$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft File: jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json) Hash identifier: xhZs9nESnnax+T/HRywU/6SEZ8JtdjzfJusBZ70WADM= Subject key identifier: 61:AC:71:06:25:4F:04:D7:D2:C0:48:7C:61:66:AA:F0:3B:CF:4C:FE Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19 Certificate issuer: /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519 Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft Manifest number: 05CF Signing time: Sun 04 May 2025 22:39:15 +0000 Manifest this update: Sun 04 May 2025 22:39:15 +0000 Manifest next update: Sun 11 May 2025 22:39:15 +0000 Files and hashes: 1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: UrCeYribS+mQqOTpEpAZz4ZwSIJmlVq5TM+gJbsQf3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519 Validity Not Before: May 4 22:39:15 2025 GMT Not After : May 11 22:39:15 2025 GMT Subject: CN=6817ec93-b284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:14:e2:15:34:e9:47:74:f1:36:99:1b:65: 47:be:af:8c:aa:8b:40:9d:33:b5:3d:88:75:e8:50: 55:0a:de:6b:2e:7f:12:e9:85:f4:8c:17:a3:3b:f2: f7:b0:a5:1f:e7:cb:a8:f7:97:49:15:81:f6:1f:83: 74:d5:f6:0a:2b:c1:28:33:a6:db:33:59:d0:f8:33: 1e:28:85:f7:bf:56:4d:19:c3:33:20:fa:ce:24:bf: b8:29:c8:7b:bd:a5:ea:fc:1c:cf:fe:56:b7:f5:5c: ad:22:c6:95:ba:1f:50:09:0f:b3:38:8e:5e:05:a5: ce:2a:6b:79:33:60:e5:e9:93:2c:08:32:66:0b:86: f7:5c:3d:a7:cc:00:b7:a2:6c:b2:f3:ef:9f:dd:e3: cf:af:19:0a:1b:0d:7f:4a:39:c6:69:f4:1d:b5:dd: df:ca:87:ba:88:e5:43:3e:58:d4:b0:66:07:57:95: 1f:55:29:7b:ab:5b:8c:78:05:4e:0b:b9:3f:39:ee: 8a:58:66:95:1e:f5:24:26:f4:18:f9:3f:dc:b0:36: ec:d0:36:8b:ec:86:3c:05:03:8d:89:cd:ab:80:d7: 5b:bf:82:4c:98:50:c2:c2:76:0a:de:75:af:b4:77: f3:01:e0:32:1b:51:4f:fd:8a:4c:30:94:aa:8e:c7: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:71:06:25:4F:04:D7:D2:C0:48:7C:61:66:AA:F0:3B:CF:4C:FE X509v3 Authority Key Identifier: keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:33:98:72:c9:a0:c0:1e:ab:c8:57:63:72:59:de:21:85: 4f:a2:d9:3c:90:2b:9f:0e:35:44:4b:a4:3e:35:04:01:83:67: 88:de:bd:f7:43:9a:d8:3f:10:24:f6:20:78:7a:af:11:fa:46: bc:b2:05:5e:0c:61:de:1d:3a:dd:0a:13:de:32:c7:32:f0:7d: ea:0a:35:de:85:37:87:92:b5:ab:23:ee:25:d6:24:ef:ff:72: 47:18:c3:5e:f4:7b:e8:cb:37:b8:ee:64:76:8c:6e:36:45:d7: 10:a5:4b:c1:7f:38:ee:a9:ee:47:94:77:cd:a9:b2:d5:17:6d: 93:b0:c5:00:a7:df:34:92:19:f0:c6:be:72:0e:fd:ac:6a:ce: 70:6b:5f:43:9f:b0:a9:e1:99:f2:82:f6:72:e9:6c:92:34:fd: 4d:29:ed:d3:f6:2d:cf:73:1e:42:68:dc:12:2d:58:89:e6:b1: 5d:08:05:59:5e:bd:f8:32:cf:03:6d:98:ce:ab:fe:03:1e:3a: 68:07:9b:96:61:07:c9:b3:ca:b4:60:75:88:28:10:7b:90:0e: 94:82:2b:78:d5:70:07:9e:76:dd:3c:f8:67:2e:c8:6f:3b:db: dd:20:b4:84:00:86:82:cd:eb:d9:52:90:6f:30:73:71:2b:8e: 01:f2:5f:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBDMkUxMTAvBgNVBAUTKDhFOUFFOUE1NzQxRkZBN0VENjhFRUZBM0FEOEIwNThE MDFDQzI1MTkwHhcNMjUwNTA0MjIzOTE1WhcNMjUwNTExMjIzOTE1WjAYMRYwFAYD VQQDEw02ODE3ZWM5My1iMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq8U4hU06Ud08TaZG2VHvq+MqotAnTO1PYh16FBVCt5rLn8S6YX0jBejO/L3 sKUf58uo95dJFYH2H4N01fYKK8EoM6bbM1nQ+DMeKIX3v1ZNGcMzIPrOJL+4Kch7 vaXq/BzP/la39VytIsaVuh9QCQ+zOI5eBaXOKmt5M2Dl6ZMsCDJmC4b3XD2nzAC3 omyy8++f3ePPrxkKGw1/SjnGafQdtd3fyoe6iOVDPljUsGYHV5UfVSl7q1uMeAVO C7k/Oe6KWGaVHvUkJvQY+T/csDbs0DaL7IY8BQONic2rgNdbv4JMmFDCwnYK3nWv tHfzAeAyG1FP/YpMMJSqjsezcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGscQYl TwTX0sBIfGFmqvA7z0z+MB8GA1UdIwQYMBaAFI6a6aV0H/p+1o7vo62LBY0BzCUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEMyRS9BNzE2ODM2OEI0 ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1uN1dqdS1qcllzRmpRSE1K UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pwcnBwWFFmLW43V2p1LWpyWXNGalFITUpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEMyRS9BNzE2ODM2OEI0ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1u N1dqdS1qcllzRmpRSE1KUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8YTOYcsmgwB6ryFdjclneIYVPotk8kCufDjVES6Q+NQQBg2eI3r33 Q5rYPxAk9iB4eq8R+ka8sgVeDGHeHTrdChPeMscy8H3qCjXehTeHkrWrI+4l1iTv /3JHGMNe9Hvoyze47mR2jG42RdcQpUvBfzjuqe5HlHfNqbLVF22TsMUAp980khnw xr5yDv2sas5wa19Dn7Cp4ZnygvZy6WySNP1NKe3T9i3Pcx5CaNwSLViJ5rFdCAVZ Xr34Ms8DbZjOq/4DHjpoB5uWYQfJs8q0YHWIKBB7kA6Ugit41XAHnnbdPPhnLshv O9vdILSEAIaCzevZUpBvMHNxK44B8l9g -----END CERTIFICATE-----Generated at Tue May 6 11:00:09 2025 by rpki-client