$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: A3cCMjXUAXA+s3T9koJcFpr2fS8Hz9yghIXJTH6AbDg= Subject key identifier: 54:0E:46:55:67:65:9B:93:34:EC:A8:1C:1A:F4:1F:E9:0B:E2:21:FF Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 03E2 Signing time: Tue 13 May 2025 00:20:17 +0000 Manifest this update: Tue 13 May 2025 00:20:16 +0000 Manifest next update: Tue 20 May 2025 00:20:16 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: loMbxZA/wfwj8jL3teO/giyOtECeEAU/XRgWnuC3voM=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: May 13 00:20:16 2025 GMT Not After : May 20 00:20:16 2025 GMT Subject: CN=68229041-902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:58:57:be:44:29:21:01:f6:ae:d3:d4:6f: 98:37:fc:cf:03:8f:fa:d7:52:eb:ce:10:13:77:d0: f4:a6:0e:43:74:fc:8c:ec:9a:3f:2d:db:2b:8b:35: 53:3b:aa:e7:a3:c9:74:4a:1f:8e:bb:f6:32:68:e2: c2:ca:15:9c:4d:10:73:b3:49:60:21:2c:5a:a4:cc: 13:b7:f8:6a:a9:63:ab:fd:3b:96:6f:58:3d:f2:37: 8b:ac:5e:e6:d7:3e:42:54:13:f3:98:d8:46:8c:01: 2a:3e:24:45:73:3a:e8:8a:ea:ab:13:18:e2:af:cb: 8b:fb:8e:f7:51:54:2c:3d:3c:d3:72:e7:5c:a9:9c: 8d:1e:84:98:52:f0:6d:ae:1d:ff:d0:b9:e4:56:51: 4c:a4:ac:45:9f:25:cf:c9:4c:06:77:05:b3:71:12: 8a:02:80:39:67:5e:98:ee:1a:e7:01:6a:ba:8a:db: 0d:7b:2a:26:a1:de:d9:b9:e1:ff:85:da:d8:08:76: 87:ab:f6:da:21:2e:05:34:de:48:13:2c:3e:f9:de: 10:31:2f:35:78:01:e3:12:a0:27:45:e6:1b:90:c7: 5b:d6:4a:69:5f:58:e2:a2:30:9d:ba:dd:39:b4:3f: 47:e9:74:32:ec:24:3d:12:db:59:97:99:3b:76:e4: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0E:46:55:67:65:9B:93:34:EC:A8:1C:1A:F4:1F:E9:0B:E2:21:FF X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:eb:98:8e:5b:77:03:c6:bc:0f:75:8a:c8:e2:46:51:00:59: 81:bc:d9:e0:49:c5:ec:2e:6d:3d:b1:b7:5d:6e:51:43:ff:d5: ad:bc:bd:b2:1f:46:cd:57:0c:dc:3e:34:54:31:c5:41:5e:06: 86:87:3f:fe:a5:46:34:76:64:d0:75:1a:72:a8:b4:7a:0b:cb: dd:20:c5:c4:54:a1:1a:3c:c0:91:a9:ea:49:13:5d:90:0e:fc: f7:c8:8c:ee:8d:67:60:6d:ff:49:af:82:f8:fe:74:4d:18:3d: c3:53:6a:97:c5:bb:28:a7:41:55:59:30:3f:17:ec:be:d2:0d: 03:70:7f:8d:cf:6c:5f:05:d8:a9:78:49:02:49:6c:9b:9d:24: 61:4d:d8:c3:0a:69:7b:69:e7:3c:ac:a9:bc:7c:4c:16:27:7a: 75:60:e3:ad:8c:fa:bc:2d:e7:b7:30:eb:59:02:41:82:65:17: ee:be:83:3d:58:86:d4:38:32:b5:85:79:86:cb:55:6d:22:f3: ae:6a:62:f3:03:de:46:b6:47:53:f2:c1:c5:7c:e9:e2:bb:ed: e3:d9:32:85:7a:05:a4:72:64:48:cb:c8:5c:0e:b2:5a:0c:95: 7e:c5:c4:6b:af:73:2a:50:a6:b3:17:05:a2:dc:2f:53:29:54: ec:5c:ca:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwNTEzMDAyMDE2WhcNMjUwNTIwMDAyMDE2WjAYMRYwFAYD VQQDEw02ODIyOTA0MS05MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweVYV75EKSEB9q7T1G+YN/zPA4/611LrzhATd9D0pg5DdPyM7Jo/LdsrizVT O6rno8l0Sh+Ou/YyaOLCyhWcTRBzs0lgISxapMwTt/hqqWOr/TuWb1g98jeLrF7m 1z5CVBPzmNhGjAEqPiRFczroiuqrExjir8uL+473UVQsPTzTcudcqZyNHoSYUvBt rh3/0LnkVlFMpKxFnyXPyUwGdwWzcRKKAoA5Z16Y7hrnAWq6itsNeyomod7ZueH/ hdrYCHaHq/baIS4FNN5IEyw++d4QMS81eAHjEqAnReYbkMdb1kppX1jiojCdut05 tD9H6XQy7CQ9EttZl5k7duTf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQORlVn ZZuTNOyoHBr0H+kL4iH/MB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG65iOW3cDxrwPdYrI4kZRAFmBvNngScXsLm09sbddblFD/9WtvL2y H0bNVwzcPjRUMcVBXgaGhz/+pUY0dmTQdRpyqLR6C8vdIMXEVKEaPMCRqepJE12Q Dvz3yIzujWdgbf9Jr4L4/nRNGD3DU2qXxbsop0FVWTA/F+y+0g0DcH+Nz2xfBdip eEkCSWybnSRhTdjDCml7aec8rKm8fEwWJ3p1YOOtjPq8Lee3MOtZAkGCZRfuvoM9 WIbUODK1hXmGy1VtIvOuamLzA95GtkdT8sHFfOniu+3j2TKFegWkcmRIy8hcDrJa DJV+xcRrr3MqUKazFwWi3C9TKVTsXMq5 -----END CERTIFICATE-----Generated at Wed May 14 14:10:34 2025 by rpki-client