$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: 90z6jyUVtKlE195lzOHZjYZq1e+GfFQkgKI74Aa5ZDM= Subject key identifier: 4A:2A:36:67:D0:45:F2:62:EE:EB:A1:CA:0B:5D:66:D8:6E:C7:30:11 Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0AC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A08 Signing time: Thu 24 Apr 2025 20:01:47 +0000 Manifest this update: Thu 24 Apr 2025 20:01:46 +0000 Manifest next update: Thu 01 May 2025 20:01:46 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: VEMHoeBuT45ieo+ovBrqdX9XmXHsq2S0UmO80cjpggg=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2755 (0xac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Apr 24 20:01:46 2025 GMT Not After : May 1 20:01:46 2025 GMT Subject: CN=680a98ab-d138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f6:3f:5d:7c:6d:0e:49:46:c2:65:9b:3f:ee: 59:af:4f:7e:d8:66:62:7e:70:d9:6b:fc:43:cd:ae: 4b:f3:00:3d:77:a1:6d:ef:c2:4b:c3:56:cf:b6:28: b8:5a:92:06:9b:c6:16:0a:df:bf:19:28:ae:99:b9: 8e:aa:74:12:a8:ba:69:64:e0:d8:f9:73:b9:a3:f3: 73:f3:62:60:fc:74:7a:31:e9:6d:c1:cc:95:1d:4a: db:4d:12:e2:1a:d0:89:7c:75:3c:2d:db:a8:d3:a9: 95:1d:9a:71:15:7a:5a:40:21:62:61:19:68:bd:b8: 2d:59:bc:63:51:f0:f9:52:7f:23:96:ca:c9:77:2b: 59:0e:4d:5b:ea:9c:16:c3:e5:37:66:30:44:70:00: dc:12:10:3e:17:ab:2c:13:68:5c:98:49:01:0e:48: da:34:a1:bc:af:2e:9e:f4:d4:f4:6f:54:d6:f3:c8: c7:21:57:90:6a:7e:6e:8b:ce:b1:04:65:c0:0b:24: a2:34:21:52:86:e4:ea:0e:24:94:45:af:c3:93:ef: c8:c6:34:83:4d:b9:c3:e8:fb:fe:cc:b0:de:03:8a: a1:85:f7:13:97:f9:c7:47:eb:a2:12:c6:c2:14:5e: c9:04:2e:8b:f5:96:05:fe:fa:98:29:db:de:2f:2b: 3c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:36:67:D0:45:F2:62:EE:EB:A1:CA:0B:5D:66:D8:6E:C7:30:11 X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b0:b5:fb:52:70:c8:2b:67:90:37:14:f2:14:1b:11:b0:ec: 72:79:19:f9:20:ad:64:d1:1f:49:03:5d:72:0f:22:a8:a4:6f: cb:0b:ed:60:3b:de:bb:9b:39:ba:3c:2f:6d:7b:33:d8:20:e1: 2a:7f:ed:c9:4c:aa:d2:fc:d6:e8:ed:ab:07:1e:f0:18:21:cb: c6:bc:ff:23:43:38:6f:4a:22:37:a9:82:ff:e9:fd:10:5c:ce: 9f:57:3a:d0:29:84:3d:c3:56:37:99:29:a5:dd:d7:f9:1e:48: 68:94:7b:5a:8d:13:d9:9b:07:7f:15:c5:95:79:bd:76:7a:00: ad:9e:68:87:b8:5b:d1:4b:c1:65:38:58:cf:5a:15:7f:75:13: 91:50:df:b3:ea:b8:95:d2:af:c7:bb:03:64:36:27:4a:a0:a7: be:5b:36:74:87:6b:f6:06:5f:52:e4:ce:ce:90:50:64:fc:22: 91:fb:50:cc:ef:08:73:9b:73:01:c9:2e:f0:78:b1:80:69:55: d0:df:ea:92:89:10:9e:f8:aa:6f:f9:8f:ee:60:3e:8d:0e:b8: 03:27:a8:3c:34:bd:2c:9d:99:3e:a5:2f:22:df:07:47:ea:0b: f1:ca:67:4c:e8:a5:0b:6c:58:45:76:83:a0:67:36:d2:48:58: 7e:e8:81:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUwNDI0MjAwMTQ2WhcNMjUwNTAxMjAwMTQ2WjAYMRYwFAYD VQQDEw02ODBhOThhYi1kMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vY/XXxtDklGwmWbP+5Zr09+2GZifnDZa/xDza5L8wA9d6Ft78JLw1bPtii4 WpIGm8YWCt+/GSiumbmOqnQSqLppZODY+XO5o/Nz82Jg/HR6MeltwcyVHUrbTRLi GtCJfHU8Lduo06mVHZpxFXpaQCFiYRlovbgtWbxjUfD5Un8jlsrJdytZDk1b6pwW w+U3ZjBEcADcEhA+F6ssE2hcmEkBDkjaNKG8ry6e9NT0b1TW88jHIVeQan5ui86x BGXACySiNCFShuTqDiSURa/Dk+/IxjSDTbnD6Pv+zLDeA4qhhfcTl/nHR+uiEsbC FF7JBC6L9ZYF/vqYKdveLys8jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoqNmfQ RfJi7uuhygtdZthuxzARMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGsLX7UnDIK2eQNxTyFBsRsOxyeRn5IK1k0R9JA11yDyKopG/LC+1g O967mzm6PC9tezPYIOEqf+3JTKrS/Nbo7asHHvAYIcvGvP8jQzhvSiI3qYL/6f0Q XM6fVzrQKYQ9w1Y3mSml3df5HkholHtajRPZmwd/FcWVeb12egCtnmiHuFvRS8Fl OFjPWhV/dRORUN+z6riV0q/HuwNkNidKoKe+WzZ0h2v2Bl9S5M7OkFBk/CKR+1DM 7whzm3MByS7weLGAaVXQ3+qSiRCe+Kpv+Y/uYD6NDrgDJ6g8NL0snZk+pS8i3wdH 6gvxymdM6KULbFhFdoOgZzbSSFh+6IFC -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:59 2025 by rpki-client