$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: OVyFT+zanWvZl/JkW68iolqBGnvtoXDoQFj3O5Jj+ik= Subject key identifier: 92:AC:69:C0:FE:A3:CD:0A:13:6B:F0:4B:63:E8:57:A1:5F:46:57:32 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 011E Signing time: Sun 15 Jun 2025 04:00:25 +0000 Manifest this update: Sun 15 Jun 2025 04:00:25 +0000 Manifest next update: Sun 22 Jun 2025 04:00:25 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: t8Bo+evKqE6RJa5a1CXEdRsU36BDnugbeU+7OWcAafE=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Jun 15 04:00:25 2025 GMT Not After : Jun 22 04:00:25 2025 GMT Subject: CN=684e4559-affe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:4a:02:27:4a:d3:7c:fd:60:64:ad:56:03: fc:04:79:c9:ac:2f:73:b4:ad:bd:01:d4:a8:8d:57: 90:15:e8:e2:3b:65:9b:3c:2a:8e:7f:f6:7e:d7:1d: 2b:62:77:ce:94:e7:08:3b:3e:fb:4f:d7:91:2c:34: 57:21:ba:87:31:1e:1f:2b:6f:5d:ca:4a:71:28:d4: 26:f2:cd:cf:3a:fa:b0:ef:14:19:59:9c:78:4a:60: 8e:d9:34:36:83:99:b3:af:c4:37:74:86:6f:4e:20: f3:aa:87:3b:de:61:b4:36:24:de:d5:4b:6c:1d:41: 3d:73:c2:c8:80:d6:02:6c:25:1c:88:f5:83:c9:64: 11:2d:98:b9:41:8a:29:f2:f4:e1:99:1c:87:2f:31: 10:ca:2c:5d:6c:0a:80:74:9b:ae:41:ac:b7:1b:b0: a2:24:bf:37:28:fa:bf:c1:51:b2:d7:81:1a:a6:11: e7:3a:95:5d:32:ae:5f:38:81:d6:72:39:8e:a9:8a: 1f:8a:b9:5e:66:60:bc:13:3b:d2:06:a0:a4:b4:83: f5:8e:7d:93:a2:d9:8f:c5:4c:ee:bc:05:45:f3:80: 09:33:e6:57:d1:35:25:b9:55:8f:45:39:03:b3:f2: 0c:64:51:28:9e:93:2b:e2:61:fc:40:43:45:dc:34: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AC:69:C0:FE:A3:CD:0A:13:6B:F0:4B:63:E8:57:A1:5F:46:57:32 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:30:f1:b6:43:14:b9:e1:c2:ad:8c:c2:76:45:5b:43:e1:80: 93:ea:04:e0:b6:0d:32:b4:b0:2d:0b:e7:d6:77:9b:cd:0b:17: 89:05:fd:14:ae:d5:e5:6f:e4:68:c1:f6:4c:3b:61:bc:c1:9c: 8f:f4:7b:0f:2e:4f:f7:17:79:e4:e4:63:27:14:9a:a1:20:5f: 86:d7:e5:bd:d7:ec:cb:35:64:42:26:76:c2:36:9b:27:e4:45: 6c:64:71:67:37:76:a2:26:4b:e9:b8:13:7b:76:50:43:71:42: 86:b7:99:bf:3b:b8:5f:e0:b4:0a:d2:0f:46:c6:68:3d:2c:a2: 5b:6a:cb:5e:9a:6b:7b:bc:d5:1e:b5:67:a7:30:eb:60:23:6e: c9:fb:67:bb:eb:ef:3b:ef:6f:08:2f:c6:52:11:c9:c2:3f:b2: 57:95:1c:e0:6c:2f:fb:31:a2:7a:b9:72:52:58:e6:56:53:4f: 60:1b:1c:34:7b:16:8d:91:92:76:d3:af:89:47:46:3c:5a:5f: 2f:4c:8e:b5:3e:35:37:a3:58:77:78:03:1e:fb:e7:1f:38:3a: 31:43:63:71:f0:44:44:dc:a9:b0:68:aa:e6:e4:09:4f:79:ad: 55:1d:32:c2:01:ac:70:e9:e1:62:db:64:2b:1e:8c:c1:e1:37: 13:7c:ff:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNjE1MDQwMDI1WhcNMjUwNjIyMDQwMDI1WjAYMRYwFAYD VQQDEw02ODRlNDU1OS1hZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwRKAidK03z9YGStVgP8BHnJrC9ztK29AdSojVeQFejiO2WbPCqOf/Z+1x0r YnfOlOcIOz77T9eRLDRXIbqHMR4fK29dykpxKNQm8s3POvqw7xQZWZx4SmCO2TQ2 g5mzr8Q3dIZvTiDzqoc73mG0NiTe1UtsHUE9c8LIgNYCbCUciPWDyWQRLZi5QYop 8vThmRyHLzEQyixdbAqAdJuuQay3G7CiJL83KPq/wVGy14EaphHnOpVdMq5fOIHW cjmOqYofirleZmC8EzvSBqCktIP1jn2TotmPxUzuvAVF84AJM+ZX0TUluVWPRTkD s/IMZFEonpMr4mH8QENF3DQTqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKsacD+ o80KE2vwS2PoV6FfRlcyMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzMPG2QxS54cKtjMJ2RVtD4YCT6gTgtg0ytLAtC+fWd5vNCxeJBf0U rtXlb+RowfZMO2G8wZyP9HsPLk/3F3nk5GMnFJqhIF+G1+W91+zLNWRCJnbCNpsn 5EVsZHFnN3aiJkvpuBN7dlBDcUKGt5m/O7hf4LQK0g9Gxmg9LKJbastemmt7vNUe tWenMOtgI27J+2e76+87728IL8ZSEcnCP7JXlRzgbC/7MaJ6uXJSWOZWU09gGxw0 exaNkZJ206+JR0Y8Wl8vTI61PjU3o1h3eAMe++cfODoxQ2Nx8ERE3KmwaKrm5AlP ea1VHTLCAaxw6eFi22QrHozB4TcTfP/4 -----END CERTIFICATE-----Generated at Tue Jun 17 01:28:46 2025 by rpki-client