$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: GKusCpWTP70r+Uc8gRNLSJUaOrOjTZqIbM68MqeDci4= Subject key identifier: 09:A4:CD:63:E2:26:C6:60:9E:3B:CA:04:1A:14:F1:18:16:4B:47:D2 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 0638 Signing time: Fri 30 May 2025 22:52:52 +0000 Manifest this update: Fri 30 May 2025 22:52:52 +0000 Manifest next update: Fri 06 Jun 2025 22:52:52 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: GAjjjVoxAWQQih1HZhJwz6HAQvm7d06Gg3nBKLkN62o=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: May 30 22:52:52 2025 GMT Not After : Jun 6 22:52:52 2025 GMT Subject: CN=683a36c4-125f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:ae:4b:17:18:fe:bf:c4:67:28:86:90:c0: 51:f1:bd:6a:fb:93:fd:3d:13:49:12:93:06:2f:a9: 2a:d1:cc:f8:82:b5:04:0f:f5:d5:0e:93:cf:0f:4d: 84:93:93:9a:68:a4:26:bb:25:df:85:a5:1e:9d:ae: e8:58:85:d2:38:83:8e:1a:f1:90:3e:4b:60:7f:14: 4f:01:7e:3a:e9:e7:4c:ac:31:16:e8:51:74:38:ef: c7:52:df:b1:77:b8:85:ff:19:2d:f4:d6:46:e8:21: 06:7b:bf:4c:c7:2e:1d:0a:1a:fb:fc:1b:97:91:18: 62:22:d3:54:ba:0f:8e:31:d6:a4:4d:9a:59:6b:de: 09:b6:c4:e0:4a:93:0f:6f:5f:17:68:dd:66:e2:15: a4:99:ad:33:6c:94:cb:fa:7d:11:6e:de:65:dc:f2: 5a:21:68:d1:be:68:9b:eb:d1:3b:e4:9d:1f:b3:72: 1a:2d:ce:01:e9:4e:8a:d7:7e:0e:a3:55:78:2b:8b: cd:3b:a8:b2:e3:9d:53:eb:f6:85:78:2f:1e:b9:2f: 73:d0:ad:49:f9:6b:88:96:8f:ac:cf:9d:0c:70:37: 4f:93:c6:57:a8:33:9a:55:c7:02:08:ae:e6:34:28: 1b:e1:a9:ce:e7:9d:75:bd:8b:3f:58:24:23:4c:7b: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:CD:63:E2:26:C6:60:9E:3B:CA:04:1A:14:F1:18:16:4B:47:D2 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:2f:f0:60:3e:5a:70:8a:78:5b:67:d4:28:1d:96:07:34:08: a4:27:b7:42:c2:41:fc:3e:e6:6b:e3:a1:18:98:3c:77:33:b3: 01:b9:3e:fe:92:6e:66:08:fe:ef:13:c2:2c:6e:0f:ae:21:ef: 51:d7:94:a5:42:d9:d7:52:b5:cf:45:3c:af:6f:b9:ef:dc:e3: f6:9e:0a:b4:55:eb:57:48:ce:a1:1d:38:17:14:a2:4a:32:9d: 20:31:a9:f9:ca:37:a1:6a:c8:5a:12:e9:7d:8a:0c:60:20:61: ae:55:25:ac:5f:7d:bc:d7:31:b4:e2:98:f0:74:58:5b:a2:90: ac:ea:ca:15:53:2e:35:d2:b5:f1:ef:79:5d:68:64:52:eb:9d: 7e:2c:67:b6:4c:b4:af:0c:35:b2:75:64:a4:39:5a:3c:fa:6f: ab:72:6f:69:eb:5e:54:45:dc:8c:f2:69:74:df:35:36:36:bd: 12:43:a9:5f:d4:9f:91:20:14:1f:e5:85:57:1e:eb:20:3e:9f: 5f:13:9f:91:7d:76:5b:ae:26:34:9b:3a:8a:a9:e6:c2:92:c6: 16:4f:b5:19:52:10:22:a4:14:d5:51:14:35:2c:54:75:00:97: 07:bf:8e:d8:16:d7:41:35:cc:05:0b:bb:3c:b4:ca:30:04:a8: 44:ac:01:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUwNTMwMjI1MjUyWhcNMjUwNjA2MjI1MjUyWjAYMRYwFAYD VQQDEw02ODNhMzZjNC0xMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qGuSxcY/r/EZyiGkMBR8b1q+5P9PRNJEpMGL6kq0cz4grUED/XVDpPPD02E k5OaaKQmuyXfhaUena7oWIXSOIOOGvGQPktgfxRPAX466edMrDEW6FF0OO/HUt+x d7iF/xkt9NZG6CEGe79Mxy4dChr7/BuXkRhiItNUug+OMdakTZpZa94JtsTgSpMP b18XaN1m4hWkma0zbJTL+n0Rbt5l3PJaIWjRvmib69E75J0fs3IaLc4B6U6K134O o1V4K4vNO6iy451T6/aFeC8euS9z0K1J+WuIlo+sz50McDdPk8ZXqDOaVccCCK7m NCgb4anO5511vYs/WCQjTHtO1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmkzWPi JsZgnjvKBBoU8RgWS0fSMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSL/BgPlpwinhbZ9QoHZYHNAikJ7dCwkH8PuZr46EYmDx3M7MBuT7+ km5mCP7vE8Isbg+uIe9R15SlQtnXUrXPRTyvb7nv3OP2ngq0VetXSM6hHTgXFKJK Mp0gMan5yjehashaEul9igxgIGGuVSWsX3281zG04pjwdFhbopCs6soVUy410rXx 73ldaGRS651+LGe2TLSvDDWydWSkOVo8+m+rcm9p615URdyM8ml03zU2Nr0SQ6lf 1J+RIBQf5YVXHusgPp9fE5+RfXZbriY0mzqKqebCksYWT7UZUhAipBTVURQ1LFR1 AJcHv47YFtdBNcwFC7s8tMowBKhErAHe -----END CERTIFICATE-----Generated at Sat May 31 17:28:54 2025 by rpki-client