$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft File: j3TBdV8YhwjM46Z97ChZk2SN8YM.mft (raw, json) Hash identifier: 67DuHeZ9wg6az1F3ROQqNYIUZE7oIX0Ug7UjuwmFbt0= Subject key identifier: AC:8E:CD:29:07:45:FD:B0:A9:FA:3F:E3:B7:DC:00:03:94:B9:CB:CD Authority key identifier: 8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 Certificate issuer: /CN=A91C5D53/serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft Manifest number: 59 Signing time: Thu 15 May 2025 06:28:26 +0000 Manifest this update: Thu 15 May 2025 06:28:26 +0000 Manifest next update: Thu 22 May 2025 06:28:26 +0000 Files and hashes: 1: j3TBdV8YhwjM46Z97ChZk2SN8YM.crl (hash: +YHjR0XuNmwkRPmLEqmZaBwvBTDX3jSa9bqS5AfQREA=) 2: 916E1DB8C1D611EFB61BE32DC4F9AE02.roa (hash: JnGUEG/UELgRSrXf0UwtaiJ+4LEhgtXWroHpv/a9KQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D53, serialNumber=8F74C1755F188708CCE3A67DEC285993648DF183 Validity Not Before: May 15 06:28:26 2025 GMT Not After : May 22 06:28:26 2025 GMT Subject: CN=6825898a-93f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:a8:f3:74:7c:95:81:5b:a6:81:c5:03:ad: f9:cb:aa:5d:c0:30:9f:64:a5:f2:78:3e:88:aa:41: 1a:6b:b1:d5:d8:aa:2a:f3:30:61:9a:08:61:8c:1d: 12:0e:4a:17:ec:89:56:56:cf:28:ad:69:95:cd:8c: b6:e4:ac:5f:0c:78:0b:a9:87:d4:ef:d8:af:d1:ae: 91:2c:cf:a0:ac:ae:58:18:89:96:eb:68:aa:34:35: 51:8f:44:9c:46:d0:07:1f:8c:ff:85:6a:ad:4c:7f: ae:bc:5c:5e:e9:8a:7e:85:e1:1e:47:e4:13:0e:72: c1:ac:2c:b7:07:49:76:7c:16:bc:26:48:17:b1:05: 90:60:41:1f:3f:37:1a:1e:21:43:82:bc:1f:e3:c5: 42:02:f6:01:ee:3d:3c:2c:9e:e4:07:57:19:b8:49: 0f:80:c5:d9:4a:2e:ae:13:44:88:82:79:22:c6:ef: a8:cb:21:f2:56:d2:de:ff:df:b9:33:4b:1c:20:4f: 13:d9:01:1f:b8:82:9f:c2:b5:14:83:1a:45:79:b9: 53:fd:d2:5c:77:bc:e4:12:81:e4:e5:25:74:cf:24: ca:40:33:58:22:46:22:11:e2:84:7d:51:11:a8:03: c3:85:61:5a:40:4d:27:24:61:dc:49:0f:d2:58:b3: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8E:CD:29:07:45:FD:B0:A9:FA:3F:E3:B7:DC:00:03:94:B9:CB:CD X509v3 Authority Key Identifier: keyid:8F:74:C1:75:5F:18:87:08:CC:E3:A6:7D:EC:28:59:93:64:8D:F1:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/j3TBdV8YhwjM46Z97ChZk2SN8YM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/FC7D6086AC8311EF8214972BC4F9AE02/j3TBdV8YhwjM46Z97ChZk2SN8YM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b9:48:56:06:59:fc:ec:cb:6c:2d:89:37:25:38:c7:a6:1d: b2:c1:6d:7c:62:c7:26:1a:7e:2b:69:56:ee:a2:35:74:83:e7: 80:6c:fa:b6:44:50:0d:9d:7e:79:e8:2d:0c:1d:f6:cf:bc:a5: 1e:e2:a7:05:46:d7:54:d9:49:42:19:c1:f3:bf:4e:0c:94:40: d1:e1:a2:d5:0e:5b:c0:dc:08:6a:ab:f7:fb:4d:8a:2c:d2:4a: 92:c2:42:32:c0:0e:03:61:a5:9c:20:e7:c6:e5:19:1b:fe:c5: 0b:d3:83:8c:a6:f4:0d:ca:3e:9e:18:51:3f:27:e7:71:55:82: 42:51:1f:90:4b:32:5b:e8:dd:56:2e:14:c9:a1:89:93:2b:f6: a8:26:71:76:d3:c3:72:30:bf:ff:c6:8c:45:be:34:55:71:bb: 0b:ad:de:65:65:ce:82:5f:aa:80:69:f5:89:83:50:9e:69:8a: 08:ac:b1:b2:98:3f:f2:09:47:1c:44:c4:6d:2a:0d:f8:24:5f: 6b:e3:22:37:7c:22:d4:16:27:58:f9:d5:76:15:76:7f:76:af: b6:8a:eb:85:db:d9:ea:cd:28:45:2a:d5:9b:f6:aa:82:cd:17: 7d:dd:4d:fd:e7:88:65:f5:1a:82:91:7e:12:db:c1:21:03:06: 67:86:1d:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUQ1MzExMC8GA1UEBRMoOEY3NEMxNzU1RjE4ODcwOENDRTNBNjdERUMyODU5OTM2 NDhERjE4MzAeFw0yNTA1MTUwNjI4MjZaFw0yNTA1MjIwNjI4MjZaMBgxFjAUBgNV BAMTDTY4MjU4OThhLTkzZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk9KjzdHyVgVumgcUDrfnLql3AMJ9kpfJ4PoiqQRprsdXYqirzMGGaCGGMHRIO ShfsiVZWzyitaZXNjLbkrF8MeAuph9Tv2K/RrpEsz6CsrlgYiZbraKo0NVGPRJxG 0AcfjP+Faq1Mf668XF7pin6F4R5H5BMOcsGsLLcHSXZ8FrwmSBexBZBgQR8/Nxoe IUOCvB/jxUIC9gHuPTwsnuQHVxm4SQ+AxdlKLq4TRIiCeSLG76jLIfJW0t7/37kz SxwgTxPZAR+4gp/CtRSDGkV5uVP90lx3vOQSgeTlJXTPJMpAM1giRiIR4oR9URGo A8OFYVpATSckYdxJD9JYs8ORAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrI7NKQdF /bCp+j/jt9wAA5S5y80wHwYDVR0jBBgwFoAUj3TBdV8YhwjM46Z97ChZk2SN8YMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1RDUzL0ZDN0Q2MDg2QUM4 MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdqTTQ2Wjk3Q2haazJTTjhZ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvajNUQmRWOFlod2pNNDZaOTdDaFprMlNOOFlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 RDUzL0ZDN0Q2MDg2QUM4MzExRUY4MjE0OTcyQkM0RjlBRTAyL2ozVEJkVjhZaHdq TTQ2Wjk3Q2haazJTTjhZTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAi5SFYGWfzsy2wtiTclOMemHbLBbXxixyYafitpVu6iNXSD54Bs+rZE UA2dfnnoLQwd9s+8pR7ipwVG11TZSUIZwfO/TgyUQNHhotUOW8DcCGqr9/tNiizS SpLCQjLADgNhpZwg58blGRv+xQvTg4ym9A3KPp4YUT8n53FVgkJRH5BLMlvo3VYu FMmhiZMr9qgmcXbTw3Iwv//GjEW+NFVxuwut3mVlzoJfqoBp9YmDUJ5pigissbKY P/IJRxxExG0qDfgkX2vjIjd8ItQWJ1j51XYVdn92r7aK64Xb2erNKEUq1Zv2qoLN F33dTf3niGX1GoKRfhLbwSEDBmeGHQs= -----END CERTIFICATE-----Generated at Fri May 16 08:20:33 2025 by rpki-client