$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: /EbD0PA+YmdGari0/yuoEW6wq5g59iCsYctYdJnT5CI= Subject key identifier: 2E:AD:3F:48:14:E0:B8:D4:10:33:59:B5:04:86:40:A2:CE:C1:55:A7 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01BE Signing time: Sat 31 May 2025 02:45:30 +0000 Manifest this update: Sat 31 May 2025 02:45:30 +0000 Manifest next update: Sat 07 Jun 2025 02:45:30 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: kdi5LlrqkzhNz3utxvwGeqgynQKAssgRDLCs7/eIqr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: May 31 02:45:30 2025 GMT Not After : Jun 7 02:45:30 2025 GMT Subject: CN=683a6d4a-671e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:93:a8:ad:4c:f6:26:85:ab:ab:d6:8e:89: b6:46:5d:b4:24:a6:bd:f6:f2:4d:9e:f9:50:f0:d7: 5f:d6:7d:36:fc:20:ee:24:c5:e3:db:76:d8:b2:bf: 96:bb:d4:a3:a1:38:fc:a3:c2:dd:05:f5:5e:6b:11: a5:a8:65:e6:61:27:34:14:66:fa:bf:7c:a2:1a:21: c3:8b:df:69:d1:dd:43:10:86:0c:86:c0:32:48:0b: 91:42:c3:df:b3:1b:ab:8a:8b:64:33:43:39:4d:9e: 0d:a8:bd:4e:d8:55:5d:26:0d:ed:0c:df:56:4c:58: ee:43:1a:81:cc:65:27:99:ee:58:da:26:46:c3:b7: c3:9d:f1:cf:27:3e:43:fd:c6:d8:7f:a8:39:82:c3: db:80:e9:cd:77:c4:bf:2b:6e:32:b6:4b:be:94:d5: 9d:d9:9d:ad:91:f4:ae:a7:ea:9a:56:41:82:47:75: 5c:77:17:65:b7:c3:f9:11:df:8c:f8:a5:42:ca:57: f4:dd:41:76:41:43:0d:23:fe:5a:5c:01:62:ef:37: 24:ef:ae:ac:0a:66:0c:4a:20:63:4d:25:30:eb:c1: fe:c5:fb:53:97:4e:4f:0a:9a:51:a0:21:e1:a7:b2: ad:c7:33:d0:7f:c9:7b:70:7d:03:b1:70:c7:d6:27: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:3F:48:14:E0:B8:D4:10:33:59:B5:04:86:40:A2:CE:C1:55:A7 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:3f:b0:43:32:e4:83:54:91:ad:26:3b:2e:16:ff:a8:64:72: 72:f8:d1:12:e0:79:ae:aa:ec:9a:28:3c:51:cc:20:db:fc:c0: 80:57:9f:c9:c2:c1:b0:ed:e6:d4:4f:f3:0a:ac:8d:9b:e1:c8: 0d:09:cc:04:31:90:56:4a:68:a9:57:73:e3:ad:3e:f5:40:4d: f6:23:78:c9:b5:08:0f:dd:35:13:20:d7:00:73:1c:00:52:2f: 7c:87:d7:2c:76:8b:7a:e1:ff:6d:6d:05:13:22:09:9f:37:54: fd:95:f8:d1:cd:1b:d6:97:df:6f:84:1f:29:85:70:89:99:9e: e2:34:74:20:e1:99:8f:b9:18:cd:d3:4f:7b:bb:2c:0f:d9:70: d3:7d:c8:24:b3:87:c7:cb:ff:37:23:e1:39:fc:0c:b7:66:34: 41:80:ba:68:c0:9b:ed:9d:41:67:c3:95:e6:26:6d:eb:5d:10: 03:4a:25:46:8e:ed:e3:9a:2d:51:c3:d3:12:0c:1b:b1:c3:84: a3:92:59:01:16:4e:27:3a:dd:7d:98:f6:1f:e0:6e:55:13:97: fe:6f:a3:54:56:9f:cf:a8:ca:9f:0f:a9:80:4a:5f:f0:bd:3e: 09:8c:4f:97:74:55:15:55:43:f5:11:e8:e1:f8:c8:e4:2a:c9: 2d:cc:dc:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwNTMxMDI0NTMwWhcNMjUwNjA3MDI0NTMwWjAYMRYwFAYD VQQDEw02ODNhNmQ0YS02NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA6TqK1M9iaFq6vWjom2Rl20JKa99vJNnvlQ8Ndf1n02/CDuJMXj23bYsr+W u9SjoTj8o8LdBfVeaxGlqGXmYSc0FGb6v3yiGiHDi99p0d1DEIYMhsAySAuRQsPf sxuriotkM0M5TZ4NqL1O2FVdJg3tDN9WTFjuQxqBzGUnme5Y2iZGw7fDnfHPJz5D /cbYf6g5gsPbgOnNd8S/K24ytku+lNWd2Z2tkfSup+qaVkGCR3Vcdxdlt8P5Ed+M +KVCylf03UF2QUMNI/5aXAFi7zck766sCmYMSiBjTSUw68H+xftTl05PCppRoCHh p7KtxzPQf8l7cH0DsXDH1ifsPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6tP0gU 4LjUEDNZtQSGQKLOwVWnMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZP7BDMuSDVJGtJjsuFv+oZHJy+NES4HmuquyaKDxRzCDb/MCAV5/J wsGw7ebUT/MKrI2b4cgNCcwEMZBWSmipV3PjrT71QE32I3jJtQgP3TUTINcAcxwA Ui98h9csdot64f9tbQUTIgmfN1T9lfjRzRvWl99vhB8phXCJmZ7iNHQg4ZmPuRjN 0097uywP2XDTfcgks4fHy/83I+E5/Ay3ZjRBgLpowJvtnUFnw5XmJm3rXRADSiVG ju3jmi1Rw9MSDBuxw4SjklkBFk4nOt19mPYf4G5VE5f+b6NUVp/PqMqfD6mASl/w vT4JjE+XdFUVVUP1Eejh+MjkKsktzNzl -----END CERTIFICATE-----Generated at Sat May 31 16:59:23 2025 by rpki-client