$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: 2fsXRcVvp1dA9YI+aqFi7hktoafELgtY0ZvSFjGa14M= Subject key identifier: 1A:12:C5:01:DB:3F:45:F0:D9:BB:10:AF:DB:82:43:F7:11:2E:A8:A3 Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: 31 Signing time: Sun 11 May 2025 06:26:24 +0000 Manifest this update: Sun 11 May 2025 06:26:24 +0000 Manifest next update: Sun 18 May 2025 06:26:24 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: G/HKzXHFVG7aKmDb/FCADdDdXdX2E8qHEuhyxEDXeaw=) 2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: jOhNPwVgr8IgRDHfIrJJZGVjc3Pfqrjw7RoDj2c/Y0o=) 3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: spTkb5xEKtj6kOvbsLtYV5brzWGqrgveZXxT4s0PHa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: May 11 06:26:24 2025 GMT Not After : May 18 06:26:24 2025 GMT Subject: CN=68204310-326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:c7:38:94:66:43:c2:0b:ae:ce:33:bf:83: 8a:4c:2b:04:58:96:b3:79:fd:ae:63:f6:33:e2:e6: 24:47:3d:64:20:64:2e:80:72:9a:a9:42:1e:29:e1: aa:56:38:16:29:37:e2:b5:4c:37:fa:e2:8f:2b:6c: cf:a3:02:fc:c0:4b:ac:d1:80:5c:61:72:32:2d:2a: fc:f1:f0:e7:c5:50:05:fc:0c:36:c1:27:07:5f:cf: 3b:2e:ad:d0:84:21:b8:32:3b:29:97:21:ae:a0:ea: 81:5e:af:cf:f1:22:ea:de:80:13:75:cc:95:f7:20: 27:f8:14:ac:4c:7b:44:0c:27:10:52:3e:fd:b2:c2: b1:1a:64:ef:2f:41:4a:01:20:6b:b7:85:11:f1:25: 34:13:5d:7d:ad:0f:ee:dc:da:67:a2:82:99:0f:c8: 2c:f0:04:de:1e:3d:b5:dc:6e:b5:66:fc:65:a6:85: 53:fd:cc:20:42:fc:e4:96:e5:f7:bc:79:76:5f:2f: 90:38:84:b3:b0:2c:86:a4:8a:30:a1:e1:28:9f:80: d2:b7:b4:fb:a0:d9:22:3e:4f:62:51:95:8f:73:84: 51:ba:8b:b4:d0:1a:71:12:93:a0:41:f7:c2:c5:69: 31:94:38:a6:4d:0e:d0:dc:5d:71:9c:61:c3:5a:ae: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:C5:01:DB:3F:45:F0:D9:BB:10:AF:DB:82:43:F7:11:2E:A8:A3 X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b6:b9:0d:1d:c3:90:dd:43:34:45:48:c9:e0:12:8e:7d:8b: d9:78:ea:23:30:db:27:d5:b2:c6:ab:8a:99:fc:5d:82:0f:bf: ba:db:78:a9:e0:2b:b6:cc:9d:24:4b:49:3e:10:3c:9d:57:65: 19:f6:e6:de:7c:9c:45:72:af:06:ce:fd:40:50:6b:31:5c:63: 74:11:be:fe:56:50:0a:18:b4:58:d8:80:07:fc:b1:06:74:20: 49:3c:c5:ba:67:c5:94:c4:dd:c9:a3:ae:d2:ae:9f:4d:5b:af: 3c:6f:5d:f2:88:e4:7f:1c:51:5b:e9:d6:f9:67:4a:eb:23:5b: cb:e3:fb:59:80:81:ef:a5:99:0d:fb:29:4f:12:f3:e6:cb:b5: 43:6a:23:2d:92:f7:eb:22:0f:1d:ee:cb:36:b8:49:5c:6f:47: 2b:00:a0:a9:fc:d2:ea:b4:9e:ba:e9:55:1a:2e:46:2b:c6:ae: f9:38:15:f6:f3:a7:f8:a2:4d:8d:a4:9c:b9:df:93:0d:47:b5: d1:14:af:89:c8:9c:80:26:f0:4b:b5:4c:91:98:14:24:55:27: bf:d8:18:86:20:7f:99:28:99:56:2f:fe:00:a0:db:8c:1c:d8: 9c:49:8a:99:87:54:bb:d9:8a:8e:7f:22:27:93:ad:4f:98:b3: 03:11:31:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTk2RTExMC8GA1UEBRMoMjQyOUEzRUU1MDg4RjNENDUzNzJBOEUzQjM2ODM0Qzc1 RUFFNkQyOTAeFw0yNTA1MTEwNjI2MjRaFw0yNTA1MTgwNjI2MjRaMBgxFjAUBgNV BAMTDTY4MjA0MzEwLTMyNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF4sc4lGZDwguuzjO/g4pMKwRYlrN5/a5j9jPi5iRHPWQgZC6AcpqpQh4p4apW OBYpN+K1TDf64o8rbM+jAvzAS6zRgFxhcjItKvzx8OfFUAX8DDbBJwdfzzsurdCE IbgyOymXIa6g6oFer8/xIuregBN1zJX3ICf4FKxMe0QMJxBSPv2ywrEaZO8vQUoB IGu3hRHxJTQTXX2tD+7c2meigpkPyCzwBN4ePbXcbrVm/GWmhVP9zCBC/OSW5fe8 eXZfL5A4hLOwLIakijCh4SifgNK3tPug2SI+T2JRlY9zhFG6i7TQGnESk6BB98LF aTGUOKZNDtDcXXGcYcNarkH1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGhLFAds/ RfDZuxCv24JD9xEuqKMwHwYDVR0jBBgwFoAUJCmj7lCI89RTcqjjs2g0x16ubSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTZFLzIzRDJGMTZFRUMy MTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJT ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkNtajdsQ0k4OVJUY3FqanMyZzB4MTZ1YlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTZFLzIzRDJGMTZFRUMyMTExRUZBMzU1NjA1RkM0RjlBRTAyL0pDbWo3bENJODlS VGNxampzMmcweDE2dWJTay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJG2uQ0dw5DdQzRFSMngEo59i9l46iMw2yfVssaripn8XYIPv7rbeKng K7bMnSRLST4QPJ1XZRn25t58nEVyrwbO/UBQazFcY3QRvv5WUAoYtFjYgAf8sQZ0 IEk8xbpnxZTE3cmjrtKun01brzxvXfKI5H8cUVvp1vlnSusjW8vj+1mAge+lmQ37 KU8S8+bLtUNqIy2S9+siDx3uyza4SVxvRysAoKn80uq0nrrpVRouRivGrvk4Ffbz p/iiTY2knLnfkw1HtdEUr4nInIAm8Eu1TJGYFCRVJ7/YGIYgf5komVYv/gCg24wc 2JxJipmHVLvZio5/IieTrU+YswMRMR4= -----END CERTIFICATE-----Generated at Sun May 11 13:32:06 2025 by rpki-client