$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json) Hash identifier: eyt++zkcltOTdkYjKxjk5L7Rb85TEImD+8R+wqzIu3c= Subject key identifier: 0C:BA:3A:6D:2B:4D:ED:99:AB:3C:79:68:B3:E8:7F:18:CD:E0:8E:48 Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft Manifest number: 0352 Signing time: Fri 25 Apr 2025 00:46:24 +0000 Manifest this update: Fri 25 Apr 2025 00:46:23 +0000 Manifest next update: Fri 02 May 2025 00:46:23 +0000 Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: nZS8AB+HT7W3S2dnjQoA3uqKAwUEvx9IVLbUQohwNY0=) 2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Validity Not Before: Apr 25 00:46:23 2025 GMT Not After : May 2 00:46:23 2025 GMT Subject: CN=680adb5f-eb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:13:fe:ea:e1:31:41:a7:e1:6e:23:f1:a1:9e: 71:fb:82:26:5f:46:d8:91:ce:92:6a:cb:66:0d:b6: fb:a7:b4:b4:54:f1:78:da:5c:ba:3d:89:b6:af:59: 89:c6:e3:8e:23:cb:99:33:01:31:52:1e:d3:7d:61: 01:f2:fd:bb:4b:aa:0f:65:64:36:f8:4a:7c:6d:8d: 5c:d4:0f:65:24:cd:49:50:2f:1b:af:a5:56:3f:f6: 0e:ca:82:8e:27:58:f1:11:e6:9f:6c:8a:09:05:9f: 89:a2:3a:d0:34:3f:b1:10:32:b4:b4:d0:1d:54:26: 38:3a:cc:9c:c1:3b:ae:59:58:02:3e:c1:39:06:d4: 67:7e:95:77:a5:2f:21:7f:8f:9f:1d:ff:8c:78:49: e4:f0:bd:0c:32:60:db:ae:48:ca:eb:ec:82:06:dd: b7:2f:e7:d4:48:a2:65:bc:e2:89:e0:a9:60:f0:55: 0d:9f:17:54:c7:61:ad:d5:b4:70:24:a5:7a:29:64: 9c:04:85:10:8d:c8:24:1d:f7:f6:a9:52:fb:a2:41: 78:a8:35:ac:bd:04:c8:f9:32:0a:da:24:07:c4:4c: 45:89:71:7c:63:96:c4:e5:b0:1a:c1:ef:f6:58:df: 70:f6:2f:77:7a:55:43:14:3d:2f:38:44:5c:60:3a: ac:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BA:3A:6D:2B:4D:ED:99:AB:3C:79:68:B3:E8:7F:18:CD:E0:8E:48 X509v3 Authority Key Identifier: keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:fb:1e:10:8a:87:c8:a7:af:0f:b2:21:7f:2b:aa:e1:4e:52: 9d:6f:9a:fc:9e:9c:95:38:81:17:90:82:2d:fa:54:8e:55:41: 45:9c:d3:fb:22:00:15:19:d2:52:0c:79:3f:d6:50:63:b1:6f: b8:8c:42:19:b9:ec:41:e2:de:43:1f:4c:5e:3e:50:e8:20:b3: 27:f6:22:88:34:77:eb:76:7a:cb:63:36:d2:68:a6:74:a2:6f: 23:20:4a:07:f8:38:96:69:c1:a0:3f:ea:3a:79:09:39:c8:25: 60:9f:ff:f6:e9:db:15:6f:62:42:82:dd:25:7d:d2:25:d9:03: 0a:92:cb:43:5d:3e:1b:c3:58:f6:a9:67:42:20:d7:19:59:82: a7:d9:de:63:d8:28:6a:64:9b:ba:27:79:8a:71:16:04:06:0c: 54:03:9f:06:eb:f2:b5:c7:bb:13:2a:24:35:3a:89:ce:66:71: 1d:2e:c9:6d:8b:d8:96:18:bf:91:b2:97:fc:5b:66:bb:77:de: e0:72:38:38:90:ca:78:83:66:73:aa:b9:ec:72:ed:6f:de:09: cf:1e:22:86:3e:7e:2a:87:78:04:e8:6f:65:01:7a:10:b7:62: 32:38:d1:32:b8:a1:22:1a:0c:a0:44:ff:d3:9f:b0:b8:fb:e2: 1c:b9:63:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1OTIxMTAvBgNVBAUTKDI0MEVDMTVEMTQ0NEQ0M0YwNzdDOTRENDhCRUVEMUFG MDkwNzREM0QwHhcNMjUwNDI1MDA0NjIzWhcNMjUwNTAyMDA0NjIzWjAYMRYwFAYD VQQDEw02ODBhZGI1Zi1lYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRP+6uExQafhbiPxoZ5x+4ImX0bYkc6SastmDbb7p7S0VPF42ly6PYm2r1mJ xuOOI8uZMwExUh7TfWEB8v27S6oPZWQ2+Ep8bY1c1A9lJM1JUC8br6VWP/YOyoKO J1jxEeafbIoJBZ+JojrQND+xEDK0tNAdVCY4OsycwTuuWVgCPsE5BtRnfpV3pS8h f4+fHf+MeEnk8L0MMmDbrkjK6+yCBt23L+fUSKJlvOKJ4Klg8FUNnxdUx2Gt1bRw JKV6KWScBIUQjcgkHff2qVL7okF4qDWsvQTI+TIK2iQHxExFiXF8Y5bE5bAawe/2 WN9w9i93elVDFD0vOERcYDqsrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy6Om0r Te2Zqzx5aLPofxjN4I5IMB8GA1UdIwQYMBaAFCQOwV0URNQ/B3yU1Ivu0a8JB009 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU5Mi81MUUxMjcyQUIw RjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFEOEhmSlRVaS03UnJ3a0hU VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBN0JYUlJFMUQ4SGZKVFVpLTdScndrSFRUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU5Mi81MUUxMjcyQUIwRjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFE OEhmSlRVaS03UnJ3a0hUVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU+x4QiofIp68PsiF/K6rhTlKdb5r8npyVOIEXkIIt+lSOVUFFnNP7 IgAVGdJSDHk/1lBjsW+4jEIZuexB4t5DH0xePlDoILMn9iKINHfrdnrLYzbSaKZ0 om8jIEoH+DiWacGgP+o6eQk5yCVgn//26dsVb2JCgt0lfdIl2QMKkstDXT4bw1j2 qWdCINcZWYKn2d5j2ChqZJu6J3mKcRYEBgxUA58G6/K1x7sTKiQ1OonOZnEdLslt i9iWGL+Rspf8W2a7d97gcjg4kMp4g2Zzqrnscu1v3gnPHiKGPn4qh3gE6G9lAXoQ t2IyONEyuKEiGgygRP/Tn7C4++IcuWP4 -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:44 2025 by rpki-client