$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: TtK1D3Ymn+5zbXtBxvzJ8GhfzB1QMYJJartBmlxvg2U= Subject key identifier: 75:D1:42:02:22:AF:02:C0:F9:89:0C:5F:5D:DE:76:99:68:95:81:A9 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1C93 Signing time: Sat 26 Apr 2025 16:09:18 +0000 Manifest this update: Sat 26 Apr 2025 16:09:18 +0000 Manifest next update: Sat 03 May 2025 16:09:18 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: 1ZH6J9CT9VVO0jijV3hOIYbSnCEqR/FP/PLe+IJAFE8=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7347 (0x1cb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: Apr 26 16:09:18 2025 GMT Not After : May 3 16:09:18 2025 GMT Subject: CN=680d052e-7751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:1b:16:83:f4:68:c0:fc:e6:04:9b:c9:d7: e0:b4:98:af:ff:b6:bd:fb:cc:17:91:b1:21:46:9d: 1e:e1:aa:6f:fa:d8:89:b8:38:b0:dc:2e:ef:3d:76: 9a:27:07:4e:e5:96:e4:37:6e:aa:ab:9d:9b:25:5e: f9:93:08:5a:22:c6:1f:4a:5c:92:57:91:d0:8e:9b: 57:aa:a6:dd:37:3d:e0:a2:d1:93:99:d0:10:af:5f: f4:70:c7:10:72:28:f9:c6:5c:95:d2:fd:b6:84:b2: 3f:e0:41:98:90:87:a6:b5:e1:74:a6:1b:67:7e:2e: e9:8b:0d:10:ec:59:c1:cd:1d:c9:f8:53:4b:37:c0: 37:34:c2:0a:8f:58:4f:21:99:5e:0c:d3:60:b3:d2: a9:e6:53:08:c6:23:79:86:5c:e1:56:48:7f:c9:e4: c5:45:79:c5:b2:2f:c7:04:cd:b3:12:44:f3:d2:b3: 9b:89:f2:32:c7:41:0e:22:ee:31:a9:2d:5b:ff:58: c3:ea:e0:16:61:15:4f:a8:85:3e:61:f2:f6:85:83: 81:3f:5b:1f:a9:fa:30:cb:4c:08:24:53:06:5a:06: 3f:d8:07:cb:19:6b:56:1b:5d:4f:9e:0f:eb:cc:c0: 99:8b:14:4c:8b:d1:f1:a2:73:46:a7:4e:a7:70:bf: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:42:02:22:AF:02:C0:F9:89:0C:5F:5D:DE:76:99:68:95:81:A9 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:23:83:e3:5d:33:2b:38:49:9b:9e:b6:93:e8:b1:fd:9a:82: a7:4e:cd:da:17:92:95:fa:7b:7e:ae:ae:8e:b9:d9:1d:2c:01: 58:e8:c4:df:4d:c7:3c:a8:90:88:2e:a7:0b:d9:b4:89:55:d2: b4:28:15:67:13:ee:79:b7:fd:c0:ad:35:36:bc:a8:7c:47:f9: 19:b3:6f:18:4e:29:98:7b:e1:11:cb:e9:19:b4:56:5d:2f:b9: 69:55:82:67:60:c7:72:b8:c3:1e:b7:a3:ee:1c:61:86:44:e6: c9:3e:b1:ad:03:b2:82:d6:78:e5:70:c4:c0:90:cd:1d:f1:ab: f2:ba:5d:74:69:3a:10:61:53:fb:b5:f0:80:03:0c:b7:cf:e8: 2a:d1:45:b9:0f:9f:f6:07:86:89:7d:ed:84:42:17:2d:35:f8: ce:51:9b:3c:67:1e:5e:fb:f1:24:c7:ff:15:d0:66:fe:ec:0a: 93:ad:f9:ee:a1:8d:16:85:d6:9d:bc:68:a7:58:18:08:fe:ec: 11:d0:c6:af:1a:1f:21:92:ef:a9:06:b4:83:fd:31:b4:21:ea: f1:fc:be:2d:ec:c7:a9:b5:ce:74:88:ee:42:a7:65:f6:11:5f: 41:2f:d1:7b:da:8e:fb:69:06:35:19:97:3b:99:21:50:ff:f4: a4:37:be:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwNDI2MTYwOTE4WhcNMjUwNTAzMTYwOTE4WjAYMRYwFAYD VQQDEw02ODBkMDUyZS03NzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+kbFoP0aMD85gSbydfgtJiv/7a9+8wXkbEhRp0e4apv+tiJuDiw3C7vPXaa JwdO5ZbkN26qq52bJV75kwhaIsYfSlySV5HQjptXqqbdNz3gotGTmdAQr1/0cMcQ cij5xlyV0v22hLI/4EGYkIemteF0phtnfi7piw0Q7FnBzR3J+FNLN8A3NMIKj1hP IZleDNNgs9Kp5lMIxiN5hlzhVkh/yeTFRXnFsi/HBM2zEkTz0rObifIyx0EOIu4x qS1b/1jD6uAWYRVPqIU+YfL2hYOBP1sfqfowy0wIJFMGWgY/2AfLGWtWG11Png/r zMCZixRMi9HxonNGp06ncL8pYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXRQgIi rwLA+YkMX13edplolYGpMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbI4PjXTMrOEmbnraT6LH9moKnTs3aF5KV+nt+rq6OudkdLAFY6MTf Tcc8qJCILqcL2bSJVdK0KBVnE+55t/3ArTU2vKh8R/kZs28YTimYe+ERy+kZtFZd L7lpVYJnYMdyuMMet6PuHGGGRObJPrGtA7KC1njlcMTAkM0d8avyul10aToQYVP7 tfCAAwy3z+gq0UW5D5/2B4aJfe2EQhctNfjOUZs8Zx5e+/Ekx/8V0Gb+7AqTrfnu oY0WhdadvGinWBgI/uwR0MavGh8hku+pBrSD/TG0Ierx/L4t7Meptc50iO5Cp2X2 EV9BL9F72o77aQY1GZc7mSFQ//SkN76U -----END CERTIFICATE-----Generated at Sun Apr 27 06:32:37 2025 by rpki-client