$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: LxlA4b7/ZQONDl6Ei2xEOoQIqMZlgjU+yTN736t2f28= Subject key identifier: 4B:29:1E:CE:8F:A8:F2:BD:40:80:69:8C:A6:B6:5B:0A:40:A3:F4:05 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0CEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0CD8 Signing time: Fri 30 May 2025 18:19:22 +0000 Manifest this update: Fri 30 May 2025 18:19:22 +0000 Manifest next update: Fri 06 Jun 2025 18:19:22 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: rp0ZK1MY9FD0xLTlTRJWc/CziCTE1bEsxiriJBlYggk=) 2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: mgW7VeujR3wQCY2FOQTLD+1AfxSaJAkPmJmO0oMCuHQ=) 3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: rybbZdEyPr2dvKbIGHG7PjXC8DWgHoGfpQtIcH3SNoo=) 4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: adFrZ9wVUFL/q70xYlPOLV2jTwKmfI9/GoGFtthCxcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3307 (0xceb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: May 30 18:19:22 2025 GMT Not After : Jun 6 18:19:22 2025 GMT Subject: CN=6839f6aa-59ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:aa:bc:03:bd:25:9c:14:a5:31:6e:b3:1b: f2:f6:04:d0:6c:aa:62:8f:90:7b:d0:2e:a4:fc:69: 9d:3d:cc:6e:e8:19:90:38:94:03:3a:e8:d7:d0:36: f5:9f:07:b4:c9:4d:fe:02:9c:bf:7d:2a:64:82:ca: 0f:0e:03:e3:9c:a0:03:0d:dd:2a:91:0a:c0:82:b4: 3c:78:2a:d3:48:c1:4e:3c:8a:4c:98:fc:1b:e5:c7: ee:c4:cc:9c:f7:d9:7d:1e:7c:66:67:39:eb:1a:d5: 7d:4a:08:3c:bb:5c:5d:18:5e:c1:c0:56:30:b0:07: d9:3e:a3:0c:5c:d4:1b:53:3c:1c:d7:a5:e9:8f:e6: 86:84:91:65:4c:30:4c:44:84:9e:a4:2a:c9:9c:0f: 98:ee:16:69:4a:72:8b:7a:33:60:02:4e:e1:f8:f1: ff:eb:cc:ec:d1:84:73:0c:41:3f:02:9b:a5:fa:bb: 67:02:b1:89:b0:dd:0e:25:d9:d3:22:49:37:ad:28: ec:7f:cc:3e:5c:94:c8:a5:27:14:14:e2:d7:6c:78: 57:25:76:5e:b2:d5:e5:5a:4f:bd:4a:28:f3:f3:50: 6f:75:cd:bd:e0:b4:b1:f2:7b:d9:00:0b:8f:ac:b3: 0b:67:54:23:04:5f:f8:64:80:74:14:0f:76:4f:df: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:1E:CE:8F:A8:F2:BD:40:80:69:8C:A6:B6:5B:0A:40:A3:F4:05 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f5:00:9b:26:aa:84:de:8e:51:20:21:80:1c:a3:4e:63:67: f2:17:0d:9b:11:a3:f1:1e:ce:1e:bc:35:bb:4c:0e:f9:fd:3d: 21:8e:bf:f6:1e:37:7e:07:5c:4e:2c:a8:37:e3:c5:4a:b8:ea: b1:c2:46:a2:3a:49:48:8f:c6:b2:2f:95:1d:4d:af:36:8a:57: c4:7c:25:b4:e0:eb:1f:73:ba:c4:1e:33:35:32:68:4c:aa:10: a3:72:a7:6c:f8:cd:6f:ac:d9:45:79:e6:cc:db:de:fe:1b:10: c9:60:f3:06:39:fc:3d:ee:b0:5f:7f:9f:03:29:a9:b9:cc:b7: 47:82:1a:47:d5:c4:88:31:28:ee:ca:71:5a:5b:00:38:35:5a: 85:47:f3:ca:c9:1f:de:14:1e:62:2d:36:8c:90:9c:65:c7:53: bb:b2:e6:f9:32:7e:ba:ec:c5:34:fd:50:22:c2:c6:fe:0c:3a: 8b:bc:20:48:85:44:07:6b:67:14:fd:b7:01:33:41:f7:20:0d: 97:d8:5e:f1:58:9d:7a:70:fd:e2:be:ec:06:ed:ce:95:9d:de: 16:5e:a8:47:7d:bd:d8:1e:60:0c:e7:94:4d:19:20:17:47:a0: 32:83:40:43:96:4b:d8:98:0c:c3:54:30:fa:16:67:87:db:24: ea:6b:ed:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjUwNTMwMTgxOTIyWhcNMjUwNjA2MTgxOTIyWjAYMRYwFAYD VQQDEw02ODM5ZjZhYS01OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1peqvAO9JZwUpTFusxvy9gTQbKpij5B70C6k/GmdPcxu6BmQOJQDOujX0Db1 nwe0yU3+Apy/fSpkgsoPDgPjnKADDd0qkQrAgrQ8eCrTSMFOPIpMmPwb5cfuxMyc 99l9HnxmZznrGtV9Sgg8u1xdGF7BwFYwsAfZPqMMXNQbUzwc16Xpj+aGhJFlTDBM RISepCrJnA+Y7hZpSnKLejNgAk7h+PH/68zs0YRzDEE/Apul+rtnArGJsN0OJdnT Ikk3rSjsf8w+XJTIpScUFOLXbHhXJXZestXlWk+9Sijz81Bvdc294LSx8nvZAAuP rLMLZ1QjBF/4ZIB0FA92T99qmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEspHs6P qPK9QIBpjKa2WwpAo/QFMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD9QCbJqqE3o5RICGAHKNOY2fyFw2bEaPxHs4evDW7TA75/T0hjr/2 Hjd+B1xOLKg348VKuOqxwkaiOklIj8ayL5UdTa82ilfEfCW04Osfc7rEHjM1MmhM qhCjcqds+M1vrNlFeebM297+GxDJYPMGOfw97rBff58DKam5zLdHghpH1cSIMSju ynFaWwA4NVqFR/PKyR/eFB5iLTaMkJxlx1O7sub5Mn667MU0/VAiwsb+DDqLvCBI hUQHa2cU/bcBM0H3IA2X2F7xWJ16cP3ivuwG7c6Vnd4WXqhHfb3YHmAM55RNGSAX R6Ayg0BDlkvYmAzDVDD6FmeH2yTqa+1s -----END CERTIFICATE-----Generated at Sat May 31 17:24:49 2025 by rpki-client