$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: Ms9qAeRsXWV/xBlRbsr+Kfsvz7EgiciU0l6CvwdAnJc= Subject key identifier: C5:BA:10:23:82:75:BF:2C:ED:18:5F:15:44:D3:DD:30:F8:42:71:3F Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 0127 Signing time: Tue 17 Jun 2025 03:45:01 +0000 Manifest this update: Tue 17 Jun 2025 03:45:00 +0000 Manifest next update: Tue 24 Jun 2025 03:45:00 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: Hk6tmNFRZE+3qRb8Yqllomi1BKnORCRZbqXVwYSEW60=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: Jun 17 03:45:00 2025 GMT Not After : Jun 24 03:45:00 2025 GMT Subject: CN=6850e4bc-dd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:b7:05:49:f2:50:50:13:f8:a3:0c:53:5a: 0f:d2:bb:d5:75:fd:c4:8d:b6:fa:11:64:cd:07:3e: 8c:33:80:d0:31:42:50:e2:dd:0b:6a:0a:be:1c:bd: 2f:14:f0:c3:29:fb:f6:24:5f:e8:8b:33:0c:3a:02: 03:c4:03:3d:a5:2e:96:45:6b:c2:dc:ad:8a:e8:d9: b9:12:ab:90:19:8b:d6:84:fe:8c:73:9c:8d:d1:54: 3e:6f:62:e4:f8:f3:64:0e:f0:62:fe:3c:e0:5f:5c: 7d:a3:67:1a:de:9b:34:3e:9b:6e:f7:8d:65:5f:02: 7b:89:54:ef:12:38:d1:be:1c:b4:70:41:d8:33:40: c6:e9:33:51:ae:3d:c5:fe:22:f9:c9:a9:99:72:2c: f6:8e:fa:6d:59:87:93:a3:65:2a:54:c7:f1:ec:de: 8d:8f:2c:e7:e9:a4:0a:11:87:e5:40:22:2b:76:6d: 76:f9:c3:db:15:2d:a7:54:5a:85:02:2f:b0:f5:2e: b9:82:4a:52:40:3a:7d:77:1d:04:d1:22:80:f0:ed: 73:a5:37:08:7a:5d:e1:e1:76:cb:ac:b5:ec:93:bf: 06:e7:c3:ea:76:ee:d0:44:8c:38:6f:94:16:0e:4e: d7:6e:29:2a:35:b0:b3:47:d7:aa:87:26:c7:90:a8: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BA:10:23:82:75:BF:2C:ED:18:5F:15:44:D3:DD:30:F8:42:71:3F X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ba:4e:e2:4c:66:86:69:df:02:07:a6:57:e8:06:60:4e:4b: e0:39:8a:7a:e4:52:f2:e9:9b:18:02:d5:ad:da:40:d2:e7:bc: 51:d4:84:9a:fd:c0:2c:97:c8:d8:9a:d1:a4:41:d0:8d:5a:7e: 2e:e6:7f:f6:d5:a9:a4:ef:78:38:67:58:51:47:a6:1e:38:e1: f7:70:07:7f:a4:7b:6c:44:8e:ac:b0:d5:ac:13:e2:12:d9:74: 7a:9c:cc:13:1c:55:2f:37:30:50:60:a9:bc:d8:9c:c4:b1:1d: ce:c8:46:ea:f6:73:35:ce:27:3a:4c:e6:d3:f3:b7:de:1f:47: 96:69:e9:50:03:f3:55:6a:53:d9:41:b7:54:c0:e4:1f:9d:5d: 37:42:1a:20:a2:0c:99:6f:16:6f:91:4d:22:53:81:01:84:09: 91:c2:3b:59:bf:25:2c:94:8d:42:4a:86:62:5b:af:58:30:63: 17:02:a3:ca:23:9c:6d:84:59:43:1f:98:99:bd:08:c9:33:78: 9b:a4:23:d6:74:87:2c:a1:0f:51:e5:c3:23:61:78:51:01:aa: 37:54:9b:4d:bc:61:ac:b5:ab:3f:78:45:60:83:65:39:f7:92: 80:cd:fd:17:db:45:a8:75:ad:35:e2:f3:ea:30:de:b6:28:97: f7:91:dc:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjUwNjE3MDM0NTAwWhcNMjUwNjI0MDM0NTAwWjAYMRYwFAYD VQQDEw02ODUwZTRiYy1kZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwe3BUnyUFAT+KMMU1oP0rvVdf3Ejbb6EWTNBz6MM4DQMUJQ4t0Lagq+HL0v FPDDKfv2JF/oizMMOgIDxAM9pS6WRWvC3K2K6Nm5EquQGYvWhP6Mc5yN0VQ+b2Lk +PNkDvBi/jzgX1x9o2ca3ps0Pptu941lXwJ7iVTvEjjRvhy0cEHYM0DG6TNRrj3F /iL5yamZciz2jvptWYeTo2UqVMfx7N6Njyzn6aQKEYflQCIrdm12+cPbFS2nVFqF Ai+w9S65gkpSQDp9dx0E0SKA8O1zpTcIel3h4XbLrLXsk78G58Pqdu7QRIw4b5QW Dk7XbikqNbCzR9eqhybHkKj0AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMW6ECOC db8s7RhfFUTT3TD4QnE/MB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuuk7iTGaGad8CB6ZX6AZgTkvgOYp65FLy6ZsYAtWt2kDS57xR1ISa /cAsl8jYmtGkQdCNWn4u5n/21amk73g4Z1hRR6YeOOH3cAd/pHtsRI6ssNWsE+IS 2XR6nMwTHFUvNzBQYKm82JzEsR3OyEbq9nM1zic6TObT87feH0eWaelQA/NValPZ QbdUwOQfnV03QhogogyZbxZvkU0iU4EBhAmRwjtZvyUslI1CSoZiW69YMGMXAqPK I5xthFlDH5iZvQjJM3ibpCPWdIcsoQ9R5cMjYXhRAao3VJtNvGGstas/eEVgg2U5 95KAzf0X20Woda014vPqMN62KJf3kdwG -----END CERTIFICATE-----Generated at Tue Jun 17 10:35:23 2025 by rpki-client