$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: 1x2BlLCTT8t3P3ywORQ5E1/Pkxf3md21BU6BMc8ykSU= Subject key identifier: A4:9D:34:5F:56:DD:85:73:E3:79:76:28:F5:56:1F:C0:15:7B:8D:B5 Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 05 Signing time: Tue 03 Jun 2025 08:06:05 +0000 Manifest this update: Tue 03 Jun 2025 08:06:05 +0000 Manifest next update: Tue 10 Jun 2025 08:06:05 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: nvFU329PZ/lGWptOCSboQwPnx9F0SO35D8SauCilGok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Jun 3 08:06:05 2025 GMT Not After : Jun 10 08:06:05 2025 GMT Subject: CN=683eaced-7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:23:74:1e:87:1a:ff:d3:a8:cf:e5:aa:ff:f8: f2:04:64:3a:10:6a:0c:bd:32:80:8f:6c:43:3d:79: 08:d8:48:0c:56:96:8a:44:4c:da:cc:4d:e5:5f:35: 1b:5a:de:5e:28:60:84:0e:06:d2:cb:b6:41:03:04: cd:ca:16:bb:88:9e:04:7c:7f:7f:51:cf:4d:be:3d: e8:cd:dc:86:11:1b:2b:c5:9c:c8:cd:fd:1c:c0:f4: 80:cc:fa:b0:3b:0e:e5:17:c1:1d:b2:b5:b2:a5:56: d4:86:05:da:93:cc:2d:48:45:f0:f1:e3:6c:d5:7c: ed:d8:fa:62:52:66:5d:0a:19:d9:20:92:73:6c:43: d3:8a:33:67:f5:6e:02:f6:52:e9:d0:61:a1:e6:c5: ed:1b:6b:da:37:dd:99:7d:bd:ed:2b:57:99:88:bd: 91:3c:0a:0c:44:32:76:49:b9:5f:dc:10:75:25:a4: a1:6a:5a:6a:9a:f4:b6:bc:2d:56:8e:4e:2d:cf:b2: 42:6d:29:d7:70:e2:86:a6:99:e9:e9:bb:63:60:3e: 0b:d7:66:1f:f9:de:45:da:6f:a1:0d:7c:2e:2e:61: 0f:be:ca:f5:60:eb:27:8a:c1:42:a9:77:20:f2:68: 06:bc:ce:ab:08:95:34:c5:fa:99:28:34:5b:cc:e3: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:34:5F:56:DD:85:73:E3:79:76:28:F5:56:1F:C0:15:7B:8D:B5 X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:bd:a7:cd:54:39:e4:59:ff:0f:e5:ae:45:fa:04:bb:46:7a: 98:37:b7:a8:3b:be:bc:0b:e1:f2:60:04:e2:2f:74:f0:2a:8b: dc:14:9a:04:cd:a9:59:d1:18:34:8c:f7:91:b9:e7:a7:39:d6: f0:a3:32:33:ec:63:a4:f7:49:1b:93:a9:03:cc:9f:4f:18:a8: 87:d6:33:4a:29:9c:2a:b8:e3:c4:41:40:ab:87:04:36:54:09: 53:0f:0e:80:bd:cd:a1:90:11:25:a4:24:07:94:d4:e6:19:cb: 7c:c7:65:4e:db:57:35:49:f8:e6:34:b7:91:1a:57:a2:25:27: 84:e6:14:ae:c5:39:80:42:7d:7a:1d:a0:10:91:3f:f6:5c:b9: 07:cc:51:b7:ff:66:fd:5c:0f:96:b7:6d:f6:ba:e1:eb:95:2d: 75:dd:81:d2:bb:20:17:12:5f:5b:b0:08:64:e9:0e:31:0f:95: 14:ef:cd:13:66:7f:82:a6:45:70:70:62:e0:a9:d7:df:ec:d9: 8c:48:ad:f7:e9:ff:84:99:98:95:16:78:28:d2:0d:ea:db:fa: 9e:57:7f:51:f6:b5:62:25:b2:ab:8c:e6:74:86:1f:9e:9f:a8: 0c:ab:33:1e:23:fa:ae:08:ac:3a:35:c3:1f:66:95:0c:02:14: 41:24:57:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTA2MDMwODA2MDVaFw0yNTA2MTAwODA2MDVaMBgxFjAUBgNV BAMTDTY4M2VhY2VkLTcyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYI3Qehxr/06jP5ar/+PIEZDoQagy9MoCPbEM9eQjYSAxWlopETNrMTeVfNRta 3l4oYIQOBtLLtkEDBM3KFruIngR8f39Rz02+PejN3IYRGyvFnMjN/RzA9IDM+rA7 DuUXwR2ytbKlVtSGBdqTzC1IRfDx42zVfO3Y+mJSZl0KGdkgknNsQ9OKM2f1bgL2 UunQYaHmxe0ba9o33Zl9ve0rV5mIvZE8CgxEMnZJuV/cEHUlpKFqWmqa9La8LVaO Ti3PskJtKddw4oammenpu2NgPgvXZh/53kXab6ENfC4uYQ++yvVg6yeKwUKpdyDy aAa8zqsIlTTF+pkoNFvM418RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpJ00X1bd hXPjeXYo9VYfwBV7jbUwHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADW9p81UOeRZ/w/lrkX6BLtGepg3t6g7vrwL4fJgBOIvdPAqi9wUmgTN qVnRGDSM95G556c51vCjMjPsY6T3SRuTqQPMn08YqIfWM0opnCq448RBQKuHBDZU CVMPDoC9zaGQESWkJAeU1OYZy3zHZU7bVzVJ+OY0t5EaV6IlJ4TmFK7FOYBCfXod oBCRP/ZcuQfMUbf/Zv1cD5a3bfa64euVLXXdgdK7IBcSX1uwCGTpDjEPlRTvzRNm f4KmRXBwYuCp19/s2YxIrffp/4SZmJUWeCjSDerb+p5Xf1H2tWIlsquM5nSGH56f qAyrMx4j+q4IrDo1wx9mlQwCFEEkV8E= -----END CERTIFICATE-----Generated at Tue Jun 3 23:56:41 2025 by rpki-client