$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: BUB3CimcWuSHPBRMoF36HkByJ7r7U4ejSitEaEIYaoA= Subject key identifier: D7:65:E1:79:08:31:B9:60:E6:45:AD:18:8E:9F:29:79:20:EC:83:4F Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0F98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0F91 Signing time: Thu 08 May 2025 17:35:41 +0000 Manifest this update: Thu 08 May 2025 17:35:41 +0000 Manifest next update: Thu 15 May 2025 17:35:41 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: lXQ72oIqu6Bzwn27P8TFOtMbSc5VIziVfY+GleufEiw=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3992 (0xf98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: May 8 17:35:41 2025 GMT Not After : May 15 17:35:41 2025 GMT Subject: CN=681ceb6d-8db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:a4:7f:45:e6:de:a1:15:80:5d:74:9b:6c: 4a:b5:2c:fc:2e:a8:24:22:28:ef:24:fd:4c:21:eb: 2a:be:d5:7e:fc:33:32:67:24:af:f7:7a:f3:f5:05: 7a:0d:05:c6:1e:ba:65:a1:be:fb:db:82:58:06:ac: d9:12:35:89:93:ae:f3:29:7c:ec:48:cc:bb:e6:fd: ae:90:74:75:3e:aa:45:d7:a9:7e:35:47:33:4f:02: 6c:84:4d:7a:a9:f0:86:f8:e1:dc:98:2b:fc:5b:a8: 2a:1a:dd:33:71:27:f6:26:0e:ea:6d:0c:e1:82:67: 0d:2b:72:3b:04:6d:8e:c9:f5:65:4b:32:79:0b:8c: 15:14:de:26:54:24:bf:c1:f8:42:c1:c2:ea:a9:61: e0:e8:21:77:47:69:b3:82:33:37:fb:cc:cb:0d:a5: a0:12:5e:ce:46:75:22:f4:5e:df:0a:75:d8:35:31: eb:a7:a7:2d:be:1e:5d:0c:4f:63:0e:06:95:c5:56: f9:f1:ee:4f:4d:1a:3f:5a:e3:06:38:0c:ed:e4:db: 85:34:85:fa:18:e8:31:75:9f:ee:6d:20:29:05:fe: 9c:f1:16:ba:76:82:ba:57:d4:04:7d:f5:ff:32:f9: c2:16:37:06:df:bb:e6:82:ad:f1:c4:29:d7:1b:41: c4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:65:E1:79:08:31:B9:60:E6:45:AD:18:8E:9F:29:79:20:EC:83:4F X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ae:b5:d9:ef:24:3f:54:ec:9b:bf:26:e3:b7:ed:3b:93:ed: 30:03:0e:46:9b:37:9f:d7:cd:5e:75:03:d0:fe:54:fd:89:31: a3:7d:3c:22:6b:94:95:69:52:f5:83:82:ed:36:b0:7f:a0:12: 19:50:c3:0d:39:08:59:a6:22:9d:58:f5:51:12:75:6f:3c:c5: 48:a0:cc:c5:8a:df:39:41:1a:64:d1:2c:a8:9f:64:85:6d:95: e0:f8:1e:e5:a9:c6:c1:f0:20:c8:98:b7:66:20:18:4e:b1:7e: cc:5e:d9:46:c4:70:1c:8d:76:09:10:32:5c:8b:53:c1:35:5e: 50:20:06:2c:25:8b:35:32:63:d2:cb:a1:2d:1b:47:8d:d5:51: 3e:04:8b:80:78:5f:5d:e9:ad:b2:de:57:0a:74:b9:62:ef:d1: 3c:40:ee:67:c0:2e:0f:98:11:fc:91:5b:66:ec:db:ea:77:2f: ba:ba:61:2c:29:54:cb:f4:71:af:95:e1:64:25:35:84:ac:f0: 0c:53:3c:81:e9:86:eb:f7:61:04:c6:1d:42:ca:dc:76:0c:b5: 4e:e2:2d:3b:f5:81:1f:15:cd:7a:71:2a:26:03:ca:97:27:c4: 9f:ee:f8:9d:2f:fe:44:bb:e2:d5:c4:cb:64:57:17:b9:d4:3d: 62:fd:2c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNTA4MTczNTQxWhcNMjUwNTE1MTczNTQxWjAYMRYwFAYD VQQDEw02ODFjZWI2ZC04ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXqkf0Xm3qEVgF10m2xKtSz8LqgkIijvJP1MIesqvtV+/DMyZySv93rz9QV6 DQXGHrplob7724JYBqzZEjWJk67zKXzsSMy75v2ukHR1PqpF16l+NUczTwJshE16 qfCG+OHcmCv8W6gqGt0zcSf2Jg7qbQzhgmcNK3I7BG2OyfVlSzJ5C4wVFN4mVCS/ wfhCwcLqqWHg6CF3R2mzgjM3+8zLDaWgEl7ORnUi9F7fCnXYNTHrp6ctvh5dDE9j DgaVxVb58e5PTRo/WuMGOAzt5NuFNIX6GOgxdZ/ubSApBf6c8Ra6doK6V9QEffX/ MvnCFjcG37vmgq3xxCnXG0HEXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdl4XkI Mblg5kWtGI6fKXkg7INPMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdrrXZ7yQ/VOybvybjt+07k+0wAw5Gmzef181edQPQ/lT9iTGjfTwi a5SVaVL1g4LtNrB/oBIZUMMNOQhZpiKdWPVREnVvPMVIoMzFit85QRpk0Syon2SF bZXg+B7lqcbB8CDImLdmIBhOsX7MXtlGxHAcjXYJEDJci1PBNV5QIAYsJYs1MmPS y6EtG0eN1VE+BIuAeF9d6a2y3lcKdLli79E8QO5nwC4PmBH8kVtm7Nvqdy+6umEs KVTL9HGvleFkJTWErPAMUzyB6Ybr92EExh1Cytx2DLVO4i079YEfFc16cSomA8qX J8Sf7vidL/5Eu+LVxMtkVxe51D1i/Swl -----END CERTIFICATE-----Generated at Fri May 9 01:33:09 2025 by rpki-client