$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: 8EuVxlazneSV9GvAreKc00D7IFVnvm/h+auwDESYN7c= Subject key identifier: 5B:7B:3C:E6:4B:7E:08:F3:90:2B:47:14:1C:E1:84:11:49:8E:37:AE Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 08FD Signing time: Fri 30 May 2025 20:35:11 +0000 Manifest this update: Fri 30 May 2025 20:35:11 +0000 Manifest next update: Fri 06 Jun 2025 20:35:11 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: YnJdXeY5V1wgHiKSwQdyemGHLFSdVH2zRezRVxil7X4=) 2: B8753568229D11F0A5CF4B78C4F9AE02.roa (hash: UzrBYvhmwM8mdH0ghMSjubq04wNr65MA9rGMTRg3B0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: May 30 20:35:11 2025 GMT Not After : Jun 6 20:35:11 2025 GMT Subject: CN=683a167f-e3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:93:71:74:ed:40:14:35:2d:46:cb:6c:82:6d: 17:d6:4c:66:51:0c:79:30:a3:7b:b2:d5:9e:50:e0: f9:e8:74:92:8f:53:0a:ca:a3:36:82:87:79:97:9d: a3:7d:f1:74:41:57:68:81:49:ff:8e:bf:89:33:9a: 82:a0:aa:00:64:f3:6b:a7:69:e9:b8:93:43:2f:6e: 94:7a:2f:da:3c:fe:59:45:50:7c:c6:f9:2c:c5:d1: ce:e6:ec:8c:0f:12:4e:95:e2:eb:eb:32:85:d2:23: 00:e2:22:3f:c1:58:47:8a:e1:68:9a:04:0c:c5:02: 74:5d:e2:a5:2e:72:6f:92:fc:80:06:f1:d4:12:a5: 9e:4c:e4:ab:ee:77:37:a4:1a:77:b9:5a:93:57:c4: 4a:15:de:56:89:05:f1:5d:3e:19:f3:bf:6a:4e:9e: dd:11:59:15:53:0e:af:8d:62:ec:b6:15:1a:ea:bf: 05:59:97:ff:29:69:1e:21:be:31:b4:22:1d:ca:5b: ae:3a:dd:24:b4:45:d3:17:a6:d9:33:41:c4:9d:72: c8:6b:bf:5d:30:db:99:a0:b3:c9:4e:98:19:bd:b0: 07:af:11:59:bd:7c:d2:d0:dd:28:5e:b9:47:bc:1e: b3:d7:21:95:d6:1e:bf:fe:2a:40:3d:9c:e6:85:58: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7B:3C:E6:4B:7E:08:F3:90:2B:47:14:1C:E1:84:11:49:8E:37:AE X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:7a:78:d1:09:44:31:dd:b0:aa:64:14:83:6a:42:42:e5:a5: ca:3b:aa:2a:24:cf:94:ec:9e:86:7c:23:cc:e8:b5:21:fa:b3: 23:ca:c7:f3:f9:3d:0f:fd:83:aa:50:de:9f:92:4c:53:3a:94: 73:84:60:7a:b1:e2:d8:fc:79:bb:38:75:70:ed:b5:bb:fc:f5: 45:fc:87:f1:0c:2b:c2:b2:01:9f:e9:75:5b:4d:ba:99:8c:6e: aa:58:0e:05:53:04:73:f9:96:15:58:11:7c:1a:64:e1:48:61: b8:1c:cf:c7:d4:24:5a:f2:d8:80:cf:83:81:b6:bb:32:9b:11: 23:41:86:d6:de:ab:25:8b:93:7e:56:40:6b:fe:54:7a:e4:58: dd:95:85:4b:5c:1c:eb:67:7b:80:6e:32:81:01:72:ed:44:d8: ea:e1:9a:57:fe:05:f4:b7:27:24:35:b8:81:bb:65:ca:fa:25: 6b:1c:af:9b:06:8b:29:93:02:35:34:6e:a6:39:59:00:e4:3a: c9:c0:b3:a2:83:df:eb:5b:95:79:8e:79:a9:5d:4e:6b:53:65: 1e:59:cf:f8:35:ea:6c:66:43:82:94:6d:81:f2:f2:01:d8:d7: 7d:d8:6f:b4:b4:20:cf:f2:b5:59:fd:02:ea:66:6e:5f:8e:48: d3:98:3f:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjUwNTMwMjAzNTExWhcNMjUwNjA2MjAzNTExWjAYMRYwFAYD VQQDEw02ODNhMTY3Zi1lM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+JNxdO1AFDUtRstsgm0X1kxmUQx5MKN7stWeUOD56HSSj1MKyqM2god5l52j ffF0QVdogUn/jr+JM5qCoKoAZPNrp2npuJNDL26Uei/aPP5ZRVB8xvksxdHO5uyM DxJOleLr6zKF0iMA4iI/wVhHiuFomgQMxQJ0XeKlLnJvkvyABvHUEqWeTOSr7nc3 pBp3uVqTV8RKFd5WiQXxXT4Z879qTp7dEVkVUw6vjWLsthUa6r8FWZf/KWkeIb4x tCIdyluuOt0ktEXTF6bZM0HEnXLIa79dMNuZoLPJTpgZvbAHrxFZvXzS0N0oXrlH vB6z1yGV1h6//ipAPZzmhVhirwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt7POZL fgjzkCtHFBzhhBFJjjeuMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZenjRCUQx3bCqZBSDakJC5aXKO6oqJM+U7J6GfCPM6LUh+rMjysfz +T0P/YOqUN6fkkxTOpRzhGB6seLY/Hm7OHVw7bW7/PVF/IfxDCvCsgGf6XVbTbqZ jG6qWA4FUwRz+ZYVWBF8GmThSGG4HM/H1CRa8tiAz4OBtrsymxEjQYbW3qsli5N+ VkBr/lR65FjdlYVLXBzrZ3uAbjKBAXLtRNjq4ZpX/gX0tyckNbiBu2XK+iVrHK+b BospkwI1NG6mOVkA5DrJwLOig9/rW5V5jnmpXU5rU2UeWc/4NepsZkOClG2B8vIB 2Nd92G+0tCDP8rVZ/QLqZm5fjkjTmD8E -----END CERTIFICATE-----Generated at Sat May 31 15:06:09 2025 by rpki-client