$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: QlAaIvdfFQQrGShavvRgzBafyh8Gowobexe7Bm04Xl0= Subject key identifier: 33:12:68:66:C3:99:5E:B5:75:FD:3C:3A:A9:39:D1:C0:79:4E:EA:BF Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 0273 Signing time: Sun 01 Jun 2025 01:56:50 +0000 Manifest this update: Sun 01 Jun 2025 01:56:50 +0000 Manifest next update: Sun 08 Jun 2025 01:56:50 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: pPz6+qvsGnsh9B2EAzfuH+Hbo/4Qb8SQwH4kN74u8hk=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Jun 1 01:56:50 2025 GMT Not After : Jun 8 01:56:50 2025 GMT Subject: CN=683bb362-4fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:ab:2e:21:f2:34:be:2e:66:12:7a:38:44: 2c:a7:43:91:d4:bf:b1:81:aa:b8:a0:66:e7:b7:c3: 3a:d5:f3:81:df:f1:0f:1d:c7:44:ce:68:0c:fb:00: 05:07:2a:cd:a2:32:f7:05:c4:ef:7a:88:6b:ee:2b: fc:c6:f4:4f:14:e0:57:74:37:db:20:06:a1:26:27: ae:04:da:04:5f:39:4e:31:a9:59:73:7a:f4:67:fb: a9:be:ae:2a:91:03:0d:bc:4a:32:91:a9:9d:4b:c4: 5a:22:b6:dc:d2:50:38:05:d3:2c:6b:e5:c8:be:28: fc:2c:c9:f2:b2:e0:b1:0f:a7:bd:da:82:2e:e2:96: d4:b6:42:9e:6e:de:c1:e2:64:aa:3b:44:36:c4:67: f5:51:06:fb:f9:72:e8:84:19:5c:e2:d2:24:b7:d9: 5b:3d:7d:4f:d3:85:ef:23:09:d9:1d:06:60:2f:f4: 67:1e:50:93:9a:73:de:68:9f:38:87:f0:69:a8:85: de:ea:80:46:93:f0:7d:85:a3:e0:67:e6:e7:fe:0c: 4a:61:a1:9d:16:cb:e6:17:ef:1b:f8:7e:82:02:fe: 39:cd:e2:82:1e:11:c4:eb:cd:d0:79:e0:c7:07:04: 24:af:f8:52:00:ea:65:8f:2b:39:a4:63:6d:e1:ae: af:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:12:68:66:C3:99:5E:B5:75:FD:3C:3A:A9:39:D1:C0:79:4E:EA:BF X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b1:12:96:1c:7b:f5:c3:31:bc:9a:62:8f:8d:a4:30:33:94: 98:67:52:f0:e7:7c:02:46:35:a3:25:47:0a:1c:4c:2e:ba:14: a0:31:71:ad:52:23:f3:70:0a:04:ac:82:98:a7:32:c3:49:03: 8e:71:30:2d:de:79:27:f8:fc:79:94:59:7f:08:8f:19:9c:95: 4a:d7:d2:1a:7f:82:f3:f0:5c:dc:81:bc:60:f3:76:0e:99:7e: 10:61:62:11:59:29:68:33:31:f9:b9:ce:23:8c:99:db:42:ff: 19:70:50:89:2c:83:19:ef:a5:c0:f4:fe:23:81:69:0d:d2:4a: 17:7d:5e:0d:bb:7f:20:44:04:71:12:9a:46:a2:d0:75:9e:5a: 9b:f8:99:c5:25:3d:3f:a0:b2:e3:a2:44:82:5a:7f:cd:3e:67: 4a:11:ee:2b:f2:a4:0e:2f:70:f3:0a:08:b8:42:7b:22:23:ff: 33:b1:19:8a:01:36:f8:b1:6d:01:8f:7f:74:86:b0:8f:35:cf: 84:db:57:05:f8:8d:ad:13:0b:22:2c:6e:af:16:53:44:a6:76: de:c8:86:4c:34:ec:cc:23:c2:7f:dc:da:90:2d:6d:04:ae:36: 4d:69:ae:89:a0:2b:0b:a5:af:23:31:78:3a:c8:15:d1:65:c0: ea:16:eb:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwNjAxMDE1NjUwWhcNMjUwNjA4MDE1NjUwWjAYMRYwFAYD VQQDEw02ODNiYjM2Mi00ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/WrLiHyNL4uZhJ6OEQsp0OR1L+xgaq4oGbnt8M61fOB3/EPHcdEzmgM+wAF ByrNojL3BcTveohr7iv8xvRPFOBXdDfbIAahJieuBNoEXzlOMalZc3r0Z/upvq4q kQMNvEoykamdS8RaIrbc0lA4BdMsa+XIvij8LMnysuCxD6e92oIu4pbUtkKebt7B 4mSqO0Q2xGf1UQb7+XLohBlc4tIkt9lbPX1P04XvIwnZHQZgL/RnHlCTmnPeaJ84 h/BpqIXe6oBGk/B9haPgZ+bn/gxKYaGdFsvmF+8b+H6CAv45zeKCHhHE683QeeDH BwQkr/hSAOpljys5pGNt4a6vTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMSaGbD mV61df08Oqk50cB5Tuq/MB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlsRKWHHv1wzG8mmKPjaQwM5SYZ1Lw53wCRjWjJUcKHEwuuhSgMXGt UiPzcAoErIKYpzLDSQOOcTAt3nkn+Px5lFl/CI8ZnJVK19Iaf4Lz8Fzcgbxg83YO mX4QYWIRWSloMzH5uc4jjJnbQv8ZcFCJLIMZ76XA9P4jgWkN0koXfV4Nu38gRARx EppGotB1nlqb+JnFJT0/oLLjokSCWn/NPmdKEe4r8qQOL3DzCgi4QnsiI/8zsRmK ATb4sW0Bj390hrCPNc+E21cF+I2tEwsiLG6vFlNEpnbeyIZMNOzMI8J/3NqQLW0E rjZNaa6JoCsLpa8jMXg6yBXRZcDqFutT -----END CERTIFICATE-----Generated at Mon Jun 2 07:17:02 2025 by rpki-client