$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: g1K7PYyP1IGAA+u1eOjzTQtpxJerN/1FpxG2IT7/xa8= Subject key identifier: 86:87:68:AF:60:66:A6:F7:88:B0:E7:BA:BC:68:F8:AF:5C:5D:19:1D Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 0490 Signing time: Thu 08 May 2025 23:48:48 +0000 Manifest this update: Thu 08 May 2025 23:48:48 +0000 Manifest next update: Thu 15 May 2025 23:48:48 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: ICynZOgxRv5bBPePOL2TXfr4HdCZtCR4R84ycqTQ1qE=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: vSYCfM+ntYW7G9aAaLxoQnL6y+A35VWVI2iBiGFSPJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: May 8 23:48:48 2025 GMT Not After : May 15 23:48:48 2025 GMT Subject: CN=681d42e0-ae35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:eb:81:fc:52:d2:5b:e8:9d:05:f3:5e:ef: d7:d7:39:ac:d2:9b:16:80:18:fa:b2:4f:7e:32:95: 9c:37:58:a8:ff:0b:1b:2c:4d:c0:16:e7:de:de:c7: 3f:bc:84:9d:0a:72:79:cb:dc:bc:6e:20:10:a1:9a: 1a:c2:68:f2:ee:0a:ba:55:65:81:7a:8e:cd:3d:1b: c1:d9:02:e1:dc:83:cb:44:cf:45:8b:d2:26:56:5d: bf:5a:1f:d8:1e:fc:54:1f:1f:a8:a1:56:39:a8:1f: 99:89:1b:ec:e1:66:30:8a:68:de:c9:ff:ba:e2:c1: 54:52:93:62:c0:e8:e7:bd:96:61:b3:88:b8:2d:83: c3:a6:23:ae:17:7b:9f:09:ef:0b:eb:9d:70:8d:ee: 05:fb:4e:20:3a:ad:fc:4d:d7:85:cc:7e:d8:19:66: e2:56:d0:fa:6c:70:5c:91:84:69:3e:09:40:10:1f: 74:15:1d:5d:5a:24:ad:3b:d9:4d:90:2e:dd:47:b1: e5:4b:76:67:7e:ec:8b:25:c8:85:36:c7:7d:85:43: a1:97:02:b9:14:73:3b:3c:bc:fb:e1:cb:fb:87:8c: 7b:81:1c:3f:c8:c7:0d:1b:c2:90:9f:df:4f:54:a7: 6f:55:a4:e6:22:a3:5c:cc:8a:9f:d8:5d:ca:82:4a: f1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:68:AF:60:66:A6:F7:88:B0:E7:BA:BC:68:F8:AF:5C:5D:19:1D X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:95:02:25:a2:27:50:2a:64:6e:1c:27:64:4e:e9:0b:12:2f: 79:36:94:cc:56:03:9a:34:63:a3:cc:96:de:f4:e1:8f:46:63: 90:51:45:b1:b2:0d:29:76:16:2b:0e:48:8e:59:ac:89:b5:bf: b0:bb:b1:66:98:f2:53:25:cf:72:87:30:73:49:c0:06:b9:ba: c6:7f:df:b6:17:aa:81:c6:ca:1a:da:02:b3:49:fb:2f:b2:64: af:e5:5a:3b:62:9e:03:9c:3b:de:2b:1e:c9:fa:74:44:28:93: b9:b4:63:39:e8:ef:66:d4:7a:bc:f9:72:56:6d:56:f2:6b:41: 69:2f:21:8e:6c:97:ac:c9:04:59:f6:fb:24:85:70:f0:c1:a8: 9c:85:4a:0f:b5:8e:5b:91:12:1a:c0:f9:fd:ed:5e:06:64:30: f6:2e:46:9c:b8:91:bc:f4:f1:91:3b:72:5b:c3:2c:2e:cb:f9: cd:dc:89:8e:62:89:05:a7:b1:63:db:d4:b7:5d:1f:4e:63:16: f7:c1:71:63:b7:61:9f:57:2e:7d:de:36:06:06:57:68:72:45: 5d:42:e6:81:c2:30:f3:46:35:60:64:cc:1b:d5:f7:3e:ef:4c: a1:73:46:2e:6e:60:67:4a:07:36:1d:72:c6:f0:ef:bb:4a:ee: 85:b4:1c:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwNTA4MjM0ODQ4WhcNMjUwNTE1MjM0ODQ4WjAYMRYwFAYD VQQDEw02ODFkNDJlMC1hZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD3rgfxS0lvonQXzXu/X1zms0psWgBj6sk9+MpWcN1io/wsbLE3AFufe3sc/ vISdCnJ5y9y8biAQoZoawmjy7gq6VWWBeo7NPRvB2QLh3IPLRM9Fi9ImVl2/Wh/Y HvxUHx+ooVY5qB+ZiRvs4WYwimjeyf+64sFUUpNiwOjnvZZhs4i4LYPDpiOuF3uf Ce8L651wje4F+04gOq38TdeFzH7YGWbiVtD6bHBckYRpPglAEB90FR1dWiStO9lN kC7dR7HlS3ZnfuyLJciFNsd9hUOhlwK5FHM7PLz74cv7h4x7gRw/yMcNG8KQn99P VKdvVaTmIqNczIqf2F3KgkrxFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaHaK9g Zqb3iLDnurxo+K9cXRkdMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3lQIloidQKmRuHCdkTukLEi95NpTMVgOaNGOjzJbe9OGPRmOQUUWx sg0pdhYrDkiOWayJtb+wu7FmmPJTJc9yhzBzScAGubrGf9+2F6qBxsoa2gKzSfsv smSv5Vo7Yp4DnDveKx7J+nREKJO5tGM56O9m1Hq8+XJWbVbya0FpLyGObJesyQRZ 9vskhXDwwaichUoPtY5bkRIawPn97V4GZDD2LkacuJG89PGRO3Jbwywuy/nN3ImO YokFp7Fj29S3XR9OYxb3wXFjt2GfVy593jYGBldockVdQuaBwjDzRjVgZMwb1fc+ 70yhc0YubmBnSgc2HXLG8O+7Su6FtBxy -----END CERTIFICATE-----Generated at Sat May 10 13:57:13 2025 by rpki-client