$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: Hrl7izL03N9rO2n29UF/CKppUkMXNoK2p6ZNODBGdAw= Subject key identifier: AC:6C:AF:D6:18:9F:FB:B2:8D:89:02:86:0F:6B:BF:B2:29:7F:51:6E Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 070E Signing time: Thu 24 Apr 2025 21:43:55 +0000 Manifest this update: Thu 24 Apr 2025 21:43:55 +0000 Manifest next update: Thu 01 May 2025 21:43:55 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: eejL5R4eLtvO/ArgpyubznFPKC9IICxqKuaENfG57Ps=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Apr 24 21:43:55 2025 GMT Not After : May 1 21:43:55 2025 GMT Subject: CN=680ab09b-a73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:53:9d:50:80:b4:1d:73:35:4e:1d:0a:6f: 36:ea:44:39:3f:1e:f4:20:3a:b6:cf:9f:70:58:fb: 7a:d5:54:71:34:3d:4e:e8:7b:24:83:cd:68:f9:96: eb:bd:3d:4a:84:6a:25:4a:ae:9d:d2:38:a1:c4:e2: 51:c2:48:3d:3f:f9:86:6c:32:31:64:5a:0b:c2:e1: 18:c2:4c:6d:cf:b1:c9:a5:18:6a:74:87:b6:2b:81: 5c:24:5f:3b:78:11:07:30:ab:e1:0f:fa:3c:33:d3: f4:aa:6a:54:5d:38:20:e2:3a:8a:5e:2d:10:c1:8d: 54:3d:0c:56:de:81:0a:6d:3a:51:49:07:14:c1:e8: dc:8c:f4:7d:8f:8d:43:6d:59:cc:ba:a2:78:b2:01: d7:5a:d7:d7:12:6a:aa:27:28:15:fd:3d:bd:14:99: 9b:5c:b5:39:61:fc:5d:fe:c5:f5:7b:8a:27:b7:05: 93:8e:85:9e:2a:ee:83:ef:69:5b:5e:03:89:dc:f2: 33:75:76:0d:4a:72:19:f6:d6:7a:ce:d2:23:b2:4b: e8:f5:9e:51:92:c3:5d:74:40:85:b7:bc:57:ee:3a: 8d:3f:d6:69:a0:81:89:28:ca:47:78:16:12:bd:3f: b3:32:2c:cc:89:75:f7:59:56:5e:65:94:37:37:2f: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6C:AF:D6:18:9F:FB:B2:8D:89:02:86:0F:6B:BF:B2:29:7F:51:6E X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:22:36:8e:09:c5:6c:c0:ae:55:c1:2e:ba:79:03:d0:6b:cc: 59:99:f0:2b:8f:aa:13:fa:0a:82:88:0a:9d:e7:7e:aa:c0:9e: 90:6d:73:7f:6f:5e:7f:1d:20:68:95:c0:75:89:a3:c7:81:29: e4:19:40:2d:de:64:d7:8b:0d:02:f1:ff:cb:d0:8d:ab:c6:34: e5:6f:bd:bb:70:96:22:cf:ae:f9:dc:24:4d:6a:3f:6e:ab:74: ec:57:f4:e3:ca:12:48:f0:23:26:6c:56:90:38:77:33:8e:5b: a9:4d:e2:fe:d6:c7:ba:f4:3a:68:f9:34:07:fa:4f:7f:cc:33: cf:12:24:0d:8c:ca:d8:83:f3:98:b1:f2:4a:fa:04:66:6d:c9: 46:5f:74:b7:7e:8c:44:60:f9:b3:e4:ad:1b:ee:02:e3:5e:99: 74:90:a0:41:bb:0e:e4:2e:7f:50:2c:a3:a7:18:19:78:66:f7: 33:d9:db:ce:87:f3:f6:e9:0c:72:90:dd:7a:ea:94:ed:7b:f7: 8e:1e:ef:22:22:93:c2:44:c4:3e:e1:a7:be:41:50:1e:5e:4e: 0d:34:ea:11:55:1a:51:3b:40:d4:9b:e0:13:8a:63:d8:c6:de: 9e:ad:0b:2e:a1:eb:9b:d7:19:b7:e3:f0:1c:cb:03:fa:34:cd: 90:c6:f7:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUwNDI0MjE0MzU1WhcNMjUwNTAxMjE0MzU1WjAYMRYwFAYD VQQDEw02ODBhYjA5Yi1hNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplhTnVCAtB1zNU4dCm826kQ5Px70IDq2z59wWPt61VRxND1O6Hskg81o+Zbr vT1KhGolSq6d0jihxOJRwkg9P/mGbDIxZFoLwuEYwkxtz7HJpRhqdIe2K4FcJF87 eBEHMKvhD/o8M9P0qmpUXTgg4jqKXi0QwY1UPQxW3oEKbTpRSQcUwejcjPR9j41D bVnMuqJ4sgHXWtfXEmqqJygV/T29FJmbXLU5Yfxd/sX1e4ontwWTjoWeKu6D72lb XgOJ3PIzdXYNSnIZ9tZ6ztIjskvo9Z5RksNddECFt7xX7jqNP9ZpoIGJKMpHeBYS vT+zMizMiXX3WVZeZZQ3Ny8NmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxsr9YY n/uyjYkChg9rv7Ipf1FuMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmIjaOCcVswK5VwS66eQPQa8xZmfArj6oT+gqCiAqd536qwJ6QbXN/ b15/HSBolcB1iaPHgSnkGUAt3mTXiw0C8f/L0I2rxjTlb727cJYiz6753CRNaj9u q3TsV/TjyhJI8CMmbFaQOHczjlupTeL+1se69Dpo+TQH+k9/zDPPEiQNjMrYg/OY sfJK+gRmbclGX3S3foxEYPmz5K0b7gLjXpl0kKBBuw7kLn9QLKOnGBl4Zvcz2dvO h/P26QxykN166pTte/eOHu8iIpPCRMQ+4ae+QVAeXk4NNOoRVRpRO0DUm+ATimPY xt6erQsuoeub1xm34/AcywP6NM2Qxvdz -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:28 2025 by rpki-client