$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft File: jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json) Hash identifier: UTJ3brHpS8qioVh2KvkH5gcc4Mbczc5Umb/YO3S886o= Subject key identifier: F6:C2:58:ED:0D:B1:2D:16:6C:C3:29:EF:A7:CA:9D:5E:86:38:6A:25 Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B Certificate issuer: /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Certificate serial: 098C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft Manifest number: 097E Signing time: Mon 12 May 2025 19:58:35 +0000 Manifest this update: Mon 12 May 2025 19:58:34 +0000 Manifest next update: Mon 19 May 2025 19:58:34 +0000 Files and hashes: 1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: nm/V89csesUU4ZfET/MB1p7xo+VLOV9IaqLvxqpACRo=) 2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B Validity Not Before: May 12 19:58:34 2025 GMT Not After : May 19 19:58:34 2025 GMT Subject: CN=682252eb-d1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:e6:64:25:9e:e0:aa:94:ff:0a:9e:57:53: a4:1d:13:2d:73:d5:10:3a:37:af:9d:fb:36:e2:52: 09:6b:25:ab:f5:eb:e8:6e:d0:f8:f2:b3:65:84:0a: bb:b2:25:95:66:40:05:50:20:2b:cc:1f:2c:de:81: e9:1d:e4:96:11:36:13:1e:18:ad:1b:27:16:d1:5a: 18:83:f4:ff:e9:96:b9:0a:00:8f:b8:68:7a:a7:80: 9b:a9:a2:05:cb:f6:d2:82:81:de:31:9c:bc:d8:08: 2f:8c:29:18:60:c4:77:21:10:82:27:cd:96:4d:97: 3e:f5:d3:b1:35:43:41:39:a3:67:b8:f1:55:0a:bc: 9f:1e:ee:68:18:5c:9b:4b:c1:8a:78:4d:67:a9:36: 8d:81:22:bd:cd:a8:b7:3f:41:f9:06:00:0a:b5:ec: b7:fc:8b:93:db:02:09:af:55:27:f4:27:9d:18:4b: 49:b1:eb:fb:38:7e:b9:ca:44:b9:08:09:74:88:26: 99:29:77:e5:18:f3:78:af:c3:63:0f:a1:b4:e4:ee: b9:fd:ef:c9:b0:0d:91:a3:46:ca:4b:e2:07:10:65: d5:8b:ed:3e:2a:d2:ec:51:81:8b:0d:d7:38:a3:7e: 67:88:ff:86:c3:bb:da:d7:d0:d1:12:70:f3:3c:24: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C2:58:ED:0D:B1:2D:16:6C:C3:29:EF:A7:CA:9D:5E:86:38:6A:25 X509v3 Authority Key Identifier: keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:94:3b:c0:61:db:f5:15:6c:1b:57:1e:2c:a2:a8:d9:b3:15: b3:07:37:3c:e7:af:44:aa:b3:33:04:ae:83:30:04:f6:e4:24: 91:9d:01:b5:9f:ee:07:1d:02:b3:48:ea:9a:cf:f3:12:15:f8: 58:91:ee:6d:9a:88:ab:c6:46:49:f3:e4:45:01:e9:36:cf:99: 7b:77:5d:a7:bd:e4:33:58:43:3c:8d:d1:79:93:36:9f:77:d5: f1:91:bf:a5:94:28:69:cd:70:90:92:92:62:fd:1e:03:32:19: 8a:0b:62:bc:06:8a:6b:06:ee:72:f8:12:b0:ee:1d:ec:ed:24: 99:c0:8c:ac:96:5d:c1:cb:8b:d2:0d:89:6a:68:96:c1:5f:d7: a0:25:95:a2:7a:cc:6c:88:37:ca:a1:2d:2b:cc:14:5f:e6:1e: 16:ba:8d:47:88:b7:a1:fb:ee:72:c9:d3:3a:2c:ed:41:1a:c8: 6c:34:0f:28:19:ea:be:9c:e0:b3:9b:dc:eb:b2:cf:ad:73:8e: 02:01:6b:c2:4b:0a:e1:93:7d:e7:84:b6:b6:0a:6b:f1:07:90: 21:3f:f5:e4:de:ce:c0:aa:77:10:63:40:bb:ce:73:f6:82:a9: f6:df:ed:a6:c0:d8:e1:cf:8f:50:06:bd:8a:10:4d:d5:66:8a: 39:17:4e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw Q0M2RjI5MEIwHhcNMjUwNTEyMTk1ODM0WhcNMjUwNTE5MTk1ODM0WjAYMRYwFAYD VQQDEw02ODIyNTJlYi1kMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKLmZCWe4KqU/wqeV1OkHRMtc9UQOjevnfs24lIJayWr9evobtD48rNlhAq7 siWVZkAFUCArzB8s3oHpHeSWETYTHhitGycW0VoYg/T/6Za5CgCPuGh6p4CbqaIF y/bSgoHeMZy82AgvjCkYYMR3IRCCJ82WTZc+9dOxNUNBOaNnuPFVCryfHu5oGFyb S8GKeE1nqTaNgSK9zai3P0H5BgAKtey3/IuT2wIJr1Un9CedGEtJsev7OH65ykS5 CAl0iCaZKXflGPN4r8NjD6G05O65/e/JsA2Ro0bKS+IHEGXVi+0+KtLsUYGLDdc4 o35niP+Gw7va19DREnDzPCSpUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbCWO0N sS0WbMMp76fKnV6GOGolMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2 NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZlDvAYdv1FWwbVx4soqjZsxWzBzc8569EqrMzBK6DMAT25CSRnQG1 n+4HHQKzSOqaz/MSFfhYke5tmoirxkZJ8+RFAek2z5l7d12nveQzWEM8jdF5kzaf d9Xxkb+llChpzXCQkpJi/R4DMhmKC2K8BoprBu5y+BKw7h3s7SSZwIysll3By4vS DYlqaJbBX9egJZWiesxsiDfKoS0rzBRf5h4Wuo1HiLeh++5yydM6LO1BGshsNA8o Geq+nOCzm9zrss+tc44CAWvCSwrhk33nhLa2CmvxB5AhP/Xk3s7AqncQY0C7znP2 gqn23+2mwNjhz49QBr2KEE3VZoo5F06A -----END CERTIFICATE-----Generated at Wed May 14 11:13:50 2025 by rpki-client