$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: hqjNeoiw7PtzgjdnzwDKeoS27gpWjUE3I7rft8MT1u0= Subject key identifier: B5:E0:45:EC:41:80:0C:A0:09:F3:59:80:93:1E:B4:6E:CC:8D:2F:4C Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 06ED Signing time: Fri 30 May 2025 22:12:07 +0000 Manifest this update: Fri 30 May 2025 22:12:06 +0000 Manifest next update: Fri 06 Jun 2025 22:12:06 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: u8xXagRUOalrIhGnAUVr9ZIdKQ2hZD/lCmfMgoDbge0=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: May 30 22:12:06 2025 GMT Not After : Jun 6 22:12:06 2025 GMT Subject: CN=683a2d36-82d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:75:21:d1:e5:45:4e:20:f8:4a:49:b0:6e: 2b:3c:96:7d:02:1f:0e:dd:7e:3f:e1:e2:8f:97:86: b6:60:3a:92:e1:27:4e:fb:22:c2:56:1c:e3:cf:01: ea:67:f5:8c:60:12:4b:f0:c6:a2:0a:c8:0e:85:ce: f5:97:60:c0:1d:50:49:2f:26:87:58:3e:8a:ac:43: db:f8:f0:f8:cc:21:da:29:f5:34:d1:e7:55:2e:e9: 0e:49:2f:b1:62:39:ee:73:4e:52:e0:f5:6c:67:93: 17:0d:79:46:7c:6a:3b:e2:ef:2e:18:74:a7:22:1f: b0:7f:21:ce:50:fd:8a:17:2c:d1:e8:59:c1:6a:61: f8:2e:2a:07:09:d1:87:b1:9a:58:8f:07:36:be:80: 1c:d0:f0:ae:25:db:5c:42:b7:a0:ff:84:1e:13:5e: d9:59:40:d7:fb:71:8b:73:b9:cc:ae:24:86:a7:dc: 76:ff:a2:84:82:cc:08:de:b7:d6:e8:18:9f:87:85: fb:10:f9:c8:e4:c2:61:27:55:1e:fe:e9:de:f7:a4: 6f:26:dc:03:52:6f:f3:75:e2:e0:23:4d:84:a0:41: 24:f1:24:f3:53:e2:af:ea:bd:8b:b5:52:d2:fe:5b: 45:d2:be:de:51:15:25:60:d3:32:6c:76:b2:7f:d7: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E0:45:EC:41:80:0C:A0:09:F3:59:80:93:1E:B4:6E:CC:8D:2F:4C X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:bb:13:7d:92:70:f9:1f:bf:17:f0:8d:8d:5d:4a:57:22:3c: 85:d7:89:40:84:79:09:40:2b:3e:2d:b9:b2:eb:fd:10:c6:ec: 89:c9:4d:6c:e5:6a:d8:48:23:da:da:ac:21:36:ec:56:0a:23: 56:29:a6:c4:10:2e:0a:20:6e:cb:b3:ae:71:3f:11:37:12:47: 0c:ba:df:13:dc:00:d8:88:a4:cd:ab:9d:b6:63:45:85:a0:4a: cc:a4:61:95:e7:94:71:76:d4:41:d7:c5:82:de:37:a0:78:33: a6:7d:f7:38:9c:8e:41:3b:b4:f7:c3:81:84:e2:b5:fb:46:dc: e3:22:4e:ac:81:32:ac:d7:f8:81:bf:13:cc:d4:d4:d3:f2:8c: 2e:2a:89:ca:60:86:15:b5:f3:0b:fb:8c:fc:fe:bd:8e:a0:39: 82:91:05:38:ff:44:5d:2b:eb:41:52:c2:4e:05:86:2e:a2:c6: b5:0c:2f:c3:3c:7e:eb:ee:6f:34:1f:2e:2e:83:48:ab:29:be: d3:f5:0e:6f:56:74:b0:98:ab:95:5f:32:7c:5d:06:c3:59:15: e4:29:65:28:ab:f1:3a:8d:fe:3b:40:b0:19:b6:94:ad:c3:86: 2e:0b:ae:0d:3e:7b:6c:d2:61:41:67:8e:d0:3d:87:ee:f6:4a: 6e:98:7f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUwNTMwMjIxMjA2WhcNMjUwNjA2MjIxMjA2WjAYMRYwFAYD VQQDEw02ODNhMmQzNi04MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ91IdHlRU4g+EpJsG4rPJZ9Ah8O3X4/4eKPl4a2YDqS4SdO+yLCVhzjzwHq Z/WMYBJL8MaiCsgOhc71l2DAHVBJLyaHWD6KrEPb+PD4zCHaKfU00edVLukOSS+x Yjnuc05S4PVsZ5MXDXlGfGo74u8uGHSnIh+wfyHOUP2KFyzR6FnBamH4LioHCdGH sZpYjwc2voAc0PCuJdtcQreg/4QeE17ZWUDX+3GLc7nMriSGp9x2/6KEgswI3rfW 6Bifh4X7EPnI5MJhJ1Ue/une96RvJtwDUm/zdeLgI02EoEEk8STzU+Kv6r2LtVLS /ltF0r7eURUlYNMybHayf9cduQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXgRexB gAygCfNZgJMetG7MjS9MMB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBuxN9knD5H78X8I2NXUpXIjyF14lAhHkJQCs+Lbmy6/0QxuyJyU1s 5WrYSCPa2qwhNuxWCiNWKabEEC4KIG7Ls65xPxE3EkcMut8T3ADYiKTNq522Y0WF oErMpGGV55RxdtRB18WC3jegeDOmffc4nI5BO7T3w4GE4rX7RtzjIk6sgTKs1/iB vxPM1NTT8owuKonKYIYVtfML+4z8/r2OoDmCkQU4/0RdK+tBUsJOBYYuosa1DC/D PH7r7m80Hy4ug0irKb7T9Q5vVnSwmKuVXzJ8XQbDWRXkKWUoq/E6jf47QLAZtpSt w4YuC64NPnts0mFBZ47QPYfu9kpumH/A -----END CERTIFICATE-----Generated at Sat May 31 17:34:24 2025 by rpki-client