$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: 30vRuezCPVkFhIGCuJLvvyL0obDiSGpsMXHgL9sjbTM= Subject key identifier: 2D:D0:6A:1D:3B:B9:B1:40:65:6F:33:76:EB:08:97:C1:B8:01:9D:8A Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 0742 Signing time: Wed 14 May 2025 21:45:39 +0000 Manifest this update: Wed 14 May 2025 21:45:39 +0000 Manifest next update: Wed 21 May 2025 21:45:39 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: zOIG3qzFz/BazzAipVzyQ/ZDwylpBsFU+RETW+IzI2g=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: May 14 21:45:39 2025 GMT Not After : May 21 21:45:39 2025 GMT Subject: CN=68250f03-482b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:be:c8:65:44:f0:c1:44:07:7c:12:ed:ee: fd:4f:8a:e7:a9:de:b5:be:8a:c9:77:d6:22:7a:44: 5a:6c:c9:7d:92:66:a4:2a:b3:71:56:76:26:65:42: ed:77:1b:3e:86:a1:6d:97:34:19:f6:af:4a:b6:a5: 4e:35:7f:40:9e:bd:40:fe:d2:c1:1e:e6:44:80:89: ff:32:35:3c:60:20:b2:12:46:5b:8f:e7:4c:9c:b3: 87:7b:56:03:69:ae:f3:d0:9e:ce:31:c9:ba:35:b2: db:2e:df:87:1e:d2:6e:7d:9b:89:3b:9e:9f:41:2a: 6e:da:0e:e7:22:34:43:cd:e5:64:9b:93:5e:cd:ab: 31:3a:c5:b7:d5:95:3e:28:7c:8b:e5:8f:2f:7f:95: fb:fb:cf:a9:83:8f:9b:42:50:16:29:51:01:43:67: ce:6b:3b:ab:c5:43:84:22:06:01:61:d1:f7:5c:9b: 8f:5a:bf:7e:ec:5e:17:4e:63:a5:63:1c:52:68:ce: 10:88:bb:d0:e6:fa:ad:c4:56:13:b1:56:be:47:36: c6:e8:3f:14:c2:bb:81:b6:c0:97:44:4b:b0:44:04: e6:95:9a:87:11:26:6e:b4:a8:ae:5f:09:02:ba:19: b7:00:bf:71:ae:db:39:44:25:c3:01:94:c8:7d:66: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D0:6A:1D:3B:B9:B1:40:65:6F:33:76:EB:08:97:C1:B8:01:9D:8A X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fb:47:5a:bf:81:aa:f7:7c:fa:c3:6c:73:3b:1e:4c:ba:7a: ea:ee:8c:57:42:d1:07:68:ed:5b:47:d5:3c:a4:5a:3c:31:e9: 17:62:5d:46:b8:5c:84:00:a3:2f:b7:b4:3b:05:ac:c7:c0:7c: cd:f7:b0:b2:67:49:f2:ea:e0:d9:70:c2:91:e5:33:c9:d2:d7: 65:ef:0f:77:4b:0a:8d:50:42:95:dc:3b:10:af:cc:93:bc:d9: 5a:d5:01:8c:bb:61:b7:ab:c8:2a:84:8e:cf:49:a7:02:64:2b: 29:b0:d3:e9:9f:b7:30:b1:7d:94:2a:1d:a8:46:bb:7b:40:4e: 59:e6:d4:c0:18:e9:eb:ba:bb:7d:88:c3:bd:a7:c5:aa:f4:55: b1:a8:c3:87:3b:0e:bd:50:b7:a8:36:9a:6e:6c:85:6d:77:13: 03:8b:ac:3c:66:8a:88:9a:09:0d:b6:20:d0:e6:93:f8:95:eb: 3c:c2:5b:8d:be:0a:5f:0d:7c:a7:fd:d2:38:d9:ee:f7:d1:c5: 3b:0f:58:57:c4:c4:f1:40:b6:e5:dc:16:d1:16:6e:d4:f5:dd: c4:08:07:56:5a:ea:e2:bf:1d:66:88:61:12:ff:f7:64:f2:fd: ce:24:95:41:ab:4a:97:b0:c8:d2:86:17:a8:5f:95:91:4f:54: ff:2a:c1:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjUwNTE0MjE0NTM5WhcNMjUwNTIxMjE0NTM5WjAYMRYwFAYD VQQDEw02ODI1MGYwMy00ODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWS+yGVE8MFEB3wS7e79T4rnqd61vorJd9YiekRabMl9kmakKrNxVnYmZULt dxs+hqFtlzQZ9q9KtqVONX9Anr1A/tLBHuZEgIn/MjU8YCCyEkZbj+dMnLOHe1YD aa7z0J7OMcm6NbLbLt+HHtJufZuJO56fQSpu2g7nIjRDzeVkm5NezasxOsW31ZU+ KHyL5Y8vf5X7+8+pg4+bQlAWKVEBQ2fOazurxUOEIgYBYdH3XJuPWr9+7F4XTmOl YxxSaM4QiLvQ5vqtxFYTsVa+RzbG6D8UwruBtsCXREuwRATmlZqHESZutKiuXwkC uhm3AL9xrts5RCXDAZTIfWZbdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3Qah07 ubFAZW8zdusIl8G4AZ2KMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg+0dav4Gq93z6w2xzOx5Munrq7oxXQtEHaO1bR9U8pFo8MekXYl1G uFyEAKMvt7Q7BazHwHzN97CyZ0ny6uDZcMKR5TPJ0tdl7w93SwqNUEKV3DsQr8yT vNla1QGMu2G3q8gqhI7PSacCZCspsNPpn7cwsX2UKh2oRrt7QE5Z5tTAGOnrurt9 iMO9p8Wq9FWxqMOHOw69ULeoNppubIVtdxMDi6w8ZoqImgkNtiDQ5pP4les8wluN vgpfDXyn/dI42e730cU7D1hXxMTxQLbl3BbRFm7U9d3ECAdWWurivx1miGES//dk 8v3OJJVBq0qXsMjShheoX5WRT1T/KsEm -----END CERTIFICATE-----Generated at Thu May 15 14:32:58 2025 by rpki-client