$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: hbItY4KYhFXeDMl2TyhgQda+tm1XORqAfXxrB6W4POY= Subject key identifier: AC:FD:7D:EC:A0:16:98:02:A1:4E:E5:D3:C0:6D:E9:C1:0A:33:4B:53 Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 01F2 Signing time: Sat 31 May 2025 02:15:10 +0000 Manifest this update: Sat 31 May 2025 02:15:09 +0000 Manifest next update: Sat 07 Jun 2025 02:15:09 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: ksLqeG9zktk6gKNVFcRqx1xOTFATPw+v50A5iN3p7NM=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: May 31 02:15:09 2025 GMT Not After : Jun 7 02:15:09 2025 GMT Subject: CN=683a662d-6e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fa:a2:d5:0a:70:55:da:ce:67:f3:ae:5a:c5: 0b:69:85:f0:6d:0f:b9:88:22:69:93:cc:ad:6e:c6: b7:12:d9:05:55:a3:af:27:cd:1c:65:4e:ec:88:08: 41:53:93:66:92:8d:4d:76:51:a1:53:a9:19:27:dc: 5e:75:f2:b6:db:65:0c:53:a8:36:5c:37:c2:75:07: 5d:b7:e7:92:17:94:ee:d9:a9:50:dd:3d:26:d0:63: e1:e7:df:07:49:03:ba:5b:e9:b9:81:49:44:b7:87: 7a:08:4b:cd:c7:3e:11:87:72:7d:f7:4d:dd:5f:9d: cf:d6:0a:d1:ef:d2:f6:ac:e6:a1:4a:99:5c:d5:47: 32:29:49:44:a0:1e:a0:94:07:7b:c5:d7:1c:2a:d5: 3b:56:f3:5a:2e:78:2b:d6:59:2b:e9:32:7d:12:e5: 85:4f:28:83:11:26:c2:c0:a4:17:81:14:a9:40:7b: ad:94:04:7b:05:3f:79:fe:b5:20:90:8e:37:c1:0c: cb:82:69:4e:8e:55:23:76:60:d1:52:42:90:f2:39: e0:f6:10:17:b3:5e:99:2a:c9:6e:83:64:96:b8:c6: 42:3c:7f:ea:62:a3:6a:98:12:34:a5:cd:96:ef:10: ab:27:3c:b5:e0:33:fb:41:70:49:db:46:6b:94:d5: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FD:7D:EC:A0:16:98:02:A1:4E:E5:D3:C0:6D:E9:C1:0A:33:4B:53 X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:89:fe:3e:aa:23:fe:8d:64:a8:97:97:b8:64:0b:4e:56:da: 08:e5:ba:b6:7f:41:19:37:10:40:28:f5:a8:58:f2:3d:f3:77: d4:08:c2:f3:af:17:62:8b:2c:44:e7:15:b7:10:a1:cc:a6:26: 30:70:3d:80:26:c7:85:85:11:f1:40:8b:f0:2c:1a:8b:20:5b: 77:2a:a1:e7:73:0b:10:88:47:c6:75:48:a3:22:15:51:7d:82: 44:be:e5:6c:36:3e:d3:a8:6d:f6:07:61:35:61:8b:a1:7b:e3: 26:51:67:da:ed:6c:90:e1:89:a3:ba:21:a9:34:ca:9d:08:3d: 4e:a0:75:03:1f:38:fd:38:e6:54:5b:83:2c:92:4e:c3:df:b9: 91:61:99:f5:e6:83:f2:53:09:39:4a:ec:47:20:e0:26:f3:8c: 49:7c:6d:b9:c4:db:fe:3f:87:2b:e8:e9:e2:d1:f0:8d:be:15: 7b:c1:3a:35:06:de:e5:ef:7e:af:f2:e3:a8:c9:50:1d:13:76: fe:5d:fc:92:a8:83:c5:59:9b:f3:97:18:2b:c3:ef:10:ba:e6: 32:da:ae:1e:d0:99:59:56:22:77:34:f9:d4:39:34:e9:f6:0a: 81:47:25:97:98:6e:0f:d6:ff:5a:3b:38:ff:ef:25:26:56:3a: 24:9e:14:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNTMxMDIxNTA5WhcNMjUwNjA3MDIxNTA5WjAYMRYwFAYD VQQDEw02ODNhNjYyZC02ZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Pqi1QpwVdrOZ/OuWsULaYXwbQ+5iCJpk8ytbsa3EtkFVaOvJ80cZU7siAhB U5Nmko1NdlGhU6kZJ9xedfK222UMU6g2XDfCdQddt+eSF5Tu2alQ3T0m0GPh598H SQO6W+m5gUlEt4d6CEvNxz4Rh3J9903dX53P1grR79L2rOahSplc1UcyKUlEoB6g lAd7xdccKtU7VvNaLngr1lkr6TJ9EuWFTyiDESbCwKQXgRSpQHutlAR7BT95/rUg kI43wQzLgmlOjlUjdmDRUkKQ8jng9hAXs16ZKslug2SWuMZCPH/qYqNqmBI0pc2W 7xCrJzy14DP7QXBJ20ZrlNXuaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz9feyg FpgCoU7l08Bt6cEKM0tTMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdif4+qiP+jWSol5e4ZAtOVtoI5bq2f0EZNxBAKPWoWPI983fUCMLz rxdiiyxE5xW3EKHMpiYwcD2AJseFhRHxQIvwLBqLIFt3KqHncwsQiEfGdUijIhVR fYJEvuVsNj7TqG32B2E1YYuhe+MmUWfa7WyQ4YmjuiGpNMqdCD1OoHUDHzj9OOZU W4Mskk7D37mRYZn15oPyUwk5SuxHIOAm84xJfG25xNv+P4cr6Oni0fCNvhV7wTo1 Bt7l736v8uOoyVAdE3b+XfySqIPFWZvzlxgrw+8QuuYy2q4e0JlZViJ3NPnUOTTp 9gqBRyWXmG4P1v9aOzj/7yUmVjoknhR6 -----END CERTIFICATE-----Generated at Sat May 31 17:23:35 2025 by rpki-client