$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft File: jIdTtwqo02LsUz6Sfxlv62mbGF0.mft (raw, json) Hash identifier: OJk7TB55MNhHCpXdtTKqxIHLAJkJYZlcqRT62gnTjog= Subject key identifier: 1E:14:52:06:48:5A:1C:DD:4B:B0:BE:4F:77:CA:70:C1:81:B6:4F:33 Authority key identifier: 8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D Certificate issuer: /CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft Manifest number: 028E Signing time: Sat 31 May 2025 01:46:44 +0000 Manifest this update: Sat 31 May 2025 01:46:43 +0000 Manifest next update: Sat 07 Jun 2025 01:46:43 +0000 Files and hashes: 1: jIdTtwqo02LsUz6Sfxlv62mbGF0.crl (hash: zdoIMwLkJvqqs72SJeCKHTy98jLqBQhv3zN/lriP5Bo=) 2: 15920FC8380111F08B5A444DC4F9AE02.roa (hash: wxBRePCssOd58xYrGvHNVm/XauRd81h4lKDVyDyTr0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD5, serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D Validity Not Before: May 31 01:46:43 2025 GMT Not After : Jun 7 01:46:43 2025 GMT Subject: CN=683a5f83-e0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:5d:f8:d1:3c:18:3a:f9:8d:0f:19:cb:e5: bb:bd:77:6c:6d:aa:52:0e:54:14:78:65:9e:cb:a1: 70:2e:3b:83:e5:ab:cc:ac:5c:8c:dd:ea:46:93:f7: e7:42:b7:bc:b7:d4:c5:28:0a:c3:43:93:65:6f:16: 21:25:c4:39:18:22:56:10:4f:90:54:a8:aa:24:e2: 2a:38:fb:22:19:2c:b8:75:2a:bd:e3:d5:d2:a0:c7: a6:dd:70:bd:4e:a8:73:f5:68:c0:4e:34:a3:fd:f2: a5:e4:fa:4e:da:c6:ef:a0:ed:7f:7b:ca:f1:6b:b2: 91:e3:db:cb:00:81:95:ef:27:3c:ed:fa:a4:87:ce: c0:91:12:7e:25:88:ff:36:55:c3:8c:39:1e:cd:b2: d4:08:45:6b:e5:58:ae:25:a9:b4:8a:37:14:9d:04: 00:6b:3f:78:1c:01:bf:81:41:04:dd:b5:e3:07:fc: 67:3f:08:c4:92:94:67:c2:ba:eb:8a:a1:e6:1d:ce: 06:95:15:ff:02:79:8d:cf:fd:48:76:79:a5:28:93: 8f:89:ae:91:d6:8a:c0:83:74:37:8f:8e:d0:8c:68: 43:49:ae:16:f0:01:d4:e1:ed:73:14:25:7d:91:33: 2c:b7:a2:2e:ec:1b:a5:a1:66:55:62:4a:88:55:be: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:14:52:06:48:5A:1C:DD:4B:B0:BE:4F:77:CA:70:C1:81:B6:4F:33 X509v3 Authority Key Identifier: keyid:8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a3:08:29:7d:99:e7:a7:6b:11:db:68:5b:85:63:91:8a:b6: e1:4c:ce:a8:d9:a9:c5:cf:95:2d:05:f1:5a:d5:1b:67:02:30: de:73:03:89:2f:7b:7d:ff:3b:28:ed:16:41:75:90:71:74:db: 84:ef:fe:c6:c4:e2:35:be:98:d2:a6:c0:ee:0a:6c:90:f7:d7: 7c:8c:ac:5f:72:32:aa:98:21:a7:e6:8b:7a:d5:a3:71:bc:8f: 04:9b:67:0c:4e:a5:70:d3:8d:54:f5:2e:57:5d:78:b0:b6:4a: cd:c2:9a:95:fd:8e:6e:44:5a:8c:8d:5e:36:20:40:c2:27:60: fc:f9:c1:d7:04:22:f8:cc:c9:53:09:3a:a4:af:95:5d:ad:3d: ae:bc:6b:74:d7:ff:16:5b:fa:e0:c6:4d:71:d6:60:1e:38:39: 41:9d:60:76:03:80:13:fa:21:3a:c6:ce:8e:cb:ba:b1:66:e1: 75:45:1c:cf:2d:1b:43:8e:b6:c0:9a:73:fb:9d:73:70:eb:68: 94:c2:30:90:ed:bb:03:c9:ac:d8:46:f0:ae:3d:fc:9d:d9:02: 31:58:3b:03:2f:26:6d:14:34:f1:96:24:ce:5b:93:83:3a:15: 9b:ca:30:5b:10:cd:af:1c:52:83:4c:a6:cc:10:26:27:92:fb: 6f:f0:cd:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDUxMTAvBgNVBAUTKDhDODc1M0I3MEFBOEQzNjJFQzUzM0U5MjdGMTk2RkVC Njk5QjE4NUQwHhcNMjUwNTMxMDE0NjQzWhcNMjUwNjA3MDE0NjQzWjAYMRYwFAYD VQQDEw02ODNhNWY4My1lMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwztd+NE8GDr5jQ8Zy+W7vXdsbapSDlQUeGWey6FwLjuD5avMrFyM3epGk/fn Qre8t9TFKArDQ5NlbxYhJcQ5GCJWEE+QVKiqJOIqOPsiGSy4dSq949XSoMem3XC9 Tqhz9WjATjSj/fKl5PpO2sbvoO1/e8rxa7KR49vLAIGV7yc87fqkh87AkRJ+JYj/ NlXDjDkezbLUCEVr5ViuJam0ijcUnQQAaz94HAG/gUEE3bXjB/xnPwjEkpRnwrrr iqHmHc4GlRX/AnmNz/1IdnmlKJOPia6R1orAg3Q3j47QjGhDSa4W8AHU4e1zFCV9 kTMst6Iu7BuloWZVYkqIVb4G/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4UUgZI WhzdS7C+T3fKcMGBtk8zMB8GA1UdIwQYMBaAFIyHU7cKqNNi7FM+kn8Zb+tpmxhd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENS8yMDFFQjQzNDA1 QTgxMUVEODNGRDc0ODRDNEY5QUUwMi9qSWRUdHdxbzAyTHNVejZTZnhsdjYybWJH RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pJZFR0d3FvMDJMc1V6NlNmeGx2NjJtYkdGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENS8yMDFFQjQzNDA1QTgxMUVEODNGRDc0ODRDNEY5QUUwMi9qSWRUdHdxbzAy THNVejZTZnhsdjYybWJHRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIowgpfZnnp2sR22hbhWORirbhTM6o2anFz5UtBfFa1RtnAjDecwOJ L3t9/zso7RZBdZBxdNuE7/7GxOI1vpjSpsDuCmyQ99d8jKxfcjKqmCGn5ot61aNx vI8Em2cMTqVw041U9S5XXXiwtkrNwpqV/Y5uRFqMjV42IEDCJ2D8+cHXBCL4zMlT CTqkr5VdrT2uvGt01/8WW/rgxk1x1mAeODlBnWB2A4AT+iE6xs6Oy7qxZuF1RRzP LRtDjrbAmnP7nXNw62iUwjCQ7bsDyazYRvCuPfyd2QIxWDsDLyZtFDTxliTOW5OD OhWbyjBbEM2vHFKDTKbMECYnkvtv8M0v -----END CERTIFICATE-----Generated at Sat May 31 16:28:39 2025 by rpki-client