$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft File: j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json) Hash identifier: tT/NjUf06Apg06NPO3r0WDdveCaZNAs6QkdgC+gOh+k= Subject key identifier: 82:3F:DE:C0:64:F8:D7:23:B2:E0:FB:A0:B5:FE:BA:5A:75:B5:C5:F4 Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE Certificate issuer: /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft Manifest number: 023A Signing time: Fri 13 Jun 2025 01:22:35 +0000 Manifest this update: Fri 13 Jun 2025 01:22:35 +0000 Manifest next update: Fri 20 Jun 2025 01:22:35 +0000 Files and hashes: 1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: EfSrb1cHWysO/CfthJJDopXB4Q7m2BQj8ORkPPjz0rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE Validity Not Before: Jun 13 01:22:35 2025 GMT Not After : Jun 20 01:22:35 2025 GMT Subject: CN=684b7d5b-09f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:f5:12:24:30:c1:32:fd:18:07:d5:33:3c: a2:fb:21:0d:a7:b4:ee:50:fc:2c:29:d2:25:1b:cf: ae:19:6a:be:b9:07:51:81:7b:15:31:63:f9:23:f0: a2:76:f2:8b:3c:33:0e:b8:ce:8d:e3:8c:42:1c:ed: e5:fb:32:cd:a6:45:aa:a7:bc:b6:c3:72:27:18:29: e3:5d:b0:81:14:19:e2:d2:17:57:95:1a:aa:04:9d: 8e:61:6b:af:56:8b:83:6b:64:d5:b0:11:fb:15:b4: 95:56:98:97:49:12:27:9e:a9:63:1f:7a:e4:37:97: 89:08:30:5a:d6:7f:4a:e6:e7:ff:07:14:36:f7:22: 9a:d1:78:c2:af:c0:6b:8a:55:d8:fb:85:8e:25:02: c3:2e:c4:e0:ad:28:b2:bf:e1:e8:c3:5e:9f:de:21: f3:18:70:80:de:df:9b:10:6b:d0:50:68:da:0a:60: 52:89:4c:ef:15:d6:51:a3:c4:45:fa:e8:ca:f1:f6: 27:a2:81:e2:0b:8b:03:9f:44:1a:e5:07:92:50:2c: 10:f0:59:57:4c:54:e2:8d:2c:08:39:24:c2:a5:1d: 52:8a:46:88:80:42:ae:d7:84:d1:f7:e6:52:f5:0b: e4:17:8d:58:70:80:eb:bd:8d:10:c0:4f:36:16:f1: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3F:DE:C0:64:F8:D7:23:B2:E0:FB:A0:B5:FE:BA:5A:75:B5:C5:F4 X509v3 Authority Key Identifier: keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:72:8c:f9:0c:63:f7:d7:24:c7:3c:7d:39:63:a4:35:73:ab: a4:2b:6a:cc:da:42:51:68:8d:5a:d7:08:b9:b8:4e:8b:f1:ce: 29:38:c7:21:e7:5b:4d:5c:06:12:bb:6d:02:3f:09:a5:d5:27: 70:c3:c5:5b:a9:07:b5:dd:04:bc:b9:91:78:af:1a:85:43:7b: e1:a6:18:e4:4f:41:f7:4c:91:4e:0b:57:5f:d5:a3:ff:2f:49: 82:e6:91:16:53:fc:7c:20:47:09:b7:56:bf:b8:f6:ce:4b:6e: 98:7f:e4:22:f1:b6:25:c3:42:0b:23:6c:f6:57:95:0b:c5:b3: b8:10:4a:a0:23:38:47:48:e3:40:1f:ec:8a:fc:41:85:94:2e: bd:b5:dc:da:fb:45:79:ae:c0:ea:54:64:11:ca:43:8f:60:ff: 2d:bc:00:bf:cc:bf:4f:67:b9:39:57:c7:10:67:2e:dc:c2:61: 16:0a:36:4b:07:af:87:ad:e4:62:14:c9:d4:69:b8:61:22:02: 0a:40:8d:06:5f:a7:4b:4a:a6:1c:76:b6:98:61:0d:74:6e:d3: 5c:7d:96:65:32:b2:d4:55:de:68:c1:1d:4e:c1:2d:11:5b:8e: 2f:2c:98:23:88:50:ad:3a:78:aa:8c:7c:58:8a:90:b2:6a:cd: 1a:e4:17:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxREUxMTAvBgNVBAUTKDhGOTY3MkFDQUQ5QTUxRjAzRDQ4QkM0M0I2MzNBOTU3 MzQ5OEUzREUwHhcNMjUwNjEzMDEyMjM1WhcNMjUwNjIwMDEyMjM1WjAYMRYwFAYD VQQDEw02ODRiN2Q1Yi0wOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BL1EiQwwTL9GAfVMzyi+yENp7TuUPwsKdIlG8+uGWq+uQdRgXsVMWP5I/Ci dvKLPDMOuM6N44xCHO3l+zLNpkWqp7y2w3InGCnjXbCBFBni0hdXlRqqBJ2OYWuv VouDa2TVsBH7FbSVVpiXSRInnqljH3rkN5eJCDBa1n9K5uf/BxQ29yKa0XjCr8Br ilXY+4WOJQLDLsTgrSiyv+How16f3iHzGHCA3t+bEGvQUGjaCmBSiUzvFdZRo8RF +ujK8fYnooHiC4sDn0Qa5QeSUCwQ8FlXTFTijSwIOSTCpR1SikaIgEKu14TR9+ZS 9QvkF41YcIDrvY0QwE82FvEL+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII/3sBk +NcjsuD7oLX+ulp1tcX0MB8GA1UdIwQYMBaAFI+WcqytmlHwPUi8Q7YzqVc0mOPe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFERS83MzJENjlCNjI3 NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVmQTlTTHhEdGpPcFZ6U1k0 OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1WnlySzJhVWZBOVNMeER0ak9wVnpTWTQ5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFERS83MzJENjlCNjI3NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVm QTlTTHhEdGpPcFZ6U1k0OTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAncoz5DGP31yTHPH05Y6Q1c6ukK2rM2kJRaI1a1wi5uE6L8c4pOMch 51tNXAYSu20CPwml1Sdww8VbqQe13QS8uZF4rxqFQ3vhphjkT0H3TJFOC1df1aP/ L0mC5pEWU/x8IEcJt1a/uPbOS26Yf+Qi8bYlw0ILI2z2V5ULxbO4EEqgIzhHSONA H+yK/EGFlC69tdza+0V5rsDqVGQRykOPYP8tvAC/zL9PZ7k5V8cQZy7cwmEWCjZL B6+HreRiFMnUabhhIgIKQI0GX6dLSqYcdraYYQ10btNcfZZlMrLUVd5owR1OwS0R W44vLJgjiFCtOniqjHxYipCyas0a5BeN -----END CERTIFICATE-----Generated at Sat Jun 14 15:25:39 2025 by rpki-client