$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: e45a/scb65mto07VUzw4xHwEKoq+ibKyunKy0yOtkmE= Subject key identifier: 85:50:A0:F1:28:82:B2:10:4E:7D:3D:E3:07:12:00:85:32:60:CE:22 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0BC9 Signing time: Mon 12 May 2025 18:41:52 +0000 Manifest this update: Mon 12 May 2025 18:41:52 +0000 Manifest next update: Mon 19 May 2025 18:41:52 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: fYQp2Zdp9o51pUHAyoA6X9O1awipElf6np3dUNJbPGU=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: WVFiwUZapp9A6STjs2oU5G8NhDLpA0+WzTdM80uXluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: May 12 18:41:52 2025 GMT Not After : May 19 18:41:52 2025 GMT Subject: CN=682240f0-2a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:b5:0e:ac:a9:15:3b:ca:89:61:df:78:55: e6:50:8a:a4:c5:06:16:4d:69:0b:06:64:fe:0e:fd: 4f:37:32:26:46:9f:9a:80:41:c1:9a:a8:0d:9e:c9: 5a:62:1f:7b:46:d1:8c:58:12:0e:ef:50:a1:ae:25: 86:a7:7e:eb:9d:13:0e:9c:5c:cd:e5:66:68:c4:f6: c4:ed:58:9e:c5:09:3c:ac:a6:a3:e5:84:10:8d:74: a5:b7:a2:77:6e:29:d4:df:06:f0:34:e3:c0:07:47: 5b:9a:1c:a1:c3:14:99:8a:f7:bb:26:99:ad:22:58: a7:fa:a3:9d:db:90:c1:21:90:c6:bd:d3:03:5d:68: 85:17:49:18:4c:21:70:81:e3:f4:c3:f1:f0:3b:6f: e2:07:ca:41:6d:b1:1c:d1:fe:6c:0b:07:35:30:d9: b3:d0:7c:d7:b8:b5:c4:26:bd:e3:0c:cc:e3:85:9c: cc:3b:28:9c:5d:cb:c4:7d:9a:7e:23:c0:11:18:7c: 8a:1b:4b:09:b2:73:e8:a5:bd:bc:bb:c5:f8:9d:19: 82:29:37:b9:55:cf:ca:eb:b7:c9:ef:c6:5f:60:cb: a6:91:be:a7:d6:58:aa:f0:ec:77:0e:5a:6f:06:eb: 0e:ee:a7:e9:ee:cc:8b:f4:d5:a0:0f:6e:fd:24:e7: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:A0:F1:28:82:B2:10:4E:7D:3D:E3:07:12:00:85:32:60:CE:22 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ef:cc:84:06:99:93:75:1f:4f:9c:75:df:1a:27:ac:03:30: 4b:5b:09:4a:44:7a:02:28:90:dd:6c:12:00:fc:80:53:63:5d: 49:9e:d3:6b:bc:ad:d1:ad:16:ff:72:98:ae:f3:9a:ba:2b:35: 23:9e:70:1c:80:87:39:58:3a:bd:d9:ef:16:bc:56:ce:46:54: b2:87:a9:c1:de:a6:6f:a5:97:7c:fa:01:68:0a:63:b7:b4:28: 5c:c1:da:20:dd:ab:95:ee:ff:bb:da:db:7d:43:29:3f:75:a7: b6:4e:a2:f5:5a:45:16:90:c4:1c:30:13:09:b0:88:b0:06:19: 3b:fe:46:7d:1e:e7:57:5f:f4:91:28:51:0b:2c:cf:5c:ce:fe: fd:fc:da:6b:9a:3e:c9:7b:34:44:63:34:b1:b8:b4:81:b3:b3: 88:7a:3b:4c:e3:53:b3:86:6f:c9:02:dd:24:80:b9:b7:8f:58: a9:ea:12:df:ef:af:5e:9e:3e:4c:12:58:26:b5:ac:ce:4c:2b: 36:ae:7f:4f:de:c1:81:62:69:e9:a4:0b:9d:2e:47:79:5c:84: 68:12:61:48:11:e7:99:31:e1:1d:4a:9f:2b:9c:fe:00:91:24: 80:74:f5:ed:8e:e5:49:c5:15:4d:9c:37:e3:78:37:06:7f:24: 44:e4:f3:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUwNTEyMTg0MTUyWhcNMjUwNTE5MTg0MTUyWjAYMRYwFAYD VQQDEw02ODIyNDBmMC0yYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20u1DqypFTvKiWHfeFXmUIqkxQYWTWkLBmT+Dv1PNzImRp+agEHBmqgNnsla Yh97RtGMWBIO71ChriWGp37rnRMOnFzN5WZoxPbE7ViexQk8rKaj5YQQjXSlt6J3 binU3wbwNOPAB0dbmhyhwxSZive7JpmtIlin+qOd25DBIZDGvdMDXWiFF0kYTCFw geP0w/HwO2/iB8pBbbEc0f5sCwc1MNmz0HzXuLXEJr3jDMzjhZzMOyicXcvEfZp+ I8ARGHyKG0sJsnPopb28u8X4nRmCKTe5Vc/K67fJ78ZfYMumkb6n1liq8Ox3Dlpv BusO7qfp7syL9NWgD279JOfvdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVQoPEo grIQTn094wcSAIUyYM4iMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF78yEBpmTdR9PnHXfGiesAzBLWwlKRHoCKJDdbBIA/IBTY11JntNr vK3RrRb/cpiu85q6KzUjnnAcgIc5WDq92e8WvFbORlSyh6nB3qZvpZd8+gFoCmO3 tChcwdog3auV7v+72tt9Qyk/dae2TqL1WkUWkMQcMBMJsIiwBhk7/kZ9HudXX/SR KFELLM9czv79/Nprmj7JezREYzSxuLSBs7OIejtM41Ozhm/JAt0kgLm3j1ip6hLf 769enj5MElgmtazOTCs2rn9P3sGBYmnppAudLkd5XIRoEmFIEeeZMeEdSp8rnP4A kSSAdPXtjuVJxRVNnDfjeDcGfyRE5PNP -----END CERTIFICATE-----Generated at Wed May 14 17:34:31 2025 by rpki-client