$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: gQG6H00ElVCtAF2WNRhlBfk7a8oaEjcqQRFIx7yTK/E= Subject key identifier: 76:BC:2D:87:0E:B2:EA:18:09:74:B9:F8:EE:FD:A1:8B:F2:C8:C6:1F Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 3492 Signing time: Fri 30 May 2025 15:24:35 +0000 Manifest this update: Fri 30 May 2025 15:24:34 +0000 Manifest next update: Fri 06 Jun 2025 15:24:34 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: wqPLEukqgDLAgIWz02ppVwuwa4cI0AW6kgwFBVGOK4I=) 2: 2417A16240D111EEB97F9366C4F9AE02.roa (hash: 5HxbfCADS0YE8zgWBNeHaLAjeMofIFQYhkC/UJjBOds=) 3: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: qoJIoB5IZhCrFKoONH6w1qM5F//MbDhtykwiUAx2/AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: May 30 15:24:34 2025 GMT Not After : Jun 6 15:24:34 2025 GMT Subject: CN=6839cdb3-f7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:14:d8:4d:fb:73:52:21:a2:34:a9:b0:ae: 9c:92:41:2f:e9:28:8c:10:17:c1:f4:7f:96:c6:78: 2e:9f:30:a4:cd:af:d5:42:1b:2b:79:f7:0a:6e:1e: 1f:eb:d0:c8:0e:c1:1a:52:a1:bf:3f:84:be:f0:e5: ab:40:45:43:5d:e2:42:da:3d:66:17:59:74:9a:d6: 7c:65:db:e8:16:64:2a:bd:a8:82:37:2f:f6:f3:25: 7c:c1:cc:16:03:2a:c8:8d:07:85:d3:ba:b6:fb:b9: 56:39:e2:c9:55:d3:12:33:46:67:64:b3:d2:4a:32: 2a:97:87:08:17:41:5f:4e:8b:c0:26:9c:2c:56:ea: 26:78:c9:be:52:f1:3e:45:0a:55:de:12:a2:e6:55: 0c:cc:b8:b8:f3:0d:d2:85:00:33:38:2c:21:3d:05: 78:ad:5d:ca:bb:69:e1:af:26:0b:84:74:ed:26:f2: 04:d7:a3:56:ef:72:05:54:e6:21:93:fb:7f:06:39: c4:72:4c:3e:05:01:9c:50:3a:96:03:97:cf:e1:61: 20:55:e4:1c:6c:64:e8:45:13:1a:f3:8f:af:9d:e9: b4:97:2c:c7:ac:89:d0:a3:cc:ae:78:19:9a:ee:37: 5e:18:ee:e4:0f:8b:43:01:44:95:58:86:ea:2b:c4: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BC:2D:87:0E:B2:EA:18:09:74:B9:F8:EE:FD:A1:8B:F2:C8:C6:1F X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a1:68:e6:c3:90:93:d3:a3:74:d0:5b:17:00:a2:33:79:66: 41:82:47:97:e8:57:20:0c:8c:ea:98:f2:e0:01:40:45:9d:33: f8:9e:59:6f:13:f2:75:ec:81:69:54:04:74:7b:05:e3:01:e5: b2:0d:87:71:d1:28:9e:70:c7:c6:5b:48:a7:a1:b3:24:d4:22: 79:12:84:1d:44:dc:b8:e6:1f:1b:b5:19:e7:c9:7a:b8:cb:9b: df:17:ef:f8:d0:ba:be:13:60:47:cc:1a:74:03:f6:d9:41:1d: d7:db:e1:ea:da:8a:27:00:e4:fd:b3:f0:be:07:da:40:6a:a4: d5:b3:db:b5:b2:13:b1:df:6e:a2:2b:ce:2a:6f:2f:eb:49:27: 6f:8a:2f:42:35:9d:46:de:8f:34:2b:fc:b8:1b:b2:76:8c:1b: 82:fc:a2:74:58:9f:80:37:5c:56:11:4c:08:f2:8d:12:55:e6: 89:b2:b4:0a:10:66:4f:f1:da:96:34:75:74:a8:47:4f:01:b3: a8:cc:40:dd:d0:01:4a:ef:92:3e:c9:ad:72:cb:28:c1:34:d9: 7e:85:e9:6e:fe:23:2d:b7:00:35:e9:df:97:91:83:06:8b:c1: 56:9c:6f:bb:34:4c:c7:55:2e:fd:c8:5d:9e:44:8e:f1:73:7f: 2a:87:f8:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUwNTMwMTUyNDM0WhcNMjUwNjA2MTUyNDM0WjAYMRYwFAYD VQQDEw02ODM5Y2RiMy1mN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/YU2E37c1IhojSpsK6ckkEv6SiMEBfB9H+WxngunzCkza/VQhsrefcKbh4f 69DIDsEaUqG/P4S+8OWrQEVDXeJC2j1mF1l0mtZ8ZdvoFmQqvaiCNy/28yV8wcwW AyrIjQeF07q2+7lWOeLJVdMSM0ZnZLPSSjIql4cIF0FfTovAJpwsVuomeMm+UvE+ RQpV3hKi5lUMzLi48w3ShQAzOCwhPQV4rV3Ku2nhryYLhHTtJvIE16NW73IFVOYh k/t/BjnEckw+BQGcUDqWA5fP4WEgVeQcbGToRRMa84+vnem0lyzHrInQo8yueBma 7jdeGO7kD4tDAUSVWIbqK8TipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa8LYcO suoYCXS5+O79oYvyyMYfMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRoWjmw5CT06N00FsXAKIzeWZBgkeX6FcgDIzqmPLgAUBFnTP4nllv E/J17IFpVAR0ewXjAeWyDYdx0SiecMfGW0inobMk1CJ5EoQdRNy45h8btRnnyXq4 y5vfF+/40Lq+E2BHzBp0A/bZQR3X2+Hq2oonAOT9s/C+B9pAaqTVs9u1shOx326i K84qby/rSSdvii9CNZ1G3o80K/y4G7J2jBuC/KJ0WJ+AN1xWEUwI8o0SVeaJsrQK EGZP8dqWNHV0qEdPAbOozEDd0AFK75I+ya1yyyjBNNl+helu/iMttwA16d+XkYMG i8FWnG+7NEzHVS79yF2eRI7xc38qh/jQ -----END CERTIFICATE-----Generated at Sat May 31 15:24:48 2025 by rpki-client