$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft File: J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json) Hash identifier: nklg+ndn3ApBiklXB+bNYkMZB6jZu5dJ3bdW78U/bBk= Subject key identifier: CA:59:59:3F:05:DB:D1:5E:B9:F7:29:5E:3C:33:2F:F8:35:D6:51:2A Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft Manifest number: FB Signing time: Thu 15 May 2025 04:32:03 +0000 Manifest this update: Thu 15 May 2025 04:32:03 +0000 Manifest next update: Thu 22 May 2025 04:32:03 +0000 Files and hashes: 1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: 8iT+BBFXRqPiu9VzZBgoBRoks20sjskbididoDGtFJ0=) 2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Validity Not Before: May 15 04:32:03 2025 GMT Not After : May 22 04:32:03 2025 GMT Subject: CN=68256e43-a4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:c5:4b:ef:52:a9:03:7c:8f:c7:62:02:c0: a9:74:f6:94:82:f5:fe:97:0f:4f:99:40:06:0d:c8: 19:b5:62:37:58:4e:79:a8:cf:a6:46:80:f4:09:21: 4b:a8:05:e0:63:3a:80:bc:a1:5f:62:69:d8:fc:86: d2:85:18:ae:51:d3:77:3f:98:f6:28:a3:14:7b:2e: ff:e5:88:e1:72:f8:15:94:fe:2d:48:eb:a1:e3:10: b2:72:37:b6:0a:eb:d1:9e:b3:c3:ff:11:c9:8f:4f: 04:0f:59:e5:d0:dc:83:9a:8f:04:09:c8:25:f1:c6: e7:e7:24:11:32:6b:46:62:cf:06:ff:3f:e8:4f:32: 00:01:2e:75:67:0d:1d:3d:95:b1:93:d8:de:5c:9f: d5:6a:df:94:99:10:38:03:a2:fe:b5:4c:77:ba:d2: 99:ee:fe:a2:14:99:9c:da:52:0f:5c:1f:10:ad:a9: 52:33:93:a2:24:55:2c:c0:89:4e:83:5b:aa:65:39: 1b:06:f2:29:3b:89:7a:8c:78:97:4f:e7:2e:9b:bc: 1c:86:fa:c6:0f:fb:a6:27:2f:8b:22:64:e8:f2:e8: eb:17:77:fc:03:6a:f8:2d:0c:2c:8c:df:de:a3:34: 84:ea:db:fa:58:a1:d1:8a:10:a3:a6:ef:8c:8e:3e: 69:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:59:59:3F:05:DB:D1:5E:B9:F7:29:5E:3C:33:2F:F8:35:D6:51:2A X509v3 Authority Key Identifier: keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f5:b0:05:51:75:63:c9:b8:68:b9:e8:a1:e2:97:9a:fe:ed: 33:65:90:88:50:15:38:d9:5e:ad:41:2d:d6:e5:4e:f4:b9:7d: 42:e0:38:ae:29:e8:72:f7:d8:32:4b:8f:4c:e0:c2:66:60:bc: 0a:7c:54:9e:34:d9:c2:9d:52:51:66:28:ce:fe:a0:2e:de:53: f5:38:39:ef:5d:97:6d:14:95:af:9a:fe:39:97:42:d6:76:c8: bc:de:7e:25:9b:4b:55:03:00:27:83:c7:df:49:2f:d0:ad:4b: da:b5:b0:d0:01:b7:67:a2:20:40:e0:ec:9e:94:fb:c5:79:f4: a2:9a:87:d8:dd:c4:c8:ab:ac:c7:d1:d5:ef:40:84:c0:98:43: 18:88:63:04:1f:8b:bd:6e:e3:6f:4f:39:db:9c:45:bd:11:69: c0:a4:2b:e1:10:93:43:46:42:bc:d6:78:41:3b:7b:4b:64:32: 52:40:d8:89:86:0f:20:0c:56:43:b4:6e:5c:b7:41:1e:ef:d7: 51:be:1e:24:b0:96:b9:3b:70:61:d3:cd:4d:36:49:8a:dc:a3: df:4d:b5:3f:28:fb:33:10:1f:1e:46:9f:9b:94:33:cc:2a:11: ba:16:e3:a3:ba:ca:3a:bc:5b:5c:42:e1:c0:e7:48:86:10:0f: 31:af:da:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3RUExMTAvBgNVBAUTKDI3QTIyMjBGMUFCRkNEQ0E2Q0ZENTIyMzZFQzEwQTEx MTJBODgzNDUwHhcNMjUwNTE1MDQzMjAzWhcNMjUwNTIyMDQzMjAzWjAYMRYwFAYD VQQDEw02ODI1NmU0My1hNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/zFS+9SqQN8j8diAsCpdPaUgvX+lw9PmUAGDcgZtWI3WE55qM+mRoD0CSFL qAXgYzqAvKFfYmnY/IbShRiuUdN3P5j2KKMUey7/5YjhcvgVlP4tSOuh4xCycje2 CuvRnrPD/xHJj08ED1nl0NyDmo8ECcgl8cbn5yQRMmtGYs8G/z/oTzIAAS51Zw0d PZWxk9jeXJ/Vat+UmRA4A6L+tUx3utKZ7v6iFJmc2lIPXB8QralSM5OiJFUswIlO g1uqZTkbBvIpO4l6jHiXT+cum7wchvrGD/umJy+LImTo8ujrF3f8A2r4LQwsjN/e ozSE6tv6WKHRihCjpu+Mjj5pzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpZWT8F 29FeufcpXjwzL/g11lEqMB8GA1UdIwQYMBaAFCeiIg8av83KbP1SI27BChESqINF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzdFQS9CNUM4N0Q2OEI1 NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pjcHNfVklqYnNFS0VSS29n MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pj cHNfVklqYnNFS0VSS29nMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU9bAFUXVjybhoueih4pea/u0zZZCIUBU42V6tQS3W5U70uX1C4Diu Kehy99gyS49M4MJmYLwKfFSeNNnCnVJRZijO/qAu3lP1ODnvXZdtFJWvmv45l0LW dsi83n4lm0tVAwAng8ffSS/QrUvatbDQAbdnoiBA4OyelPvFefSimofY3cTIq6zH 0dXvQITAmEMYiGMEH4u9buNvTznbnEW9EWnApCvhEJNDRkK81nhBO3tLZDJSQNiJ hg8gDFZDtG5ct0Ee79dRvh4ksJa5O3Bh081NNkmK3KPfTbU/KPszEB8eRp+blDPM KhG6FuOjuso6vFtcQuHA50iGEA8xr9on -----END CERTIFICATE-----Generated at Thu May 15 22:23:51 2025 by rpki-client