$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: yLct79bWvTg9bi7hzCAFUDYNfw9g8OI2sJoqDrVERqY= Subject key identifier: 8A:AE:E1:3E:56:6B:E2:3B:6D:C6:3D:9E:B5:A5:30:A4:05:E9:01:E5 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 01C3 Signing time: Sat 31 May 2025 02:45:48 +0000 Manifest this update: Sat 31 May 2025 02:45:47 +0000 Manifest next update: Sat 07 Jun 2025 02:45:47 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: rRLvfXIRau+zuLcVgqcz1VnLlAh7h0gAQdbZ4rJ7KAE=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: hWCgt4KmPIBt7/S3B9mMUj5grxgOnMh8nytxnRCNTBY=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: 1lAGETSydBwVjG0hesN1/ViGN9eOR/26uzUYMFoxaT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: May 31 02:45:47 2025 GMT Not After : Jun 7 02:45:47 2025 GMT Subject: CN=683a6d5b-42cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:df:65:fb:70:5e:72:a1:7b:36:71:6b:f8:3b: 5c:ff:5c:da:70:c4:45:95:66:82:19:05:36:15:c6: 97:e4:d6:2a:12:de:b2:cc:7b:0e:5c:78:b1:19:0a: 98:7d:77:83:47:8d:d5:13:6c:c4:4e:01:50:22:05: 72:8c:95:3b:f0:42:bb:00:b5:b3:1f:78:a1:dc:62: 1b:78:cd:4a:c3:a9:8f:a7:23:5e:3c:ec:23:dc:4e: f5:d1:ef:98:3c:51:ba:25:7e:1e:ea:a5:f6:ca:59: 44:ef:d6:05:c2:d9:ae:b3:fe:ab:5a:68:f3:b1:7e: da:47:27:06:03:43:30:a3:b8:01:38:58:13:4d:8c: f5:c0:a7:8d:9f:d7:18:7d:4b:3e:38:8d:76:6a:39: d0:4a:2d:20:c9:f1:4b:a3:33:20:36:88:6e:3a:20: d7:69:84:3a:82:ab:66:bb:11:6c:42:41:8f:90:6a: bf:08:66:91:85:a8:7f:d3:f9:b2:cb:04:d2:db:59: ee:a3:ee:f0:31:95:f9:90:56:8e:84:a5:0a:f5:59: 79:71:7a:41:bb:34:52:57:c2:84:31:c3:35:0b:5c: ac:d3:bb:1a:a3:2c:2b:63:f4:9a:18:ec:10:ff:35: 5e:db:ae:64:0c:73:28:22:6f:ba:42:cb:24:a3:f4: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:E1:3E:56:6B:E2:3B:6D:C6:3D:9E:B5:A5:30:A4:05:E9:01:E5 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b1:69:18:a4:68:56:15:6f:eb:6e:1e:71:00:13:10:6b:71: 9f:8d:fd:e7:da:19:b2:57:a3:04:95:7f:42:04:bb:48:fc:1b: 34:d9:da:ad:f3:98:b1:27:14:10:c4:6a:0a:b2:d9:6c:80:36: 13:af:16:6f:38:fb:a9:44:ce:e0:83:ce:ce:77:cd:e7:0d:3d: 56:87:2e:ac:79:98:f2:19:1e:cc:a8:73:53:10:0f:a4:e2:d4: d4:3f:78:eb:27:8c:26:b8:c3:9e:12:da:d2:0f:de:ba:70:e0: ec:5d:c9:d2:03:f7:f0:07:02:5b:7c:25:31:89:5c:0e:95:2c: fa:1d:c3:57:45:e3:68:9a:6f:8f:0f:eb:0f:72:df:d6:e9:13: 79:57:5b:49:c0:0f:a8:6e:cc:ae:56:11:c3:86:4d:dd:70:69: ee:41:e3:90:94:a7:fb:04:34:9d:e2:d1:1c:ae:b2:9c:ff:c4: fb:62:ef:fd:21:6f:c5:4b:03:29:0b:6d:2b:ac:c9:f7:b9:33: 0e:71:91:9c:2f:97:56:f6:ea:7f:8c:ce:f4:f3:fd:f4:17:6e: 12:10:a8:14:2c:c5:33:d2:9c:7b:b1:ef:f9:d8:e3:f4:1c:9b: 66:1f:ac:f8:a5:30:81:ee:dd:c7:96:5a:54:ab:3b:88:36:62: 2d:ec:0d:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUwNTMxMDI0NTQ3WhcNMjUwNjA3MDI0NTQ3WjAYMRYwFAYD VQQDEw02ODNhNmQ1Yi00MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd9l+3BecqF7NnFr+Dtc/1zacMRFlWaCGQU2FcaX5NYqEt6yzHsOXHixGQqY fXeDR43VE2zETgFQIgVyjJU78EK7ALWzH3ih3GIbeM1Kw6mPpyNePOwj3E710e+Y PFG6JX4e6qX2yllE79YFwtmus/6rWmjzsX7aRycGA0Mwo7gBOFgTTYz1wKeNn9cY fUs+OI12ajnQSi0gyfFLozMgNohuOiDXaYQ6gqtmuxFsQkGPkGq/CGaRhah/0/my ywTS21nuo+7wMZX5kFaOhKUK9Vl5cXpBuzRSV8KEMcM1C1ys07saoywrY/SaGOwQ /zVe265kDHMoIm+6Qssko/QNPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqu4T5W a+I7bcY9nrWlMKQF6QHlMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAasWkYpGhWFW/rbh5xABMQa3Gfjf3n2hmyV6MElX9CBLtI/Bs02dqt 85ixJxQQxGoKstlsgDYTrxZvOPupRM7gg87Od83nDT1Why6seZjyGR7MqHNTEA+k 4tTUP3jrJ4wmuMOeEtrSD966cODsXcnSA/fwBwJbfCUxiVwOlSz6HcNXReNomm+P D+sPct/W6RN5V1tJwA+obsyuVhHDhk3dcGnuQeOQlKf7BDSd4tEcrrKc/8T7Yu/9 IW/FSwMpC20rrMn3uTMOcZGcL5dW9up/jM708/30F24SEKgULMUz0px7se/52OP0 HJtmH6z4pTCB7t3HllpUqzuINmIt7A22 -----END CERTIFICATE-----Generated at Sat May 31 17:31:58 2025 by rpki-client