$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: as7jaNk1+lrwmrE6p1/hPdVytDbpEX64gueumjH5Npg= Subject key identifier: 1B:3F:58:D9:00:09:5E:96:96:97:3F:0C:01:C6:C6:21:A9:4E:A2:FF Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: D9 Signing time: Sat 31 May 2025 05:12:14 +0000 Manifest this update: Sat 31 May 2025 05:12:14 +0000 Manifest next update: Sat 07 Jun 2025 05:12:14 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: aenhf/qDjKSdDz/0nrCE8Zvt6T8YjgZY4sU+wQLHw2U=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: rRYTmVJSj1evHAP7XGAiXpQWmI3H2KodoyKM087ItD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: May 31 05:12:14 2025 GMT Not After : Jun 7 05:12:14 2025 GMT Subject: CN=683a8fae-9c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:a6:75:23:af:74:65:ce:2f:6c:56:bd:07: 8e:95:27:20:42:66:04:2d:22:fe:23:05:53:84:2a: 41:5f:49:75:76:b4:99:12:51:40:49:af:53:27:21: 30:10:df:78:78:c1:f4:d2:c5:6d:a2:aa:ed:31:16: 26:c0:e6:e1:fb:6b:ee:fb:07:e3:58:9a:7c:ec:50: 30:1d:ae:a0:f4:db:a5:85:4f:be:3d:f8:55:28:5d: db:ad:d1:dc:05:9f:a6:66:0a:5d:51:ca:16:f6:36: 12:5c:39:20:8a:c7:7a:16:2e:86:93:5b:83:3e:40: 67:87:e2:24:44:f9:3c:37:c4:cb:f8:d2:24:92:fb: 98:7d:07:e6:4d:ef:31:91:a8:6e:10:d9:ff:e1:0c: b0:d2:74:cc:88:e1:8f:12:aa:1d:29:ca:e2:f1:6c: a5:3d:47:98:a9:0c:46:fa:67:75:13:81:29:98:a7: 08:ce:c0:ae:13:d2:66:1d:38:99:64:f3:df:2b:c1: e1:f7:39:ec:33:c7:03:20:5e:c6:9a:69:86:ec:11: a4:f5:80:76:22:59:39:61:5e:18:ab:fd:d9:e2:57: 68:80:8e:39:fd:c4:ee:a1:46:fe:f3:f3:87:b0:63: ad:7b:24:63:8a:74:b7:2e:44:ed:c0:0e:27:f8:d0: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:58:D9:00:09:5E:96:96:97:3F:0C:01:C6:C6:21:A9:4E:A2:FF X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d0:33:59:7c:83:f3:9d:3e:3e:e9:07:8b:70:16:6d:12:80: 22:08:62:c4:86:47:c4:83:a3:10:0c:90:89:e1:82:6f:cb:a1: b0:42:1b:84:1c:80:17:5a:49:c5:cf:a8:0b:5b:24:92:99:ad: 15:55:07:ca:34:72:b0:aa:47:f6:80:fb:66:72:91:34:e5:0a: 24:96:2d:26:a5:39:a5:e9:b2:40:52:be:aa:c1:ec:da:f2:4c: 61:a5:31:8a:32:db:c9:fa:2c:71:e0:89:23:2e:43:61:45:1c: ce:82:7f:30:6b:89:d4:dd:02:a0:ac:79:4d:54:84:4b:e8:51: b6:fc:4c:0c:7f:bb:6e:06:74:48:86:02:5e:b4:b9:9e:64:19: 16:5a:c0:57:00:eb:3c:17:e5:47:2c:82:33:88:7c:ae:52:39: 45:66:cf:67:b7:1c:bf:f5:1f:05:31:96:e4:9c:db:85:49:54: f0:d9:68:c1:08:fc:4d:9f:20:8a:64:94:d8:7e:6d:51:1f:bc: 72:ed:1e:a6:e1:5f:17:87:38:61:8e:0c:a0:a0:a4:9d:1d:8f: 49:25:5c:68:59:f2:f9:9a:ab:7a:62:66:86:0c:b5:cf:fd:06: b6:3d:61:0e:7f:05:25:74:38:1b:52:3a:bc:a3:b7:15:b7:e2: 03:a9:3b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwNTMxMDUxMjE0WhcNMjUwNjA3MDUxMjE0WjAYMRYwFAYD VQQDEw02ODNhOGZhZS05Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9SmdSOvdGXOL2xWvQeOlScgQmYELSL+IwVThCpBX0l1drSZElFASa9TJyEw EN94eMH00sVtoqrtMRYmwObh+2vu+wfjWJp87FAwHa6g9NulhU++PfhVKF3brdHc BZ+mZgpdUcoW9jYSXDkgisd6Fi6Gk1uDPkBnh+IkRPk8N8TL+NIkkvuYfQfmTe8x kahuENn/4Qyw0nTMiOGPEqodKcri8WylPUeYqQxG+md1E4EpmKcIzsCuE9JmHTiZ ZPPfK8Hh9znsM8cDIF7GmmmG7BGk9YB2Ilk5YV4Yq/3Z4ldogI45/cTuoUb+8/OH sGOteyRjinS3LkTtwA4n+NCurQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBs/WNkA CV6Wlpc/DAHGxiGpTqL/MB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK0DNZfIPznT4+6QeLcBZtEoAiCGLEhkfEg6MQDJCJ4YJvy6GwQhuE HIAXWknFz6gLWySSma0VVQfKNHKwqkf2gPtmcpE05Qokli0mpTml6bJAUr6qweza 8kxhpTGKMtvJ+ixx4IkjLkNhRRzOgn8wa4nU3QKgrHlNVIRL6FG2/EwMf7tuBnRI hgJetLmeZBkWWsBXAOs8F+VHLIIziHyuUjlFZs9ntxy/9R8FMZbknNuFSVTw2WjB CPxNnyCKZJTYfm1RH7xy7R6m4V8XhzhhjgygoKSdHY9JJVxoWfL5mqt6YmaGDLXP /Qa2PWEOfwUldDgbUjq8o7cVt+IDqTvL -----END CERTIFICATE-----Generated at Sat May 31 16:43:03 2025 by rpki-client