$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: 15uV+KIamrxU9B0ON0GyO5a4edo2kXObBI0Lb5/HN4k= Subject key identifier: E3:19:E3:0B:E0:D9:1B:30:A9:C0:24:B4:E9:8D:2D:3E:1E:4C:AC:58 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 03A8 Signing time: Tue 13 May 2025 00:33:16 +0000 Manifest this update: Tue 13 May 2025 00:33:16 +0000 Manifest next update: Tue 20 May 2025 00:33:16 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: sZXw4UQKzY9EaNvUozxRHuaMLFXZ1HUuBcG4QiYKRD4=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: May 13 00:33:16 2025 GMT Not After : May 20 00:33:16 2025 GMT Subject: CN=6822934c-8ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:ac:b9:64:44:f4:60:3b:23:6f:ee:95:20: 66:91:99:01:bd:de:b3:1f:9e:dd:6b:a8:c6:60:ea: d7:98:e2:c9:29:e2:1a:8a:38:d8:72:a4:7b:48:f6: 83:2c:ad:19:d2:5d:9f:22:e5:9c:98:c1:ef:d6:3e: f2:03:71:61:e7:0a:74:f2:d2:c1:b4:a7:0d:ae:b5: f5:5b:f8:6d:8d:70:a1:62:d2:74:00:de:e3:76:b0: 63:25:dc:c3:32:c7:3d:35:40:57:e1:4f:02:f1:98: 79:1b:92:52:df:8f:d5:43:41:df:7b:f6:a8:6a:89: 82:8e:cf:8d:32:97:98:61:38:1b:95:9a:89:2b:12: b7:12:9c:22:86:b7:73:7f:38:9f:d2:0a:9c:77:ed: 13:30:1b:49:47:4b:40:42:fd:fc:23:06:f2:af:a4: 83:c0:79:2a:51:de:42:2c:fb:be:ce:c1:48:96:71: 27:29:bb:41:b7:87:58:7a:4f:92:47:09:ce:7b:99: 1d:1c:7c:ad:57:8b:e5:4f:57:d4:43:49:2c:0a:b9: 51:c1:a8:d0:fd:38:d5:a9:60:14:0f:e4:ec:c1:d9: de:d1:4d:59:f8:1d:02:c8:ee:59:7e:ce:be:cc:71: 7f:90:96:87:bd:db:0a:e0:05:cf:77:c4:3a:7f:27: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:E3:0B:E0:D9:1B:30:A9:C0:24:B4:E9:8D:2D:3E:1E:4C:AC:58 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:ce:68:9f:4d:3a:a0:d5:7c:54:b7:fa:1a:83:f5:b2:f6: 3d:de:ac:cf:18:90:61:a9:a4:38:38:e9:29:76:fc:10:8c:62: c7:0b:5a:41:47:12:66:f6:63:0f:fa:1f:de:b0:b4:6a:c8:5f: 44:86:a3:5b:cd:e8:03:2b:78:74:4c:58:68:cb:f6:17:af:ae: 52:cd:14:31:3a:3c:6f:5d:b3:31:d6:83:4e:81:5d:43:72:46: 80:46:68:c6:4e:e4:94:60:a2:cd:86:4a:81:e9:ef:08:63:68: 20:e3:8a:22:13:6a:eb:e9:78:85:6a:d4:fa:61:60:a3:81:71: 3e:e0:e0:a7:03:bf:91:c2:46:25:04:33:f3:4f:fa:b0:e1:fb: 2d:c5:0a:37:c6:b0:09:06:06:2f:54:07:7d:4f:df:21:e5:57: be:e9:9c:56:8a:ca:d9:4e:ce:90:e7:e8:d3:b2:7b:85:75:33: 88:cf:70:07:97:69:9b:ec:34:12:37:46:79:fc:40:ee:7d:e3: ee:40:33:58:22:18:49:ec:0a:b5:a4:d7:b7:bf:53:80:35:f4: 77:f2:dd:d3:5e:c1:f4:48:8f:12:e3:4f:8e:23:75:ea:f4:e0: e5:e1:42:dc:81:93:de:b2:4f:f9:e8:d9:0d:9a:b6:42:e5:f6: ac:18:33:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwNTEzMDAzMzE2WhcNMjUwNTIwMDAzMzE2WjAYMRYwFAYD VQQDEw02ODIyOTM0Yy04YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMusuWRE9GA7I2/ulSBmkZkBvd6zH57da6jGYOrXmOLJKeIaijjYcqR7SPaD LK0Z0l2fIuWcmMHv1j7yA3Fh5wp08tLBtKcNrrX1W/htjXChYtJ0AN7jdrBjJdzD Msc9NUBX4U8C8Zh5G5JS34/VQ0Hfe/aoaomCjs+NMpeYYTgblZqJKxK3Epwihrdz fzif0gqcd+0TMBtJR0tAQv38Iwbyr6SDwHkqUd5CLPu+zsFIlnEnKbtBt4dYek+S RwnOe5kdHHytV4vlT1fUQ0ksCrlRwajQ/TjVqWAUD+Tswdne0U1Z+B0CyO5Zfs6+ zHF/kJaHvdsK4AXPd8Q6fycZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMZ4wvg 2RswqcAktOmNLT4eTKxYMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1cs5on006oNV8VLf6GoP1svY93qzPGJBhqaQ4OOkpdvwQjGLHC1pB RxJm9mMP+h/esLRqyF9EhqNbzegDK3h0TFhoy/YXr65SzRQxOjxvXbMx1oNOgV1D ckaARmjGTuSUYKLNhkqB6e8IY2gg44oiE2rr6XiFatT6YWCjgXE+4OCnA7+RwkYl BDPzT/qw4fstxQo3xrAJBgYvVAd9T98h5Ve+6ZxWisrZTs6Q5+jTsnuFdTOIz3AH l2mb7DQSN0Z5/EDufePuQDNYIhhJ7Aq1pNe3v1OANfR38t3TXsH0SI8S40+OI3Xq 9ODl4ULcgZPesk/56NkNmrZC5fasGDO7 -----END CERTIFICATE-----Generated at Wed May 14 03:36:52 2025 by rpki-client