$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: g5XRIb5MiG+Jv2hrx8UINqZLpsDNbNfdSIFPYyx0eKY= Subject key identifier: CC:CD:5E:88:A5:EA:3A:B4:08:9D:8C:1A:0D:50:48:B4:A3:90:AA:A3 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 012E Signing time: Sat 31 May 2025 04:13:22 +0000 Manifest this update: Sat 31 May 2025 04:13:22 +0000 Manifest next update: Sat 07 Jun 2025 04:13:22 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: Ef3oVnZMHHmIMdEYEtX9jw+qDuSdmZ8wrw+00jczOZ8=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: fsgwXlrQI8Xf5Rjyp/4eVuAgbFz37cGdGAMKHjxGUCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: May 31 04:13:22 2025 GMT Not After : Jun 7 04:13:22 2025 GMT Subject: CN=683a81e2-865e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:40:75:09:fe:fd:53:21:f7:35:97:e8:ff: 59:17:1d:82:06:a7:1e:28:c5:46:7d:ed:32:b5:f1: 2f:71:39:85:94:21:a0:aa:23:83:28:60:36:b9:e5: 55:f4:3a:d8:0f:30:41:99:d2:f2:50:2e:bf:2d:f5: 43:78:7a:6e:30:2b:ea:82:e2:23:f1:72:3e:1c:50: f5:c7:5c:d5:a8:7a:e8:3f:53:d5:69:7c:fe:4f:d8: 7f:77:6e:89:d9:cf:7f:66:46:c4:6b:7e:f2:db:69: 52:8d:e9:94:12:f6:52:c4:8b:e2:24:6b:8c:76:81: 6a:72:48:e2:1d:ec:96:57:e4:00:63:95:95:81:3e: 5a:f5:ca:80:d7:59:34:53:cb:f7:51:6c:df:c3:1f: 0e:66:6c:01:35:22:8c:fc:1a:40:38:4b:55:e5:98: da:66:e5:24:4b:87:d4:13:3a:30:12:e8:48:14:d9: df:76:ef:c1:32:7a:48:44:37:f9:f3:73:f5:af:d7: af:4b:8e:7b:e1:95:b9:af:a4:63:11:8b:b6:bd:17: c4:0b:60:53:d9:a1:f4:cb:39:9d:96:a6:81:80:1f: 8b:b2:2a:48:2b:2e:2b:30:20:d6:42:81:f3:ee:ec: 79:ab:89:4b:f2:2d:88:3c:56:b0:50:da:59:91:86: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:5E:88:A5:EA:3A:B4:08:9D:8C:1A:0D:50:48:B4:A3:90:AA:A3 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:b6:b7:de:a8:89:45:aa:05:53:34:ac:aa:32:fc:39:9a: 25:b0:b5:a2:a9:0b:c4:4e:48:95:73:45:d4:3d:e5:d0:cd:9e: 67:dc:45:1c:09:41:06:b1:85:3c:11:7d:99:b3:e2:e4:56:d9: 36:ef:a7:f8:98:5e:9d:aa:e5:91:26:dc:89:1b:75:dc:c6:4f: 18:67:16:97:27:dd:a1:ae:b3:c3:0a:b3:b8:94:b0:11:da:4f: 84:db:d7:0a:d4:2c:77:2f:90:74:37:5b:80:3b:1b:6c:5f:fd: b1:fc:02:6c:75:86:19:49:91:ba:c0:49:cf:3f:36:fc:de:ef: bf:f3:9d:14:70:3c:2a:f0:ea:f4:22:41:ba:60:9f:70:91:eb: fa:a4:88:08:82:4c:35:1a:63:1d:56:6f:3d:8e:16:38:f1:5e: 48:83:ac:5f:dd:7c:7e:c2:a4:99:23:dd:9e:8f:cb:f9:58:b0: 7b:0c:90:75:f1:38:46:60:ad:87:5e:da:da:9d:ee:ab:09:ce: 21:97:5f:92:4b:6c:a3:4b:0e:e2:e8:b8:04:f2:4d:0b:f7:0b: be:1c:7c:5a:21:50:0e:a8:86:fc:84:91:f9:0c:e3:2f:58:2d: 7d:5c:71:0b:f7:5d:3b:80:c4:c6:d2:4e:80:c9:46:92:df:ff: 99:72:ab:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUwNTMxMDQxMzIyWhcNMjUwNjA3MDQxMzIyWjAYMRYwFAYD VQQDEw02ODNhODFlMi04NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9BAdQn+/VMh9zWX6P9ZFx2CBqceKMVGfe0ytfEvcTmFlCGgqiODKGA2ueVV 9DrYDzBBmdLyUC6/LfVDeHpuMCvqguIj8XI+HFD1x1zVqHroP1PVaXz+T9h/d26J 2c9/ZkbEa37y22lSjemUEvZSxIviJGuMdoFqckjiHeyWV+QAY5WVgT5a9cqA11k0 U8v3UWzfwx8OZmwBNSKM/BpAOEtV5ZjaZuUkS4fUEzowEuhIFNnfdu/BMnpIRDf5 83P1r9evS4574ZW5r6RjEYu2vRfEC2BT2aH0yzmdlqaBgB+LsipIKy4rMCDWQoHz 7ux5q4lL8i2IPFawUNpZkYajiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzNXoil 6jq0CJ2MGg1QSLSjkKqjMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx+ra33qiJRaoFUzSsqjL8OZolsLWiqQvETkiVc0XUPeXQzZ5n3EUc CUEGsYU8EX2Zs+LkVtk276f4mF6dquWRJtyJG3Xcxk8YZxaXJ92hrrPDCrO4lLAR 2k+E29cK1Cx3L5B0N1uAOxtsX/2x/AJsdYYZSZG6wEnPPzb83u+/850UcDwq8Or0 IkG6YJ9wkev6pIgIgkw1GmMdVm89jhY48V5Ig6xf3Xx+wqSZI92ej8v5WLB7DJB1 8ThGYK2HXtrane6rCc4hl1+SS2yjSw7i6LgE8k0L9wu+HHxaIVAOqIb8hJH5DOMv WC19XHEL9107gMTG0k6AyUaS3/+ZcqvE -----END CERTIFICATE-----Generated at Sat May 31 16:50:39 2025 by rpki-client