$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: ZtEtXYKCMTjgR4lXJEk3WudjuuYK48Q2IwVnk9yZfpk= Subject key identifier: B0:06:11:BA:44:42:1B:F7:8A:AA:B4:2B:D2:0F:28:64:F7:CC:68:58 Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 0935 Signing time: Mon 12 May 2025 20:08:55 +0000 Manifest this update: Mon 12 May 2025 20:08:55 +0000 Manifest next update: Mon 19 May 2025 20:08:55 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: zAqhHPBZOcGqqny26VKAF5f0gdNCBzdgTsQsINdZJcU=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: 1O8CvPoCX59yxkCTRAfeqT87JzO1ZPyxP3FQ7V/8EC0=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 2lXGifV8wMvF5/8u5e/F18sZfZgZakRwfCdQQppNe70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: May 12 20:08:55 2025 GMT Not After : May 19 20:08:55 2025 GMT Subject: CN=68225557-87c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:32:22:36:59:c9:cb:f0:e0:b3:7b:58:e4: c0:2f:bb:04:50:ce:80:17:31:da:ab:f7:7b:e6:4b: b0:1e:f9:b7:86:d9:fe:f2:de:34:19:68:57:00:cb: cd:c6:35:a8:d2:f4:38:03:89:28:36:f8:f7:55:40: 36:f3:13:b9:18:63:f4:a2:d5:68:12:f5:d3:85:d3: 33:f5:3d:4c:57:f9:9e:65:47:8a:32:b4:31:ec:73: 47:3a:9a:f8:17:47:db:f5:d9:16:0b:40:ce:9b:af: 03:91:e9:eb:67:7c:45:a4:f0:20:8d:ec:8f:82:d6: 66:0f:1c:2b:e9:ef:1e:45:a1:8f:63:52:3c:ae:e2: b8:31:fb:df:91:87:69:ea:40:d7:5d:fc:4b:fe:3a: cd:30:55:c6:6a:ad:a3:6c:be:cd:c9:67:7d:ea:27: 6a:52:e9:df:58:72:71:fc:78:f2:28:27:03:fa:8f: c2:ed:6a:07:0a:5a:15:9b:be:a6:4b:20:3c:5b:e3: f3:fa:c2:17:66:e6:12:dc:90:15:89:d8:24:96:93: 2b:8c:a4:36:42:89:c2:18:ca:be:3d:37:43:5f:78: 07:cb:d8:bc:e8:13:b1:54:da:55:04:80:0c:4b:92: 57:0e:79:39:44:10:f2:1f:a8:b0:e4:61:7c:72:6e: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:11:BA:44:42:1B:F7:8A:AA:B4:2B:D2:0F:28:64:F7:CC:68:58 X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:ec:d7:3c:0a:d4:6c:a9:da:e6:25:c4:43:9b:ad:8f:32: ba:d7:81:14:76:1d:34:12:1a:3c:a8:d1:26:a9:29:64:53:81: 5e:f0:11:6f:a0:be:fa:7c:9d:8c:0d:4c:af:c4:86:0e:1d:a5: b9:00:cc:21:c7:03:a6:cd:95:ec:4c:0f:6d:59:55:31:7c:e9: 14:74:25:7c:65:58:56:7f:46:04:37:ab:cf:13:87:8d:1b:fc: d6:ef:e0:83:36:72:13:e0:1e:78:5a:8f:c6:e4:14:8b:54:0f: 09:93:d3:05:86:4c:25:3f:d7:7b:14:fc:c7:85:a3:cd:3f:df: 71:dc:ca:e4:4f:0d:e5:64:b0:e8:8f:34:b4:e4:6e:f2:6c:47: 6f:cf:2e:56:a7:e9:be:e4:16:77:45:14:a2:46:b8:78:3d:33: cb:8a:09:0a:b2:db:0b:a6:2d:28:35:9c:0a:93:57:18:cd:e6: 05:86:a4:d9:6d:b8:9f:79:73:ba:b9:e6:b9:83:32:8f:73:cc: 67:a5:a0:f4:df:86:ad:36:a1:2f:70:2b:c5:08:de:84:dc:3f: 43:b8:0c:3e:17:0e:57:31:ce:56:3d:9f:12:ac:22:00:75:4a: 5b:bf:f9:f2:c0:c9:1e:30:63:d5:38:eb:da:d0:b5:46:6b:78: 98:8b:fc:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUwNTEyMjAwODU1WhcNMjUwNTE5MjAwODU1WjAYMRYwFAYD VQQDEw02ODIyNTU1Ny04N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql4yIjZZycvw4LN7WOTAL7sEUM6AFzHaq/d75kuwHvm3htn+8t40GWhXAMvN xjWo0vQ4A4koNvj3VUA28xO5GGP0otVoEvXThdMz9T1MV/meZUeKMrQx7HNHOpr4 F0fb9dkWC0DOm68DkenrZ3xFpPAgjeyPgtZmDxwr6e8eRaGPY1I8ruK4MfvfkYdp 6kDXXfxL/jrNMFXGaq2jbL7NyWd96idqUunfWHJx/HjyKCcD+o/C7WoHCloVm76m SyA8W+Pz+sIXZuYS3JAVidgklpMrjKQ2QonCGMq+PTdDX3gHy9i86BOxVNpVBIAM S5JXDnk5RBDyH6iw5GF8cm54ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAGEbpE Qhv3iqq0K9IPKGT3zGhYMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJS+zXPArUbKna5iXEQ5utjzK614EUdh00Eho8qNEmqSlkU4Fe8BFv oL76fJ2MDUyvxIYOHaW5AMwhxwOmzZXsTA9tWVUxfOkUdCV8ZVhWf0YEN6vPE4eN G/zW7+CDNnIT4B54Wo/G5BSLVA8Jk9MFhkwlP9d7FPzHhaPNP99x3MrkTw3lZLDo jzS05G7ybEdvzy5Wp+m+5BZ3RRSiRrh4PTPLigkKstsLpi0oNZwKk1cYzeYFhqTZ bbifeXO6uea5gzKPc8xnpaD034atNqEvcCvFCN6E3D9DuAw+Fw5XMc5WPZ8SrCIA dUpbv/nywMkeMGPVOOva0LVGa3iYi/x1 -----END CERTIFICATE-----Generated at Wed May 14 00:46:15 2025 by rpki-client