$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: AVUQHZbaBrg4A83sA24hhv/7l5ZF4e42D7nOE83TtbE= Subject key identifier: 10:14:3E:D6:BE:9E:51:0F:D1:1C:BB:B3:78:99:5F:D0:81:A9:7F:4E Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 03B0 Signing time: Sat 31 May 2025 00:55:21 +0000 Manifest this update: Sat 31 May 2025 00:55:20 +0000 Manifest next update: Sat 07 Jun 2025 00:55:20 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: i75eQ781UgKRGr+Zfkgr4xUlAAWhYWvXlalF704DAVw=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: May 31 00:55:20 2025 GMT Not After : Jun 7 00:55:20 2025 GMT Subject: CN=683a5378-9ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:3a:c5:be:07:52:14:b9:f7:9d:08:2f:c8: a5:9a:70:a8:f1:c2:cc:25:2a:e9:e4:f2:e9:b8:f9: ee:b3:a4:15:96:da:2b:e4:51:a0:26:b7:ea:4d:41: 67:1f:70:c6:4e:38:4d:0e:8d:eb:9f:9b:17:c2:5a: 2d:a3:fd:df:91:20:f5:d2:91:5e:d5:96:33:78:22: e5:a8:a5:99:4d:15:2f:c1:49:f8:57:e1:00:2f:38: ec:a8:b3:71:94:fd:f2:a7:c1:ce:32:ec:13:9a:21: 5a:03:c9:77:ed:66:88:12:18:0a:80:ba:c7:14:d3: 6b:be:68:07:69:67:52:7d:38:c2:5c:76:a1:28:3c: d6:47:cf:66:30:ed:47:d2:31:85:af:59:0d:61:88: 41:9d:88:2b:e3:71:6a:c9:99:62:5c:91:1a:fb:42: 53:bc:62:52:50:ae:c3:78:81:2c:ab:f0:e8:b7:ba: aa:c0:6c:22:67:75:a4:5d:9a:d6:85:d0:7c:ba:1d: 72:94:87:8b:04:56:eb:dd:1d:01:10:4b:94:96:00: 41:57:69:f3:1f:54:d2:16:71:00:76:55:ba:c7:6c: 94:81:47:96:cc:37:7d:cf:b4:0d:e5:cd:e6:b2:fa: 62:4f:78:19:cc:b6:e4:1d:05:37:08:2b:5d:ba:e2: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:3E:D6:BE:9E:51:0F:D1:1C:BB:B3:78:99:5F:D0:81:A9:7F:4E X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6a:ae:b7:67:9a:f6:c8:0a:29:93:42:54:82:0b:a1:1a:5e: 9e:db:9c:90:bc:24:79:36:3d:c6:5a:7d:27:65:8f:9d:c5:2f: 2c:91:71:50:08:9c:7f:61:65:4d:e0:31:d8:69:ab:54:f9:7c: f5:0d:a1:8c:1a:78:1e:bd:eb:97:9c:6f:ca:60:4d:55:f8:62: 0b:73:a2:4b:2f:07:df:0b:e9:b9:92:db:7a:51:d0:9b:79:08: 8f:b9:bf:6d:92:6f:f4:79:dc:83:0c:e9:5c:55:bf:9c:df:97: 94:f2:5a:93:5d:49:d8:20:7b:11:0f:26:c7:a2:af:ec:fb:71: 60:ec:e0:57:50:3b:d6:8f:55:7f:d8:a9:d3:3f:b0:be:4f:b6: fb:b0:26:8e:ec:fa:32:28:80:4d:99:18:28:ac:f0:96:9c:03: aa:20:dc:4b:b1:9e:19:41:af:23:3d:4a:9e:85:17:18:16:c6: 38:aa:f0:b4:09:b6:a6:45:05:5f:c5:78:4a:b9:56:b1:e3:13: ce:47:48:9d:2b:83:65:42:4f:77:2e:1a:f4:2e:9c:d7:bf:0f: 6a:f8:10:2e:8d:94:cd:92:cf:b9:3d:eb:67:14:94:35:c1:65: c8:64:85:d3:1b:7f:4f:11:3f:23:f9:00:c2:f1:f0:d3:b0:b8: fa:d8:6d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwNTMxMDA1NTIwWhcNMjUwNjA3MDA1NTIwWjAYMRYwFAYD VQQDEw02ODNhNTM3OC05Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYo6xb4HUhS5950IL8ilmnCo8cLMJSrp5PLpuPnus6QVltor5FGgJrfqTUFn H3DGTjhNDo3rn5sXwloto/3fkSD10pFe1ZYzeCLlqKWZTRUvwUn4V+EALzjsqLNx lP3yp8HOMuwTmiFaA8l37WaIEhgKgLrHFNNrvmgHaWdSfTjCXHahKDzWR89mMO1H 0jGFr1kNYYhBnYgr43FqyZliXJEa+0JTvGJSUK7DeIEsq/Dot7qqwGwiZ3WkXZrW hdB8uh1ylIeLBFbr3R0BEEuUlgBBV2nzH1TSFnEAdlW6x2yUgUeWzDd9z7QN5c3m svpiT3gZzLbkHQU3CCtduuK8mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAUPta+ nlEP0Ry7s3iZX9CBqX9OMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5aq63Z5r2yAopk0JUgguhGl6e25yQvCR5Nj3GWn0nZY+dxS8skXFQ CJx/YWVN4DHYaatU+Xz1DaGMGngeveuXnG/KYE1V+GILc6JLLwffC+m5ktt6UdCb eQiPub9tkm/0edyDDOlcVb+c35eU8lqTXUnYIHsRDybHoq/s+3Fg7OBXUDvWj1V/ 2KnTP7C+T7b7sCaO7PoyKIBNmRgorPCWnAOqINxLsZ4ZQa8jPUqehRcYFsY4qvC0 CbamRQVfxXhKuVax4xPOR0idK4NlQk93Lhr0LpzXvw9q+BAujZTNks+5PetnFJQ1 wWXIZIXTG39PET8j+QDC8fDTsLj62G35 -----END CERTIFICATE-----Generated at Sat May 31 17:08:49 2025 by rpki-client