$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json) Hash identifier: wuoCipNvuT2nSHZ2EaExxHSPAvdZd/2sXsxbqynrwlQ= Subject key identifier: 7B:D0:09:04:77:9B:44:5F:DE:46:A3:69:61:5A:3F:19:68:7A:4D:69 Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft Manifest number: 4098 Signing time: Fri 30 May 2025 15:07:55 +0000 Manifest this update: Fri 30 May 2025 15:07:54 +0000 Manifest next update: Fri 06 Jun 2025 15:07:54 +0000 Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: 6EwZ3iYljH6n9yYShc2jxHc76gmrC0+qui0pZ+1iZzY=) 2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: 4Z25oEXKd2i0RXY7kF9Yj9e1Ufs0rVahsGX9EeBSaFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA Validity Not Before: May 30 15:07:54 2025 GMT Not After : Jun 6 15:07:54 2025 GMT Subject: CN=6839c9cb-242a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:0a:8d:b2:d8:d1:1c:b9:77:86:01:81:69: 17:88:ef:3f:ec:df:67:5e:14:2d:da:43:02:0e:3e: e6:59:03:d7:cc:bb:f3:9f:1b:23:06:b7:c3:70:d9: c0:e2:03:4c:19:87:94:c0:59:57:c4:7e:26:a8:38: 31:f6:63:07:6e:ee:55:0b:ff:07:c4:22:c1:33:c2: 20:50:39:42:c1:8b:00:2b:33:92:b0:9f:81:37:60: b3:1b:9c:e9:e9:1a:e9:82:c7:52:05:06:a0:f1:c1: 0e:36:ca:d9:3c:05:39:61:18:bd:21:e7:d7:4d:b1: b7:55:39:6d:8f:2f:e7:b5:22:11:a2:16:77:ad:6d: 2d:16:4c:f0:25:6b:38:0f:4d:bc:94:3f:92:5a:7c: c7:7a:88:ce:9d:2e:d2:0c:2c:a5:62:5f:6f:4a:50: 7d:67:74:09:35:a9:51:b2:96:a5:f7:77:fe:7a:23: 2a:5a:96:1b:fa:fd:e9:c8:26:7e:ae:8e:83:2f:bb: 03:2d:7b:02:6c:7b:fa:fc:1b:2e:5b:ae:7a:bd:6b: e7:d1:b2:78:f4:9f:5a:2a:68:6a:93:b9:22:19:7b: 04:a6:c4:5e:1a:6d:83:fb:26:ab:1b:ef:68:04:f3: f2:be:7c:38:12:17:c1:d5:a1:b1:e9:0b:22:88:78: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:09:04:77:9B:44:5F:DE:46:A3:69:61:5A:3F:19:68:7A:4D:69 X509v3 Authority Key Identifier: keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a5:34:02:92:cc:27:92:8e:e6:04:fb:c5:b5:e7:81:75:16: b9:c2:15:01:0b:95:96:2e:da:be:6d:43:f8:16:46:28:ec:8b: ef:ef:4a:4f:0f:d6:44:93:4d:cb:fd:7b:bd:4a:1c:7c:3b:b7: b3:03:42:6f:4f:79:ae:20:d2:96:2b:b8:84:0b:fc:31:d7:4a: 5e:45:13:b7:4d:08:3d:b3:b1:0f:1a:a8:05:8a:01:c3:bb:d0: 14:0c:20:31:fa:50:8e:36:51:4b:cf:4d:40:27:5b:4b:2f:33: a0:65:3b:83:f0:97:ba:e8:a6:f5:5e:bd:3c:32:b4:17:b3:9a: 99:35:50:42:3c:1d:58:11:e1:5c:b6:83:bc:5c:95:6b:f7:f8: db:ea:68:27:2a:ba:21:74:23:c0:a2:9b:7b:e7:1f:ba:1c:46: c7:84:a5:9f:2e:95:eb:1e:7a:58:35:2f:ec:ca:0c:a1:7b:6f: bc:7a:a9:89:14:45:5c:63:95:f4:52:84:a4:12:5b:a8:15:3c: 23:0e:51:ab:74:7c:5c:ab:f6:d6:02:ca:cb:67:c3:0f:94:4d: a3:34:16:a2:4d:18:a4:ae:3c:4b:41:49:41:99:de:9d:5f:18: 3b:8b:4b:a7:35:62:12:6b:22:2d:21:ac:41:de:a4:e0:07:11: c5:18:d6:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDMwOTFEQkZFM0VCQUI1NjYzRTg3QURDNkU5OTVGODgy RDNCMjY0Q0EwHhcNMjUwNTMwMTUwNzU0WhcNMjUwNjA2MTUwNzU0WjAYMRYwFAYD VQQDEw02ODM5YzljYi0yNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEYKjbLY0Ry5d4YBgWkXiO8/7N9nXhQt2kMCDj7mWQPXzLvznxsjBrfDcNnA 4gNMGYeUwFlXxH4mqDgx9mMHbu5VC/8HxCLBM8IgUDlCwYsAKzOSsJ+BN2CzG5zp 6RrpgsdSBQag8cEONsrZPAU5YRi9IefXTbG3VTltjy/ntSIRohZ3rW0tFkzwJWs4 D028lD+SWnzHeojOnS7SDCylYl9vSlB9Z3QJNalRspal93f+eiMqWpYb+v3pyCZ+ ro6DL7sDLXsCbHv6/BsuW656vWvn0bJ49J9aKmhqk7kiGXsEpsReGm2D+yarG+9o BPPyvnw4EhfB1aGx6QsiiHh6VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvQCQR3 m0Rf3kajaWFaPxloek1pMB8GA1UdIwQYMBaAFDCR2/4+urVmPoetxumV+ILTsmTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRXWS1oNjNHNlpYNGd0T3la TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KSGJfajY2dFdZLWg2M0c2Wlg0Z3RPeVpNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9NSkhiX2o2NnRX WS1oNjNHNlpYNGd0T3laTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3pTQCkswnko7mBPvFteeBdRa5whUBC5WWLtq+bUP4FkYo7Ivv70pP D9ZEk03L/Xu9Shx8O7ezA0JvT3muINKWK7iEC/wx10peRRO3TQg9s7EPGqgFigHD u9AUDCAx+lCONlFLz01AJ1tLLzOgZTuD8Je66Kb1Xr08MrQXs5qZNVBCPB1YEeFc toO8XJVr9/jb6mgnKrohdCPAopt75x+6HEbHhKWfLpXrHnpYNS/sygyhe2+8eqmJ FEVcY5X0UoSkEluoFTwjDlGrdHxcq/bWAsrLZ8MPlE2jNBaiTRikrjxLQUlBmd6d Xxg7i0unNWISayItIaxB3qTgBxHFGNaq -----END CERTIFICATE-----Generated at Sat May 31 16:36:56 2025 by rpki-client