$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft File: JM96JUWnTqJVAgG27duZ-b7bgbU.mft (raw, json) Hash identifier: Vc/2T7w2kXfhUBhXrtZXUmAOdJqgByq6c6KQuNBWYEM= Subject key identifier: A2:75:04:C1:17:F8:22:76:00:86:C0:7F:1D:AA:A3:1A:E0:F0:EA:30 Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 Certificate issuer: /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Certificate serial: 1CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft Manifest number: 1C97 Signing time: Sun 04 May 2025 16:06:19 +0000 Manifest this update: Sun 04 May 2025 16:06:18 +0000 Manifest next update: Sun 11 May 2025 16:06:18 +0000 Files and hashes: 1: JM96JUWnTqJVAgG27duZ-b7bgbU.crl (hash: d1Lq3opSEa7V22Zyy15b4VYNHbaVP267OEFDO+NGLr8=) 2: FCA6FF8C749E11E8B07CAE80C4F9AE02.roa (hash: k/o6QQeGjIebtK3cSFt7OP5rP3xEncXYao5ZQWxg/pA=) 3: 91269EDA6D4111EC8A648F1EC4F9AE02.roa (hash: DWn9jCobSOgDEKS3edLHIgrtHpnKwI5elc8EFo1f8dA=) 4: FE6E6B48749E11E8B07CAE80C4F9AE02.roa (hash: Ruri1qHSgWDfSjLB7GMruorS7uq7+YoW4Hew6bZFFkY=) 5: FD4BF398749E11E8B07CAE80C4F9AE02.roa (hash: FTl4166fURxtlu8VB5wTYmb/CvUhAT5RdQV1AnE8x5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7351 (0x1cb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5 Validity Not Before: May 4 16:06:18 2025 GMT Not After : May 11 16:06:18 2025 GMT Subject: CN=6817907a-250c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:8e:fa:4e:42:51:97:78:91:6e:6c:70:e2: 07:50:00:80:75:b6:9e:48:15:da:fa:4a:ab:04:d6: dd:44:82:97:df:f7:46:3e:34:bb:ee:16:a4:58:3b: d2:10:d8:1f:ba:29:e3:7d:b3:bb:7b:8b:46:58:f2: 1f:f8:f4:87:48:57:79:e5:b8:13:bd:f9:56:ea:98: b5:c3:5e:ed:8f:b9:21:e1:b0:c3:6d:7f:f2:5e:83: 04:f5:34:d9:34:b2:1b:50:09:3d:ca:6b:c2:45:33: 22:81:59:75:55:e6:0b:e0:be:62:31:d3:f7:ec:3f: d9:f9:77:0d:15:70:c0:5f:05:4f:cc:ea:15:52:5d: 9f:2b:0d:4b:f8:54:c8:7a:e3:55:68:ea:66:49:04: f7:d8:25:91:fc:80:05:5b:52:b7:5a:19:5a:89:60: 79:4c:47:31:8c:fc:e8:4b:68:a0:fb:df:b5:e9:17: c2:af:85:a2:da:31:75:5a:69:4a:4b:0b:89:47:5d: 91:5d:92:5a:cf:88:3d:f0:19:a7:6d:5b:b7:24:1c: 43:ec:d0:68:f3:58:3e:1e:dd:83:1a:b2:a8:99:74: 6c:90:7e:85:0b:ea:16:39:3e:e2:ac:a0:99:d1:63: fa:b2:ab:08:4d:6a:7f:b7:43:49:24:17:f1:75:b9: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:04:C1:17:F8:22:76:00:86:C0:7F:1D:AA:A3:1A:E0:F0:EA:30 X509v3 Authority Key Identifier: keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:00:43:9f:91:4c:04:30:6e:ca:d9:c5:bf:e2:a4:b8:8b:ba: 99:c3:16:1b:d8:49:73:02:8b:77:5f:57:7c:15:a1:86:16:40: 7a:95:dd:a6:32:25:18:be:63:6d:da:b8:c0:8d:00:b7:db:57: 51:ff:57:12:26:7b:18:85:cb:f0:0f:8f:91:b4:e5:57:a7:84: c0:4d:ed:8b:ea:18:10:bf:3d:78:ba:c5:d5:45:70:33:34:7c: 08:c3:eb:76:ac:78:36:7c:f9:07:c3:ee:45:d5:75:2c:90:68: 3e:45:3a:78:6a:e1:28:59:6f:ae:03:1b:d7:ca:12:8e:de:49: 71:cf:6e:de:e9:6a:6a:0a:3c:42:4c:4a:12:c3:5f:4f:2a:34: e9:39:93:bb:a0:3a:a5:3e:0c:3d:43:73:f6:87:e5:d4:66:d8: 74:df:62:5c:c8:50:06:98:28:4e:0c:47:b0:47:23:dd:5c:3e: a8:a6:d6:db:55:e7:32:16:a8:d4:07:4d:44:58:1c:0e:2e:f0: 62:6a:bc:6c:ec:88:4c:59:33:b8:29:c0:36:67:4b:7c:d0:a7: b1:ed:e7:fb:e5:16:af:52:b8:88:ab:07:1b:4f:82:ae:a1:b7: df:c3:f4:c8:c3:e5:5c:03:19:8d:50:d3:27:53:f4:7e:cf:b5: 0b:3c:4c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNTUxMTAvBgNVBAUTKDI0Q0Y3QTI1NDVBNzRFQTI1NTAyMDFCNkVEREI5OUY5 QkVEQjgxQjUwHhcNMjUwNTA0MTYwNjE4WhcNMjUwNTExMTYwNjE4WjAYMRYwFAYD VQQDEw02ODE3OTA3YS0yNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrCO+k5CUZd4kW5scOIHUACAdbaeSBXa+kqrBNbdRIKX3/dGPjS77hakWDvS ENgfuinjfbO7e4tGWPIf+PSHSFd55bgTvflW6pi1w17tj7kh4bDDbX/yXoME9TTZ NLIbUAk9ymvCRTMigVl1VeYL4L5iMdP37D/Z+XcNFXDAXwVPzOoVUl2fKw1L+FTI euNVaOpmSQT32CWR/IAFW1K3WhlaiWB5TEcxjPzoS2ig+9+16RfCr4Wi2jF1WmlK SwuJR12RXZJaz4g98BmnbVu3JBxD7NBo81g+Ht2DGrKomXRskH6FC+oWOT7irKCZ 0WP6sqsITWp/t0NJJBfxdbl5XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJ1BMEX +CJ2AIbAfx2qoxrg8OowMB8GA1UdIwQYMBaAFCTPeiVFp06iVQIBtu3bmfm+24G1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1NS8yRUE3QTQ2Q0NF NzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRxSlZBZ0cyN2R1Wi1iN2Jn YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNOTZKVVduVHFKVkFnRzI3ZHVaLWI3YmdiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1NS8yRUE3QTQ2Q0NFNzExMUU2OUUyQjk0NDRDNEY5QUUwMi9KTTk2SlVXblRx SlZBZ0cyN2R1Wi1iN2JnYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQAEOfkUwEMG7K2cW/4qS4i7qZwxYb2ElzAot3X1d8FaGGFkB6ld2m MiUYvmNt2rjAjQC321dR/1cSJnsYhcvwD4+RtOVXp4TATe2L6hgQvz14usXVRXAz NHwIw+t2rHg2fPkHw+5F1XUskGg+RTp4auEoWW+uAxvXyhKO3klxz27e6WpqCjxC TEoSw19PKjTpOZO7oDqlPgw9Q3P2h+XUZth032JcyFAGmChODEewRyPdXD6optbb VecyFqjUB01EWBwOLvBiarxs7IhMWTO4KcA2Z0t80Kex7ef75RavUriIqwcbT4Ku obffw/TIw+VcAxmNUNMnU/R+z7ULPEyj -----END CERTIFICATE-----Generated at Mon May 5 20:48:39 2025 by rpki-client