$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: jzI5Y3dRAYDmwCJEnbHiZ0yuWu8ERPP8Fm2J02JX/Uk= Subject key identifier: B3:07:3D:78:DD:75:3E:99:78:4A:B1:64:AE:92:38:9E:3A:41:D8:40 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 3493 Signing time: Mon 12 May 2025 15:14:27 +0000 Manifest this update: Mon 12 May 2025 15:14:27 +0000 Manifest next update: Mon 19 May 2025 15:14:27 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: aTeyEFoTAxUVZRnHCIN38bxcBqhITixs4pWbmyYrG0E=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13488 (0x34b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: May 12 15:14:27 2025 GMT Not After : May 19 15:14:27 2025 GMT Subject: CN=68221053-a7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:49:bd:24:06:fb:ea:65:fb:f8:b7:9c:1c:cb: c5:7a:b1:a8:d0:97:d2:74:83:6f:c3:49:94:fc:2f: 37:31:a7:90:e2:3c:98:67:ae:24:56:c6:0d:83:df: c3:f9:83:bb:8a:74:14:9e:00:16:39:70:8f:d3:cd: c7:91:73:9e:2e:23:c6:6f:97:39:3a:d2:64:a2:b3: 3b:02:d4:07:f2:45:23:ac:aa:94:1c:00:14:5a:b6: 75:fb:13:78:b2:8f:69:27:7f:f2:ac:fa:9f:8d:3b: ab:0f:3d:cb:bf:8b:b6:c9:5f:74:43:5b:ad:c8:8d: 8c:59:70:8d:09:c0:33:58:72:a3:4b:60:68:79:f3: 14:d4:ca:7e:c4:a4:74:f0:82:d6:c1:62:1c:8b:f4: e3:0f:f9:03:8d:28:9e:8b:2b:43:ca:ce:ea:ca:e1: 6c:f0:1d:0b:0d:f4:f6:2d:91:f0:e3:bc:72:9d:7d: 6f:19:47:30:b6:72:c1:b7:fd:27:e2:12:05:a5:c9: bc:9c:d9:ad:ef:60:e6:17:3d:31:4c:fb:05:5a:ed: 39:6f:d5:2b:ec:e1:0a:ea:14:fb:fe:5f:2c:a8:bb: ba:7e:c3:0d:7d:b4:67:44:2b:aa:2d:b7:25:63:31: 84:95:1e:46:8b:c5:2b:a1:a1:d7:41:dc:46:74:6f: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:3D:78:DD:75:3E:99:78:4A:B1:64:AE:92:38:9E:3A:41:D8:40 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:11:dd:42:ff:d5:54:25:46:6c:1e:9e:c8:f0:0e:f1:ff:7c: cf:87:af:b8:31:6b:de:cf:9c:b4:69:b7:70:78:b7:14:e9:52: fe:57:86:ad:10:1e:28:4b:03:4a:44:f0:b7:23:12:c9:8d:62: 09:65:30:ac:f3:45:2c:1b:63:90:15:79:ba:57:4f:d8:b6:a5: 32:03:bb:1b:f7:94:57:42:81:58:1f:24:c9:1b:86:2d:5b:bf: 87:38:6e:19:1e:6c:d4:41:35:ff:e4:5a:16:d0:d7:8d:de:1a: 0e:9f:80:31:3f:2f:cd:cc:5f:46:b2:3c:1b:e2:cd:10:fd:06: 6f:4b:6b:f2:5e:8b:a1:62:55:6d:58:99:dc:35:5c:32:24:a7: 27:c3:14:c7:1e:31:fb:52:29:b9:0d:0c:5f:fc:92:99:c7:b5: 1e:ca:27:1a:9c:15:f1:ad:86:e3:67:08:e2:1e:a5:1b:64:53: 76:3e:01:6d:62:12:b2:b1:6e:e9:76:93:0f:ab:f3:f0:d8:ac: 8d:bd:52:9c:a8:3a:3e:04:e1:9c:1d:1a:4b:57:ce:df:42:82: 90:8e:13:9b:56:a9:bf:23:64:93:ae:06:a0:66:cb:2e:d9:68: 89:79:35:c7:03:74:02:f2:50:b9:4f:4a:69:91:63:ff:b3:ef: 4f:7b:c0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwNTEyMTUxNDI3WhcNMjUwNTE5MTUxNDI3WjAYMRYwFAYD VQQDEw02ODIyMTA1My1hN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Um9JAb76mX7+LecHMvFerGo0JfSdINvw0mU/C83MaeQ4jyYZ64kVsYNg9/D +YO7inQUngAWOXCP083HkXOeLiPGb5c5OtJkorM7AtQH8kUjrKqUHAAUWrZ1+xN4 so9pJ3/yrPqfjTurDz3Lv4u2yV90Q1utyI2MWXCNCcAzWHKjS2BoefMU1Mp+xKR0 8ILWwWIci/TjD/kDjSieiytDys7qyuFs8B0LDfT2LZHw47xynX1vGUcwtnLBt/0n 4hIFpcm8nNmt72DmFz0xTPsFWu05b9Ur7OEK6hT7/l8sqLu6fsMNfbRnRCuqLbcl YzGElR5Gi8UroaHXQdxGdG8NyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMHPXjd dT6ZeEqxZK6SOJ46QdhAMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIEd1C/9VUJUZsHp7I8A7x/3zPh6+4MWvez5y0abdweLcU6VL+V4at EB4oSwNKRPC3IxLJjWIJZTCs80UsG2OQFXm6V0/YtqUyA7sb95RXQoFYHyTJG4Yt W7+HOG4ZHmzUQTX/5FoW0NeN3hoOn4AxPy/NzF9Gsjwb4s0Q/QZvS2vyXouhYlVt WJncNVwyJKcnwxTHHjH7Uim5DQxf/JKZx7UeyicanBXxrYbjZwjiHqUbZFN2PgFt YhKysW7pdpMPq/Pw2KyNvVKcqDo+BOGcHRpLV87fQoKQjhObVqm/I2STrgagZssu 2WiJeTXHA3QC8lC5T0ppkWP/s+9Pe8CG -----END CERTIFICATE-----Generated at Wed May 14 03:45:19 2025 by rpki-client