$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: +1jkAqRkG9z0QSLuCUXi3stAAyYCKiuf0dLLkI0Gpro= Subject key identifier: C9:D6:2F:23:9A:1E:96:A7:3F:99:4A:74:BA:B9:16:C5:10:AE:5C:29 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01B7 Signing time: Fri 09 May 2025 02:20:22 +0000 Manifest this update: Fri 09 May 2025 02:20:21 +0000 Manifest next update: Fri 16 May 2025 02:20:21 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: PvaNBcWywj5FbWCqkL0Ap+p+pVqRvsJ7Rl9ug5GaFzI=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: May 9 02:20:21 2025 GMT Not After : May 16 02:20:21 2025 GMT Subject: CN=681d6666-5c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:ea:ad:a4:f5:6b:43:72:04:42:a2:63:44: f6:98:14:71:a4:1a:88:e9:31:f0:21:31:fa:84:71: 76:f1:54:4b:91:25:a2:2f:be:3e:db:ae:42:51:48: 8d:c3:d5:65:81:17:30:50:9b:1a:0c:5d:cc:2c:ed: 26:e3:12:b4:f7:ea:83:03:9b:37:18:f9:3b:86:72: 16:6e:a4:34:e2:3a:cd:64:00:37:ed:47:c6:a0:f8: 1b:cc:ae:af:e4:ba:a7:08:1b:a8:3c:d4:14:83:45: 3e:7c:3c:8d:75:54:67:2d:84:9d:9d:dd:95:e2:d4: 5e:be:12:42:37:e5:7d:49:9a:30:58:d9:f6:cb:22: b9:6e:ee:a3:a2:db:6c:75:5d:c1:8b:04:69:d9:ea: ec:60:14:d0:cc:ca:09:a3:3d:d5:90:4e:d8:fb:04: 4d:51:65:be:02:cc:ee:49:a0:d1:b0:57:5b:23:88: a8:cf:03:d1:db:f7:70:ff:fe:e7:d4:35:18:b9:80: 5a:b8:c6:d5:9b:d6:65:08:f2:e3:8c:f3:0c:e7:0b: 9a:fa:79:c3:67:b9:91:a1:f5:48:66:73:b1:cf:b0: 99:82:4b:ea:e7:dd:7a:23:41:58:5d:04:2b:d2:a3: fb:a7:9a:51:6a:9c:a7:0d:78:95:86:39:93:a0:e4: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D6:2F:23:9A:1E:96:A7:3F:99:4A:74:BA:B9:16:C5:10:AE:5C:29 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6f:fb:32:1f:17:14:41:6b:2d:12:f6:79:6b:50:a2:d4:ab: d5:69:f6:d9:c1:2c:0f:26:49:72:44:28:ce:4b:01:5b:b9:20: e6:3f:00:e8:56:e4:53:d0:17:ee:1a:95:c7:c6:05:0d:a5:d3: 65:f0:6f:94:4e:e7:e9:54:f7:28:1b:84:ef:52:bf:7e:78:57: 17:f0:aa:bb:4d:96:75:71:8f:a8:66:ad:70:06:46:57:af:f4: 96:9c:8a:6b:d9:e9:fe:49:fa:d7:3a:03:f5:da:0f:d7:c6:7b: f0:25:4d:a9:3a:33:b3:51:74:ed:72:8f:a5:76:34:29:41:1c: 65:1e:9b:2b:f4:6b:38:ed:a3:35:eb:0a:1e:a9:c8:1e:d6:f8: 4a:6f:84:7e:73:d3:5d:18:17:a6:d1:a0:61:67:8c:80:44:1a: e8:32:2a:4d:e2:bd:5f:7c:8e:62:f4:89:e7:24:1d:c7:b8:96: 90:1b:59:88:e5:60:9e:00:92:49:c6:2b:26:8e:fe:18:79:91: b1:01:79:5a:c7:9a:b1:26:d6:2e:82:ba:dc:48:fa:1d:11:e3: a5:10:d8:d7:68:3c:19:2b:7c:06:bb:1c:73:75:85:09:45:dd: 6e:64:6b:40:32:e2:e1:f1:1c:05:a1:77:e9:4b:92:26:9d:3a: 14:16:d0:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwNTA5MDIyMDIxWhcNMjUwNTE2MDIyMDIxWjAYMRYwFAYD VQQDEw02ODFkNjY2Ni01Yzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGrqraT1a0NyBEKiY0T2mBRxpBqI6THwITH6hHF28VRLkSWiL74+265CUUiN w9VlgRcwUJsaDF3MLO0m4xK09+qDA5s3GPk7hnIWbqQ04jrNZAA37UfGoPgbzK6v 5LqnCBuoPNQUg0U+fDyNdVRnLYSdnd2V4tRevhJCN+V9SZowWNn2yyK5bu6jotts dV3BiwRp2ersYBTQzMoJoz3VkE7Y+wRNUWW+AszuSaDRsFdbI4iozwPR2/dw//7n 1DUYuYBauMbVm9ZlCPLjjPMM5wua+nnDZ7mRofVIZnOxz7CZgkvq5916I0FYXQQr 0qP7p5pRapynDXiVhjmToOSTRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnWLyOa HpanP5lKdLq5FsUQrlwpMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVb/syHxcUQWstEvZ5a1Ci1KvVafbZwSwPJklyRCjOSwFbuSDmPwDo VuRT0BfuGpXHxgUNpdNl8G+UTufpVPcoG4TvUr9+eFcX8Kq7TZZ1cY+oZq1wBkZX r/SWnIpr2en+SfrXOgP12g/XxnvwJU2pOjOzUXTtco+ldjQpQRxlHpsr9Gs47aM1 6woeqcge1vhKb4R+c9NdGBem0aBhZ4yARBroMipN4r1ffI5i9InnJB3HuJaQG1mI 5WCeAJJJxismjv4YeZGxAXlax5qxJtYugrrcSPodEeOlENjXaDwZK3wGuxxzdYUJ Rd1uZGtAMuLh8RwFoXfpS5ImnToUFtCp -----END CERTIFICATE-----Generated at Sat May 10 19:22:33 2025 by rpki-client