$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: xTrFM74fkNDMNwE70S7WUwkEhiNbAu2dyPEbiw12coc= Subject key identifier: DE:97:22:0E:D4:DD:CF:6C:8A:FD:CA:5F:59:CB:64:E7:2F:E4:3C:C9 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 0402 Signing time: Sat 31 May 2025 00:38:58 +0000 Manifest this update: Sat 31 May 2025 00:38:58 +0000 Manifest next update: Sat 07 Jun 2025 00:38:58 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: LnXBoikhCYCbM69nBgCBT8+Hn1vWkBNWsEEDNFGt7X4=) 2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=) 3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=) 4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: May 31 00:38:58 2025 GMT Not After : Jun 7 00:38:58 2025 GMT Subject: CN=683a4fa2-451a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:0f:fb:4a:4c:55:d0:5c:5e:05:9e:b4:99: 53:ed:6d:a4:d3:f6:40:26:55:20:bd:ba:2b:1c:af: 5a:99:d5:53:c9:34:2c:f4:04:f5:ab:74:f1:24:30: 22:3c:bf:90:59:22:16:6f:b8:10:7a:fa:b2:ec:e1: 3f:1b:52:07:0c:4e:82:c8:df:c8:ee:f5:0b:2a:56: 73:df:64:ad:9a:14:85:84:af:c4:f5:3f:63:f4:12: f6:6a:33:00:57:f7:10:2e:25:a0:be:7f:cd:7f:b3: 06:70:fd:bf:50:58:73:01:d0:b4:27:a5:51:15:da: 91:ac:5e:55:fb:26:d4:9b:15:8c:c7:b5:97:b1:b9: ef:ba:02:c3:f3:9d:b4:d5:b0:22:a4:0d:41:bc:ea: 4a:4c:dd:eb:d8:31:ae:21:31:6e:25:ef:0d:0d:c9: 7d:2d:07:71:94:ec:de:43:b1:b0:cb:0a:37:32:e6: bf:86:5f:bd:32:df:ab:47:4f:1e:94:4e:d8:2e:1f: 6b:8b:2b:6f:b5:4b:eb:db:69:8c:1a:cc:a9:90:07: 7e:03:ae:6c:8a:af:ce:08:fe:33:f2:96:6a:bf:7d: 74:84:24:4a:69:63:a2:85:82:9f:b1:93:38:a2:2a: 5e:06:8d:71:cf:ec:84:da:f4:c6:0d:70:36:85:a1: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:97:22:0E:D4:DD:CF:6C:8A:FD:CA:5F:59:CB:64:E7:2F:E4:3C:C9 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:28:d9:c8:23:87:5b:8a:2e:61:c8:c1:8e:86:d5:0b:e9:b2: 32:b6:22:ca:24:35:62:45:a2:70:84:95:51:91:7d:d7:36:57: a6:14:9f:8e:5e:9f:62:4b:b5:19:cf:66:5f:47:61:12:0f:2f: c9:22:33:41:31:b7:c6:40:5f:46:3d:e6:4c:d3:87:b0:4e:1f: 77:b5:18:27:05:d1:47:20:2a:f0:16:2c:b9:e3:85:a1:27:5f: 6a:c3:72:e1:7d:45:ae:02:cc:36:45:4b:d2:5c:0c:46:ed:eb: 0a:db:ca:0c:4c:b3:0b:4f:a7:0d:c2:17:9e:1f:de:06:e4:fa: 9a:51:83:45:0c:c5:a1:3f:68:b7:31:dd:2a:e9:a4:66:8a:70: 34:e9:6b:3d:b9:04:04:4c:39:25:34:01:1b:0d:52:7e:23:9f: b1:73:e0:38:04:e9:4f:e3:65:0d:09:5f:54:de:ce:6f:1d:6d: c2:e6:e3:a6:8b:a7:9b:87:f1:d3:6b:e9:30:86:0f:a3:24:f4: 6c:21:ac:a5:ef:ba:e3:ef:d8:47:71:61:d4:d6:af:bb:96:1b: 51:d9:ca:ff:27:9c:07:50:69:da:16:e3:cc:4e:db:24:5e:db: d1:75:c9:ce:ea:34:0f:fc:ff:44:ac:f0:6b:b0:7c:83:ad:c4: e9:02:c5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjUwNTMxMDAzODU4WhcNMjUwNjA3MDAzODU4WjAYMRYwFAYD VQQDEw02ODNhNGZhMi00NTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpwP+0pMVdBcXgWetJlT7W2k0/ZAJlUgvborHK9amdVTyTQs9AT1q3TxJDAi PL+QWSIWb7gQevqy7OE/G1IHDE6CyN/I7vULKlZz32StmhSFhK/E9T9j9BL2ajMA V/cQLiWgvn/Nf7MGcP2/UFhzAdC0J6VRFdqRrF5V+ybUmxWMx7WXsbnvugLD8520 1bAipA1BvOpKTN3r2DGuITFuJe8NDcl9LQdxlOzeQ7Gwywo3Mua/hl+9Mt+rR08e lE7YLh9riytvtUvr22mMGsypkAd+A65siq/OCP4z8pZqv310hCRKaWOihYKfsZM4 oipeBo1xz+yE2vTGDXA2haEaeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6XIg7U 3c9siv3KX1nLZOcv5DzJMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXKNnII4dbii5hyMGOhtUL6bIytiLKJDViRaJwhJVRkX3XNlemFJ+O Xp9iS7UZz2ZfR2ESDy/JIjNBMbfGQF9GPeZM04ewTh93tRgnBdFHICrwFiy544Wh J19qw3LhfUWuAsw2RUvSXAxG7esK28oMTLMLT6cNwheeH94G5PqaUYNFDMWhP2i3 Md0q6aRminA06Ws9uQQETDklNAEbDVJ+I5+xc+A4BOlP42UNCV9U3s5vHW3C5uOm i6ebh/HTa+kwhg+jJPRsIayl77rj79hHcWHU1q+7lhtR2cr/J5wHUGnaFuPMTtsk XtvRdcnO6jQP/P9ErPBrsHyDrcTpAsXI -----END CERTIFICATE-----Generated at Sat May 31 17:00:19 2025 by rpki-client