$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: /SHCqdAqonfbYTDywJ1ctjdFMz9w3rs/6dQuWjAwLY8= Subject key identifier: FA:70:D4:15:D6:2F:3F:F4:F0:54:C6:46:8B:6C:95:30:87:F1:40:69 Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 0665 Signing time: Fri 30 May 2025 22:39:14 +0000 Manifest this update: Fri 30 May 2025 22:39:13 +0000 Manifest next update: Fri 06 Jun 2025 22:39:13 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: qhOLCMHXf4ITYXLslqaxUX6EsQGjvhtlbrK9tS8O4VU=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325, serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: May 30 22:39:13 2025 GMT Not After : Jun 6 22:39:13 2025 GMT Subject: CN=683a3392-2f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c6:07:de:fb:96:f1:eb:e9:b4:dd:25:92:c3: 5f:13:97:36:8e:48:32:88:66:9f:c7:c0:bf:dd:49: cd:5b:25:f3:b6:8f:32:ba:1f:25:11:33:b6:6e:3e: 6e:32:d4:d7:93:38:d1:ec:ff:a4:11:ab:8a:70:52: db:8a:f4:e1:81:db:ff:ac:e8:11:bc:08:38:01:8e: a9:a5:1d:57:d0:db:5c:83:1d:d7:df:18:b4:0d:6d: f9:c0:91:f0:34:d7:ba:dd:67:ca:f9:e9:9a:e2:3a: 28:8c:18:a6:1a:e0:a9:6d:5c:30:73:65:f8:4a:a9: 39:a9:9f:62:6a:6e:78:03:47:f2:78:69:f6:bc:be: a7:93:a0:42:b1:94:b8:0b:d2:8c:f1:58:70:12:c1: 0e:cb:e3:85:7c:3d:e7:97:6d:be:77:50:fc:43:0d: 9b:c1:ad:ad:b4:6a:6a:18:a7:ab:70:35:dc:3b:c5: 10:8f:6b:af:a7:c6:8a:86:dd:13:fc:e2:50:52:e7: 21:a8:80:e7:c1:b0:ff:8e:58:a5:a6:4c:54:f6:55: 42:d9:56:13:ea:e3:74:0c:4b:4a:da:ff:49:b7:f5: d5:68:29:2b:2c:bf:e8:20:59:3f:53:f1:9f:6e:41: 9a:83:a4:d3:b5:2a:79:fd:bb:a7:0f:2a:f8:f7:67: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:70:D4:15:D6:2F:3F:F4:F0:54:C6:46:8B:6C:95:30:87:F1:40:69 X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:10:26:c7:6f:0a:f9:9c:f3:72:54:fe:06:9f:64:d8:8c:55: 73:55:5d:0f:43:dd:ea:36:3a:f8:cc:7d:24:7e:85:5d:a6:2d: 8a:04:42:0d:f6:c4:99:8b:6e:73:f6:cb:cb:0f:e5:72:b2:0b: dd:f1:c6:79:48:50:c9:d8:f0:95:31:9c:53:be:6d:a9:fe:5c: 9c:62:c0:ec:fe:0e:ac:40:7e:37:61:6b:98:01:0a:cd:52:a4: 36:96:cb:c4:56:72:8d:cb:08:df:1a:ee:fc:65:c8:5c:81:27: 2f:3c:3c:cd:66:e3:91:16:b6:4b:3e:19:c7:6d:71:72:16:72: 3c:4f:36:0d:65:3f:6f:ba:a2:b0:59:b1:80:af:4d:b7:ca:ed: fa:f0:20:e1:20:b2:09:bc:ad:2e:eb:d5:d3:9d:c6:ac:64:87: b2:0b:db:69:f7:61:87:4b:13:fc:03:2c:b2:ca:ce:1d:6f:3e: 67:51:7a:95:6d:de:8b:2e:84:61:95:4e:00:39:f6:8b:c0:b2: 28:25:11:ff:9c:fe:33:ac:e8:1f:59:e2:39:fb:1c:4e:ee:a5: 65:80:ce:c2:cb:ed:41:c8:c5:a1:c5:62:35:fa:c1:ce:d1:32: 75:5d:02:26:3f:18:db:ef:d0:2a:1b:b2:f2:ae:31:ee:6c:2f: 7c:1b:71:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUwNTMwMjIzOTEzWhcNMjUwNjA2MjIzOTEzWjAYMRYwFAYD VQQDEw02ODNhMzM5Mi0yZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MYH3vuW8evptN0lksNfE5c2jkgyiGafx8C/3UnNWyXzto8yuh8lETO2bj5u MtTXkzjR7P+kEauKcFLbivThgdv/rOgRvAg4AY6ppR1X0Ntcgx3X3xi0DW35wJHw NNe63WfK+ema4joojBimGuCpbVwwc2X4Sqk5qZ9iam54A0fyeGn2vL6nk6BCsZS4 C9KM8VhwEsEOy+OFfD3nl22+d1D8Qw2bwa2ttGpqGKercDXcO8UQj2uvp8aKht0T /OJQUuchqIDnwbD/jlilpkxU9lVC2VYT6uN0DEtK2v9Jt/XVaCkrLL/oIFk/U/Gf bkGag6TTtSp5/bunDyr492eQlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpw1BXW Lz/08FTGRotslTCH8UBpMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwECbHbwr5nPNyVP4Gn2TYjFVzVV0PQ93qNjr4zH0kfoVdpi2KBEIN 9sSZi25z9svLD+Vysgvd8cZ5SFDJ2PCVMZxTvm2p/lycYsDs/g6sQH43YWuYAQrN UqQ2lsvEVnKNywjfGu78ZchcgScvPDzNZuORFrZLPhnHbXFyFnI8TzYNZT9vuqKw WbGAr023yu368CDhILIJvK0u69XTncasZIeyC9tp92GHSxP8Ayyyys4dbz5nUXqV bd6LLoRhlU4AOfaLwLIoJRH/nP4zrOgfWeI5+xxO7qVlgM7Cy+1ByMWhxWI1+sHO 0TJ1XQImPxjb79AqG7LyrjHubC98G3FS -----END CERTIFICATE-----Generated at Sat May 31 17:28:56 2025 by rpki-client