$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: smZfmNWIo1YMV/7zukEHmhkwzR44E3l8OLoC2RpMzVw= Subject key identifier: 1C:8F:3F:84:C4:F4:A9:F1:44:17:4D:85:12:87:DE:53:B9:DC:DD:7D Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 0225 Signing time: Sun 11 May 2025 01:55:48 +0000 Manifest this update: Sun 11 May 2025 01:55:47 +0000 Manifest next update: Sun 18 May 2025 01:55:47 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: j4UlrU0FzExLslkSfpQrPqjeZiQCTds30buxrtPEshg=) 2: 59E393C204D011F0B464E44DC4F9AE02.roa (hash: F/d9YZwkTTfQMW9az/pHb2W2rOLLgswMCEvuqBHWldg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: May 11 01:55:47 2025 GMT Not After : May 18 01:55:47 2025 GMT Subject: CN=682003a3-f760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:26:ea:46:98:6c:da:bd:85:e9:89:58:b0:5d: 20:cd:1d:32:03:47:93:3c:c4:cc:9c:69:b9:03:c7: e2:33:7b:2d:da:ea:a2:21:e7:ca:60:fa:c9:82:0a: 74:d5:78:14:69:b1:19:63:c7:02:f2:2a:1b:e2:af: b9:f4:aa:3a:9b:b3:8e:31:0a:9c:b0:01:82:d0:b1: 3b:37:1c:72:7b:f5:c0:68:a0:4f:25:58:87:56:06: a2:8d:49:f8:e9:52:f1:14:e0:f5:62:f2:91:83:4b: f8:75:54:76:4a:40:e8:2f:b0:c4:0d:e0:fb:2a:df: df:e5:f9:b9:b2:03:b3:18:86:4e:50:44:a2:54:52: 2e:b0:7c:fd:9d:a3:bc:d1:82:14:b6:e1:7a:87:1a: 7c:86:54:5e:98:61:bf:f4:d7:b3:71:c2:5f:2c:6f: 6f:b5:28:a2:4c:d2:fc:d9:ca:1e:ca:45:a5:60:17: 18:ba:c7:eb:28:ff:f9:11:c2:77:a4:12:41:a3:a1: c1:1c:61:59:bb:8e:48:57:11:e3:80:7a:6c:98:73: 2f:04:c4:dc:a2:82:ce:c0:f2:59:50:e5:c3:f3:7a: b8:73:d4:19:7c:09:c4:79:d3:6a:1e:d0:ae:ec:a8: 9a:6c:e1:cd:84:98:e3:56:5a:46:86:39:26:8c:6b: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8F:3F:84:C4:F4:A9:F1:44:17:4D:85:12:87:DE:53:B9:DC:DD:7D X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:06:1e:e9:c5:ee:25:e6:82:0a:58:8c:25:1b:9f:b5:20:c9: 24:28:51:53:3f:32:29:84:be:37:5b:62:e0:5f:6d:d4:6e:86: 65:5a:d1:3b:8c:1e:c6:f5:a6:61:70:99:c0:a1:38:05:be:26: 24:30:20:95:77:0c:2b:ca:ef:d5:bb:75:7e:aa:6d:34:75:8a: 2b:69:f5:4e:5e:a2:34:d7:85:88:5c:22:be:24:7e:45:0d:74: ac:f4:05:e6:81:23:1b:00:6f:3c:b7:f6:2b:28:92:75:aa:60: 30:98:46:4c:0c:b5:bc:61:2e:e4:84:bb:a7:aa:a1:18:30:ce: be:ba:ec:96:9e:53:3a:e9:18:f1:34:9f:7c:40:72:10:55:62: 89:28:5f:86:7b:0d:ab:b2:1d:44:dd:a4:69:ab:f2:b2:4d:86: cc:0b:88:ef:ba:a4:06:d9:87:75:1b:4f:e1:a2:f2:c3:7a:9c: d6:c3:c7:ec:c2:d9:e4:1e:aa:03:b0:20:e7:e3:40:22:5f:8d: e6:10:89:db:a4:bc:84:75:6c:bb:5d:f6:d4:b7:28:b6:b0:62: f4:1f:d3:4f:87:9d:1c:39:e0:75:a2:e0:61:e7:47:9d:d9:5f: d1:83:cf:31:35:d5:84:b4:c2:70:c7:16:da:5d:49:a7:a4:64: 26:79:72:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwNTExMDE1NTQ3WhcNMjUwNTE4MDE1NTQ3WjAYMRYwFAYD VQQDEw02ODIwMDNhMy1mNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ibqRphs2r2F6YlYsF0gzR0yA0eTPMTMnGm5A8fiM3st2uqiIefKYPrJggp0 1XgUabEZY8cC8iob4q+59Ko6m7OOMQqcsAGC0LE7Nxxye/XAaKBPJViHVgaijUn4 6VLxFOD1YvKRg0v4dVR2SkDoL7DEDeD7Kt/f5fm5sgOzGIZOUESiVFIusHz9naO8 0YIUtuF6hxp8hlRemGG/9NezccJfLG9vtSiiTNL82coeykWlYBcYusfrKP/5EcJ3 pBJBo6HBHGFZu45IVxHjgHpsmHMvBMTcooLOwPJZUOXD83q4c9QZfAnEedNqHtCu 7KiabOHNhJjjVlpGhjkmjGssawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByPP4TE 9KnxRBdNhRKH3lO53N19MB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGBh7pxe4l5oIKWIwlG5+1IMkkKFFTPzIphL43W2LgX23UboZlWtE7 jB7G9aZhcJnAoTgFviYkMCCVdwwryu/Vu3V+qm00dYorafVOXqI014WIXCK+JH5F DXSs9AXmgSMbAG88t/YrKJJ1qmAwmEZMDLW8YS7khLunqqEYMM6+uuyWnlM66Rjx NJ98QHIQVWKJKF+Gew2rsh1E3aRpq/KyTYbMC4jvuqQG2Yd1G0/hovLDepzWw8fs wtnkHqoDsCDn40AiX43mEInbpLyEdWy7XfbUtyi2sGL0H9NPh50cOeB1ouBh50ed 2V/Rg88xNdWEtMJwxxbaXUmnpGQmeXLd -----END CERTIFICATE-----Generated at Sun May 11 04:34:35 2025 by rpki-client