$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: IAUOoRJ9BoAk/vevR7qQK25RIh90GTvxncWsEERRl1Q= Subject key identifier: B8:9F:13:4B:79:44:19:7E:0D:F4:34:37:D6:2B:83:C2:E0:2E:6A:10 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 078F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 076F Signing time: Wed 04 Jun 2025 21:31:09 +0000 Manifest this update: Wed 04 Jun 2025 21:31:09 +0000 Manifest next update: Wed 11 Jun 2025 21:31:09 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: pfiI37h2QhCh0WY+QNn+vwLweEjDMH8xqKbqGXTcX7Q=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Jun 4 21:31:09 2025 GMT Not After : Jun 11 21:31:09 2025 GMT Subject: CN=6840bb1d-6ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:48:e6:94:c9:45:24:01:d9:b7:86:5b:7a: b6:e1:3c:4f:8d:5b:e5:fb:53:e2:e9:70:a5:dd:13: 34:66:30:9b:4c:f9:3d:e1:c5:98:ed:a5:56:42:d8: 2f:29:00:b8:87:86:c9:bb:71:22:4f:73:21:9f:c7: 55:b7:90:b9:ca:a8:01:f3:17:e4:ad:89:12:eb:06: e6:60:ac:58:14:8a:c9:f0:78:0c:2e:3b:d5:82:d6: c8:fc:c3:8c:a9:bc:aa:69:9e:87:d1:42:e8:04:c6: 4c:93:93:97:65:19:39:27:35:ba:ce:8b:c6:c3:ec: 9a:a2:51:25:28:89:2d:cc:ba:8d:a4:e2:bc:5f:b3: 76:1f:51:f8:61:b1:6e:c4:f6:a3:f0:47:76:4f:83: c0:16:b0:94:e7:f0:d6:39:e3:e7:0c:b9:aa:bf:b7: 52:d4:15:98:9b:1a:c5:53:fa:37:af:72:f0:b4:1b: 50:97:39:1f:b1:d9:82:b6:2e:cf:5e:01:f9:38:74: e2:1b:6a:0f:f6:2f:f3:7e:27:b5:84:9b:32:19:7f: a4:f9:58:c9:8b:d9:88:96:4c:52:1f:69:c5:f3:83: 15:eb:e6:6c:0a:46:34:3d:b1:68:f8:72:7f:73:91: 68:8c:79:f4:f1:fb:b7:80:90:97:33:3a:f8:f9:cb: dc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:13:4B:79:44:19:7E:0D:F4:34:37:D6:2B:83:C2:E0:2E:6A:10 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:28:89:2e:3f:2a:b1:ac:68:01:d5:0f:d6:92:45:88:36:02: 6e:ac:39:19:ec:25:5e:57:f6:6a:bd:25:5e:92:bb:12:f2:f3: 5f:47:48:64:6b:32:f8:cc:b0:63:7c:5b:f8:cf:a1:a4:e2:6d: 6c:c5:71:af:db:cb:00:0c:f9:0a:2c:1b:6d:ae:8b:10:d1:eb: dc:fe:32:1b:02:b4:f6:c2:6e:b4:e6:2d:96:35:90:7d:f5:3a: d3:ea:b6:0d:b4:ba:9b:48:84:58:5a:4a:f4:e8:84:d4:7d:3e: 38:78:92:ac:90:68:d4:10:47:eb:49:a0:11:06:e7:6e:91:ba: ff:bd:60:12:da:ea:60:20:f8:b2:8c:ac:e7:b3:fe:5c:ec:ed: 23:7d:9d:83:6a:27:ae:e3:eb:03:ef:e9:47:8a:bf:a9:7a:8e: b3:8b:a2:5f:c4:b8:cc:3e:2e:44:ff:5e:a5:a9:7a:9d:73:f8: 62:7a:98:a3:29:20:aa:3c:a1:13:ae:e9:89:89:93:ce:22:f9: 7d:25:94:67:84:0e:1f:31:67:e8:7c:1b:ec:4f:bf:5b:c0:2d: 91:7a:aa:b8:44:e1:6d:a0:74:71:a8:7b:09:8e:66:0f:fd:4e: f7:97:66:2e:2b:91:1e:af:bb:6b:45:3f:39:6f:2e:b8:1e:3e: 07:9e:21:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUwNjA0MjEzMTA5WhcNMjUwNjExMjEzMTA5WjAYMRYwFAYD VQQDEw02ODQwYmIxZC02Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr81I5pTJRSQB2beGW3q24TxPjVvl+1Pi6XCl3RM0ZjCbTPk94cWY7aVWQtgv KQC4h4bJu3EiT3Mhn8dVt5C5yqgB8xfkrYkS6wbmYKxYFIrJ8HgMLjvVgtbI/MOM qbyqaZ6H0ULoBMZMk5OXZRk5JzW6zovGw+yaolElKIktzLqNpOK8X7N2H1H4YbFu xPaj8Ed2T4PAFrCU5/DWOePnDLmqv7dS1BWYmxrFU/o3r3LwtBtQlzkfsdmCti7P XgH5OHTiG2oP9i/zfie1hJsyGX+k+VjJi9mIlkxSH2nF84MV6+ZsCkY0PbFo+HJ/ c5FojHn08fu3gJCXMzr4+cvcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLifE0t5 RBl+DfQ0N9Yrg8LgLmoQMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhKIkuPyqxrGgB1Q/WkkWINgJurDkZ7CVeV/ZqvSVekrsS8vNfR0hk azL4zLBjfFv4z6Gk4m1sxXGv28sADPkKLBttrosQ0evc/jIbArT2wm605i2WNZB9 9TrT6rYNtLqbSIRYWkr06ITUfT44eJKskGjUEEfrSaARBudukbr/vWAS2upgIPiy jKzns/5c7O0jfZ2Daieu4+sD7+lHir+peo6zi6JfxLjMPi5E/16lqXqdc/hiepij KSCqPKETrumJiZPOIvl9JZRnhA4fMWfofBvsT79bwC2Reqq4ROFtoHRxqHsJjmYP /U73l2YuK5Eer7trRT85by64Hj4HniEN -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:04 2025 by rpki-client