$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: 54POMKHLGyMkStbqN4g7kk69Yj+wZ+GeoJnPK0Q6xIg= Subject key identifier: 1E:19:7F:EF:55:A7:F3:F0:01:4A:86:F4:F9:A2:2B:69:65:90:2A:40 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 349C Signing time: Fri 30 May 2025 15:22:02 +0000 Manifest this update: Fri 30 May 2025 15:22:01 +0000 Manifest next update: Fri 06 Jun 2025 15:22:01 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: chgJRGGS5SKipIMVWdITuuKhUrsPul+XFS6RQKMFNn4=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: May 30 15:22:01 2025 GMT Not After : Jun 6 15:22:01 2025 GMT Subject: CN=6839cd19-fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:67:b3:37:d7:c6:71:02:cd:02:0a:ae:12: 55:43:eb:9e:bc:8e:76:04:43:ad:9d:c5:dc:b1:2e: ba:a5:18:46:58:5d:dc:e9:35:b2:b7:4a:4e:da:88: 8f:7c:47:0c:ff:38:b2:10:e9:2f:a6:7e:0b:e8:a7: d5:2e:d7:19:42:f4:54:83:32:79:78:39:62:c3:9c: 51:ce:dc:35:4d:9f:42:95:7f:98:6b:84:69:da:5b: 75:ac:7f:36:c6:01:13:96:d1:72:9f:4f:8c:07:55: 8c:0c:8a:22:62:fa:d5:70:50:4d:2e:8a:4e:98:70: 15:3a:d4:e0:6c:a5:a8:77:33:59:cd:cf:2e:f9:ee: af:49:a6:f4:5d:37:89:15:8f:cb:f9:ea:71:09:94: e5:cd:6c:1a:bd:d2:f7:75:8c:2b:68:d3:49:0e:c7: e3:64:54:a9:90:54:e2:35:90:18:45:96:ee:b9:2c: ee:b0:54:43:6f:6e:97:ee:0f:9a:47:1c:24:3e:ac: d0:ca:b9:9b:3b:9e:e1:e2:2f:c4:e7:76:51:e1:44: 30:c0:6b:93:b8:b1:86:1d:cb:0c:11:f4:27:ff:b9: 6c:c4:48:35:5b:ad:ae:81:a2:40:4d:4b:b9:a0:38: 66:77:50:e9:66:db:e4:fb:12:4a:0a:18:f6:39:19: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:7F:EF:55:A7:F3:F0:01:4A:86:F4:F9:A2:2B:69:65:90:2A:40 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:33:f1:34:64:47:d7:60:a0:32:c1:cf:fc:d8:15:94:90:5e: d1:bf:6d:ca:ec:dd:b2:d9:ea:28:83:30:32:f2:91:87:5b:b7: c8:2e:df:e0:f9:40:d1:86:7c:db:36:49:f0:e3:74:a6:ba:5e: cc:93:92:31:43:75:1c:32:ef:bd:2b:c0:ca:e0:d3:03:62:1b: 6d:b3:17:ed:1c:b0:2d:3b:d8:c2:9c:c3:18:ab:7f:2a:f9:b4: 65:a4:97:d7:1b:e6:b2:f6:dd:55:c7:c6:3c:af:09:34:cf:24: 63:b9:3e:c4:c5:37:1a:47:e2:7b:51:0d:5c:87:46:bc:2d:69: 30:1c:30:75:47:7c:1a:ad:4d:4d:2a:72:85:e2:24:7c:dd:61: ba:c6:ba:e8:72:02:18:6c:4c:1b:8a:42:d3:82:a0:c4:7e:e9: 60:6e:51:45:ba:db:4c:fc:6f:f4:ab:84:49:5a:f9:36:09:c0: 30:e6:df:58:f7:c9:b2:1d:a4:76:55:b3:66:dc:55:36:d0:30: b8:14:c3:4c:8c:b6:46:95:91:c9:46:c2:82:60:e2:49:aa:f7: 4d:f4:c9:49:bf:70:71:30:37:37:6a:40:75:7a:03:7c:75:88: 2b:3b:20:1e:b5:1c:79:90:ab:ca:dc:04:a5:9a:9b:6b:6e:8c: 60:89:2e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwNTMwMTUyMjAxWhcNMjUwNjA2MTUyMjAxWjAYMRYwFAYD VQQDEw02ODM5Y2QxOS1mYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq5nszfXxnECzQIKrhJVQ+uevI52BEOtncXcsS66pRhGWF3c6TWyt0pO2oiP fEcM/ziyEOkvpn4L6KfVLtcZQvRUgzJ5eDliw5xRztw1TZ9ClX+Ya4Rp2lt1rH82 xgETltFyn0+MB1WMDIoiYvrVcFBNLopOmHAVOtTgbKWodzNZzc8u+e6vSab0XTeJ FY/L+epxCZTlzWwavdL3dYwraNNJDsfjZFSpkFTiNZAYRZbuuSzusFRDb26X7g+a RxwkPqzQyrmbO57h4i/E53ZR4UQwwGuTuLGGHcsMEfQn/7lsxEg1W62ugaJATUu5 oDhmd1DpZtvk+xJKChj2ORlFyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4Zf+9V p/PwAUqG9PmiK2llkCpAMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMM/E0ZEfXYKAywc/82BWUkF7Rv23K7N2y2eoogzAy8pGHW7fILt/g +UDRhnzbNknw43Smul7Mk5IxQ3UcMu+9K8DK4NMDYhttsxftHLAtO9jCnMMYq38q +bRlpJfXG+ay9t1Vx8Y8rwk0zyRjuT7ExTcaR+J7UQ1ch0a8LWkwHDB1R3warU1N KnKF4iR83WG6xrrocgIYbEwbikLTgqDEfulgblFFuttM/G/0q4RJWvk2CcAw5t9Y 98myHaR2VbNm3FU20DC4FMNMjLZGlZHJRsKCYOJJqvdN9MlJv3BxMDc3akB1egN8 dYgrOyAetRx5kKvK3ASlmptrboxgiS56 -----END CERTIFICATE-----Generated at Sat May 31 17:10:16 2025 by rpki-client