$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: LdNglyjZmdv3Xke8v1rbJz6HV2hnVqBqn25+tIUTmq4= Subject key identifier: 81:78:41:58:01:C6:0E:07:2F:34:32:E8:17:A5:7A:1F:63:3F:94:B2 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0114 Signing time: Sun 01 Jun 2025 04:36:47 +0000 Manifest this update: Sun 01 Jun 2025 04:36:47 +0000 Manifest next update: Sun 08 Jun 2025 04:36:47 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: fRULdtvWfcmp4JQG09WPFmT3k8bX0wrtRZrN3J1kfF8=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Jun 1 04:36:47 2025 GMT Not After : Jun 8 04:36:47 2025 GMT Subject: CN=683bd8df-5763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:86:f4:da:f0:b4:53:f5:7d:55:da:0c:bc: 5d:75:d6:9d:54:41:42:d7:b4:20:52:4d:74:73:57: 1f:48:92:c2:73:76:ae:af:e4:0b:7e:2d:bf:47:ec: d7:5e:3c:c9:b6:f5:4c:7a:5f:75:19:fc:04:88:4f: 97:f6:5a:ce:63:79:04:56:31:cb:e0:ec:a3:41:ed: 1a:d9:bc:7d:d4:1c:f2:4f:5e:2f:ea:00:84:39:e9: 21:32:2f:c9:dc:ee:c8:0b:09:c4:db:32:8f:05:8b: 6c:d1:d2:b1:c4:ba:08:1e:26:3b:2d:5f:d1:ee:9a: 86:b5:c8:0b:43:54:31:e5:20:f2:ad:3b:85:f2:a9: bb:89:ae:4c:40:ae:bf:f6:1c:06:63:b9:c8:09:24: da:ae:98:32:f3:8a:6b:b7:9d:f1:33:17:e9:4d:22: 46:8e:b4:f3:ad:6d:2d:bf:cc:c3:36:db:dd:53:86: 73:30:f2:9c:b2:7e:7c:f1:43:bd:4f:3c:56:a8:2c: be:78:7a:d9:bf:51:db:65:86:4b:a3:87:7a:36:f1: 11:82:22:6c:8b:0a:18:04:78:84:08:e3:60:3f:da: f1:12:0d:7a:fc:88:34:96:88:47:ee:9b:29:3f:c2: fa:1f:70:84:96:44:4f:14:16:63:c4:50:7c:65:2c: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:78:41:58:01:C6:0E:07:2F:34:32:E8:17:A5:7A:1F:63:3F:94:B2 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:63:f6:f3:6c:5f:9e:03:c1:59:a0:fe:9a:ae:13:13:6d:ac: 97:12:ef:6a:f5:75:bf:54:c2:65:76:e0:b3:03:3b:8f:ff:3e: 43:f7:54:03:c7:17:5e:23:4f:49:0d:60:d3:65:f5:c8:9b:3c: 80:64:28:ba:e3:48:5c:3e:83:47:fa:2b:36:69:1d:1b:b8:0b: dd:c3:24:12:ca:5a:36:6b:8d:68:74:49:a0:58:9e:eb:e2:1b: b4:4d:c3:aa:04:ae:3b:94:e1:27:7e:84:b5:be:fe:48:65:ee: e7:7d:a6:08:f6:13:f3:d4:fc:94:58:25:ba:21:83:0a:f9:d3: a0:88:49:7e:01:e7:af:da:22:a6:20:2f:59:63:03:17:89:c2: 82:60:dd:10:2a:92:02:3f:0d:b0:51:14:5a:81:05:d3:08:6b: 5e:35:2a:c7:5e:97:ce:f6:9e:d6:a4:65:52:a5:97:a7:e0:61: e0:10:e6:aa:c9:ea:3a:cb:80:d3:15:d7:5b:27:48:9e:c3:f2: fc:c9:6f:a5:12:80:e2:03:a3:34:85:9b:da:ee:3f:49:15:90: 4d:cb:a9:21:2d:2d:98:95:8c:74:9e:9c:b6:0d:de:e4:f2:e4: ac:69:92:78:fc:85:d0:a1:51:35:a9:fe:97:55:0d:b0:b7:d1: 45:22:dd:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwNjAxMDQzNjQ3WhcNMjUwNjA4MDQzNjQ3WjAYMRYwFAYD VQQDEw02ODNiZDhkZi01NzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkmG9NrwtFP1fVXaDLxdddadVEFC17QgUk10c1cfSJLCc3aur+QLfi2/R+zX XjzJtvVMel91GfwEiE+X9lrOY3kEVjHL4OyjQe0a2bx91BzyT14v6gCEOekhMi/J 3O7ICwnE2zKPBYts0dKxxLoIHiY7LV/R7pqGtcgLQ1Qx5SDyrTuF8qm7ia5MQK6/ 9hwGY7nICSTarpgy84prt53xMxfpTSJGjrTzrW0tv8zDNtvdU4ZzMPKcsn588UO9 TzxWqCy+eHrZv1HbZYZLo4d6NvERgiJsiwoYBHiECONgP9rxEg16/Ig0lohH7psp P8L6H3CElkRPFBZjxFB8ZSwi4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF4QVgB xg4HLzQy6Beleh9jP5SyMB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGY/bzbF+eA8FZoP6arhMTbayXEu9q9XW/VMJlduCzAzuP/z5D91QD xxdeI09JDWDTZfXImzyAZCi640hcPoNH+is2aR0buAvdwyQSylo2a41odEmgWJ7r 4hu0TcOqBK47lOEnfoS1vv5IZe7nfaYI9hPz1PyUWCW6IYMK+dOgiEl+Aeev2iKm IC9ZYwMXicKCYN0QKpICPw2wURRagQXTCGteNSrHXpfO9p7WpGVSpZen4GHgEOaq yeo6y4DTFddbJ0iew/L8yW+lEoDiA6M0hZva7j9JFZBNy6khLS2YlYx0npy2Dd7k 8uSsaZJ4/IXQoVE1qf6XVQ2wt9FFIt0N -----END CERTIFICATE-----Generated at Mon Jun 2 06:36:18 2025 by rpki-client