$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft File: J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft (raw, json) Hash identifier: 7bBePcK6k70JPosdseiN8lCkRPsEJYoYDa5DlgTSOI4= Subject key identifier: 5B:A0:70:3C:8B:BD:D0:D9:3D:66:36:4C:86:7E:C5:86:3D:BF:52:D1 Authority key identifier: 27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E Certificate issuer: /CN=A91BF781/serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft Manifest number: 011C Signing time: Sat 31 May 2025 04:31:16 +0000 Manifest this update: Sat 31 May 2025 04:31:15 +0000 Manifest next update: Sat 07 Jun 2025 04:31:15 +0000 Files and hashes: 1: J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl (hash: gcst47dpaVOXi9YhxCcVhhs3CP26asE7UU3ZW7lAZS0=) 2: DB78FCC4BB5211EE8EB48761C4F9AE02.roa (hash: 6C7RQu6L/61k8kBeOezAxwREknY0f6jdNOm/o1EQWNU=) 3: A6DB1A549BB511EEAAE01C70C4F9AE02.roa (hash: KtraNK6MUNFprY77t8YkGpzesemeP8OiSjIlbxZgo0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF781, serialNumber=2769A4FA92297DCB1DF896DAE6373996FD31806E Validity Not Before: May 31 04:31:15 2025 GMT Not After : Jun 7 04:31:15 2025 GMT Subject: CN=683a8614-5857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:b7:44:5b:9b:7c:24:7a:48:3b:38:0e:d9: a1:b8:05:b1:1a:9d:0c:04:ed:f4:8b:0e:35:af:c9: ca:91:fd:ed:9f:f1:55:e2:8f:a3:f9:1a:82:e3:20: ca:83:0b:dc:65:2c:36:76:94:89:fe:e3:cb:47:c1: f2:38:1c:62:76:bd:fc:91:5c:f2:f6:36:6c:1b:7d: 0e:ec:76:04:ec:a5:da:07:cb:47:11:39:ce:e8:2e: a6:b4:ba:9b:97:9a:f8:2b:08:37:03:f3:41:df:58: 3e:1f:c6:a8:1f:25:e1:77:98:65:44:e7:65:dc:42: ef:e1:90:27:5f:52:64:90:38:51:10:6c:a4:fb:67: 57:e4:5d:85:db:22:fe:7a:c9:a8:56:9b:84:80:55: 97:ce:a4:71:81:76:52:24:cd:4d:ac:97:ad:43:46: 08:bf:d9:b8:94:4b:1a:b7:32:ca:ca:a0:53:09:5c: 36:89:0e:8a:c4:7e:c3:38:7c:7a:e1:fe:9d:71:98: de:e0:ed:c2:59:c6:f0:3e:2e:f2:d8:92:0d:a1:39: 99:e4:82:37:af:6c:46:ab:14:d0:f6:93:13:c9:7c: e2:a0:9f:05:f4:74:af:97:26:5d:b2:10:32:84:68: 1e:2a:05:04:db:92:18:bd:95:1f:e7:f9:08:3d:7e: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A0:70:3C:8B:BD:D0:D9:3D:66:36:4C:86:7E:C5:86:3D:BF:52:D1 X509v3 Authority Key Identifier: keyid:27:69:A4:FA:92:29:7D:CB:1D:F8:96:DA:E6:37:39:96:FD:31:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2mk-pIpfcsd-Jba5jc5lv0xgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF781/75070A4A96AD11EE9F5F845DC4F9AE02/J2mk-pIpfcsd-Jba5jc5lv0xgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6d:2b:83:57:c0:ad:0b:4b:00:8c:09:c1:7c:24:98:29:f0: 2b:ed:74:74:be:e4:8d:a1:7f:0a:d6:2b:d4:bd:01:9b:b3:3f: 99:1a:a7:dc:6e:b6:85:0b:99:68:0d:07:07:38:e8:02:ed:82: bc:89:a2:ab:40:69:ab:97:3a:a5:35:ef:78:b0:31:47:a4:cc: 30:99:54:5e:3c:8a:32:d3:eb:ba:7d:d8:ec:27:19:54:63:54: 44:02:a8:73:11:78:7b:4c:72:87:83:c3:1f:75:83:8a:71:38: cc:2b:90:35:b9:0d:24:1f:ef:8a:af:85:ce:ff:7a:b1:76:d0: 3c:40:88:fe:e0:0f:af:a7:70:24:09:47:dd:94:9c:8a:0b:b2: e5:ba:4b:28:05:03:4a:59:09:5b:cd:f1:38:61:68:1e:2d:f9: 5d:f8:2a:ea:7f:ab:bf:bd:8c:a5:88:95:bf:cc:74:66:32:ab: 49:c3:1c:3e:da:f6:62:4d:24:1b:5b:06:3e:24:94:de:1c:35: b5:c0:cb:ad:5e:8a:40:42:86:ff:25:9c:f8:f4:c2:d2:ee:c2: c2:fe:81:f5:b8:03:66:9c:66:15:b7:94:5b:04:84:4d:63:e4: 13:af:ca:79:9b:c0:5a:03:b5:18:33:ab:7c:65:34:f9:ee:8e: 9e:f7:c1:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3ODExMTAvBgNVBAUTKDI3NjlBNEZBOTIyOTdEQ0IxREY4OTZEQUU2MzczOTk2 RkQzMTgwNkUwHhcNMjUwNTMxMDQzMTE1WhcNMjUwNjA3MDQzMTE1WjAYMRYwFAYD VQQDEw02ODNhODYxNC01ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHW3RFubfCR6SDs4DtmhuAWxGp0MBO30iw41r8nKkf3tn/FV4o+j+RqC4yDK gwvcZSw2dpSJ/uPLR8HyOBxidr38kVzy9jZsG30O7HYE7KXaB8tHETnO6C6mtLqb l5r4Kwg3A/NB31g+H8aoHyXhd5hlROdl3ELv4ZAnX1JkkDhREGyk+2dX5F2F2yL+ esmoVpuEgFWXzqRxgXZSJM1NrJetQ0YIv9m4lEsatzLKyqBTCVw2iQ6KxH7DOHx6 4f6dcZje4O3CWcbwPi7y2JINoTmZ5II3r2xGqxTQ9pMTyXzioJ8F9HSvlyZdshAy hGgeKgUE25IYvZUf5/kIPX7OcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFugcDyL vdDZPWY2TIZ+xYY9v1LRMB8GA1UdIwQYMBaAFCdppPqSKX3LHfiW2uY3OZb9MYBu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc4MS83NTA3MEE0QTk2 QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZjc2QtSmJhNWpjNWx2MHhn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oybWstcElwZmNzZC1KYmE1amM1bHYweGdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc4MS83NTA3MEE0QTk2QUQxMUVFOUY1Rjg0NURDNEY5QUUwMi9KMm1rLXBJcGZj c2QtSmJhNWpjNWx2MHhnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUbSuDV8CtC0sAjAnBfCSYKfAr7XR0vuSNoX8K1ivUvQGbsz+ZGqfc braFC5loDQcHOOgC7YK8iaKrQGmrlzqlNe94sDFHpMwwmVRePIoy0+u6fdjsJxlU Y1REAqhzEXh7THKHg8MfdYOKcTjMK5A1uQ0kH++Kr4XO/3qxdtA8QIj+4A+vp3Ak CUfdlJyKC7LluksoBQNKWQlbzfE4YWgeLfld+Crqf6u/vYyliJW/zHRmMqtJwxw+ 2vZiTSQbWwY+JJTeHDW1wMutXopAQob/JZz49MLS7sLC/oH1uANmnGYVt5RbBIRN Y+QTr8p5m8BaA7UYM6t8ZTT57o6e98FN -----END CERTIFICATE-----Generated at Sat May 31 16:38:49 2025 by rpki-client