$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft File: jC90p60r0PXvsQZOS5CYbXbMF4U.mft (raw, json) Hash identifier: LVJQI1pYP30atqBst2bKY+t5AWOaUd+G9BDf+T6iaqg= Subject key identifier: 73:F8:19:12:EB:30:89:47:7A:F9:1C:8C:36:83:37:8F:5B:93:E8:0B Authority key identifier: 8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85 Certificate issuer: /CN=A914EF21/serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft Manifest number: 0634 Signing time: Wed 14 May 2025 23:38:57 +0000 Manifest this update: Wed 14 May 2025 23:38:56 +0000 Manifest next update: Wed 21 May 2025 23:38:56 +0000 Files and hashes: 1: jC90p60r0PXvsQZOS5CYbXbMF4U.crl (hash: QHS4ue+IyViwfvXlyN6ddEvifQQPWtEpGwPmJWM3V24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=8C2F74A7AD2BD0F5EFB1064E4B90986D76CC1785 Validity Not Before: May 14 23:38:56 2025 GMT Not After : May 21 23:38:56 2025 GMT Subject: CN=68252991-c052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:47:37:fc:72:b0:88:3b:45:0c:79:25:50: b1:7c:cb:59:1b:d8:35:24:0c:d3:29:15:e3:db:f9: ec:f9:fc:a1:e7:77:52:c1:e8:0c:6b:5e:4c:99:6a: 37:41:47:32:07:00:f2:c8:3e:97:8a:4d:06:28:8b: 24:c4:42:bc:3c:d9:7b:94:9b:d3:8a:09:a1:c6:74: 91:d3:ba:b3:b2:19:3e:a5:8c:34:8e:06:28:96:b8: 3f:fe:7f:25:be:bf:76:20:f0:4c:22:7d:4a:50:58: 60:1e:fe:28:f0:f4:44:52:dd:28:d4:7c:45:8b:ee: 0d:0b:a1:cb:8e:35:24:6e:33:80:02:af:a1:1b:74: c1:bc:63:dc:c7:b6:6c:b8:50:ec:f0:f7:65:98:23: 96:4a:07:c1:96:fd:a2:bc:ed:81:10:34:7b:8a:16: 43:68:02:d5:0f:d1:d9:2e:3d:c7:bf:2a:e2:4d:1e: ea:46:df:f6:cd:66:f0:83:74:2c:f0:7f:19:40:38: a0:0f:7b:7a:b1:61:b7:f8:47:51:00:3a:71:2e:8b: f6:ee:d0:0d:8b:ab:39:4e:b7:a0:c1:bd:c6:ef:45: ec:e9:8b:4c:9f:6b:63:d2:d2:3a:22:2e:52:e6:6e: 7b:23:14:67:18:2b:4b:6c:e5:44:6f:e2:4f:09:27: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F8:19:12:EB:30:89:47:7A:F9:1C:8C:36:83:37:8F:5B:93:E8:0B X509v3 Authority Key Identifier: keyid:8C:2F:74:A7:AD:2B:D0:F5:EF:B1:06:4E:4B:90:98:6D:76:CC:17:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jC90p60r0PXvsQZOS5CYbXbMF4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/jC90p60r0PXvsQZOS5CYbXbMF4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bb:49:a4:df:ba:28:26:fc:f1:d8:1d:5b:56:82:c1:9b:5e: 84:67:69:13:55:f3:71:39:af:8e:56:76:68:02:ea:eb:dd:e6: 46:45:bd:fe:5b:61:6d:3b:61:68:1d:c2:0a:2b:be:70:0e:1f: d1:88:22:c2:fa:99:92:91:06:29:4f:46:c0:ef:59:85:65:60: 3c:db:a9:6e:99:77:95:9f:cb:26:6e:f1:98:0e:95:a4:42:8e: 99:4e:2c:c4:a8:ad:10:7e:b6:e0:78:53:63:db:fa:67:7e:2a: 59:41:ce:96:06:41:c8:e6:b3:42:ab:e6:19:60:04:79:97:05: 8f:04:47:b4:96:14:48:f3:49:5a:b0:24:08:5b:f3:4d:f7:a6: b4:bd:4b:ce:12:6d:06:b3:6b:8f:ce:31:1f:4a:d7:8e:97:fb: 73:a3:a3:d6:29:9b:71:83:35:fe:c5:59:ae:0b:08:e9:e2:7d: 41:e2:4b:5f:83:f3:d6:6a:db:45:75:65:ad:a2:d2:aa:98:14: 0a:79:c8:3e:15:f5:c2:7a:7a:45:46:41:d3:81:41:58:2a:5c: 5a:84:47:75:cf:a8:97:78:48:fe:ea:94:ee:89:18:a6:ee:60: af:da:f0:e9:72:35:98:88:fe:11:48:88:fb:7d:41:6f:a4:ad: 82:35:9f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKDhDMkY3NEE3QUQyQkQwRjVFRkIxMDY0RTRCOTA5ODZE NzZDQzE3ODUwHhcNMjUwNTE0MjMzODU2WhcNMjUwNTIxMjMzODU2WjAYMRYwFAYD VQQDEw02ODI1Mjk5MS1jMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4lHN/xysIg7RQx5JVCxfMtZG9g1JAzTKRXj2/ns+fyh53dSwegMa15MmWo3 QUcyBwDyyD6Xik0GKIskxEK8PNl7lJvTigmhxnSR07qzshk+pYw0jgYolrg//n8l vr92IPBMIn1KUFhgHv4o8PREUt0o1HxFi+4NC6HLjjUkbjOAAq+hG3TBvGPcx7Zs uFDs8PdlmCOWSgfBlv2ivO2BEDR7ihZDaALVD9HZLj3HvyriTR7qRt/2zWbwg3Qs 8H8ZQDigD3t6sWG3+EdRADpxLov27tANi6s5Tregwb3G70Xs6YtMn2tj0tI6Ii5S 5m57IxRnGCtLbOVEb+JPCSez4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP4GRLr MIlHevkcjDaDN49bk+gLMB8GA1UdIwQYMBaAFIwvdKetK9D177EGTkuQmG12zBeF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi9qQzkwcDYwcjBQWHZzUVpPUzVDWWJYYk1G NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pDOTBwNjByMFBYdnNRWk9TNUNZYlhiTUY0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi9qQzkwcDYwcjBQ WHZzUVpPUzVDWWJYYk1GNFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsu0mk37ooJvzx2B1bVoLBm16EZ2kTVfNxOa+OVnZoAurr3eZGRb3+ W2FtO2FoHcIKK75wDh/RiCLC+pmSkQYpT0bA71mFZWA826lumXeVn8smbvGYDpWk Qo6ZTizEqK0QfrbgeFNj2/pnfipZQc6WBkHI5rNCq+YZYAR5lwWPBEe0lhRI80la sCQIW/NN96a0vUvOEm0Gs2uPzjEfSteOl/tzo6PWKZtxgzX+xVmuCwjp4n1B4ktf g/PWattFdWWtotKqmBQKecg+FfXCenpFRkHTgUFYKlxahEd1z6iXeEj+6pTuiRim 7mCv2vDpcjWYiP4RSIj7fUFvpK2CNZ+h -----END CERTIFICATE-----Generated at Thu May 15 21:36:06 2025 by rpki-client