$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json) Hash identifier: EHLf8VejnlbGdNTioy/5SM8xrEkIpJP59XGYwv7mvEM= Subject key identifier: A5:33:A2:72:B2:04:93:69:D2:6F:61:8D:31:33:DD:EF:88:74:0B:C4 Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Certificate serial: 1485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft Manifest number: 147C Signing time: Fri 30 May 2025 17:04:18 +0000 Manifest this update: Fri 30 May 2025 17:04:18 +0000 Manifest next update: Fri 06 Jun 2025 17:04:18 +0000 Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: Tvjr6morYI076D+aCGVHs+Xc/aJwMOZCv2VvDfCwpH4=) 2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mkbx/bzyF+QWS8oqI8XyH1scPq9ynG9SZktcZG6GCNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5253 (0x1485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Validity Not Before: May 30 17:04:18 2025 GMT Not After : Jun 6 17:04:18 2025 GMT Subject: CN=6839e512-e902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:be:d9:7b:9a:e3:2b:70:e3:e1:0e:e7:75: 07:4a:8b:8f:65:16:dd:ba:d5:7a:82:92:7b:15:2f: e5:96:76:8f:a0:cc:6d:1b:bf:25:8d:8a:74:dc:97: 8d:e7:00:43:40:d8:4a:0e:1f:84:f2:84:d7:af:9c: 4f:2c:8a:25:82:cb:da:9f:1a:88:8e:80:5c:dc:04: 45:ab:4a:95:51:7c:67:5c:b4:1e:a8:84:28:8d:94: 5e:a4:4d:da:87:2e:e3:98:4b:66:59:ee:5f:72:d1: d4:c6:5f:f1:8d:f5:f0:d4:6b:2d:05:4c:16:8e:c7: 12:de:58:a6:4b:2a:b7:6c:82:af:1e:42:41:33:47: d4:13:e9:c5:96:68:8a:9d:be:de:2c:af:87:e6:1d: 7f:d1:8e:b6:4e:9a:94:ff:69:a7:60:09:e5:6d:54: 54:ac:c3:cc:41:9e:d8:b9:da:c7:08:ac:89:ab:29: 2c:bd:31:1a:22:00:30:8c:e7:e4:16:5f:f6:f0:97: 4a:5a:49:21:ad:bc:7c:4f:6e:6a:e2:46:f9:22:dc: f5:00:6b:79:a7:d6:38:98:c6:57:43:0b:c0:51:04: 63:5e:85:7b:45:70:38:80:41:d4:57:bf:72:3b:22: d5:9a:a0:51:67:03:af:57:05:c8:24:fe:9c:cf:94: 9a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:33:A2:72:B2:04:93:69:D2:6F:61:8D:31:33:DD:EF:88:74:0B:C4 X509v3 Authority Key Identifier: keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:3b:ca:8c:c2:ca:3b:57:a5:64:ed:7b:0b:d3:a8:7c:4d: 51:35:b3:39:10:07:40:ac:66:b3:08:1d:45:ce:9a:75:68:46: f1:74:72:8e:07:a3:26:1a:92:0d:a7:3c:18:8e:f2:5b:48:d1: 45:e5:79:43:58:09:01:96:dc:96:f3:d9:58:01:7d:a8:7c:65: 55:2b:00:d5:29:aa:7c:76:24:19:66:36:ab:5c:6c:61:fc:87: 49:e1:28:cc:0f:59:65:ed:dc:57:42:97:a8:30:a2:e2:04:ff: 95:3c:8e:f0:0a:b5:5c:f8:21:6a:c0:e5:45:b9:0b:4d:2c:34: f5:ab:4b:91:ed:2a:cc:52:b2:10:e0:04:58:b8:d3:75:74:50: 07:cd:98:73:50:c0:df:a7:67:e3:b5:c8:75:14:74:af:62:b2: 78:a7:42:95:93:98:51:84:73:ed:2f:69:4a:e1:09:69:1b:93: e9:6a:58:23:3c:13:74:3b:5c:e4:f4:c1:77:3f:d5:be:1b:96: be:37:32:42:78:47:3e:1f:23:9b:a4:8f:04:16:b2:57:f8:aa: f8:f0:8e:52:c0:50:01:01:ee:47:6c:21:63:4f:34:37:06:42: cf:5d:1d:fa:cb:62:c7:84:8e:a2:01:87:21:6a:ce:c1:f7:0e: 44:ad:16:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE OUU0MTlCNEYwHhcNMjUwNTMwMTcwNDE4WhcNMjUwNjA2MTcwNDE4WjAYMRYwFAYD VQQDEw02ODM5ZTUxMi1lOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAW+2Xua4ytw4+EO53UHSouPZRbdutV6gpJ7FS/llnaPoMxtG78ljYp03JeN 5wBDQNhKDh+E8oTXr5xPLIolgsvanxqIjoBc3ARFq0qVUXxnXLQeqIQojZRepE3a hy7jmEtmWe5fctHUxl/xjfXw1GstBUwWjscS3limSyq3bIKvHkJBM0fUE+nFlmiK nb7eLK+H5h1/0Y62TpqU/2mnYAnlbVRUrMPMQZ7YudrHCKyJqyksvTEaIgAwjOfk Fl/28JdKWkkhrbx8T25q4kb5Itz1AGt5p9Y4mMZXQwvAUQRjXoV7RXA4gEHUV79y OyLVmqBRZwOvVwXIJP6cz5SagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUzonKy BJNp0m9hjTEz3e+IdAvEMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9dDvKjMLKO1elZO17C9OofE1RNbM5EAdArGazCB1Fzpp1aEbxdHKO B6MmGpINpzwYjvJbSNFF5XlDWAkBltyW89lYAX2ofGVVKwDVKap8diQZZjarXGxh /IdJ4SjMD1ll7dxXQpeoMKLiBP+VPI7wCrVc+CFqwOVFuQtNLDT1q0uR7SrMUrIQ 4ARYuNN1dFAHzZhzUMDfp2fjtch1FHSvYrJ4p0KVk5hRhHPtL2lK4QlpG5Ppalgj PBN0O1zk9MF3P9W+G5a+NzJCeEc+HyObpI8EFrJX+Kr48I5SwFABAe5HbCFjTzQ3 BkLPXR36y2LHhI6iAYchas7B9w5ErRYH -----END CERTIFICATE-----Generated at Sat May 31 16:59:20 2025 by rpki-client