$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft File: jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json) Hash identifier: PN/J5SwX5DZRjcM2qgtPm1caR7GdA8sA6DUG52VZITM= Subject key identifier: 29:93:94:7D:59:66:66:DD:D1:E4:DF:A3:E8:DB:F4:6B:F0:20:69:E0 Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6 Certificate issuer: /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft Manifest number: 0525 Signing time: Fri 30 May 2025 23:50:46 +0000 Manifest this update: Fri 30 May 2025 23:50:46 +0000 Manifest next update: Fri 06 Jun 2025 23:50:46 +0000 Files and hashes: 1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: aPyco7O+HTr83CnTil+l1jiUdW17a41U5P1XRsAxoV8=) 2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6 Validity Not Before: May 30 23:50:46 2025 GMT Not After : Jun 6 23:50:46 2025 GMT Subject: CN=683a4456-3a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:d2:19:d5:00:af:22:f1:34:f6:69:09:17: ca:4d:1e:a3:0a:e7:c8:cf:2b:77:ed:d7:63:8f:cf: f5:46:54:46:eb:4c:cf:84:55:6d:f5:6c:10:ae:72: 7d:b6:ff:a9:ad:c1:e0:4a:ba:7d:61:44:ab:f2:47: 08:84:43:00:08:00:16:de:e4:77:a1:ce:c2:8c:af: 24:52:81:a8:f9:b7:40:2c:10:3c:c9:2c:3f:75:9c: 24:be:11:7e:52:ee:78:31:28:20:4c:77:04:62:01: 5b:d7:5c:9e:7c:78:dd:a6:c1:d2:19:bf:ed:77:4c: 42:71:06:74:05:4c:23:d3:c2:07:0c:fc:51:28:ab: 19:b3:bc:5b:b9:c3:09:64:cb:ae:2b:6d:7c:c3:d3: 27:2a:ed:7e:07:df:51:64:e7:0c:ca:3a:bd:7d:31: 57:31:dc:1e:ff:24:df:b3:e0:93:1f:bf:02:71:9f: 0b:1b:69:aa:7a:d4:3c:76:40:fd:b7:f9:50:1c:8e: e2:3b:7e:a0:bb:12:51:1e:c4:d6:26:68:57:97:06: 54:91:2f:2d:17:c1:e2:93:a4:04:b3:21:c6:cf:a4: df:aa:da:e2:4b:a4:c7:63:d5:be:a1:cc:db:4a:1b: 7c:4d:4c:50:5f:be:19:93:3f:88:0a:57:b5:01:03: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:94:7D:59:66:66:DD:D1:E4:DF:A3:E8:DB:F4:6B:F0:20:69:E0 X509v3 Authority Key Identifier: keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:db:ed:31:3f:31:99:8b:34:d5:7b:22:7f:3f:5e:4c:e0:cd: 57:b4:fc:73:35:0f:3d:11:77:ba:58:c9:7f:df:89:7c:98:60: e6:94:6f:fb:2c:db:0c:49:7d:3f:bf:fd:a8:ec:d0:de:ad:0e: 5e:92:fb:af:e7:39:40:3c:43:c8:9f:67:ce:ea:14:67:fc:4a: 96:23:f4:f0:4c:db:99:a3:30:f9:c3:dc:4e:91:ca:4e:18:be: af:b9:4d:c4:9c:5a:1f:7c:ab:58:e4:0d:51:8c:e6:66:0a:8d: fb:44:15:d8:33:4b:11:08:5f:da:7f:4e:6f:c6:8e:00:94:aa: 7c:22:1c:c6:38:9d:32:5a:47:93:dd:42:0c:4a:7c:d9:ce:91: 32:2d:07:55:75:a4:7f:02:26:50:5c:59:6c:30:c0:be:28:d3: 0a:ed:eb:a4:37:62:73:3d:ce:2d:ee:0a:30:74:7a:b1:9a:c8: 14:a3:70:a2:26:cc:a4:74:d7:be:27:67:ef:7a:fc:78:f4:85: ea:91:53:5d:bc:2a:bb:12:89:f0:9c:0d:f7:83:6a:28:cc:45: 9e:31:3a:3a:26:ee:47:34:ec:d3:8c:46:ae:36:35:91:22:5c: 06:e9:59:a2:84:ec:ba:d0:28:84:c8:13:5c:72:d5:3c:ed:aa: fd:45:a7:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyOTAxMTAvBgNVBAUTKDhENUJBQjM3MENBOTJFNEY1RkQ3ODlGQzIyNzMzMTBG OUFFQTM4RjYwHhcNMjUwNTMwMjM1MDQ2WhcNMjUwNjA2MjM1MDQ2WjAYMRYwFAYD VQQDEw02ODNhNDQ1Ni0zYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4fSGdUAryLxNPZpCRfKTR6jCufIzyt37ddjj8/1RlRG60zPhFVt9WwQrnJ9 tv+prcHgSrp9YUSr8kcIhEMACAAW3uR3oc7CjK8kUoGo+bdALBA8ySw/dZwkvhF+ Uu54MSggTHcEYgFb11yefHjdpsHSGb/td0xCcQZ0BUwj08IHDPxRKKsZs7xbucMJ ZMuuK218w9MnKu1+B99RZOcMyjq9fTFXMdwe/yTfs+CTH78CcZ8LG2mqetQ8dkD9 t/lQHI7iO36guxJRHsTWJmhXlwZUkS8tF8Hik6QEsyHGz6TfqtriS6THY9W+oczb Sht8TUxQX74Zkz+ICle1AQO63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmTlH1Z Zmbd0eTfo+jb9GvwIGngMB8GA1UdIwQYMBaAFI1bqzcMqS5PX9eJ/CJzMQ+a6jj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzI5MC9GNjgxNDFFMDBC MDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExrOWYxNG44SW5NeEQ1cnFP UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdXJOd3lwTGs5ZjE0bjhJbk14RDVycU9QWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzI5MC9GNjgxNDFFMDBCMDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExr OWYxNG44SW5NeEQ1cnFPUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+2+0xPzGZizTVeyJ/P15M4M1XtPxzNQ89EXe6WMl/34l8mGDmlG/7 LNsMSX0/v/2o7NDerQ5ekvuv5zlAPEPIn2fO6hRn/EqWI/TwTNuZozD5w9xOkcpO GL6vuU3EnFoffKtY5A1RjOZmCo37RBXYM0sRCF/af05vxo4AlKp8IhzGOJ0yWkeT 3UIMSnzZzpEyLQdVdaR/AiZQXFlsMMC+KNMK7eukN2JzPc4t7gowdHqxmsgUo3Ci JsykdNe+J2fvevx49IXqkVNdvCq7EonwnA33g2oozEWeMTo6Ju5HNOzTjEauNjWR IlwG6VmihOy60CiEyBNcctU87ar9RaeR -----END CERTIFICATE-----Generated at Sat May 31 17:34:28 2025 by rpki-client