP+c5/k63GZZrYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4OUFBLzg1RDBGMzQ2QkM2 MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjM4U0pFcFF2R1ZPNVdQLWM1X2s2M0daWnJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 OUFBLzg1RDBGMzQ2QkM2MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdW TzVXUC1jNV9rNjNHWlpyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKibkcWZQ+N5IoAsHWkDLqjxe/GLjHUIYqsqhu7R2rLlmQJD13qu3Mh 1OeQkzzLTE9GRNqxskx9mglbMs5gRoAN/FxsI4/YsrWoSAsqPkHawOzxXvSC0Gl4 oJK3YHnBDUk53homNZZH65dqxqpoP7vFY47wr7eLmlKmVq8omD+BqYpHxxqVvTbL kuxrSYjM798+RZCpt/c9fF43HlVtplILSEWSivbgrpBoa5EVvh4M8dX1Wvg2C9nh u0QWgtUt59phl+m0M2YYyW5dcEU+JKEr9Hl+RhSdmBdF90AfDnK2kaALoVFo29Fh lsePoPO7wlLs79mYNFE/AvPW6DhrZak= -----END CERTIFICATE-----Generated at Sat May 31 17:39:14 2025 by rpki-client