$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json) Hash identifier: VXWdAssWUwk0qqo2aHZ8Hy/X+lB/H4hxXxmggVNOzsY= Subject key identifier: 96:B4:5B:FC:E4:E9:37:B1:92:45:9E:7D:27:FF:43:38:02:17:52:A1 Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Certificate serial: 147C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft Manifest number: 1473 Signing time: Mon 12 May 2025 16:49:18 +0000 Manifest this update: Mon 12 May 2025 16:49:18 +0000 Manifest next update: Mon 19 May 2025 16:49:18 +0000 Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: A0Ez94Oe2GPO5fhkKrYwLG//KFflLM9LEwIWlxIxqKo=) 2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mkbx/bzyF+QWS8oqI8XyH1scPq9ynG9SZktcZG6GCNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5244 (0x147c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Validity Not Before: May 12 16:49:18 2025 GMT Not After : May 19 16:49:18 2025 GMT Subject: CN=6822268e-9c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:35:e5:21:c7:6c:93:cf:d1:c4:06:85:25: ed:8d:c3:2f:46:d0:d8:c7:b5:30:67:f6:e7:3c:12: 1a:be:1e:63:6c:4c:f5:52:99:36:31:0e:10:3b:31: 7c:88:9d:31:35:da:07:b5:73:1e:e3:05:c8:96:86: d3:0e:9b:4e:7a:ef:11:dd:d0:75:67:f8:ee:15:19: 80:39:21:8b:57:5f:41:48:01:8e:83:f0:6a:84:04: f8:78:d2:d7:0c:69:58:c6:99:b9:a7:42:90:48:75: 84:f0:f7:96:e9:93:00:08:e1:f6:9a:b2:fd:e8:1a: 14:cc:01:b2:7b:d2:3e:ec:30:fe:c7:2a:d4:84:92: 6e:4b:e7:ee:f2:bd:26:72:41:40:38:cc:80:c7:d3: 2b:03:a7:a6:a2:f8:6b:ae:07:cd:a2:8d:8e:ea:43: 59:7f:2d:f7:d8:3a:ad:81:bf:ab:ae:93:32:e3:10: ec:29:3d:04:c5:68:1c:58:53:7a:a2:12:b6:23:c9: 28:57:22:c7:a0:38:6b:95:5a:b8:cd:7e:95:54:b8: 46:54:5c:0e:e8:56:95:bc:80:00:3c:a3:9c:8b:40: e6:09:b5:90:b5:57:92:94:94:28:8a:25:41:6f:a7: 36:4b:cd:3b:a3:e6:25:76:d0:fe:6f:5e:de:3d:83: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:5B:FC:E4:E9:37:B1:92:45:9E:7D:27:FF:43:38:02:17:52:A1 X509v3 Authority Key Identifier: keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:06:f8:84:69:cb:9a:94:f1:16:7b:b7:9a:72:fd:2c:1b:59: 06:82:67:44:61:c5:14:35:47:6d:e3:02:e5:20:9a:d6:a3:e3: 6b:54:28:0b:3c:e3:2a:16:4c:2d:11:d1:6a:7c:90:b0:4c:ca: fe:f4:44:59:aa:78:c6:a7:2d:c8:cd:70:73:1f:6f:a8:1f:c8: 1d:c4:a8:ca:6b:e8:8a:d5:e7:40:1f:31:48:c5:10:73:c4:ab: bb:b5:b9:c5:cf:12:ff:c8:fc:39:c2:17:37:14:2c:62:99:8b: 47:d2:ea:be:fd:dc:88:da:f2:c5:71:68:fc:26:0a:6f:e7:66: 8d:c4:9b:b5:5f:88:f5:59:ca:fa:9c:5e:f1:ca:76:30:4d:72: 14:78:69:45:42:1f:b5:ea:6f:95:17:c1:40:6c:5e:1a:9f:d5: 49:a8:a9:b7:fa:b7:82:79:9a:15:16:05:52:0b:23:3e:b9:61: 80:c6:c9:cd:22:72:ff:3f:e1:34:0c:f5:e4:3b:40:f9:7f:1a: f0:d8:f2:cf:cf:4b:83:45:aa:34:c8:dd:be:0b:4f:ee:8a:48: 0e:8f:fe:16:e2:71:dc:45:72:75:6b:5e:97:2a:e5:14:a0:fd: 5a:ba:78:ef:a4:b5:0a:b6:cd:a7:bf:51:cb:fd:8f:06:77:1e: cf:f4:ae:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE OUU0MTlCNEYwHhcNMjUwNTEyMTY0OTE4WhcNMjUwNTE5MTY0OTE4WjAYMRYwFAYD VQQDEw02ODIyMjY4ZS05YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vg15SHHbJPP0cQGhSXtjcMvRtDYx7UwZ/bnPBIavh5jbEz1Upk2MQ4QOzF8 iJ0xNdoHtXMe4wXIlobTDptOeu8R3dB1Z/juFRmAOSGLV19BSAGOg/BqhAT4eNLX DGlYxpm5p0KQSHWE8PeW6ZMACOH2mrL96BoUzAGye9I+7DD+xyrUhJJuS+fu8r0m ckFAOMyAx9MrA6emovhrrgfNoo2O6kNZfy332Dqtgb+rrpMy4xDsKT0ExWgcWFN6 ohK2I8koVyLHoDhrlVq4zX6VVLhGVFwO6FaVvIAAPKOci0DmCbWQtVeSlJQoiiVB b6c2S807o+YldtD+b17ePYN6YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa0W/zk 6TexkkWefSf/QzgCF1KhMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9BviEacualPEWe7eacv0sG1kGgmdEYcUUNUdt4wLlIJrWo+NrVCgL POMqFkwtEdFqfJCwTMr+9ERZqnjGpy3IzXBzH2+oH8gdxKjKa+iK1edAHzFIxRBz xKu7tbnFzxL/yPw5whc3FCximYtH0uq+/dyI2vLFcWj8Jgpv52aNxJu1X4j1Wcr6 nF7xynYwTXIUeGlFQh+16m+VF8FAbF4an9VJqKm3+reCeZoVFgVSCyM+uWGAxsnN InL/P+E0DPXkO0D5fxrw2PLPz0uDRao0yN2+C0/uikgOj/4W4nHcRXJ1a16XKuUU oP1aunjvpLUKts2nv1HL/Y8Gdx7P9K7N -----END CERTIFICATE-----Generated at Tue May 13 03:41:09 2025 by rpki-client