$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: IC8WpjyG94uWOXOHCZCFaUh33hA4tjhhxbSmFapi93w= Subject key identifier: 30:4C:DD:BB:2C:D9:0E:57:65:CA:1F:93:B2:07:18:D5:5D:70:BF:E5 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 027E Signing time: Tue 13 May 2025 01:27:07 +0000 Manifest this update: Tue 13 May 2025 01:27:07 +0000 Manifest next update: Tue 20 May 2025 01:27:07 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: 6AyBgvSUB3cEdC/pSU/lQRvlxJy2zxX3af619MsRBqU=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: w/vd8cJquU/77tUydhBl7y4vX7K0tJ56IOJFeJTKQQY=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: aWVOZdqCRpaD5wVJp7PQwGvmT4WvDuk+Zr3vN2zui6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: May 13 01:27:07 2025 GMT Not After : May 20 01:27:07 2025 GMT Subject: CN=68229feb-983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:4a:6e:a7:26:72:9c:db:2b:50:59:aa:2a: 59:07:af:0a:87:25:9e:a8:ba:98:56:7a:50:f1:d4: 88:59:f7:20:e4:5b:c8:b2:15:88:68:a5:9e:9b:f1: 0d:78:e7:00:9c:30:9b:e0:b9:f2:26:61:16:ab:8c: ba:10:e3:fe:cb:f8:7a:36:0f:11:96:eb:a6:49:93: dc:12:31:00:ee:8d:fc:ad:ac:16:e3:bc:ff:9b:62: 73:a1:c1:06:7b:5a:51:05:61:49:ff:c4:af:62:a0: a3:ba:8b:ed:10:d0:47:33:1f:fe:02:fb:b6:24:b5: 1f:a1:c5:6d:b4:fd:93:e1:8b:b4:5d:84:aa:eb:a7: 17:73:4b:7a:7a:c4:d2:f5:58:5c:5f:aa:7b:5a:01: 1b:aa:56:79:f0:ba:c8:10:db:79:79:4b:1f:98:6a: 39:1d:b4:df:f0:37:4d:d0:fe:8b:c2:34:d7:85:96: 09:d1:fa:24:4a:9d:a7:40:b0:70:54:79:21:13:6e: 0f:12:31:b1:08:ca:94:dc:37:31:5c:52:00:95:a6: 3f:fa:ae:65:64:8c:28:44:2d:33:ec:49:a7:00:6c: 68:10:4c:d7:04:6b:4b:99:b2:30:a5:69:8e:f0:ae: da:16:4f:34:cc:49:81:8c:22:9c:c4:50:21:a5:f9: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4C:DD:BB:2C:D9:0E:57:65:CA:1F:93:B2:07:18:D5:5D:70:BF:E5 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:35:d4:b0:a3:91:43:07:64:d6:a2:11:35:84:7b:7c:93:fe: 44:f1:73:0a:c1:7a:0a:45:95:12:79:4d:e0:79:6e:cd:1e:87: 64:4f:49:3c:8a:87:d9:73:81:b0:7d:0b:e7:66:ef:10:e3:3e: 06:ae:ca:e5:51:fb:fd:d0:ff:af:8f:8b:a0:76:76:74:eb:7b: 89:3b:d0:fa:d7:5c:80:01:8e:65:bc:b1:58:bc:3f:b9:cf:db: 5e:be:62:1c:f0:34:57:e4:bf:7b:32:31:e1:e0:16:cf:7e:db: 06:e4:e4:a9:d9:0a:54:bb:a0:08:45:ac:de:de:42:76:ae:ab: 1c:f4:b9:18:25:a3:76:6f:96:cb:aa:96:ed:9a:9f:9c:3c:ff: 62:df:d6:32:8d:7a:99:9e:af:83:75:9c:eb:92:b9:03:21:73: 95:05:01:ca:cd:63:60:36:7a:08:7f:c8:cb:a1:1f:7c:f5:a7: ba:22:62:4a:98:ba:c3:4e:71:a8:78:60:e8:56:be:b6:29:7c: 8b:38:17:12:c0:6d:ce:61:f3:f7:4e:c1:8c:1f:b8:18:23:1d: 36:98:20:aa:e3:b8:5a:73:9c:bc:76:67:a6:93:dd:cf:17:2b: 32:27:b6:96:83:4d:51:58:98:35:0c:d8:c4:65:26:0b:6e:b4: 08:3e:61:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUwNTEzMDEyNzA3WhcNMjUwNTIwMDEyNzA3WjAYMRYwFAYD VQQDEw02ODIyOWZlYi05ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTRKbqcmcpzbK1BZqipZB68KhyWeqLqYVnpQ8dSIWfcg5FvIshWIaKWem/EN eOcAnDCb4LnyJmEWq4y6EOP+y/h6Ng8RluumSZPcEjEA7o38rawW47z/m2JzocEG e1pRBWFJ/8SvYqCjuovtENBHMx/+Avu2JLUfocVttP2T4Yu0XYSq66cXc0t6esTS 9VhcX6p7WgEbqlZ58LrIENt5eUsfmGo5HbTf8DdN0P6LwjTXhZYJ0fokSp2nQLBw VHkhE24PEjGxCMqU3DcxXFIAlaY/+q5lZIwoRC0z7EmnAGxoEEzXBGtLmbIwpWmO 8K7aFk80zEmBjCKcxFAhpfm0qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBM3bss 2Q5XZcofk7IHGNVdcL/lMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZNdSwo5FDB2TWohE1hHt8k/5E8XMKwXoKRZUSeU3geW7NHodkT0k8 iofZc4GwfQvnZu8Q4z4GrsrlUfv90P+vj4ugdnZ063uJO9D611yAAY5lvLFYvD+5 z9tevmIc8DRX5L97MjHh4BbPftsG5OSp2QpUu6AIRaze3kJ2rqsc9LkYJaN2b5bL qpbtmp+cPP9i39YyjXqZnq+DdZzrkrkDIXOVBQHKzWNgNnoIf8jLoR989ae6ImJK mLrDTnGoeGDoVr62KXyLOBcSwG3OYfP3TsGMH7gYIx02mCCq47hac5y8dmemk93P FysyJ7aWg01RWJg1DNjEZSYLbrQIPmHF -----END CERTIFICATE-----Generated at Wed May 14 01:04:40 2025 by rpki-client