$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: upICzDrQsa6yxncBM31+Ox7KA7bi33uG9xPlcQDzI34= Subject key identifier: 4B:13:86:29:19:41:48:83:15:D2:9A:E9:E3:74:95:C1:8D:71:28:9A Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 01B9 Signing time: Sat 31 May 2025 02:48:43 +0000 Manifest this update: Sat 31 May 2025 02:48:42 +0000 Manifest next update: Sat 07 Jun 2025 02:48:42 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: 6+tjJRvrkuiNqv6Y16gKXho6VwDJqCAMoxm5ZnWpv24=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: May 31 02:48:42 2025 GMT Not After : Jun 7 02:48:42 2025 GMT Subject: CN=683a6e0b-f26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:ca:e2:1a:b6:8b:6a:2a:db:1d:da:9e:79: a8:fb:a6:e6:39:ce:6d:f2:33:cf:f8:1c:73:f5:c6: 15:92:ff:6d:42:8d:9b:f0:e9:51:97:a9:7f:66:7e: 0b:ac:b9:5a:a1:c9:99:8b:80:70:67:0a:de:00:eb: 3e:66:a2:40:01:52:2b:cd:b6:98:60:00:93:3b:8b: a2:eb:06:5b:62:c9:e7:5c:4e:0b:27:1b:cb:6e:dd: 20:fc:bb:0d:58:15:57:69:8b:26:56:96:27:8f:d1: 0e:fc:e4:f0:9c:ea:83:29:cc:2d:c3:78:62:11:77: 6b:b9:18:52:68:bc:e6:5e:2d:bd:c4:55:be:05:f6: 06:c2:04:84:7d:d5:48:98:76:bf:b2:0e:f4:25:e3: a7:44:9e:14:c1:51:6c:d2:58:31:0a:57:c8:99:f4: 4c:da:53:08:38:d4:4e:9b:0e:b4:15:6a:ed:3d:8e: 8a:ff:ea:56:f8:ea:71:9f:76:8b:87:47:a5:fa:96: a2:7e:78:5a:8d:15:ab:a1:9b:5e:26:51:b6:e1:23: 6f:cc:57:d6:9a:7e:85:66:8e:6f:6a:88:74:73:c7: 01:cd:cc:ce:be:44:66:bf:6b:0b:c0:d4:f5:b7:ac: 67:38:ac:6a:6e:7a:7f:b0:79:26:d5:18:8d:47:68: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:13:86:29:19:41:48:83:15:D2:9A:E9:E3:74:95:C1:8D:71:28:9A X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:a3:b0:ed:ac:3c:f7:38:61:ab:77:22:a5:d4:50:11:a7: 5c:9e:23:02:b3:ed:bb:16:24:02:0e:fa:07:17:61:fa:7d:2d: 99:b0:bc:8d:14:97:cc:12:85:40:ad:6e:83:f5:08:8d:bf:65: ab:42:e1:e7:f3:e2:e6:7d:2c:44:ec:1b:5b:15:01:94:31:03: c7:d1:16:5c:30:9c:2c:9f:bd:59:8e:9c:ec:60:df:06:6a:b0: 45:a7:fb:8f:9a:45:22:11:ad:0c:ed:53:38:f5:31:0a:af:30: 8e:db:08:b3:36:38:3d:c5:50:cf:d1:b4:ae:a2:3d:69:30:2c: df:77:10:d6:f8:21:30:43:f6:56:d5:4c:9c:5b:e3:fd:bf:b2: 8d:cf:a3:df:74:a5:ff:79:59:c1:a9:df:b0:9e:f5:b0:52:79: 4e:14:bb:c8:cf:89:ec:e9:a0:cf:b3:d7:a3:ea:49:90:40:14: bd:c8:0f:c0:c3:b5:e8:23:27:4e:4d:f3:40:86:9a:d4:dd:95: 39:ec:26:8e:99:5b:7b:cb:f2:0a:1d:c9:2a:c0:94:6d:ab:46: 6a:70:b5:23:31:62:48:c0:18:7c:10:4f:52:f1:9a:8f:62:df: 40:d6:d0:bf:a9:0a:cc:f2:ab:bb:e8:e7:b0:31:b1:0b:50:e2: aa:3e:a0:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUwNTMxMDI0ODQyWhcNMjUwNjA3MDI0ODQyWjAYMRYwFAYD VQQDEw02ODNhNmUwYi1mMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsijK4hq2i2oq2x3annmo+6bmOc5t8jPP+Bxz9cYVkv9tQo2b8OlRl6l/Zn4L rLlaocmZi4BwZwreAOs+ZqJAAVIrzbaYYACTO4ui6wZbYsnnXE4LJxvLbt0g/LsN WBVXaYsmVpYnj9EO/OTwnOqDKcwtw3hiEXdruRhSaLzmXi29xFW+BfYGwgSEfdVI mHa/sg70JeOnRJ4UwVFs0lgxClfImfRM2lMIONROmw60FWrtPY6K/+pW+Opxn3aL h0el+paifnhajRWroZteJlG24SNvzFfWmn6FZo5vaoh0c8cBzczOvkRmv2sLwNT1 t6xnOKxqbnp/sHkm1RiNR2ji1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsThikZ QUiDFdKa6eN0lcGNcSiaMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaCqOw7aw89zhhq3cipdRQEadcniMCs+27FiQCDvoHF2H6fS2ZsLyN FJfMEoVArW6D9QiNv2WrQuHn8+LmfSxE7BtbFQGUMQPH0RZcMJwsn71ZjpzsYN8G arBFp/uPmkUiEa0M7VM49TEKrzCO2wizNjg9xVDP0bSuoj1pMCzfdxDW+CEwQ/ZW 1UycW+P9v7KNz6PfdKX/eVnBqd+wnvWwUnlOFLvIz4ns6aDPs9ej6kmQQBS9yA/A w7XoIydOTfNAhprU3ZU57CaOmVt7y/IKHckqwJRtq0ZqcLUjMWJIwBh8EE9S8ZqP Yt9A1tC/qQrM8qu76OewMbELUOKqPqDn -----END CERTIFICATE-----Generated at Sat May 31 17:57:45 2025 by rpki-client