$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: qB4UnfIW1AdWXBlstgZIetaCiVVUNmwdJg4Yt334iWg= Subject key identifier: 20:A8:E9:97:1F:EA:B5:D1:9D:64:8D:5C:32:43:55:1B:89:13:26:09 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 3491 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 348A Signing time: Mon 12 May 2025 14:22:05 +0000 Manifest this update: Mon 12 May 2025 14:22:04 +0000 Manifest next update: Mon 19 May 2025 14:22:04 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 736weGPf+myEqPhqOZhex1vFxWFjKErEDPY5BEzLRJ8=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13457 (0x3491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: May 12 14:22:04 2025 GMT Not After : May 19 14:22:04 2025 GMT Subject: CN=6822040c-548d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:20:75:ee:87:26:db:3f:a1:2a:bf:11:7f: b1:20:2b:41:cb:9d:ca:45:6d:8e:4c:30:67:92:f9: 51:68:ee:27:c1:2f:67:a6:d9:e6:c6:f3:59:22:8e: cd:92:37:f3:f0:cf:dc:8b:fb:0e:81:55:bd:ec:c2: 29:4f:b1:40:e5:c9:ca:54:2f:ce:f0:13:aa:98:5c: 6c:3c:db:c9:ea:c6:d1:b9:8b:f4:cb:f8:10:78:88: 3f:6f:d0:97:c5:bf:82:1c:9b:aa:b1:f8:eb:c1:7d: 61:9d:b3:19:55:02:b5:15:b2:7b:8a:c2:33:37:76: 22:d7:47:1d:be:78:80:23:05:16:0d:84:cd:05:29: 6b:ee:31:7b:d3:ac:cf:cc:47:cf:bb:f4:1d:ce:2e: e9:eb:3e:78:24:70:6e:88:e9:7a:3d:8f:e6:f7:72: 29:85:20:67:9f:d5:c7:38:c0:3e:1d:ba:54:d2:bb: 2e:fc:6a:94:0f:cc:64:71:2b:5a:5f:6a:61:b1:20: c4:c4:c2:89:e7:0a:e3:62:10:f0:bc:97:d6:57:8a: 41:f8:5d:54:2e:17:17:9d:15:47:dc:31:49:fc:08: 9c:45:43:3b:b6:5b:de:1c:9a:31:11:94:c1:2a:77: 70:a4:75:da:09:de:fb:26:e5:28:5f:7d:c4:bc:df: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A8:E9:97:1F:EA:B5:D1:9D:64:8D:5C:32:43:55:1B:89:13:26:09 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:63:71:a6:88:d9:42:b8:05:6c:d5:ce:08:70:a5:80:39:29: 24:f2:57:87:0d:db:fc:38:e0:b3:03:65:ff:39:47:45:28:bb: 54:76:6f:9c:87:2b:83:56:1f:49:0d:16:62:1e:77:08:74:ff: 8f:5c:f9:01:c3:f3:ea:1e:6a:fc:b1:b3:2d:3c:f6:db:f3:2c: c7:73:ae:d0:84:32:ad:a8:e7:f0:ed:c2:83:56:df:81:b7:06: eb:19:b9:dc:25:4e:33:ac:0f:80:9c:bc:35:73:97:0a:9e:01: a4:96:3e:d6:5d:14:41:53:4b:d0:b8:0b:26:d7:b1:1b:b5:4b: ce:3a:97:f3:c3:95:4e:86:bf:ec:23:b2:e9:cd:a5:01:36:85: 41:b6:cb:aa:14:e9:2b:2d:10:ab:d8:3f:81:5a:16:f3:82:a9: cc:f0:6d:e7:2c:b1:c0:fd:1b:eb:8e:16:13:05:d2:fc:00:5f: 85:45:50:66:fb:d6:51:bf:4b:bf:70:3e:a9:57:a2:80:0f:58: 9e:f1:38:25:67:04:67:4f:2b:11:9e:ba:cb:5c:ab:65:09:dd: 01:64:a6:04:fb:3e:b2:be:3e:8f:7c:dd:2a:59:7d:05:19:78: 36:40:26:df:7c:b4:17:26:57:17:94:6a:77:2e:93:54:7f:f2: c6:af:46:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUwNTEyMTQyMjA0WhcNMjUwNTE5MTQyMjA0WjAYMRYwFAYD VQQDEw02ODIyMDQwYy01NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RAgde6HJts/oSq/EX+xICtBy53KRW2OTDBnkvlRaO4nwS9nptnmxvNZIo7N kjfz8M/ci/sOgVW97MIpT7FA5cnKVC/O8BOqmFxsPNvJ6sbRuYv0y/gQeIg/b9CX xb+CHJuqsfjrwX1hnbMZVQK1FbJ7isIzN3Yi10cdvniAIwUWDYTNBSlr7jF706zP zEfPu/Qdzi7p6z54JHBuiOl6PY/m93IphSBnn9XHOMA+HbpU0rsu/GqUD8xkcSta X2phsSDExMKJ5wrjYhDwvJfWV4pB+F1ULhcXnRVH3DFJ/AicRUM7tlveHJoxEZTB KndwpHXaCd77JuUoX33EvN9JTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCo6Zcf 6rXRnWSNXDJDVRuJEyYJMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChY3GmiNlCuAVs1c4IcKWAOSkk8leHDdv8OOCzA2X/OUdFKLtUdm+c hyuDVh9JDRZiHncIdP+PXPkBw/PqHmr8sbMtPPbb8yzHc67QhDKtqOfw7cKDVt+B twbrGbncJU4zrA+AnLw1c5cKngGklj7WXRRBU0vQuAsm17EbtUvOOpfzw5VOhr/s I7LpzaUBNoVBtsuqFOkrLRCr2D+BWhbzgqnM8G3nLLHA/RvrjhYTBdL8AF+FRVBm +9ZRv0u/cD6pV6KAD1ie8TglZwRnTysRnrrLXKtlCd0BZKYE+z6yvj6PfN0qWX0F GXg2QCbffLQXJlcXlGp3LpNUf/LGr0YQ -----END CERTIFICATE-----Generated at Wed May 14 03:37:32 2025 by rpki-client