$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: aR7iKRfmW9P1e8yt6b94ZKraZp8nm/U6izxABtDJnfA= Subject key identifier: 8A:C0:FB:F9:83:09:6C:64:3B:41:E2:F4:67:93:7A:A5:FE:E5:5C:64 Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 0649 Signing time: Thu 24 Apr 2025 22:18:47 +0000 Manifest this update: Thu 24 Apr 2025 22:18:47 +0000 Manifest next update: Thu 01 May 2025 22:18:47 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: SGH07csa9pVmHBhfL3hXCbVVevkZnElgGfwpoZZ1ysY=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: FHqmc6lqj/CZVq6IBqaEeOALwRu+Ckxhxr3QSAxwIwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: Apr 24 22:18:47 2025 GMT Not After : May 1 22:18:47 2025 GMT Subject: CN=680ab8c7-3b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:22:29:43:6b:e1:38:75:cf:6e:73:bd:d2: 1b:d3:08:32:2c:87:76:d1:f4:36:60:7b:e0:2c:0f: f4:b1:4a:72:97:11:ab:31:11:74:11:d1:3d:50:51: f7:d0:12:7d:de:d2:e5:30:41:80:74:12:c4:5b:8b: 08:61:80:88:f0:04:dd:5e:2d:7a:8c:c5:33:6d:3c: 5f:0c:68:3d:f6:2c:69:23:da:de:3a:07:e7:01:b4: 01:07:78:f0:8d:03:1e:d8:c3:b7:1c:74:94:ef:4e: 1c:4e:52:fc:b5:93:5b:aa:e3:00:f0:84:bb:40:d4: 59:94:14:be:bc:34:d8:3a:cc:b5:0c:27:3d:f5:fc: 1d:a2:0d:16:70:35:c2:c7:fd:55:60:9f:fd:a3:d3: 2d:67:63:3f:6a:b9:dd:f7:df:1a:7f:3e:32:d1:73: 9b:94:1e:e8:61:cc:4f:d8:c8:fb:b0:fa:1d:98:ce: 4b:3a:2a:06:df:af:41:ec:62:21:5f:ae:0c:bf:07: be:d8:2f:be:7d:96:1a:87:9a:ab:8d:da:92:6e:2f: 6d:8d:65:bb:34:1a:2b:2a:5e:6e:7f:86:f9:21:e6: 53:1f:f4:91:90:b8:19:3b:a0:de:40:ef:83:87:d9: 73:05:fe:ff:50:18:af:e8:a3:ae:ea:28:d4:9c:93: 68:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C0:FB:F9:83:09:6C:64:3B:41:E2:F4:67:93:7A:A5:FE:E5:5C:64 X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:eb:94:31:ac:11:5f:41:2d:93:f0:c6:4f:9d:c8:1d:dd:2c: 09:3e:a7:39:ac:6d:64:5b:47:d0:b7:ec:0d:a8:88:28:b8:c4: 51:82:ba:9d:0a:9e:9e:40:ed:95:92:6b:85:23:7c:96:7d:ef: e6:24:67:be:56:28:42:dd:47:01:bb:55:14:6a:98:8b:24:91: 09:b8:1a:89:db:24:0c:bc:c3:bf:a0:bb:d0:1e:ee:96:e9:30: f9:0d:38:03:e0:ce:97:be:99:db:d3:5e:b7:b6:42:ac:53:5d: 15:40:85:2b:b5:58:ae:65:f9:a0:3b:6e:77:2f:ef:b7:3c:48: e1:0d:02:3a:6d:cc:32:a3:28:1a:b8:3a:75:a7:d0:83:e4:d0: 75:9f:5d:52:1d:8f:c4:0d:df:20:47:d4:aa:35:23:7a:36:41: 50:0a:07:28:d4:0b:09:41:34:87:b7:56:c1:94:90:e8:62:c7: 2f:20:fb:5d:e7:9b:8c:a4:84:94:31:75:1b:01:c9:da:92:ba: 10:ea:cd:b6:6d:4b:cb:e3:eb:b7:7e:ff:1c:f1:01:2a:3f:10: 50:96:12:05:44:e6:ff:d9:c5:2f:31:29:f8:e8:9c:c5:dc:36: 8d:16:eb:e8:66:e2:59:b2:78:83:a9:dd:4b:32:fd:39:e3:83: 1e:0a:88:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjUwNDI0MjIxODQ3WhcNMjUwNTAxMjIxODQ3WjAYMRYwFAYD VQQDEw02ODBhYjhjNy0zYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8kiKUNr4Th1z25zvdIb0wgyLId20fQ2YHvgLA/0sUpylxGrMRF0EdE9UFH3 0BJ93tLlMEGAdBLEW4sIYYCI8ATdXi16jMUzbTxfDGg99ixpI9reOgfnAbQBB3jw jQMe2MO3HHSU704cTlL8tZNbquMA8IS7QNRZlBS+vDTYOsy1DCc99fwdog0WcDXC x/1VYJ/9o9MtZ2M/arnd998afz4y0XOblB7oYcxP2Mj7sPodmM5LOioG369B7GIh X64Mvwe+2C++fZYah5qrjdqSbi9tjWW7NBorKl5uf4b5IeZTH/SRkLgZO6DeQO+D h9lzBf7/UBiv6KOu6ijUnJNobwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrA+/mD CWxkO0Hi9GeTeqX+5VxkMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr65QxrBFfQS2T8MZPncgd3SwJPqc5rG1kW0fQt+wNqIgouMRRgrqd Cp6eQO2VkmuFI3yWfe/mJGe+VihC3UcBu1UUapiLJJEJuBqJ2yQMvMO/oLvQHu6W 6TD5DTgD4M6Xvpnb0163tkKsU10VQIUrtViuZfmgO253L++3PEjhDQI6bcwyoyga uDp1p9CD5NB1n11SHY/EDd8gR9SqNSN6NkFQCgco1AsJQTSHt1bBlJDoYscvIPtd 55uMpISUMXUbAcnakroQ6s22bUvL4+u3fv8c8QEqPxBQlhIFROb/2cUvMSn46JzF 3DaNFuvoZuJZsniDqd1LMv0544MeCogQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:51 2025 by rpki-client