$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: wL4A3Pa2JQ4iad5hTxtOclmxtSmF8/hneVI1kNYptHw= Subject key identifier: 16:4C:70:98:4F:2F:5C:2E:C7:3C:A6:95:0C:CD:AC:67:3C:08:30:68 Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0D5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0D55 Signing time: Sat 10 May 2025 17:50:23 +0000 Manifest this update: Sat 10 May 2025 17:50:23 +0000 Manifest next update: Sat 17 May 2025 17:50:23 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: ts+4XxrbTblPkvoyYBM4b0q7qhEiJcZR+09Wde6iRXk=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: 7nwi4xt2gy9ofefrS7G3QotlbXQ09IRHuywiHjLXzG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: May 10 17:50:23 2025 GMT Not After : May 17 17:50:23 2025 GMT Subject: CN=681f91df-ced3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:92:bd:b8:ca:f2:ee:62:7e:11:8e:dd:9e: f0:ef:31:39:6b:c1:5b:06:9a:d7:b3:05:a6:4a:5c: 5f:93:5b:03:3b:da:12:bd:7c:01:9a:ca:91:c0:d8: 6a:62:11:0a:42:81:6f:c9:8d:d9:71:ad:9c:d9:20: 95:8b:e6:9e:9d:79:0d:e6:80:b8:d8:a8:a8:48:c5: 60:23:c6:a6:37:ad:df:a9:8f:ef:e8:66:e9:cd:e4: 2e:b2:75:af:1a:03:3d:bd:97:83:f8:ac:33:42:14: bc:ee:2e:be:ad:33:07:95:33:fc:61:59:9a:27:ed: f6:1f:a6:65:b1:90:25:2c:84:79:c2:ec:c8:28:fc: b3:92:35:9f:35:ac:b1:c9:69:e3:40:49:46:10:1e: ee:71:e1:ed:1f:cc:27:ee:a7:a8:e0:6e:e5:5b:5a: f9:81:b4:87:59:cc:65:ca:81:1b:b2:69:03:e0:e6: cf:21:f8:25:bd:37:8a:f8:ae:08:bf:2a:2f:51:52: cd:49:77:c7:41:47:70:6d:37:03:d0:26:e1:ab:3e: 23:3e:9f:0a:04:06:0f:83:9e:19:76:a3:ca:65:61: f5:ff:b6:ff:f9:ed:79:d1:26:41:1e:ea:27:da:80: 1c:00:f8:b3:4a:02:86:2a:f8:32:c5:e8:67:2e:94: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4C:70:98:4F:2F:5C:2E:C7:3C:A6:95:0C:CD:AC:67:3C:08:30:68 X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cd:5a:f9:cd:15:c8:85:e2:71:ee:d5:56:f3:55:c4:5f:28: d5:8d:88:00:ea:9d:dc:d2:18:f5:cf:eb:d8:b4:5c:01:7a:e7: 38:52:fd:d5:70:59:80:b9:26:4c:f0:49:7e:fb:c2:a6:e3:38: d1:b4:eb:e8:86:cf:a7:81:3d:a5:62:f1:87:66:a8:be:ad:84: 58:51:ac:27:a1:93:7a:47:4f:d7:6f:7a:ed:bf:b0:43:5d:76: 72:e8:1e:25:27:c6:2b:81:de:2e:10:58:99:7c:39:6d:2a:4b: 83:42:7d:a6:27:47:4d:b1:0d:51:6b:76:e4:46:ff:e0:d4:8d: cd:40:bc:5a:df:ba:bc:3f:04:d0:02:70:97:91:79:3f:0c:00: 5f:5f:df:18:f5:a7:4e:82:fd:68:fd:49:6f:a3:0e:9f:7a:b3: 76:71:fc:4e:39:af:d0:f4:11:9a:55:08:77:09:65:28:99:1b: c9:d1:ec:1a:13:b5:4d:e1:4c:48:3b:e5:7f:e1:89:7a:45:e6: d3:80:f1:9d:c8:b5:8e:d6:ef:55:d8:34:49:86:eb:ac:e5:09: 2a:2a:d0:bf:ca:93:52:81:fd:93:eb:4a:3e:99:4a:af:83:d2: 5c:7a:0f:fa:51:d9:79:f3:c5:d4:c6:41:f4:d4:3f:20:9d:0b: 2b:3a:39:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUwNTEwMTc1MDIzWhcNMjUwNTE3MTc1MDIzWjAYMRYwFAYD VQQDEw02ODFmOTFkZi1jZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvruSvbjK8u5ifhGO3Z7w7zE5a8FbBprXswWmSlxfk1sDO9oSvXwBmsqRwNhq YhEKQoFvyY3Zca2c2SCVi+aenXkN5oC42KioSMVgI8amN63fqY/v6GbpzeQusnWv GgM9vZeD+KwzQhS87i6+rTMHlTP8YVmaJ+32H6ZlsZAlLIR5wuzIKPyzkjWfNayx yWnjQElGEB7uceHtH8wn7qeo4G7lW1r5gbSHWcxlyoEbsmkD4ObPIfglvTeK+K4I vyovUVLNSXfHQUdwbTcD0Cbhqz4jPp8KBAYPg54ZdqPKZWH1/7b/+e150SZBHuon 2oAcAPizSgKGKvgyxehnLpSGjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZMcJhP L1wuxzymlQzNrGc8CDBoMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8zVr5zRXIheJx7tVW81XEXyjVjYgA6p3c0hj1z+vYtFwBeuc4Uv3V cFmAuSZM8El++8Km4zjRtOvohs+ngT2lYvGHZqi+rYRYUawnoZN6R0/Xb3rtv7BD XXZy6B4lJ8Yrgd4uEFiZfDltKkuDQn2mJ0dNsQ1Ra3bkRv/g1I3NQLxa37q8PwTQ AnCXkXk/DABfX98Y9adOgv1o/Ulvow6ferN2cfxOOa/Q9BGaVQh3CWUomRvJ0ewa E7VN4UxIO+V/4Yl6RebTgPGdyLWO1u9V2DRJhuus5QkqKtC/ypNSgf2T60o+mUqv g9Jceg/6Udl588XUxkH01D8gnQsrOjm4 -----END CERTIFICATE-----Generated at Sun May 11 12:44:33 2025 by rpki-client