$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft File: jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json) Hash identifier: 4TKfVDuruDeHRinsaJqq5lNQk8+lt2QwyC29rnXa2U0= Subject key identifier: DB:8C:C3:35:4C:99:CF:7F:E1:1C:9A:BF:A2:74:7E:72:63:31:DB:B2 Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55 Certificate issuer: /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft Manifest number: 2F Signing time: Tue 29 Apr 2025 07:39:35 +0000 Manifest this update: Tue 29 Apr 2025 07:39:35 +0000 Manifest next update: Tue 06 May 2025 07:39:35 +0000 Files and hashes: 1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: GaNr0CmehmafCWwr2CRaypk/G8Gqy9iX9DZ+4cUapoY=) 2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: L3zDn/PUeHX+V2qmelbUl0Crjpgwx3ngnDdVfBLcBmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 07:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955 Validity Not Before: Apr 29 07:39:35 2025 GMT Not After : May 6 07:39:35 2025 GMT Subject: CN=68108237-6e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:57:ba:bf:62:96:b2:2d:f8:bf:69:3c:f7: 9b:4e:34:4a:3d:d2:9f:a6:be:25:5e:2b:38:62:f4: e6:1e:82:b5:bb:45:c3:20:eb:b4:fb:6d:ac:3c:58: fa:da:81:8b:e7:88:bd:0a:06:68:0d:2f:cf:ba:65: 7f:0b:42:3a:39:97:49:6a:dd:29:6e:f1:90:d3:ad: 7c:a2:7d:8d:35:4f:76:f9:2f:e5:4d:a4:9a:30:fb: de:29:e3:e7:44:96:76:c2:0a:88:75:12:43:b2:0e: bf:34:f2:bc:6d:04:bc:3c:7a:3c:9e:c4:87:88:12: bc:76:bc:9f:8f:b1:20:b0:b5:cc:d2:0b:bc:de:e3: c6:99:59:41:aa:24:d1:fa:17:e8:ea:d8:8f:5a:14: f6:db:dd:b9:d5:e1:96:be:41:f1:8e:96:d2:b2:f3: a7:71:9c:7c:b3:7e:f6:c9:48:35:b6:dc:5a:4d:ce: 3f:a5:77:d5:1f:4f:16:e9:f3:33:d3:68:4c:b7:94: a2:27:60:9d:aa:26:eb:ac:0e:48:12:f3:e9:7b:1b: 4b:c3:65:32:c5:0a:bf:d0:2f:50:ec:4e:33:84:a7: ae:bb:5d:a0:89:51:de:28:94:80:fa:aa:4f:e2:50: 7d:a1:81:a0:ca:17:d6:31:b8:04:15:e6:05:da:a5: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8C:C3:35:4C:99:CF:7F:E1:1C:9A:BF:A2:74:7E:72:63:31:DB:B2 X509v3 Authority Key Identifier: keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9e:83:07:57:57:a3:8e:c7:a6:b5:87:9a:08:81:dc:0a:fd: 92:2c:55:b7:83:83:6f:2e:11:34:d4:10:7b:1b:57:da:69:ee: c3:5f:73:d1:93:f5:41:1c:76:65:0e:f5:1d:60:3f:6a:47:ac: c9:21:af:bb:8b:f4:30:83:df:f4:2d:aa:ae:5c:14:80:07:83: 50:33:07:c1:44:61:ef:8f:14:45:62:05:a5:8c:e9:a2:64:e6: d5:df:ec:6b:3e:b6:f6:ba:cb:f2:68:d4:57:ac:ba:6e:9a:da: ac:2e:bc:29:ea:38:f0:78:af:c2:f5:f9:a6:d9:90:d9:80:a8: d8:fd:37:1c:ee:71:e6:37:31:2b:78:d8:1e:be:c4:07:57:43: e3:a6:10:17:91:1e:e7:6e:62:40:d8:c9:81:79:77:27:a1:f5: 8d:6e:b7:7b:2a:e2:ed:c7:aa:82:1f:fb:2f:84:6e:55:9f:69: 09:dc:e9:39:14:75:c4:ab:56:24:bf:0b:d1:ce:d5:59:27:fe: bc:75:06:b1:29:e8:f3:66:8d:41:36:d6:db:3e:23:51:a4:dc: c8:23:96:d7:88:fe:ee:f5:63:44:31:7e:9f:c1:16:7e:bf:55: 8c:38:2e:ac:12:7b:70:11:08:a7:8e:bd:54:72:fa:bd:4c:e5: 22:ab:be:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkM5MDExMC8GA1UEBRMoOEYyMkQxRjU2MkEwNTA3QjExMzU4RjA1M0RBNDJDODA1 MkQ0Qjk1NTAeFw0yNTA0MjkwNzM5MzVaFw0yNTA1MDYwNzM5MzVaMBgxFjAUBgNV BAMTDTY4MTA4MjM3LTZlNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGaFe6v2KWsi34v2k895tONEo90p+mviVeKzhi9OYegrW7RcMg67T7baw8WPra gYvniL0KBmgNL8+6ZX8LQjo5l0lq3Slu8ZDTrXyifY01T3b5L+VNpJow+94p4+dE lnbCCoh1EkOyDr808rxtBLw8ejyexIeIErx2vJ+PsSCwtczSC7ze48aZWUGqJNH6 F+jq2I9aFPbb3bnV4Za+QfGOltKy86dxnHyzfvbJSDW23FpNzj+ld9UfTxbp8zPT aEy3lKInYJ2qJuusDkgS8+l7G0vDZTLFCr/QL1DsTjOEp667XaCJUd4olID6qk/i UH2hgaDKF9YxuAQV5gXapdNPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU24zDNUyZ z3/hHJq/onR+cmMx27IwHwYDVR0jBBgwFoAUjyLR9WKgUHsRNY8FPaQsgFLUuVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QzkwLzMxQjQ1RkVDRTIx RDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhzUk5ZOEZQYVFzZ0ZMVXVW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanlMUjlXS2dVSHNSTlk4RlBhUXNnRkxVdVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QzkwLzMxQjQ1RkVDRTIxRDExRUY4QTY1MUI3REM0RjlBRTAyL2p5TFI5V0tnVUhz Uk5ZOEZQYVFzZ0ZMVXVWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF6egwdXV6OOx6a1h5oIgdwK/ZIsVbeDg28uETTUEHsbV9pp7sNfc9GT 9UEcdmUO9R1gP2pHrMkhr7uL9DCD3/Qtqq5cFIAHg1AzB8FEYe+PFEViBaWM6aJk 5tXf7Gs+tva6y/Jo1Fesum6a2qwuvCnqOPB4r8L1+abZkNmAqNj9NxzuceY3MSt4 2B6+xAdXQ+OmEBeRHuduYkDYyYF5dyeh9Y1ut3sq4u3HqoIf+y+EblWfaQnc6TkU dcSrViS/C9HO1Vkn/rx1BrEp6PNmjUE21ts+I1Gk3MgjlteI/u71Y0Qxfp/BFn6/ VYw4LqwSe3ARCKeOvVRy+r1M5SKrvmM= -----END CERTIFICATE-----Generated at Wed Apr 30 15:58:06 2025 by rpki-client