$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft File: jUEzbLXQr_8QKCFtlTS7fgLD54U.mft (raw, json) Hash identifier: 6hSyVEvlLNgUnAchRWRv4J+sytysokoSmuVQPpaUSQk= Subject key identifier: E5:26:04:03:77:CE:B6:99:7D:7D:E6:C7:4B:3D:05:D9:68:D6:6F:9B Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft Manifest number: 086E Signing time: Sat 10 May 2025 20:22:08 +0000 Manifest this update: Sat 10 May 2025 20:22:07 +0000 Manifest next update: Sat 17 May 2025 20:22:07 +0000 Files and hashes: 1: jUEzbLXQr_8QKCFtlTS7fgLD54U.crl (hash: lplmcrdz11R4LcPrKW05tHRSxhto9tlhGVjVR/F4kWk=) 2: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (hash: 2JmA3PkYqpUMmOVyVV5dhFWFglZf8xMS4jIUqW1KOUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: May 10 20:22:07 2025 GMT Not After : May 17 20:22:07 2025 GMT Subject: CN=681fb56f-3166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4d:ff:27:a9:df:df:fd:0d:85:0a:67:2a:55: a8:d7:c7:d6:5a:b2:01:9b:f6:6b:34:a2:50:0e:97: 47:0d:6e:9b:7e:53:78:ea:9c:54:37:f7:19:46:b8: 66:cd:eb:d7:3b:46:e8:bf:58:b7:b5:31:37:f4:ca: 55:0c:f8:64:c4:22:0e:18:b3:16:dc:23:4c:d3:f1: c3:88:91:11:bd:07:fd:71:b6:6c:72:1b:43:83:63: ca:4c:09:44:7a:2e:71:2c:7f:5c:d2:df:db:97:df: d5:c2:61:59:ed:e4:ca:6d:50:d6:74:f2:88:d2:5c: 70:d5:88:8d:a5:cc:ca:6f:40:ab:83:3f:e0:49:25: b1:ac:5f:fb:5f:6d:a8:75:78:ec:59:27:58:ce:be: bb:a2:fb:1d:43:cc:37:c1:b3:a3:b8:d1:bd:fa:19: 8a:9c:22:85:62:7d:3c:3b:1f:00:39:2e:c4:19:08: 73:b3:e4:f8:40:8f:a7:80:81:b6:5a:4e:61:3c:22: 50:fc:c2:95:63:3b:57:24:bf:91:b6:7d:06:01:83: a4:5d:fb:c9:76:ca:38:63:05:3b:75:0f:ef:db:76: 72:79:41:50:8b:40:cd:0a:8c:08:63:0a:50:84:7c: 9b:78:78:02:c7:61:28:d9:55:10:b1:4c:f2:cb:09: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:26:04:03:77:CE:B6:99:7D:7D:E6:C7:4B:3D:05:D9:68:D6:6F:9B X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:29:fb:27:58:76:44:70:8b:7b:78:aa:ea:8d:ef:7f:c6:ed: fd:51:be:46:e5:80:fb:c5:aa:9c:8d:91:89:30:a1:3e:87:8d: 02:55:ad:3d:51:e8:33:7e:02:b3:1e:18:1b:a1:6b:f9:a2:9c: 50:85:5b:8d:87:eb:80:48:08:ff:db:c9:0e:51:da:7d:bd:94: 5f:e0:ae:38:e6:7f:c4:57:9e:92:1b:fe:a2:9b:8b:87:b6:e7: 4c:72:56:03:8e:26:1a:b7:45:a6:e3:00:8d:31:d9:a6:cb:bf: b7:08:f5:82:a0:52:e2:85:44:10:eb:d1:60:75:22:48:6d:15: 34:2d:4f:44:8e:cf:d1:39:a0:ae:e4:bb:06:f5:87:e2:81:cd: eb:08:93:83:e4:0e:00:34:48:d1:e1:50:49:e2:ea:f7:8e:7f: 43:72:4f:4a:72:30:36:72:3a:b2:ad:c5:1d:ae:19:ee:62:e9: 61:91:d1:5b:c8:8f:6f:8f:14:f3:02:08:b5:6d:b0:25:70:04: e4:ec:b2:f9:ed:9c:c9:6c:86:a7:7a:7b:c5:2d:79:19:cf:b7: d4:1b:ff:a0:f1:8c:31:7a:9c:44:4e:4e:e5:9b:aa:9a:04:99: 8f:0c:b8:69:43:e7:d7:92:b1:14:c7:02:4a:d2:92:a0:42:d8: 34:46:ae:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUwNTEwMjAyMjA3WhcNMjUwNTE3MjAyMjA3WjAYMRYwFAYD VQQDEw02ODFmYjU2Zi0zMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv03/J6nf3/0NhQpnKlWo18fWWrIBm/ZrNKJQDpdHDW6bflN46pxUN/cZRrhm zevXO0bov1i3tTE39MpVDPhkxCIOGLMW3CNM0/HDiJERvQf9cbZschtDg2PKTAlE ei5xLH9c0t/bl9/VwmFZ7eTKbVDWdPKI0lxw1YiNpczKb0Crgz/gSSWxrF/7X22o dXjsWSdYzr67ovsdQ8w3wbOjuNG9+hmKnCKFYn08Ox8AOS7EGQhzs+T4QI+ngIG2 Wk5hPCJQ/MKVYztXJL+Rtn0GAYOkXfvJdso4YwU7dQ/v23ZyeUFQi0DNCowIYwpQ hHybeHgCx2Eo2VUQsUzyywluDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUmBAN3 zraZfX3mx0s9Bdlo1m+bMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjU0RC84Q0U2MkRGQUMxQTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJf OFFLQ0Z0bFRTN2ZnTEQ1NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1KfsnWHZEcIt7eKrqje9/xu39Ub5G5YD7xaqcjZGJMKE+h40CVa09 UegzfgKzHhgboWv5opxQhVuNh+uASAj/28kOUdp9vZRf4K445n/EV56SG/6im4uH tudMclYDjiYat0Wm4wCNMdmmy7+3CPWCoFLihUQQ69FgdSJIbRU0LU9Ejs/ROaCu 5LsG9Yfigc3rCJOD5A4ANEjR4VBJ4ur3jn9Dck9KcjA2cjqyrcUdrhnuYulhkdFb yI9vjxTzAgi1bbAlcATk7LL57ZzJbIanenvFLXkZz7fUG/+g8YwxepxETk7lm6qa BJmPDLhpQ+fXkrEUxwJK0pKgQtg0Rq6C -----END CERTIFICATE-----Generated at Sun May 11 02:47:57 2025 by rpki-client