$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: wYw2JLc8Jryjrv8IEg7k7a+DGxRiOZdVFG5qE2ophfc= Subject key identifier: 27:D8:28:7E:6A:F5:5E:A8:96:92:87:70:80:74:6C:5B:83:66:A5:D0 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0964 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0952 Signing time: Fri 06 Jun 2025 20:17:09 +0000 Manifest this update: Fri 06 Jun 2025 20:17:08 +0000 Manifest next update: Fri 13 Jun 2025 20:17:08 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: rXNl7lfmXsK4fyTF4nVqJpkMJQGTpf3N2p2H7y/Yh0Q=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: EhRN/uooWnaf/BKx+rG8uVpZETp6E4AIAKPHufyI6h0=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: AlqDLojfq/3K+BcDiv2qbdt3OzeIJeW5BYNJ45Km+FU=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: lALAU96uBUqRbrTkDfaqUsPuADDi3BxVAQqhmKJyzX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 20:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2404 (0x964) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jun 6 20:17:08 2025 GMT Not After : Jun 13 20:17:08 2025 GMT Subject: CN=68434cc5-20ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7e:32:52:01:b1:ce:2b:10:20:62:75:18:93: 24:2d:b0:b5:b2:c3:a1:67:58:29:04:85:00:a1:6e: 2a:09:61:00:6c:25:d3:52:3a:bb:ce:3a:64:5f:1a: 75:8f:73:28:3b:5b:97:16:44:85:0d:b3:e5:f8:25: 75:dd:31:e8:40:ff:0d:2b:91:74:db:1c:2d:db:c5: 9b:77:1b:f7:f2:29:05:5f:37:e4:30:8f:c8:69:8a: d1:24:95:c7:b2:4d:73:64:d4:27:b1:af:ec:84:82: 4b:c6:59:1a:89:0d:01:8f:06:d1:f0:39:4a:1c:c8: a7:c7:6d:69:de:a6:46:35:a2:d4:3f:f2:3a:a8:de: ca:1d:ed:fc:94:fb:c1:c8:e0:4a:75:39:23:3c:0a: 80:5b:5f:01:52:bf:c4:76:ca:6b:28:0b:e6:27:db: 36:f3:47:b0:f6:2f:79:e0:23:d4:e8:9a:23:b3:4d: 7c:aa:d2:16:05:de:dc:cb:23:bf:24:0d:f5:5a:1f: 1a:1e:26:b1:b1:74:a5:4c:8f:e2:46:5d:a3:9d:f8: d0:23:0a:3f:89:86:62:5c:12:27:31:75:0f:7b:06: 17:b3:de:5c:aa:58:1b:63:fe:cf:79:d3:77:40:aa: 52:64:66:8d:d8:88:42:99:4e:0f:de:ab:f6:a9:95: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:28:7E:6A:F5:5E:A8:96:92:87:70:80:74:6C:5B:83:66:A5:D0 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:84:e0:ef:35:dc:56:83:3f:9c:d6:84:79:69:bc:c4:75:2b: bc:6d:09:36:b6:a4:dc:52:9c:d6:6f:e3:a5:33:7e:12:82:5c: 40:a5:09:9a:0a:cc:f7:a0:e1:7a:bd:15:cd:15:b8:b1:af:01: c1:3a:3c:f6:3e:4e:e1:12:01:51:e3:2c:21:be:b3:53:22:63: 34:45:f0:10:0e:4e:d7:5f:45:90:de:8b:b5:47:88:33:cc:d6: 40:7f:d7:40:ef:02:4a:90:24:6f:65:ec:2a:fa:e9:94:3a:ca: c4:ba:f2:69:78:1c:81:84:0d:19:16:a2:d8:59:7d:1d:93:00: d4:90:52:84:e7:25:9a:29:71:31:35:8a:c8:af:1a:1a:ab:1b: 68:56:00:50:bd:79:b5:2d:cb:c8:09:fb:02:81:5e:76:83:1f: 11:f7:45:26:35:3b:52:b4:4e:06:c6:f5:22:86:b4:fb:62:3d: 54:5b:09:c4:21:0a:5e:d4:f5:6e:81:cf:b0:b3:9d:6d:3e:36: 48:24:db:38:96:c1:de:a8:ad:d2:8c:3b:20:a0:e5:21:8a:9b: 47:46:3a:a4:98:17:bf:be:93:85:ec:cb:76:4e:4a:2e:02:d8: f4:79:01:00:62:73:d9:89:ec:a1:19:6f:7b:0d:31:2c:3f:1f: 14:96:f2:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUwNjA2MjAxNzA4WhcNMjUwNjEzMjAxNzA4WjAYMRYwFAYD VQQDEw02ODQzNGNjNS0yMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3n4yUgGxzisQIGJ1GJMkLbC1ssOhZ1gpBIUAoW4qCWEAbCXTUjq7zjpkXxp1 j3MoO1uXFkSFDbPl+CV13THoQP8NK5F02xwt28Wbdxv38ikFXzfkMI/IaYrRJJXH sk1zZNQnsa/shIJLxlkaiQ0BjwbR8DlKHMinx21p3qZGNaLUP/I6qN7KHe38lPvB yOBKdTkjPAqAW18BUr/EdsprKAvmJ9s280ew9i954CPU6Jojs018qtIWBd7cyyO/ JA31Wh8aHiaxsXSlTI/iRl2jnfjQIwo/iYZiXBInMXUPewYXs95cqlgbY/7PedN3 QKpSZGaN2IhCmU4P3qv2qZXmewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfYKH5q 9V6olpKHcIB0bFuDZqXQMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfhODvNdxWgz+c1oR5abzEdSu8bQk2tqTcUpzWb+OlM34SglxApQma Csz3oOF6vRXNFbixrwHBOjz2Pk7hEgFR4ywhvrNTImM0RfAQDk7XX0WQ3ou1R4gz zNZAf9dA7wJKkCRvZewq+umUOsrEuvJpeByBhA0ZFqLYWX0dkwDUkFKE5yWaKXEx NYrIrxoaqxtoVgBQvXm1LcvICfsCgV52gx8R90UmNTtStE4GxvUihrT7Yj1UWwnE IQpe1PVugc+ws51tPjZIJNs4lsHeqK3SjDsgoOUhiptHRjqkmBe/vpOF7Mt2Tkou Atj0eQEAYnPZieyhGW97DTEsPx8UlvKw -----END CERTIFICATE-----Generated at Sat Jun 7 13:07:22 2025 by rpki-client