$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: pgOv++KucX0iB/RSlFu5/8RvgBzmNMzIpm4W3zzm06w= Subject key identifier: 9F:1D:DC:85:C4:40:FF:B2:A0:7A:E7:49:29:9D:8F:B1:C2:4E:69:D4 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01B5 Signing time: Sun 11 May 2025 02:06:40 +0000 Manifest this update: Sun 11 May 2025 02:06:40 +0000 Manifest next update: Sun 18 May 2025 02:06:40 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: L1GI4IeCJ4IfRaVcx94o2nQMxIRNP1lzskayTFOzdkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: May 11 02:06:40 2025 GMT Not After : May 18 02:06:40 2025 GMT Subject: CN=68200630-a6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:e4:fb:c1:16:d3:9f:74:ea:54:98:dc:e5: 8c:63:2a:5d:c4:8b:c0:e7:37:ee:c4:27:e4:84:51: a4:e6:d0:37:77:ed:18:f0:85:61:5f:ce:44:89:16: e1:ba:ec:0f:9c:c6:26:06:4b:c0:91:52:00:e6:41: 13:6c:b3:29:31:40:0b:82:68:ed:49:e5:19:b8:14: 44:72:9a:e6:af:6a:ca:17:68:a7:80:9a:87:c9:a9: 9f:09:5a:08:12:0e:38:cf:a9:cf:17:5d:58:9b:3c: 82:43:cf:2d:86:79:bf:ad:fb:57:91:e0:4f:80:de: c3:7e:98:a1:2a:50:b5:c3:23:52:65:90:2f:18:fe: 92:53:52:a3:46:29:93:1c:1f:04:41:21:97:34:6b: 73:a1:4c:95:a0:46:cd:a6:9a:07:00:54:34:68:85: d3:21:b0:48:f1:ea:2e:f3:3b:ce:ad:44:a0:d3:ff: 5c:41:81:26:42:6a:16:e5:25:ac:27:e0:85:c4:6f: 32:c3:f9:0b:9b:d4:6c:5c:fb:11:eb:85:8a:28:98: 12:41:ae:60:d1:5f:11:ec:39:28:e6:17:3b:cd:f7: 3d:46:fc:48:9a:b8:7a:9f:3a:50:93:f7:6e:b2:7b: 07:33:f2:6d:b6:eb:f2:ef:60:e2:02:6e:a5:e8:0e: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1D:DC:85:C4:40:FF:B2:A0:7A:E7:49:29:9D:8F:B1:C2:4E:69:D4 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:ee:7c:ae:e0:81:28:53:65:1f:1f:06:2c:1b:a3:e3:56: 82:1e:73:63:b5:bf:b7:e1:75:12:81:05:15:6d:e7:f4:71:a7: 0a:9e:60:5c:8c:a6:4e:2c:43:0c:77:10:88:0b:e1:77:1b:76: 27:db:cc:4c:47:87:34:25:df:02:e1:43:b0:56:12:29:46:1d: 97:95:d0:fa:54:cb:c5:9e:73:95:36:9c:08:22:1c:19:f2:0e: 3e:3a:59:5e:83:c5:54:89:10:5f:db:85:74:08:42:f8:5a:f1: df:83:30:85:1e:40:56:62:13:95:07:12:00:b7:61:22:d6:dd: a5:f2:d0:3c:c8:9f:00:80:1f:48:1d:e8:15:8f:15:5a:1c:d5: 8c:86:96:6f:7d:1e:3a:e1:65:e1:8f:d5:51:1f:23:ba:9e:81: 16:96:2f:28:c5:95:87:19:1c:3d:2b:dc:ed:18:21:3c:e9:8a: 7c:3d:cf:a1:f4:cf:2b:d4:c4:78:38:73:31:f5:55:9f:3f:51: 00:0a:e0:e7:e7:17:85:61:3c:f5:76:b8:bb:be:c5:a2:33:e5: e4:b0:59:bf:7a:2e:f8:a3:61:06:ce:9f:b2:16:92:92:a9:e3: 29:06:9b:e8:e2:50:f4:f7:0c:08:4d:97:e4:ff:0c:52:33:45: 61:41:81:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwNTExMDIwNjQwWhcNMjUwNTE4MDIwNjQwWjAYMRYwFAYD VQQDEw02ODIwMDYzMC1hNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ufk+8EW05906lSY3OWMYypdxIvA5zfuxCfkhFGk5tA3d+0Y8IVhX85EiRbh uuwPnMYmBkvAkVIA5kETbLMpMUALgmjtSeUZuBREcprmr2rKF2ingJqHyamfCVoI Eg44z6nPF11YmzyCQ88thnm/rftXkeBPgN7DfpihKlC1wyNSZZAvGP6SU1KjRimT HB8EQSGXNGtzoUyVoEbNppoHAFQ0aIXTIbBI8eou8zvOrUSg0/9cQYEmQmoW5SWs J+CFxG8yw/kLm9RsXPsR64WKKJgSQa5g0V8R7Dko5hc7zfc9RvxImrh6nzpQk/du snsHM/Jttuvy72DiAm6l6A5ZBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8d3IXE QP+yoHrnSSmdj7HCTmnUMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+0+58ruCBKFNlHx8GLBuj41aCHnNjtb+34XUSgQUVbef0cacKnmBc jKZOLEMMdxCIC+F3G3Yn28xMR4c0Jd8C4UOwVhIpRh2XldD6VMvFnnOVNpwIIhwZ 8g4+Olleg8VUiRBf24V0CEL4WvHfgzCFHkBWYhOVBxIAt2Ei1t2l8tA8yJ8AgB9I HegVjxVaHNWMhpZvfR464WXhj9VRHyO6noEWli8oxZWHGRw9K9ztGCE86Yp8Pc+h 9M8r1MR4OHMx9VWfP1EACuDn5xeFYTz1dri7vsWiM+XksFm/ei74o2EGzp+yFpKS qeMpBpvo4lD09wwITZfk/wxSM0VhQYEP -----END CERTIFICATE-----Generated at Mon May 12 22:47:37 2025 by rpki-client