$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: 5WgF4jK4/anezoFRJyq3w4APZSMYddOeXU2TmVn4UFY= Subject key identifier: F4:88:9A:A3:A6:26:93:50:BF:D1:00:AE:3F:B1:EC:FF:A9:F9:57:EF Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 03B8 Signing time: Sun 15 Jun 2025 00:25:19 +0000 Manifest this update: Sun 15 Jun 2025 00:25:19 +0000 Manifest next update: Sun 22 Jun 2025 00:25:19 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: IrIEZv+LqQ2shyaWU4hH0BolB4jjRxKXh1SnUjyy+zI=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Jun 15 00:25:19 2025 GMT Not After : Jun 22 00:25:19 2025 GMT Subject: CN=684e12ef-f0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:68:3d:f5:4c:b2:d4:14:8c:0a:db:5c:ac: b0:25:3c:12:a2:90:7e:df:74:bc:b5:c1:a4:d2:15: 4e:f8:21:e4:a0:01:f0:af:9b:c3:bd:37:6f:71:7b: 49:5b:42:97:65:43:64:fe:48:97:d5:68:1a:52:73: 84:01:5c:ec:23:3d:42:6d:8f:26:8f:59:1f:68:5e: 57:52:f6:9b:f9:b7:35:a5:00:5a:00:ab:96:1a:e9: c0:9b:61:38:40:51:34:a5:ff:3f:e1:3c:00:13:26: b6:d6:20:14:9e:2a:cc:29:a7:da:80:37:1a:8c:33: 16:5b:ce:0d:3d:ad:d2:77:e4:0e:08:13:e7:73:d8: 74:78:92:49:b0:d9:74:4c:8e:5b:99:4b:8d:5e:6e: 7a:39:53:44:ae:5e:df:30:a4:04:28:d1:dd:b7:95: 22:59:ef:f1:d5:69:96:d7:8f:cd:19:83:13:25:0f: 8c:af:ef:9e:8a:36:54:10:9f:48:15:48:b1:c0:b6: 96:15:0d:38:7a:ed:1f:af:0f:59:bb:a4:58:dc:42: e0:2b:fa:86:a3:df:f5:5e:a2:55:1a:bd:9d:65:6f: 34:0f:fe:dc:f1:c7:38:86:97:c0:27:13:b9:49:2c: b2:9b:f8:13:b1:0e:69:0d:af:3d:ee:d9:5c:75:24: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:88:9A:A3:A6:26:93:50:BF:D1:00:AE:3F:B1:EC:FF:A9:F9:57:EF X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:fe:d2:2c:98:50:f2:7a:44:16:10:1c:62:bc:3b:27:be:81: 8d:6b:c3:67:9e:9a:de:b8:55:5b:64:97:6e:9c:a3:ab:21:30: fe:fa:a6:6f:10:fe:4c:83:dd:15:a4:c0:f1:6c:bf:08:6c:9d: 2c:33:57:f8:1b:66:a8:aa:da:33:a4:b0:20:c8:61:92:b1:71: 9a:e5:c7:05:51:54:fe:83:33:19:d1:74:5d:16:ac:d8:09:ea: 9d:37:ab:64:2c:fa:80:3d:c3:d0:79:6c:23:b3:1b:1c:c0:b8: e5:a0:bb:b2:60:6f:fa:46:60:d7:97:aa:69:70:72:f5:f6:22: d4:d4:8a:b5:40:ef:59:92:99:3c:76:00:34:cf:51:a4:96:53: 5f:1d:e9:21:69:c4:50:64:7d:96:e1:a7:e3:b5:5b:5d:24:8e: 92:39:c9:89:cf:6a:af:8c:a8:fb:53:46:8b:66:18:1f:86:5b: 8c:79:c8:43:0f:eb:93:b9:8c:f9:6f:21:ee:75:b4:20:e5:90: 2e:c9:56:11:76:f1:de:ca:c2:67:4d:07:cf:f8:61:5d:a5:ea: 6f:4d:03:77:be:2c:fe:3e:64:fc:c6:e2:9c:14:86:11:c6:ae: 8d:72:95:a9:dc:20:09:10:8f:9a:9e:ce:6b:11:4f:14:eb:59: ba:9d:69:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwNjE1MDAyNTE5WhcNMjUwNjIyMDAyNTE5WjAYMRYwFAYD VQQDEw02ODRlMTJlZi1mMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAww1oPfVMstQUjArbXKywJTwSopB+33S8tcGk0hVO+CHkoAHwr5vDvTdvcXtJ W0KXZUNk/kiX1WgaUnOEAVzsIz1CbY8mj1kfaF5XUvab+bc1pQBaAKuWGunAm2E4 QFE0pf8/4TwAEya21iAUnirMKafagDcajDMWW84NPa3Sd+QOCBPnc9h0eJJJsNl0 TI5bmUuNXm56OVNErl7fMKQEKNHdt5UiWe/x1WmW14/NGYMTJQ+Mr++eijZUEJ9I FUixwLaWFQ04eu0frw9Zu6RY3ELgK/qGo9/1XqJVGr2dZW80D/7c8cc4hpfAJxO5 SSyym/gTsQ5pDa897tlcdSRBPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSImqOm JpNQv9EArj+x7P+p+VfvMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj/tIsmFDyekQWEBxivDsnvoGNa8NnnpreuFVbZJdunKOrITD++qZv EP5Mg90VpMDxbL8IbJ0sM1f4G2aoqtozpLAgyGGSsXGa5ccFUVT+gzMZ0XRdFqzY CeqdN6tkLPqAPcPQeWwjsxscwLjloLuyYG/6RmDXl6ppcHL19iLU1Iq1QO9Zkpk8 dgA0z1GkllNfHekhacRQZH2W4afjtVtdJI6SOcmJz2qvjKj7U0aLZhgfhluMechD D+uTuYz5byHudbQg5ZAuyVYRdvHeysJnTQfP+GFdpepvTQN3viz+PmT8xuKcFIYR xq6NcpWp3CAJEI+ans5rEU8U61m6nWmX -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:29 2025 by rpki-client