$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: ti7YBemLoRyJWJczLAHaRXf79Z1BP8y9Z8VOLDdTVKo= Subject key identifier: 44:83:EF:0C:E7:E3:3D:0E:7A:13:16:C8:C0:F1:AC:4C:CA:D3:55:55 Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: 86 Signing time: Tue 13 May 2025 05:45:14 +0000 Manifest this update: Tue 13 May 2025 05:45:13 +0000 Manifest next update: Tue 20 May 2025 05:45:13 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: bQ+n3g97sSLKF1cnOgcBiCWH9dNGKy9DbjbYxGufji8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: May 13 05:45:13 2025 GMT Not After : May 20 05:45:13 2025 GMT Subject: CN=6822dc6a-fe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:e4:7b:35:6a:1e:84:0e:2e:e6:8f:0c:aa: d1:20:d0:e8:3b:14:ef:2f:5d:1f:dc:60:a1:3f:ef: af:70:24:ae:28:f5:89:56:90:b4:73:d2:5d:03:2a: 26:b3:83:e0:eb:9d:64:fd:51:3c:a3:de:35:8a:90: a9:f8:0a:b4:6b:85:4e:75:c4:73:51:c4:12:d6:d0: a8:f1:58:85:b6:33:dd:46:d8:6f:77:56:ea:ed:a0: b6:9e:67:b9:86:60:65:d7:37:86:0d:09:a9:fd:ee: e9:34:18:c3:2e:bf:bf:82:1e:80:46:2f:56:bb:b7: 8a:92:42:f1:60:41:ef:ea:2d:8a:69:81:64:57:17: 9b:f4:d5:58:86:2c:13:0e:1e:55:30:83:ff:9c:45: 84:a9:f8:db:b4:46:12:6f:5f:cf:52:98:14:15:89: ef:e0:ca:b1:28:d5:6b:e0:b3:e8:96:36:80:73:d1: 96:1d:b6:31:c5:ba:77:19:72:40:a0:fe:c0:78:37: 37:bb:b3:2d:8b:9d:77:65:d5:f4:ec:04:99:2d:96: 18:6c:c9:00:12:29:69:4a:20:40:9b:82:e5:d7:82: 4b:64:70:e6:0e:76:66:9c:38:5b:73:99:5b:a4:ce: c1:02:d5:b2:41:1e:15:cb:61:42:64:71:86:36:55: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:EF:0C:E7:E3:3D:0E:7A:13:16:C8:C0:F1:AC:4C:CA:D3:55:55 X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f5:13:c7:22:5b:d6:fd:2c:9c:12:25:58:67:b0:c8:d1:36: ab:8f:06:cf:7f:02:3d:83:df:2b:0e:44:11:67:c6:70:55:b9: 2a:56:20:1c:00:00:4e:d9:72:58:dc:d9:0a:08:01:05:af:6f: 9c:c6:c8:ac:5f:c9:84:06:80:39:6d:4c:ee:d7:31:e8:d2:bf: c6:87:2a:32:e2:4f:11:cc:77:ab:ba:39:6a:39:30:3b:70:49: 7f:e2:f3:75:3f:29:72:c9:6f:41:88:c3:9a:54:75:bc:45:1e: 8a:11:40:36:14:5f:9d:97:d8:ef:73:7c:fa:90:f2:8b:36:ed: b7:8f:1c:91:b0:f1:07:70:c1:8f:d3:a4:31:f5:83:b9:86:e8: d4:f3:9b:e5:b0:38:4d:09:9b:74:d3:e4:78:87:8f:87:c1:2c: 8e:33:40:37:51:d1:61:24:bb:2b:15:8d:72:13:a0:ab:ab:db: eb:d5:5b:18:6f:13:ee:d8:40:c4:93:fc:ad:71:a5:09:57:36: 8f:70:34:11:1c:f1:08:5d:56:91:09:b8:6c:de:7c:c4:3a:6f: 6e:49:e6:28:64:c3:29:17:3b:3e:a9:8a:a9:a3:c0:97:dc:f8: 95:ab:a5:c6:d5:31:a5:f7:89:fd:09:84:48:87:19:9b:ce:79: 00:93:07:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUwNTEzMDU0NTEzWhcNMjUwNTIwMDU0NTEzWjAYMRYwFAYD VQQDEw02ODIyZGM2YS1mZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshLkezVqHoQOLuaPDKrRINDoOxTvL10f3GChP++vcCSuKPWJVpC0c9JdAyom s4Pg651k/VE8o941ipCp+Aq0a4VOdcRzUcQS1tCo8ViFtjPdRthvd1bq7aC2nme5 hmBl1zeGDQmp/e7pNBjDLr+/gh6ARi9Wu7eKkkLxYEHv6i2KaYFkVxeb9NVYhiwT Dh5VMIP/nEWEqfjbtEYSb1/PUpgUFYnv4MqxKNVr4LPoljaAc9GWHbYxxbp3GXJA oP7AeDc3u7Mti513ZdX07ASZLZYYbMkAEilpSiBAm4Ll14JLZHDmDnZmnDhbc5lb pM7BAtWyQR4Vy2FCZHGGNlXerwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESD7wzn 4z0OehMWyMDxrEzK01VVMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv9RPHIlvW/SycEiVYZ7DI0TarjwbPfwI9g98rDkQRZ8ZwVbkqViAc AABO2XJY3NkKCAEFr2+cxsisX8mEBoA5bUzu1zHo0r/Ghyoy4k8RzHerujlqOTA7 cEl/4vN1PylyyW9BiMOaVHW8RR6KEUA2FF+dl9jvc3z6kPKLNu23jxyRsPEHcMGP 06Qx9YO5hujU85vlsDhNCZt00+R4h4+HwSyOM0A3UdFhJLsrFY1yE6Crq9vr1VsY bxPu2EDEk/ytcaUJVzaPcDQRHPEIXVaRCbhs3nzEOm9uSeYoZMMpFzs+qYqpo8CX 3PiVq6XG1TGl94n9CYRIhxmbznkAkweO -----END CERTIFICATE-----Generated at Wed May 14 01:26:01 2025 by rpki-client