$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: o9bQz+wJA8YTvc3egWRxXSObLHx3DTq6s0BP0f++5AI= Subject key identifier: 94:17:81:B4:B3:56:C3:B8:F3:C6:88:76:D6:F7:3D:86:D1:4D:1B:C9 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0286 Signing time: Sat 31 May 2025 01:49:12 +0000 Manifest this update: Sat 31 May 2025 01:49:11 +0000 Manifest next update: Sat 07 Jun 2025 01:49:11 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: aZNfogR3JwjgeD5zQtLgld73K0Vqz+QeRrpQnCWwAGM=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: w/vd8cJquU/77tUydhBl7y4vX7K0tJ56IOJFeJTKQQY=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: aWVOZdqCRpaD5wVJp7PQwGvmT4WvDuk+Zr3vN2zui6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: May 31 01:49:11 2025 GMT Not After : Jun 7 01:49:11 2025 GMT Subject: CN=683a6017-bf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:f8:73:e0:f3:83:2f:c8:07:42:79:d5:39: 7b:35:cf:08:08:dc:38:cf:3f:47:62:09:5c:4a:e1: 6f:25:46:c0:58:df:20:f4:ef:b9:0e:c9:35:77:f9: da:a5:00:2a:9d:ff:98:db:72:8e:24:69:fc:b3:22: d6:5d:8c:e3:69:d6:56:b1:ad:ca:17:5f:51:98:8c: 01:9f:06:50:2c:97:ee:ba:6f:b9:45:38:40:a3:a6: 29:84:4b:73:9a:15:fd:56:a1:9a:da:08:73:d8:e8: 51:80:69:8f:0f:4c:48:55:7a:55:1c:9b:cb:8a:93: fb:12:3a:a9:fa:32:58:0d:9d:68:61:9c:e0:93:b1: 0e:26:75:61:d9:78:7d:4a:5c:e4:a2:b2:7c:b2:a0: 8a:dd:3f:bf:66:f4:25:e2:88:00:0f:c1:f9:6a:42: 13:6b:24:a5:39:63:f1:49:2a:82:64:58:d4:04:6d: 7b:54:3e:dd:c4:d1:a2:96:a0:31:d6:55:31:72:b0: 0b:f1:f5:4e:0c:e7:a5:58:eb:a8:99:a6:b5:ca:b4: 13:2b:88:87:cc:f9:ab:33:2d:2d:28:c4:69:9f:84: c2:2c:7b:2b:33:fe:b9:af:a8:30:75:03:02:50:09: 09:71:2c:74:a1:a2:be:8d:bd:85:3c:d9:94:a3:51: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:17:81:B4:B3:56:C3:B8:F3:C6:88:76:D6:F7:3D:86:D1:4D:1B:C9 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:73:cc:5b:3a:6e:a3:eb:31:53:3b:91:27:e6:f8:31:05:fa: df:fe:21:7d:61:b0:a0:61:e3:c8:27:ad:6c:5a:c1:23:2a:00: ee:18:e3:de:59:66:a8:57:0c:d1:0e:0b:e7:57:78:89:c5:a0: 4a:00:43:14:e5:78:a6:a0:64:68:9e:55:c9:17:57:3a:3b:26: 4f:7a:74:79:eb:1a:0c:13:13:92:c2:31:78:4d:41:84:ed:bf: 3c:8d:51:05:ce:dd:d1:ce:ea:0f:16:cf:61:6c:74:87:54:5d: 3a:b4:39:c0:ee:4a:f0:3e:af:da:3c:1c:c4:35:50:f7:0a:02: 53:d4:39:21:78:2d:9d:b5:0d:b4:10:69:6f:51:5b:08:85:89: a0:8a:a3:d6:22:fe:4f:7e:92:6b:8a:bf:7a:81:6e:3f:38:4c: 3c:23:72:60:a0:05:1d:df:fc:e8:24:51:ef:ff:9d:f6:11:a4: 42:f8:26:63:3a:84:13:2a:33:3b:d6:df:f5:1c:01:56:ab:45: 61:f8:09:d4:0c:fc:52:e1:76:3d:0f:f1:86:08:c9:2d:9b:dc: c9:d0:4d:2c:93:56:e9:b2:49:87:f4:72:61:08:00:d7:3d:92: 37:f2:aa:0d:5e:d8:be:31:09:b1:49:b7:87:6f:5d:f4:46:93: d8:03:9d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUwNTMxMDE0OTExWhcNMjUwNjA3MDE0OTExWjAYMRYwFAYD VQQDEw02ODNhNjAxNy1iZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyS/4c+Dzgy/IB0J51Tl7Nc8ICNw4zz9HYglcSuFvJUbAWN8g9O+5Dsk1d/na pQAqnf+Y23KOJGn8syLWXYzjadZWsa3KF19RmIwBnwZQLJfuum+5RThAo6YphEtz mhX9VqGa2ghz2OhRgGmPD0xIVXpVHJvLipP7Ejqp+jJYDZ1oYZzgk7EOJnVh2Xh9 SlzkorJ8sqCK3T+/ZvQl4ogAD8H5akITaySlOWPxSSqCZFjUBG17VD7dxNGilqAx 1lUxcrAL8fVODOelWOuomaa1yrQTK4iHzPmrMy0tKMRpn4TCLHsrM/65r6gwdQMC UAkJcSx0oaK+jb2FPNmUo1GekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQXgbSz VsO488aIdtb3PYbRTRvJMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRc8xbOm6j6zFTO5En5vgxBfrf/iF9YbCgYePIJ61sWsEjKgDuGOPe WWaoVwzRDgvnV3iJxaBKAEMU5XimoGRonlXJF1c6OyZPenR56xoMExOSwjF4TUGE 7b88jVEFzt3RzuoPFs9hbHSHVF06tDnA7krwPq/aPBzENVD3CgJT1DkheC2dtQ20 EGlvUVsIhYmgiqPWIv5PfpJrir96gW4/OEw8I3JgoAUd3/zoJFHv/532EaRC+CZj OoQTKjM71t/1HAFWq0Vh+AnUDPxS4XY9D/GGCMktm9zJ0E0sk1bpskmH9HJhCADX PZI38qoNXti+MQmxSbeHb130RpPYA50l -----END CERTIFICATE-----Generated at Sat May 31 17:10:20 2025 by rpki-client