$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: wn4ZQhJdckgiPVIs+HPd8Xq/sbVPgDV9YOoGD3wUrf0= Subject key identifier: 16:C2:0E:AE:EA:07:DE:4B:6B:00:1E:DA:BA:C4:86:BC:4B:96:7B:EE Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 3499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 3488 Signing time: Sat 10 May 2025 15:16:49 +0000 Manifest this update: Sat 10 May 2025 15:16:49 +0000 Manifest next update: Sat 17 May 2025 15:16:49 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: VwEsV5LVWnDunomqMhfszee9uEfQdJADQGPjfYJeLFE=) 2: 2417A16240D111EEB97F9366C4F9AE02.roa (hash: 5HxbfCADS0YE8zgWBNeHaLAjeMofIFQYhkC/UJjBOds=) 3: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: qoJIoB5IZhCrFKoONH6w1qM5F//MbDhtykwiUAx2/AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: May 10 15:16:49 2025 GMT Not After : May 17 15:16:49 2025 GMT Subject: CN=681f6de1-e7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:1d:a1:0b:67:c4:88:b8:48:42:5f:96:38: 3b:d8:1e:5e:f7:99:83:86:4b:05:b7:88:f1:44:41: bf:69:f8:5a:f1:5f:88:21:c4:86:f2:89:50:b8:bf: a9:cf:cd:56:99:46:33:d9:d6:bb:ae:17:22:92:71: fd:87:35:be:92:6d:b7:1c:89:ad:2c:19:ad:a2:91: 44:d0:22:53:16:0f:27:51:4c:ec:f0:99:2b:4e:94: 12:94:ee:bd:02:da:7b:43:82:5e:19:44:c8:11:b9: 71:79:81:ec:47:44:cb:6e:d4:2e:af:f8:79:14:87: 3e:6c:29:2e:1e:7c:d4:4e:6c:fb:f5:94:a4:8c:63: 42:86:ab:ad:0d:01:44:28:bf:67:0b:fd:ea:cb:ea: 8b:7a:d4:51:7e:a9:82:7e:e1:61:9f:d6:58:9c:75: b2:ae:43:ca:5f:7d:18:a3:1b:a3:22:3c:61:b2:37: f3:f1:06:89:23:73:a3:df:d9:46:1a:91:a3:b0:84: 4d:5e:9d:b0:79:2e:e6:97:0d:9d:42:d9:f8:66:8f: 67:f4:bd:54:a0:a5:0d:7b:49:00:0a:36:e1:ed:7e: e3:f2:5a:12:46:d9:e6:cd:b0:bc:3a:45:3e:0f:80: c1:ae:97:33:db:43:6a:99:35:79:8c:1d:ed:d6:3e: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:0E:AE:EA:07:DE:4B:6B:00:1E:DA:BA:C4:86:BC:4B:96:7B:EE X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:79:a5:51:5e:f0:85:16:0a:76:0d:b5:ba:f2:70:59:83: 1c:75:a2:54:fa:1d:ea:82:ba:31:37:67:5c:3d:7e:8d:71:e1: 53:15:ad:fb:b5:18:ed:d2:55:3b:be:c1:1b:86:cb:6f:34:e9: c9:e8:5f:b7:cd:1c:6a:8b:7f:09:30:2f:3e:68:21:34:5a:44: c1:95:62:aa:b7:2a:73:42:e6:d6:5f:bd:fd:19:87:a7:10:6e: 70:3c:2a:1a:2b:55:4c:53:a7:92:fa:b5:c6:83:0f:9f:7f:b7: e1:90:ba:5f:f1:fe:cc:5c:1d:37:14:77:90:62:ab:9b:be:b1: f0:1e:42:6c:43:d9:3e:8f:fa:7f:45:6a:92:89:40:60:87:f5: 11:0e:3a:77:e2:9f:09:0d:44:5f:0b:36:bc:92:91:e5:51:fc: 6d:54:41:e4:70:fb:09:46:25:5a:63:d1:d3:26:0e:95:8a:94: 67:d5:15:b1:bf:41:dc:80:81:6b:fc:8f:b6:e4:56:64:15:69: 21:5a:53:4e:4c:f8:4c:47:2b:79:fa:46:f5:bd:7f:4c:be:2d: 4f:ad:21:4f:d2:88:87:fd:99:80:7a:36:1b:35:d1:c3:ca:d8: fa:8e:9a:08:c3:a6:58:2d:f7:ee:4e:96:34:01:84:2d:75:2d: bd:61:7c:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUwNTEwMTUxNjQ5WhcNMjUwNTE3MTUxNjQ5WjAYMRYwFAYD VQQDEw02ODFmNmRlMS1lN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fIdoQtnxIi4SEJfljg72B5e95mDhksFt4jxREG/afha8V+IIcSG8olQuL+p z81WmUYz2da7rhciknH9hzW+km23HImtLBmtopFE0CJTFg8nUUzs8JkrTpQSlO69 Atp7Q4JeGUTIEblxeYHsR0TLbtQur/h5FIc+bCkuHnzUTmz79ZSkjGNChqutDQFE KL9nC/3qy+qLetRRfqmCfuFhn9ZYnHWyrkPKX30YoxujIjxhsjfz8QaJI3Oj39lG GpGjsIRNXp2weS7mlw2dQtn4Zo9n9L1UoKUNe0kACjbh7X7j8loSRtnmzbC8OkU+ D4DBrpcz20NqmTV5jB3t1j4rMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbCDq7q B95LawAe2rrEhrxLlnvuMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLWnmlUV7whRYKdg21uvJwWYMcdaJU+h3qgroxN2dcPX6NceFTFa37 tRjt0lU7vsEbhstvNOnJ6F+3zRxqi38JMC8+aCE0WkTBlWKqtypzQubWX739GYen EG5wPCoaK1VMU6eS+rXGgw+ff7fhkLpf8f7MXB03FHeQYqubvrHwHkJsQ9k+j/p/ RWqSiUBgh/URDjp34p8JDURfCza8kpHlUfxtVEHkcPsJRiVaY9HTJg6VipRn1RWx v0HcgIFr/I+25FZkFWkhWlNOTPhMRyt5+kb1vX9Mvi1PrSFP0oiH/ZmAejYbNdHD ytj6jpoIw6ZYLffuTpY0AYQtdS29YXzt -----END CERTIFICATE-----Generated at Sun May 11 22:44:52 2025 by rpki-client