$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: HMPWBtLv9Rn+3xFixex/57hXCJu4OHUdUrjqMhVA9F0= Subject key identifier: 5D:FB:4F:07:8F:EE:2E:AA:45:BA:FD:70:5E:00:2B:81:01:11:70:7D Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0A85 Signing time: Thu 24 Apr 2025 19:29:15 +0000 Manifest this update: Thu 24 Apr 2025 19:29:15 +0000 Manifest next update: Thu 01 May 2025 19:29:15 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: xWSgZhZoN9IbNwEjCuOV4UjZpKw5KtEJDF8W5IVfjt8=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: TCYPp0B7wELGdVmkmZ/2o9IhPqXAxvWxV7x+iOfRhsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Apr 24 19:29:15 2025 GMT Not After : May 1 19:29:15 2025 GMT Subject: CN=680a910b-9ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:37:c3:8b:b5:5e:5e:a9:26:67:52:aa:37: cc:fd:76:e9:3a:20:3d:e5:47:c3:ec:e9:bf:ee:9e: 5c:97:c4:5a:3a:c0:dd:10:ec:01:ee:be:71:eb:b3: 1a:83:e2:34:70:f3:a8:e6:9b:d2:4a:1a:32:9e:5c: 9f:e8:94:73:41:ca:59:5a:0a:d7:08:23:af:78:a5: c3:8d:27:9b:a1:bd:ea:b5:56:0d:53:a9:be:da:7c: ed:7d:83:4c:2b:77:b7:01:9f:a0:2d:a7:0a:75:4e: b6:ee:2d:54:0c:36:e2:80:5d:39:38:46:5b:64:b9: 56:f7:4e:32:3b:90:d4:79:8c:2f:44:75:34:1a:5f: 98:7a:e2:36:c1:60:38:f8:95:44:d5:5c:e7:7e:38: cf:7b:65:e0:59:8a:cd:ea:2a:7d:09:d2:16:ac:e9: 20:e4:89:21:49:ac:aa:d0:fc:a2:59:f3:70:0a:39: 46:73:7a:45:83:07:57:9f:c1:87:fc:41:15:85:d9: 8c:7d:f4:2f:22:ef:64:1e:8a:af:e0:80:eb:60:0e: 32:0e:46:03:97:ad:c5:7b:a8:58:4a:51:f7:ad:74: 58:dc:23:fd:47:2c:3d:1a:5f:c5:d5:30:be:d6:58: f8:c6:9f:7d:c4:3e:a4:26:05:8d:91:f7:84:62:11: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:4F:07:8F:EE:2E:AA:45:BA:FD:70:5E:00:2B:81:01:11:70:7D X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c7:4e:e2:83:ff:ef:61:fa:9d:dc:5e:1a:fc:f7:d5:d2:35: 2f:43:bb:a1:5d:38:e4:40:4f:81:03:3f:de:50:db:8f:ba:d7: 20:0a:4f:18:08:1b:4e:85:53:a3:26:30:06:ac:05:f1:41:d3: 90:57:d2:6d:83:16:f3:9a:e6:98:83:68:b4:16:2c:f2:c8:ed: 70:0a:c7:16:3b:ee:10:a9:c4:ca:7a:57:ce:94:5a:5b:3a:a0: cd:fd:f7:73:6e:a4:6e:e9:56:30:9b:5f:c6:32:e8:4c:0d:2f: 0e:0f:3d:b5:16:87:74:eb:17:06:71:2e:31:5e:4a:8a:0c:c9: 4f:07:e4:2c:3f:7c:b1:88:89:f4:71:74:ad:ab:9f:4a:64:83: bd:7c:9d:bf:43:1b:b7:3a:d9:58:19:79:28:26:c2:68:77:a3: b8:35:87:ec:6a:47:98:12:71:83:3c:6c:fa:2a:c1:8f:0e:9f: d9:52:df:0d:19:b7:95:cd:82:3a:05:da:28:98:9e:7c:f5:b1: 58:25:f0:5e:50:ea:c7:a8:9e:f5:33:f2:09:cb:66:c4:f1:89: 5b:97:7b:49:f0:56:56:f8:5d:68:15:9b:94:f5:59:cc:33:0c: f1:b4:d4:48:48:01:42:79:9d:ec:a6:37:b8:70:32:e2:57:0a: 4f:de:ae:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUwNDI0MTkyOTE1WhcNMjUwNTAxMTkyOTE1WjAYMRYwFAYD VQQDEw02ODBhOTEwYi05ZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS43w4u1Xl6pJmdSqjfM/XbpOiA95UfD7Om/7p5cl8RaOsDdEOwB7r5x67Ma g+I0cPOo5pvSShoynlyf6JRzQcpZWgrXCCOveKXDjSebob3qtVYNU6m+2nztfYNM K3e3AZ+gLacKdU627i1UDDbigF05OEZbZLlW904yO5DUeYwvRHU0Gl+YeuI2wWA4 +JVE1VznfjjPe2XgWYrN6ip9CdIWrOkg5IkhSayq0PyiWfNwCjlGc3pFgwdXn8GH /EEVhdmMffQvIu9kHoqv4IDrYA4yDkYDl63Fe6hYSlH3rXRY3CP9Ryw9Gl/F1TC+ 1lj4xp99xD6kJgWNkfeEYhEYkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF37TweP 7i6qRbr9cF4AK4EBEXB9MB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgx07ig//vYfqd3F4a/PfV0jUvQ7uhXTjkQE+BAz/eUNuPutcgCk8Y CBtOhVOjJjAGrAXxQdOQV9JtgxbzmuaYg2i0FizyyO1wCscWO+4QqcTKelfOlFpb OqDN/fdzbqRu6VYwm1/GMuhMDS8ODz21Fod06xcGcS4xXkqKDMlPB+QsP3yxiIn0 cXStq59KZIO9fJ2/Qxu3OtlYGXkoJsJod6O4NYfsakeYEnGDPGz6KsGPDp/ZUt8N GbeVzYI6BdoomJ589bFYJfBeUOrHqJ71M/IJy2bE8Ylbl3tJ8FZW+F1oFZuU9VnM MwzxtNRISAFCeZ3spje4cDLiVwpP3q5A -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:07 2025 by rpki-client