$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: axlps/DdgnByTtoSMUgN13j9Flj5u3x0mVE4r+4TX2o= Subject key identifier: 2D:23:F4:9B:54:24:1D:2A:CB:1C:4F:7D:C6:4B:3D:C0:C4:A2:B9:25 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: E4 Signing time: Tue 17 Jun 2025 04:28:42 +0000 Manifest this update: Tue 17 Jun 2025 04:28:41 +0000 Manifest next update: Tue 24 Jun 2025 04:28:41 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: ZGUl1lgnxhKLIWuEsSpbfiqUvT7y+25TYxX71Hj4890=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: TaB3OvJnz9ArxOptFYPHLTX84/AbjBqjhsX8r+So7FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Jun 17 04:28:41 2025 GMT Not After : Jun 24 04:28:41 2025 GMT Subject: CN=6850eefa-ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:7b:a4:07:dc:5c:1a:3f:4d:32:dd:c3:46: b6:53:d5:3b:0a:e3:61:cc:63:e7:b9:e0:d8:97:0a: 50:34:19:c1:47:7d:71:0d:54:59:1c:09:56:c1:d3: d3:0a:49:e6:36:e4:33:40:6c:df:4b:17:90:77:5a: 4d:92:f3:1a:5b:f5:44:19:a2:71:b2:be:c9:75:c2: 85:f1:5c:61:f5:52:07:cc:07:e7:46:88:83:6c:0d: 74:41:21:a4:bc:b8:76:9d:84:e7:6a:8f:6f:fc:ce: 61:c3:e1:27:1a:93:bf:a6:38:c6:12:9c:57:1f:2a: 52:9c:4d:0a:4c:81:32:67:4b:41:35:89:24:e7:47: 09:21:80:83:d9:be:e7:9a:02:c6:57:5f:b2:c8:7f: b6:79:c7:68:07:41:01:f4:44:80:7e:9d:94:d6:51: 7e:5d:a9:66:69:67:12:7b:cd:1a:13:a9:8b:8d:57: 74:9c:3e:10:5e:43:27:46:2f:b5:63:fd:04:fd:64: 54:0d:0b:fb:0e:28:24:39:0e:d0:dd:49:a7:f9:18: 73:4a:67:d9:17:24:5b:a8:a8:44:9d:5d:87:85:f7: f1:19:4c:44:bd:95:55:9a:4d:14:f4:09:b8:79:a9: ec:b0:f7:a3:80:96:25:ec:8d:17:40:b2:af:72:07: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:23:F4:9B:54:24:1D:2A:CB:1C:4F:7D:C6:4B:3D:C0:C4:A2:B9:25 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:51:27:0e:32:c8:ba:8d:e6:54:72:5a:66:c1:74:47:90:d5: 64:3a:b8:1e:77:73:ee:78:63:39:1f:03:b5:9c:0e:a9:7b:22: ba:6d:d2:4e:f0:a6:fa:c8:55:7a:1a:ee:f4:9a:bb:3c:e9:33: 50:8e:e8:33:b2:86:09:06:0f:6e:fc:a0:8f:5a:68:31:e7:cb: 68:df:22:51:f7:95:b2:37:bc:a1:75:94:8c:4e:23:da:a5:5d: e9:4d:9b:46:58:43:c5:93:bb:7c:41:8e:da:84:e8:07:1a:da: 44:a4:7a:5d:0f:d0:07:e8:9a:9f:b0:aa:d4:b5:6f:3f:a4:a6: d5:9f:c9:1a:38:e6:de:dd:77:a0:b6:3f:25:6a:4f:ed:1c:2b: 15:96:7c:6a:03:97:fb:20:64:67:93:92:86:c8:3c:e3:49:3a: 26:be:7a:15:27:0a:10:0a:ae:2d:df:68:42:1a:4f:0c:c1:08: a2:c8:a5:df:be:5e:c2:6f:f7:2b:90:63:a7:d3:49:35:af:4c: 81:f7:be:33:f7:aa:86:c1:8a:a5:b6:62:e9:0b:78:8f:a4:cc: 33:09:61:59:88:4c:fc:64:b8:7c:7f:58:97:f7:bb:13:e4:b9: bb:14:98:dd:61:81:3e:8c:e1:9f:31:42:f1:92:b4:2a:41:8c: 7e:6f:7a:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwNjE3MDQyODQxWhcNMjUwNjI0MDQyODQxWjAYMRYwFAYD VQQDEw02ODUwZWVmYS1lYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDl7pAfcXBo/TTLdw0a2U9U7CuNhzGPnueDYlwpQNBnBR31xDVRZHAlWwdPT CknmNuQzQGzfSxeQd1pNkvMaW/VEGaJxsr7JdcKF8Vxh9VIHzAfnRoiDbA10QSGk vLh2nYTnao9v/M5hw+EnGpO/pjjGEpxXHypSnE0KTIEyZ0tBNYkk50cJIYCD2b7n mgLGV1+yyH+2ecdoB0EB9ESAfp2U1lF+XalmaWcSe80aE6mLjVd0nD4QXkMnRi+1 Y/0E/WRUDQv7DigkOQ7Q3Umn+RhzSmfZFyRbqKhEnV2HhffxGUxEvZVVmk0U9Am4 eanssPejgJYl7I0XQLKvcgdXMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0j9JtU JB0qyxxPfcZLPcDEorklMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgUScOMsi6jeZUclpmwXRHkNVkOrged3PueGM5HwO1nA6peyK6bdJO 8Kb6yFV6Gu70mrs86TNQjugzsoYJBg9u/KCPWmgx58to3yJR95WyN7yhdZSMTiPa pV3pTZtGWEPFk7t8QY7ahOgHGtpEpHpdD9AH6JqfsKrUtW8/pKbVn8kaOObe3Xeg tj8lak/tHCsVlnxqA5f7IGRnk5KGyDzjSTomvnoVJwoQCq4t32hCGk8MwQiiyKXf vl7Cb/crkGOn00k1r0yB974z96qGwYqltmLpC3iPpMwzCWFZiEz8ZLh8f1iX97sT 5Lm7FJjdYYE+jOGfMULxkrQqQYx+b3ot -----END CERTIFICATE-----Generated at Tue Jun 17 08:03:02 2025 by rpki-client