$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: pmF8mabLhMRa67Cz7pB3l4hAvL17PNw52i/EXbjf/wA= Subject key identifier: 61:74:A4:36:6F:2F:3E:D9:31:39:A9:E6:AD:89:F1:B0:0C:E0:31:86 Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 0489 Signing time: Thu 24 Apr 2025 23:48:32 +0000 Manifest this update: Thu 24 Apr 2025 23:48:32 +0000 Manifest next update: Thu 01 May 2025 23:48:32 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: mNzmwrZdh946LFE+xKXmXSc+viSM8dy44FxHvEC6lrM=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: vSYCfM+ntYW7G9aAaLxoQnL6y+A35VWVI2iBiGFSPJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Apr 24 23:48:32 2025 GMT Not After : May 1 23:48:32 2025 GMT Subject: CN=680acdd0-37fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:6e:ae:b4:e8:84:0c:33:d4:1c:81:5f:5e: 9e:54:de:df:d9:0c:87:68:7c:0d:77:76:ca:6b:e1: 46:c1:c9:a9:45:01:bc:6a:22:c4:92:3e:67:96:cc: a4:0b:1d:51:2f:4d:cd:93:dd:7d:64:9e:3c:63:3b: 38:fb:2d:f9:bd:4f:6a:b1:75:88:cc:22:f2:10:86: 4d:65:4d:af:6a:89:fd:be:0c:27:6c:65:8e:e5:35: 0a:81:4c:61:c8:8f:45:84:d0:c6:84:2b:5e:40:b0: db:95:92:f1:8c:81:f2:74:d0:f7:2c:86:d0:3b:32: 73:11:25:93:2e:d2:7f:c2:54:5a:93:f6:57:df:96: b4:c6:2c:7d:c1:37:bf:6f:18:41:65:eb:ce:af:1e: 93:ad:3f:a4:1f:3a:85:b0:39:d7:ff:4c:7a:bc:44: 1c:80:dd:aa:e5:2f:91:4d:72:49:cc:17:fa:86:2a: b3:68:ba:32:74:7c:99:09:6b:ab:4e:2d:cb:0a:a1: 5e:b8:58:40:70:06:69:35:19:1e:41:f3:42:96:a8: 00:1e:4f:f8:db:8b:a6:eb:73:98:fb:cf:d0:c1:71: 2d:2f:0d:1b:37:4b:dc:fd:f7:fa:44:e2:91:2c:5c: e4:de:77:a9:a9:3a:ef:9f:cf:1b:de:f7:20:7d:32: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:A4:36:6F:2F:3E:D9:31:39:A9:E6:AD:89:F1:B0:0C:E0:31:86 X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ba:1e:df:bf:8d:8a:76:95:ea:d4:bd:4d:a8:d9:2d:c0:c1: e0:55:c4:e7:d6:d8:5d:f2:06:ce:5f:da:84:df:1e:8c:49:20: 67:eb:9b:5c:1f:39:b5:e5:9b:25:3f:ce:dd:ee:2d:e2:8e:be: cb:c6:93:55:11:c2:94:a3:29:81:0f:43:93:28:d0:1a:17:48: 83:8d:fe:e5:9a:3e:1b:6a:81:ba:61:dc:35:24:c9:ae:61:f4: 12:60:a7:51:bf:83:fd:8c:26:f2:8b:3f:dd:46:04:b9:02:9b: f3:6b:b4:8b:80:72:a0:f7:0e:16:86:c8:1a:f2:82:d7:f8:2e: 43:95:7b:f3:24:2f:44:c0:6c:4f:fe:94:12:eb:68:b7:79:32: 84:77:ff:bb:4a:98:a5:d5:4b:a2:d8:74:d3:1f:b9:8c:6b:7e: 6e:61:53:a1:59:9c:9b:a6:c7:89:9d:cb:73:ab:a9:f9:d7:d7: 27:70:27:7f:36:05:79:69:80:46:a5:42:31:35:61:00:7e:80: 85:d8:09:b2:50:be:21:30:ef:ed:e6:25:79:4c:e9:c5:99:7a: 52:50:7c:0e:1f:5a:10:6b:78:27:c8:11:05:84:40:7f:33:1e: 58:95:74:b6:f1:c0:79:0b:e6:b1:6d:c8:af:b8:11:e7:de:03: 74:52:83:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwNDI0MjM0ODMyWhcNMjUwNTAxMjM0ODMyWjAYMRYwFAYD VQQDEw02ODBhY2RkMC0zN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHRurrTohAwz1ByBX16eVN7f2QyHaHwNd3bKa+FGwcmpRQG8aiLEkj5nlsyk Cx1RL03Nk919ZJ48Yzs4+y35vU9qsXWIzCLyEIZNZU2vaon9vgwnbGWO5TUKgUxh yI9FhNDGhCteQLDblZLxjIHydND3LIbQOzJzESWTLtJ/wlRak/ZX35a0xix9wTe/ bxhBZevOrx6TrT+kHzqFsDnX/0x6vEQcgN2q5S+RTXJJzBf6hiqzaLoydHyZCWur Ti3LCqFeuFhAcAZpNRkeQfNClqgAHk/424um63OY+8/QwXEtLw0bN0vc/ff6ROKR LFzk3nepqTrvn88b3vcgfTIANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF0pDZv Lz7ZMTmp5q2J8bAM4DGGMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCruh7fv42KdpXq1L1NqNktwMHgVcTn1thd8gbOX9qE3x6MSSBn65tc Hzm15ZslP87d7i3ijr7LxpNVEcKUoymBD0OTKNAaF0iDjf7lmj4baoG6Ydw1JMmu YfQSYKdRv4P9jCbyiz/dRgS5Apvza7SLgHKg9w4Whsga8oLX+C5DlXvzJC9EwGxP /pQS62i3eTKEd/+7Spil1Uui2HTTH7mMa35uYVOhWZybpseJnctzq6n519cncCd/ NgV5aYBGpUIxNWEAfoCF2AmyUL4hMO/t5iV5TOnFmXpSUHwOH1oQa3gnyBEFhEB/ Mx5YlXS28cB5C+axbcivuBHn3gN0UoNj -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:12 2025 by rpki-client