$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: Fawwym317drgZ2szGuV37A72M2X1Hq0m+pwBDf3R3gk= Subject key identifier: D6:C3:9C:38:6C:2D:42:5A:0C:46:89:F4:AB:67:E8:58:67:DD:D8:AF Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 01B3 Signing time: Sat 17 May 2025 02:51:12 +0000 Manifest this update: Sat 17 May 2025 02:51:11 +0000 Manifest next update: Sat 24 May 2025 02:51:11 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: bP+NP6TKslvUCawQCVLGjGdxvqRxDTq16xFD+YmgE0c=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: May 17 02:51:11 2025 GMT Not After : May 24 02:51:11 2025 GMT Subject: CN=6827f99f-c8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:a2:c7:0e:c0:14:d6:ca:bc:af:4b:31:3d: 5a:c6:13:78:88:2e:c6:e0:2c:aa:59:36:e8:bd:3d: 30:01:f1:b9:fc:92:43:0f:36:26:0c:5c:e8:71:16: 18:99:6f:fa:a6:4b:4c:b5:7b:73:4e:b0:76:1e:44: 33:6a:c9:8d:c2:6f:45:c2:bd:b8:3f:55:43:19:97: b3:c6:90:f1:2c:bd:ba:94:67:6e:0d:11:69:9a:32: a0:4a:45:e6:11:e2:7f:84:78:4c:a4:96:02:3c:02: d6:ce:48:58:c5:92:d9:44:24:87:96:3b:3d:3f:4c: 7d:b8:69:91:b6:4b:85:f0:e1:e3:f5:fc:9a:ce:f2: be:a5:2e:ab:39:b4:17:95:8c:06:d5:72:d5:b7:8e: 9c:b0:68:2c:6e:bb:f5:4c:85:c5:6a:1c:37:d3:eb: da:46:79:94:c8:ab:fc:2d:52:a2:ac:9c:33:a2:2f: 22:e8:c5:f3:8f:52:05:e6:19:09:85:7f:fa:53:94: a4:fb:db:4c:7e:91:19:c8:e1:29:45:f3:d6:8d:59: 53:53:57:4e:14:bc:46:a4:c6:00:da:97:d7:4f:da: 3f:2a:27:f6:9f:3a:25:3f:50:89:5f:3c:05:8b:f9: 34:6b:b4:aa:4b:b5:2b:55:b4:40:23:d1:b4:29:6f: a8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:9C:38:6C:2D:42:5A:0C:46:89:F4:AB:67:E8:58:67:DD:D8:AF X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3e:16:b9:4b:cd:4e:ee:a4:c4:37:1d:8a:82:26:d1:50:76: 7f:c9:5d:2a:12:71:5d:c1:a2:87:28:77:ce:0e:57:af:a7:a2: 85:ba:c4:96:d7:be:77:34:98:41:b3:e5:d7:6d:28:81:2d:31: 1a:62:10:f7:9b:3d:07:7a:cb:18:82:fa:af:3b:0a:5b:a8:09: 97:c0:64:b7:35:9d:cc:9c:84:b9:de:6b:ab:73:86:97:bb:54: a7:28:e9:a8:16:56:02:d5:a1:92:38:79:a7:fe:70:aa:93:22: 30:5e:b5:01:31:4f:79:4d:e4:5e:65:a8:01:cb:f8:01:9c:c9: 38:5b:27:b4:4f:6a:8f:2f:e0:71:f7:7b:27:74:c2:04:0c:ed: 3b:b9:bb:6c:15:95:26:a0:62:2d:05:3e:9d:3c:43:47:8f:f6: 93:da:3f:ad:79:b3:bf:6f:11:e7:86:e8:61:72:59:92:9f:45: 83:ff:38:fa:95:ee:e4:a4:9c:ed:b5:f7:1c:1f:a6:17:15:a0: fb:e6:cb:ba:e1:6a:05:85:ad:1b:92:61:87:40:a5:bd:bd:9d: a0:e3:f8:3a:45:72:dc:fa:d1:f8:c2:1e:0b:80:92:25:84:9a: 95:fd:09:27:f2:0f:86:53:bd:ad:b6:7b:4e:47:2c:b7:27:ee: 4c:bc:68:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUwNTE3MDI1MTExWhcNMjUwNTI0MDI1MTExWjAYMRYwFAYD VQQDEw02ODI3Zjk5Zi1jOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZGixw7AFNbKvK9LMT1axhN4iC7G4CyqWTbovT0wAfG5/JJDDzYmDFzocRYY mW/6pktMtXtzTrB2HkQzasmNwm9Fwr24P1VDGZezxpDxLL26lGduDRFpmjKgSkXm EeJ/hHhMpJYCPALWzkhYxZLZRCSHljs9P0x9uGmRtkuF8OHj9fyazvK+pS6rObQX lYwG1XLVt46csGgsbrv1TIXFahw30+vaRnmUyKv8LVKirJwzoi8i6MXzj1IF5hkJ hX/6U5Sk+9tMfpEZyOEpRfPWjVlTU1dOFLxGpMYA2pfXT9o/Kif2nzolP1CJXzwF i/k0a7SqS7UrVbRAI9G0KW+oMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbDnDhs LUJaDEaJ9Ktn6Fhn3divMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPha5S81O7qTENx2KgibRUHZ/yV0qEnFdwaKHKHfODlevp6KFusSW 1753NJhBs+XXbSiBLTEaYhD3mz0HessYgvqvOwpbqAmXwGS3NZ3MnIS53murc4aX u1SnKOmoFlYC1aGSOHmn/nCqkyIwXrUBMU95TeReZagBy/gBnMk4Wye0T2qPL+Bx 93sndMIEDO07ubtsFZUmoGItBT6dPENHj/aT2j+tebO/bxHnhuhhclmSn0WD/zj6 le7kpJzttfccH6YXFaD75su64WoFha0bkmGHQKW9vZ2g4/g6RXLc+tH4wh4LgJIl hJqV/Qkn8g+GU72ttntORyy3J+5MvGj/ -----END CERTIFICATE-----Generated at Sat May 17 19:09:02 2025 by rpki-client