$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft File: jWaK_T4D5wuESYgfo1ATG6ysSFY.mft (raw, json) Hash identifier: Z6xxLpScBLmGJOMVZGYHrMxm1iu/FuLM77HRMUG/3As= Subject key identifier: 38:A2:74:33:A7:45:07:E6:54:26:F2:F1:88:4E:E8:6D:50:F0:BC:A6 Authority key identifier: 8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 Certificate issuer: /CN=A91FDB80/serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft Manifest number: 06B2 Signing time: Fri 30 May 2025 22:22:23 +0000 Manifest this update: Fri 30 May 2025 22:22:22 +0000 Manifest next update: Fri 06 Jun 2025 22:22:22 +0000 Files and hashes: 1: jWaK_T4D5wuESYgfo1ATG6ysSFY.crl (hash: hOs+HIHVSVXTZyo28RIx20rvoToW/pNTmYV9piyijh8=) 2: 11328E82645511EBAE4A4633C4F9AE02.roa (hash: uz2dLcbiKvalhoEeN26Zq73ncIHuh+XFmtnGJAva9tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDB80, serialNumber=8D668AFD3E03E70B8449881FA350131BACAC4856 Validity Not Before: May 30 22:22:22 2025 GMT Not After : Jun 6 22:22:22 2025 GMT Subject: CN=683a2f9e-5fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3b:e3:23:20:14:8d:43:a4:9d:a2:bb:25:f7: 91:01:bc:5c:ae:c7:31:49:87:22:fe:11:e4:30:d1: ed:25:17:0b:2c:08:32:35:58:66:72:df:92:5a:af: d9:b5:05:8b:fb:f6:ae:f5:a5:12:4e:a3:b6:21:7b: c5:79:d4:0b:6c:3e:5d:c3:9f:9a:96:e2:3e:89:26: d5:b1:10:80:4e:18:9d:7d:cb:ad:88:3a:76:f5:a3: 47:a6:7a:48:71:97:da:53:79:08:b8:30:11:1a:1b: a5:b0:3f:40:a0:14:e0:bf:f9:d4:af:9e:75:02:f7: df:0e:8d:0e:a9:08:03:3e:02:59:5c:fb:e6:11:df: 53:25:df:7b:d4:76:11:3f:b1:f0:6b:95:cd:90:eb: 31:e6:e3:01:e4:e8:2a:13:fd:82:d9:64:2b:01:81: 57:ac:e4:db:99:52:4f:45:a1:c9:9e:9c:e8:9c:3f: 69:d6:93:2d:3e:93:04:2e:8e:12:98:18:49:6c:35: 8e:e9:b1:98:20:7e:21:75:99:27:c7:6c:44:a0:b1: 08:5f:2c:aa:ae:87:05:b9:d3:8e:b3:fe:a8:68:b7: 69:34:fc:85:9d:28:3b:fc:9f:ab:fb:0b:ba:9a:7c: 0b:4c:4a:aa:0a:61:b0:7e:6c:67:5b:aa:33:2d:e3: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A2:74:33:A7:45:07:E6:54:26:F2:F1:88:4E:E8:6D:50:F0:BC:A6 X509v3 Authority Key Identifier: keyid:8D:66:8A:FD:3E:03:E7:0B:84:49:88:1F:A3:50:13:1B:AC:AC:48:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWaK_T4D5wuESYgfo1ATG6ysSFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDB80/BE9F61A0645311EBAF774D32C4F9AE02/jWaK_T4D5wuESYgfo1ATG6ysSFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:16:fa:7e:f2:bb:bd:02:9d:2e:9f:1b:b5:57:3c:a2:8c: c9:a1:58:28:39:ad:ef:a1:d5:40:f2:d4:2a:be:95:78:75:85: 52:3c:3d:d1:3b:75:d8:ae:88:92:21:e0:32:3a:8a:f4:c3:40: b7:e2:d7:80:6e:ad:28:5b:58:79:2d:83:97:d2:0f:e2:f3:e3: 78:b4:1f:a4:08:21:47:cc:b9:10:fc:ad:8b:43:1b:a4:c4:82: 1a:e2:5f:89:dc:a3:f8:af:0a:5b:32:7a:79:98:5c:81:96:8e: be:7a:f0:0a:76:1e:b2:ea:76:ef:83:2e:a4:80:4a:26:73:ea: e7:fb:a4:6e:ad:3f:8b:f6:5a:96:80:b2:63:69:09:f1:dd:b6: 93:47:f2:61:a4:e7:b8:5f:5c:e9:b1:db:8d:99:8a:9e:91:9b: a4:13:67:5d:ad:7f:ac:08:b9:d1:96:da:b8:dc:36:11:7b:99: 82:1d:74:4f:89:e9:77:cc:b9:da:3d:64:6d:e3:58:3a:c8:c6: d8:14:b6:c7:28:43:c9:30:6c:f9:c6:5a:e9:d5:74:85:d2:36: ae:a4:da:20:bb:4a:d5:c1:ce:63:20:7a:4c:a0:be:a8:86:5d: a6:71:b1:59:59:30:dc:35:47:f8:c6:2b:dd:d3:79:b7:27:ef: 48:20:05:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCODAxMTAvBgNVBAUTKDhENjY4QUZEM0UwM0U3MEI4NDQ5ODgxRkEzNTAxMzFC QUNBQzQ4NTYwHhcNMjUwNTMwMjIyMjIyWhcNMjUwNjA2MjIyMjIyWjAYMRYwFAYD VQQDEw02ODNhMmY5ZS01ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zvjIyAUjUOknaK7JfeRAbxcrscxSYci/hHkMNHtJRcLLAgyNVhmct+SWq/Z tQWL+/au9aUSTqO2IXvFedQLbD5dw5+aluI+iSbVsRCAThidfcutiDp29aNHpnpI cZfaU3kIuDARGhulsD9AoBTgv/nUr551AvffDo0OqQgDPgJZXPvmEd9TJd971HYR P7Hwa5XNkOsx5uMB5OgqE/2C2WQrAYFXrOTbmVJPRaHJnpzonD9p1pMtPpMELo4S mBhJbDWO6bGYIH4hdZknx2xEoLEIXyyqrocFudOOs/6oaLdpNPyFnSg7/J+r+wu6 mnwLTEqqCmGwfmxnW6ozLeMIHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiidDOn RQfmVCby8YhO6G1Q8LymMB8GA1UdIwQYMBaAFI1miv0+A+cLhEmIH6NQExusrEhW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREI4MC9CRTlGNjFBMDY0 NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3dUVTWWdmbzFBVEc2eXNT RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pXYUtfVDRENXd1RVNZZ2ZvMUFURzZ5c1NGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REI4MC9CRTlGNjFBMDY0NTMxMUVCQUY3NzREMzJDNEY5QUUwMi9qV2FLX1Q0RDV3 dUVTWWdmbzFBVEc2eXNTRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP2Bb6fvK7vQKdLp8btVc8oozJoVgoOa3vodVA8tQqvpV4dYVSPD3R O3XYroiSIeAyOor0w0C34teAbq0oW1h5LYOX0g/i8+N4tB+kCCFHzLkQ/K2LQxuk xIIa4l+J3KP4rwpbMnp5mFyBlo6+evAKdh6y6nbvgy6kgEomc+rn+6RurT+L9lqW gLJjaQnx3baTR/JhpOe4X1zpsduNmYqekZukE2ddrX+sCLnRltq43DYRe5mCHXRP iel3zLnaPWRt41g6yMbYFLbHKEPJMGz5xlrp1XSF0jaupNogu0rVwc5jIHpMoL6o hl2mcbFZWTDcNUf4xivd03m3J+9IIAXD -----END CERTIFICATE-----Generated at Sat May 31 16:32:13 2025 by rpki-client