$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft File: jMMEPUtGxI8SbAboKXDrtItkY8g.mft (raw, json) Hash identifier: G40o2EQiSXSVc1OFO2vLugASVHWVAgM/dPS4AS1kU0M= Subject key identifier: 46:D9:52:76:32:82:06:E3:87:78:6F:DB:3E:2D:6B:01:FD:05:B8:E8 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft Manifest number: 0115 Signing time: Sun 11 May 2025 03:47:07 +0000 Manifest this update: Sun 11 May 2025 03:47:06 +0000 Manifest next update: Sun 18 May 2025 03:47:06 +0000 Files and hashes: 1: jMMEPUtGxI8SbAboKXDrtItkY8g.crl (hash: v1vqTBZFlphPbqQxnimyj8QQY1flGjS5aVHE1UUltnU=) 2: 005C6D6EC17A11EEB919C476C4F9AE02.roa (hash: VQyak9S3rqjmq1eWDpbqLTY2ZUcqqjPeCQJPKCoBRvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: May 11 03:47:06 2025 GMT Not After : May 18 03:47:06 2025 GMT Subject: CN=68201dbb-418f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:33:6e:b8:e4:4a:13:3d:68:3c:88:42:11: ef:a9:6f:c0:7c:95:8e:f5:2e:ae:17:f5:93:f1:4b: 20:f9:db:e2:c7:15:8f:29:fd:f4:4b:74:05:54:d1: a1:08:93:5d:99:b5:68:2f:88:4a:c7:c2:da:5d:e3: 4e:ba:bc:04:87:43:a9:e2:ed:4b:ec:ee:7f:7b:25: 75:a2:c2:d5:ee:35:4e:32:2c:1f:e9:03:80:0c:52: d7:8e:26:6d:e3:cd:55:ab:28:62:8b:88:58:a8:e8: b1:5c:e5:a0:62:78:eb:79:d3:6e:b8:bf:67:98:de: 6f:9c:f1:08:c1:a8:13:85:00:11:f3:61:e1:0e:5f: 66:f6:a2:98:39:0e:83:ea:de:87:59:4a:7d:d1:89: ba:06:86:aa:4a:68:78:1f:45:80:35:41:bf:97:db: 42:77:4f:90:5a:7b:8e:eb:58:f4:46:91:aa:87:6e: 22:ef:99:13:af:b1:d0:9f:b1:9d:56:c8:61:c0:0c: a9:91:81:86:62:0a:1c:29:3c:87:a4:52:ed:1a:e9: dd:a6:7c:eb:45:24:59:23:dc:6f:c1:32:74:11:ce: b0:2a:da:ba:d7:77:ee:23:cb:a8:f8:85:d2:67:4e: c7:4b:7f:0b:bd:37:52:20:ef:0d:bc:13:83:89:77: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D9:52:76:32:82:06:E3:87:78:6F:DB:3E:2D:6B:01:FD:05:B8:E8 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2a:38:e2:42:04:6c:cb:10:a5:d0:8e:ce:b9:60:c4:b8:c5: 38:81:b7:2e:42:70:a7:55:de:e9:b7:cc:c6:81:a0:4d:1d:03: dd:4c:1f:12:eb:2b:7a:08:cd:16:0d:44:6d:2f:db:28:fd:f6: f8:21:a8:e2:d0:74:d6:8f:b0:cd:f3:5a:70:1c:c3:5a:2e:10: 2b:25:0e:cb:40:0c:c6:96:b4:5a:92:0e:50:27:62:2b:40:ec: 3d:b9:59:e9:7e:5e:a0:73:0b:48:23:82:6e:ef:45:a0:2f:a5: e6:76:1a:29:f7:a5:ae:ca:73:e7:eb:62:75:63:10:89:a7:a0: 10:50:11:7a:7f:75:ed:ac:85:1c:36:01:4c:06:29:be:06:5d: 58:70:6e:f7:f7:a8:a9:4e:7b:2e:f4:91:b6:77:61:c7:51:c6: f4:72:88:c9:d9:5d:23:f0:7d:13:e8:85:87:d8:c5:12:55:f4: 23:0c:5e:26:65:e7:fd:a1:d7:11:1e:5d:f1:4a:55:b2:52:20: 50:33:03:2b:ac:9e:02:ab:c9:98:e5:cd:45:7d:e6:92:1a:5d: 5c:75:4c:67:fd:57:a8:53:0e:f5:ac:05:0c:1f:df:3e:8a:47: 6f:c5:2c:ff:ab:22:ed:0e:2b:a2:4b:ff:9b:3b:f7:88:52:a6: e3:da:8a:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjUwNTExMDM0NzA2WhcNMjUwNTE4MDM0NzA2WjAYMRYwFAYD VQQDEw02ODIwMWRiYi00MThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQozbrjkShM9aDyIQhHvqW/AfJWO9S6uF/WT8Usg+dvixxWPKf30S3QFVNGh CJNdmbVoL4hKx8LaXeNOurwEh0Op4u1L7O5/eyV1osLV7jVOMiwf6QOADFLXjiZt 481Vqyhii4hYqOixXOWgYnjredNuuL9nmN5vnPEIwagThQAR82HhDl9m9qKYOQ6D 6t6HWUp90Ym6BoaqSmh4H0WANUG/l9tCd0+QWnuO61j0RpGqh24i75kTr7HQn7Gd VshhwAypkYGGYgocKTyHpFLtGundpnzrRSRZI9xvwTJ0Ec6wKtq613fuI8uo+IXS Z07HS38LvTdSIO8NvBODiXcTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbZUnYy ggbjh3hv2z4tawH9BbjoMB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjRGNi9FMUNGM0M1NjkwREIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJ OFNiQWJvS1hEcnRJdGtZOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8KjjiQgRsyxCl0I7OuWDEuMU4gbcuQnCnVd7pt8zGgaBNHQPdTB8S 6yt6CM0WDURtL9so/fb4Iaji0HTWj7DN81pwHMNaLhArJQ7LQAzGlrRakg5QJ2Ir QOw9uVnpfl6gcwtII4Ju70WgL6Xmdhop96WuynPn62J1YxCJp6AQUBF6f3XtrIUc NgFMBim+Bl1YcG7396ipTnsu9JG2d2HHUcb0cojJ2V0j8H0T6IWH2MUSVfQjDF4m Zef9odcRHl3xSlWyUiBQMwMrrJ4Cq8mY5c1FfeaSGl1cdUxn/VeoUw71rAUMH98+ ikdvxSz/qyLtDiuiS/+bO/eIUqbj2ork -----END CERTIFICATE-----Generated at Sun May 11 19:17:01 2025 by rpki-client