$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft File: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json) Hash identifier: nAUdIZsYCnI5TWBKBNyYe9xvtlSIt5WM7fkztBW2cCg= Subject key identifier: 93:18:A4:5F:EB:45:A3:9B:5F:1E:43:2B:AC:36:E1:15:CA:7B:23:D1 Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B Certificate issuer: /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft Manifest number: 0134 Signing time: Sat 31 May 2025 04:10:28 +0000 Manifest this update: Sat 31 May 2025 04:10:28 +0000 Manifest next update: Sat 07 Jun 2025 04:10:28 +0000 Files and hashes: 1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: C6KGnOsuoJYz0n6CV+BcjTxjBch66uGDE/myjnSY/As=) 2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: VxCtnEbF2p63KawOX+Ec2pPAYcngxsY5VpNi8SAFc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B Validity Not Before: May 31 04:10:28 2025 GMT Not After : Jun 7 04:10:28 2025 GMT Subject: CN=683a8134-1200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:c6:90:b6:6d:4e:96:72:f1:25:8e:69:8f: b6:92:16:bd:57:51:5c:74:9e:30:40:b7:0d:ad:c3: a6:28:38:bd:d8:69:59:5a:ac:03:d9:e1:76:cb:51: 2a:0f:e2:11:4e:f9:fa:27:46:05:ac:74:96:2b:9d: 34:3e:28:46:da:c4:53:7b:d2:f4:ac:18:8d:4c:a5: 4b:92:2d:3b:3e:a9:16:83:17:ba:17:76:8f:89:3f: 98:05:0c:bb:e9:8b:82:d0:4b:c4:f2:d0:3d:e1:91: 3f:7b:bf:c3:97:45:98:10:74:ac:6a:d9:36:cd:2b: 77:8d:1b:c4:72:a8:0d:f3:32:56:ff:70:5b:54:d2: ef:f4:2e:3c:b9:62:7d:74:b6:09:4b:d7:51:5a:79: dc:f7:b5:39:8a:61:9b:f9:23:42:2c:c4:26:3f:de: 0b:92:13:07:2e:96:0d:62:bb:bb:41:cd:f9:c4:81: 39:aa:7d:a5:30:cf:25:a9:a9:35:84:a2:ea:23:e6: 2c:fb:e5:7e:86:44:4b:ad:a5:b0:31:d6:3d:a7:51: b7:a3:8e:ca:79:42:71:7e:36:6f:0b:6c:09:2a:ad: 31:75:80:e1:f4:78:f4:3f:ea:92:1a:7d:9f:fc:6d: 6b:07:ca:84:e1:03:eb:6b:a0:d6:74:87:9c:4c:21: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:A4:5F:EB:45:A3:9B:5F:1E:43:2B:AC:36:E1:15:CA:7B:23:D1 X509v3 Authority Key Identifier: keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:5d:6c:27:e8:14:d6:bf:1a:b6:a0:41:36:34:c5:cd:69:75: 94:19:19:1f:9c:ed:4e:99:22:be:dd:a6:ee:77:21:6a:21:4a: 1c:ef:60:48:11:fb:59:04:0c:e3:34:21:82:c0:c9:a0:1c:fb: f9:f3:11:fb:38:a8:cf:ed:c5:8e:a7:e2:71:34:ac:9a:18:29: 0a:21:c2:9a:78:19:49:a0:8a:00:23:30:d3:01:0b:e3:66:8d: ca:2e:27:16:0e:09:5c:e7:55:fb:77:7a:4a:b9:e4:69:25:46: 5b:e5:a7:c3:c4:1c:9a:4d:c4:ed:0b:d2:98:3a:ef:34:b5:6b: 21:aa:8a:4c:45:76:86:0a:0a:91:37:20:99:30:6e:b9:da:bd: 90:fa:06:ed:7c:71:39:76:78:ec:f0:b0:cf:c3:10:09:5b:f6: f0:ff:65:ef:8e:16:4c:b0:61:48:d6:9a:8e:45:c0:51:fd:22: 8a:93:96:09:f0:7d:09:14:31:97:1a:ba:09:a7:63:c9:8d:3c: 67:fb:a7:37:5f:38:2c:74:e8:4a:35:04:7b:2d:e3:c2:e7:fc: 8b:71:a3:61:bf:a8:97:39:b1:9a:03:8a:78:c9:49:90:dd:5f: a2:99:d7:f3:1a:3e:7a:12:90:2a:35:be:c7:ea:eb:c4:6a:61: a1:62:da:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQUYxMTAvBgNVBAUTKDI3QjJFNjYyOTE0ODIyMTM2QjA5NjJEQkI1QkE0NDdD MjUzRjUyMUIwHhcNMjUwNTMxMDQxMDI4WhcNMjUwNjA3MDQxMDI4WjAYMRYwFAYD VQQDEw02ODNhODEzNC0xMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/nGkLZtTpZy8SWOaY+2kha9V1FcdJ4wQLcNrcOmKDi92GlZWqwD2eF2y1Eq D+IRTvn6J0YFrHSWK500PihG2sRTe9L0rBiNTKVLki07PqkWgxe6F3aPiT+YBQy7 6YuC0EvE8tA94ZE/e7/Dl0WYEHSsatk2zSt3jRvEcqgN8zJW/3BbVNLv9C48uWJ9 dLYJS9dRWnnc97U5imGb+SNCLMQmP94LkhMHLpYNYru7Qc35xIE5qn2lMM8lqak1 hKLqI+Ys++V+hkRLraWwMdY9p1G3o47KeUJxfjZvC2wJKq0xdYDh9Hj0P+qSGn2f /G1rB8qE4QPra6DWdIecTCGBYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMYpF/r RaObXx5DK6w24RXKeyPRMB8GA1UdIwQYMBaAFCey5mKRSCITawli27W6RHwlP1Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNBRi8wRjYxODg2QTZC MzIxMUVFOUI1MjIwNTNDNEY5QUUwMi9KN0xtWXBGSUloTnJDV0xidGJwRWZDVV9V aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3TG1ZcEZJSWhOckNXTGJ0YnBFZkNVX1Vocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNBRi8wRjYxODg2QTZCMzIxMUVFOUI1MjIwNTNDNEY5QUUwMi9KN0xtWXBGSUlo TnJDV0xidGJwRWZDVV9VaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtXWwn6BTWvxq2oEE2NMXNaXWUGRkfnO1OmSK+3abudyFqIUoc72BI EftZBAzjNCGCwMmgHPv58xH7OKjP7cWOp+JxNKyaGCkKIcKaeBlJoIoAIzDTAQvj Zo3KLicWDglc51X7d3pKueRpJUZb5afDxByaTcTtC9KYOu80tWshqopMRXaGCgqR NyCZMG652r2Q+gbtfHE5dnjs8LDPwxAJW/bw/2XvjhZMsGFI1pqORcBR/SKKk5YJ 8H0JFDGXGroJp2PJjTxn+6c3XzgsdOhKNQR7LePC5/yLcaNhv6iXObGaA4p4yUmQ 3V+imdfzGj56EpAqNb7H6uvEamGhYtqq -----END CERTIFICATE-----Generated at Sat May 31 16:28:41 2025 by rpki-client