$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: vS310uJgFKIbRsSeefxrVbpXbPd7SNIr7vEvXMUtDEs= Subject key identifier: 09:2D:C1:BC:13:9D:E4:C3:A5:A5:4E:50:06:BD:94:B5:DF:0D:5D:E3 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 01E9 Signing time: Thu 15 May 2025 02:12:09 +0000 Manifest this update: Thu 15 May 2025 02:12:08 +0000 Manifest next update: Thu 22 May 2025 02:12:08 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: N8rsfiTcGlp6dBj1Y62jf7593AltfZRPjcwG24zw0gA=) 2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: up6WHjnsfS0bIxQesxTATm4WYD2tutF7YiezZwJi2Bc=) 3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=) 4: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: May 15 02:12:08 2025 GMT Not After : May 22 02:12:08 2025 GMT Subject: CN=68254d79-f539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:ba:b1:5b:8b:25:c7:42:fc:fe:e4:87:2a: a7:6f:09:78:d7:fa:71:4f:a2:b1:9f:09:c4:dc:bf: c2:ea:17:7b:29:97:9f:3f:39:7a:68:01:39:a7:70: 70:b8:c4:e2:00:cf:1b:e9:36:ca:70:fa:3c:cc:39: d2:bd:62:96:6b:f1:8c:c1:73:fa:d1:45:ed:9e:b1: e2:d4:1d:1a:9e:19:71:2c:ff:fd:25:6d:d5:49:b4: e8:be:f2:a5:d7:86:64:58:0b:34:cb:96:86:6c:3e: 72:cd:c0:20:d1:f6:fe:3f:73:b1:90:51:3e:fa:74: a6:37:00:19:13:b7:fe:30:f3:4e:52:b1:5a:48:83: c0:4c:b8:0e:30:90:78:8d:ed:20:2b:1d:12:86:f8: 34:46:d2:db:f1:61:1a:22:e7:9e:22:e4:49:33:53: f5:1a:9d:d7:37:86:60:8f:3c:c5:80:2c:d5:be:66: e8:3c:05:b8:d4:70:97:90:49:e1:e2:cb:ba:ee:c2: 6d:da:db:0d:50:41:0e:1a:22:2b:17:8f:2b:ab:3f: 8b:85:a4:2f:a0:a1:6d:ce:b4:8f:59:e6:a8:29:08: 80:6a:7e:6c:13:82:df:4f:f0:89:63:ab:2f:32:cd: d5:09:8f:f0:68:58:5d:64:4b:27:ef:99:04:7b:d5: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2D:C1:BC:13:9D:E4:C3:A5:A5:4E:50:06:BD:94:B5:DF:0D:5D:E3 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:2a:ef:76:3e:2d:ba:39:b1:ba:15:42:87:f1:f4:37:63:2a: 26:6c:7b:08:5c:4b:80:4b:62:bb:45:cd:c8:49:c5:ec:2b:a0: de:a4:cf:ce:67:68:0c:4d:22:47:c6:b4:9f:9b:4a:e1:2f:5f: 12:67:69:8e:14:a5:22:5b:bc:50:ce:25:8f:9c:a1:04:4a:58: b6:85:74:e7:78:78:0b:07:20:12:54:bd:1d:8b:98:e2:03:b8: 3d:ca:71:63:6f:4d:95:45:b6:0a:a0:7a:e9:6c:61:ba:61:53: d5:47:f6:83:4f:2b:b3:1a:06:be:bb:b5:c3:83:c8:8c:da:8c: aa:eb:8a:8c:86:b6:fd:34:7c:f0:ac:f5:52:9c:51:f0:94:e0: 05:57:e5:bc:a4:61:ae:4a:12:01:5b:e4:03:df:46:d5:8d:a8: f4:52:e8:bb:da:2f:6e:0c:5e:4a:21:2b:20:21:e5:39:0c:71: cf:a9:21:36:6b:fd:45:62:a5:7a:20:bb:1d:ab:53:fa:ed:59: bc:64:96:49:d9:49:63:a2:ab:25:52:95:d0:e3:4c:1a:17:83: 34:1a:73:5a:02:b2:f5:55:6e:a3:42:7e:23:1e:3b:0d:f7:76: b0:65:dc:09:8a:1d:fe:a8:d0:97:97:be:ff:b9:00:9a:08:5b: 20:43:f8:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUwNTE1MDIxMjA4WhcNMjUwNTIyMDIxMjA4WjAYMRYwFAYD VQQDEw02ODI1NGQ3OS1mNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtva6sVuLJcdC/P7khyqnbwl41/pxT6KxnwnE3L/C6hd7KZefPzl6aAE5p3Bw uMTiAM8b6TbKcPo8zDnSvWKWa/GMwXP60UXtnrHi1B0anhlxLP/9JW3VSbTovvKl 14ZkWAs0y5aGbD5yzcAg0fb+P3OxkFE++nSmNwAZE7f+MPNOUrFaSIPATLgOMJB4 je0gKx0Shvg0RtLb8WEaIueeIuRJM1P1Gp3XN4ZgjzzFgCzVvmboPAW41HCXkEnh 4su67sJt2tsNUEEOGiIrF48rqz+LhaQvoKFtzrSPWeaoKQiAan5sE4LfT/CJY6sv Ms3VCY/waFhdZEsn75kEe9U9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAktwbwT neTDpaVOUAa9lLXfDV3jMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMKu92Pi26ObG6FUKH8fQ3YyombHsIXEuAS2K7Rc3IScXsK6DepM/O Z2gMTSJHxrSfm0rhL18SZ2mOFKUiW7xQziWPnKEESli2hXTneHgLByASVL0di5ji A7g9ynFjb02VRbYKoHrpbGG6YVPVR/aDTyuzGga+u7XDg8iM2oyq64qMhrb9NHzw rPVSnFHwlOAFV+W8pGGuShIBW+QD30bVjaj0Uui72i9uDF5KISsgIeU5DHHPqSE2 a/1FYqV6ILsdq1P67Vm8ZJZJ2UljoqslUpXQ40waF4M0GnNaArL1VW6jQn4jHjsN 93awZdwJih3+qNCXl77/uQCaCFsgQ/gh -----END CERTIFICATE-----Generated at Fri May 16 19:29:19 2025 by rpki-client