$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json) Hash identifier: /myp4057nywQjJhtXHqb2QU9g5awXYLMjnwCwDSkwDU= Subject key identifier: 1C:27:31:DB:0A:5E:4D:A1:8D:30:53:62:9F:19:71:DD:2C:A8:E3:54 Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2F20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft Manifest number: 2F0D Signing time: Sat 31 May 2025 15:27:33 +0000 Manifest this update: Sat 31 May 2025 15:27:33 +0000 Manifest next update: Sat 07 Jun 2025 15:27:33 +0000 Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: QUA3H5k20BUMbnj1YgyEdiMP0eCgyBfRC+NFmPJNttU=) 2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12064 (0x2f20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Validity Not Before: May 31 15:27:33 2025 GMT Not After : Jun 7 15:27:33 2025 GMT Subject: CN=683b1fe5-a0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:fa:7b:2e:15:0a:5b:24:65:f8:2b:b0:20: e0:67:d3:14:e8:3b:53:30:02:29:30:b6:b1:51:90: ae:4e:72:a3:5d:0c:15:41:0c:52:b1:da:b1:4b:77: 49:99:6b:29:1f:ff:4b:60:68:bc:1d:34:41:53:e7: 41:a7:f0:32:ad:90:14:02:4b:fa:bd:99:6a:0b:bb: 79:b1:fc:c5:14:82:b2:d7:73:ff:5c:6f:d5:f2:95: 65:8c:1b:ad:91:33:c3:b9:57:aa:f1:b8:f2:2a:b4: 93:5c:b2:03:c7:d3:48:13:dd:07:4f:26:da:e2:7c: 8a:10:f4:4c:35:98:90:f9:54:e6:86:f6:21:d4:0e: a4:94:8e:53:6f:de:82:be:41:03:82:9a:83:e4:1e: 48:c0:c1:ce:a2:2d:3e:52:c4:df:db:e3:fd:46:51: 4d:cb:88:9a:b7:da:13:f8:2b:03:0c:2b:01:4c:2f: 67:4e:e6:d9:a8:59:f1:98:ea:ce:9c:6c:f2:63:ca: 72:81:e6:f5:3b:6b:05:cb:a7:44:17:98:88:e0:7b: 39:6f:b8:05:e9:ea:21:ec:05:94:50:cc:7a:ae:9a: 17:c6:06:d4:8a:3a:13:4c:b6:40:62:ac:70:1b:6a: 81:93:7d:fc:18:de:aa:ba:c7:9d:7a:93:a0:35:8e: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:27:31:DB:0A:5E:4D:A1:8D:30:53:62:9F:19:71:DD:2C:A8:E3:54 X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:65:fc:dd:bb:ed:f8:61:e2:13:15:91:d0:68:63:96:45:7e: 15:3e:ab:fc:f4:b5:75:e3:40:61:6b:86:87:14:f5:0c:67:06: 98:57:1b:3e:f9:84:75:e2:99:e2:9f:a6:4c:cc:74:61:d6:b7: e7:7a:cd:f2:6d:59:c5:ea:7d:3a:aa:fe:41:92:5e:09:6f:f6: c5:d9:db:c0:da:6c:84:d6:4d:bd:96:a5:80:a4:96:32:5e:45: ea:6d:0f:3a:ad:7c:7f:79:8d:ee:b6:da:4f:d0:ed:1f:69:10: 94:9e:f9:5c:b4:94:e9:6f:5f:f9:33:d0:e0:81:9b:cd:3b:c5: 3f:05:bb:f6:12:29:c3:47:f4:90:ee:24:25:f0:e4:2f:53:2a: 77:d3:8d:b8:6e:e0:55:eb:9a:76:59:ff:3a:fa:b0:2b:67:09: b9:cf:4d:76:d0:69:47:72:2b:81:e1:5c:db:23:f4:50:21:d6: c3:1d:41:fd:64:76:c8:a0:44:7e:6a:5c:84:0b:a0:fb:e6:4a: f4:96:e0:fa:af:e4:02:c0:f1:c5:74:13:14:fc:7e:6c:e2:52: 68:fc:4e:21:2b:fc:cf:a9:24:25:cd:db:3a:9c:25:98:73:39: 49:7e:6d:62:92:6d:b8:4a:7a:3a:ec:db:ef:94:d6:66:4a:d1: 37:56:ee:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjUwNTMxMTUyNzMzWhcNMjUwNjA3MTUyNzMzWjAYMRYwFAYD VQQDEw02ODNiMWZlNS1hMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunv6ey4VClskZfgrsCDgZ9MU6DtTMAIpMLaxUZCuTnKjXQwVQQxSsdqxS3dJ mWspH/9LYGi8HTRBU+dBp/AyrZAUAkv6vZlqC7t5sfzFFIKy13P/XG/V8pVljBut kTPDuVeq8bjyKrSTXLIDx9NIE90HTyba4nyKEPRMNZiQ+VTmhvYh1A6klI5Tb96C vkEDgpqD5B5IwMHOoi0+UsTf2+P9RlFNy4iat9oT+CsDDCsBTC9nTubZqFnxmOrO nGzyY8pygeb1O2sFy6dEF5iI4Hs5b7gF6eoh7AWUUMx6rpoXxgbUijoTTLZAYqxw G2qBk338GN6qusedepOgNY697QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwnMdsK Xk2hjTBTYp8Zcd0sqONUMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmZfzdu+34YeITFZHQaGOWRX4VPqv89LV140Bha4aHFPUMZwaYVxs+ +YR14pnin6ZMzHRh1rfnes3ybVnF6n06qv5Bkl4Jb/bF2dvA2myE1k29lqWApJYy XkXqbQ86rXx/eY3uttpP0O0faRCUnvlctJTpb1/5M9DggZvNO8U/Bbv2EinDR/SQ 7iQl8OQvUyp30424buBV65p2Wf86+rArZwm5z0120GlHciuB4VzbI/RQIdbDHUH9 ZHbIoER+alyEC6D75kr0luD6r+QCwPHFdBMU/H5s4lJo/E4hK/zPqSQlzds6nCWY czlJfm1ikm24Sno67NvvlNZmStE3Vu6p -----END CERTIFICATE-----Generated at Sat May 31 17:42:42 2025 by rpki-client