$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: n6sncIsRo1Rs2zO1q07JYlKPecRQCJKnEtuqXCqJRow= Subject key identifier: BE:DF:0B:84:93:FD:95:95:79:3E:81:65:44:9B:8D:27:A9:6F:1D:E9 Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0AF8 Signing time: Thu 24 Apr 2025 19:13:01 +0000 Manifest this update: Thu 24 Apr 2025 19:13:00 +0000 Manifest next update: Thu 01 May 2025 19:13:00 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: pmXayRtgZ9qJsJfG8zC1tN7u5RNUzrPMB3cNJ9qIrSo=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: WrNvje3c+z7lsqTQqXn/sqPriUfd4/uYt7v0A72LhYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: Apr 24 19:13:00 2025 GMT Not After : May 1 19:13:00 2025 GMT Subject: CN=680a8d3c-6dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:00:6a:18:18:75:ef:7a:2f:7a:bf:5a:d5: 07:12:bc:e2:95:23:bb:71:54:ac:ea:1b:7f:21:ab: bd:68:e0:8c:a6:22:68:d6:37:b2:e7:8b:92:8a:4d: 08:e1:ea:a7:3a:2a:4e:64:e5:c3:2e:86:e0:61:db: 8b:85:cf:d5:06:d2:50:36:0e:a6:71:e8:b3:a4:ba: 9c:81:d6:53:f3:38:c3:cd:17:73:80:48:9c:c3:ab: 34:0a:39:86:80:68:53:1d:1e:dd:43:70:f5:ec:98: 25:c8:8b:51:95:38:2e:bd:8d:2a:29:c7:4e:66:c3: c0:ae:74:8f:05:36:67:a3:6f:54:73:16:c1:bb:7b: 4e:b9:ec:88:11:69:cf:e0:d1:d4:9a:6b:43:44:16: a2:51:0e:28:26:06:1d:75:d7:d2:27:7c:78:67:74: bc:96:1c:72:46:38:d0:eb:5a:33:14:4c:ed:c7:32: 68:8f:3c:ba:30:4e:9c:9d:e5:13:32:d2:3a:91:4e: 28:80:d2:09:06:3f:12:42:7d:58:b5:10:16:5d:a1: 16:1d:82:54:42:9a:4d:5a:15:c7:0e:1b:51:d8:50: c2:12:b0:52:42:df:9d:e2:8f:af:b4:87:35:7c:89: b0:53:35:8f:10:86:9d:6c:ed:66:cb:43:c9:04:33: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DF:0B:84:93:FD:95:95:79:3E:81:65:44:9B:8D:27:A9:6F:1D:E9 X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8d:d4:74:fc:ea:84:8d:5e:ac:95:e5:5b:bf:6e:99:79:0c: 97:1e:28:3d:cb:59:e7:0c:46:ef:65:f2:cd:63:e6:cf:18:ea: 02:fe:be:7d:39:75:a4:0e:7c:90:60:12:cd:f8:bc:42:c5:a7: 7c:ee:26:3a:a5:0c:ff:9e:09:27:d9:db:14:a2:e8:15:09:dd: 40:24:4a:df:f5:d7:3a:00:b8:78:0b:26:53:af:e7:25:a7:c2: 5c:86:2b:75:48:b9:8b:b7:b1:1c:51:93:aa:f4:0c:d0:0c:08: bb:05:f4:f3:76:98:c1:43:bd:c3:f9:24:e9:01:cf:38:81:67: 82:ae:fa:3a:dd:c1:9b:fd:30:b7:b2:ef:67:cb:a7:d5:34:a7: 5a:6d:a9:52:50:4f:7a:45:0c:8e:bd:73:e6:3f:a0:b6:b3:57: 74:56:c8:59:15:1c:df:82:1f:37:27:49:dd:95:d3:80:a3:29: bc:56:a2:c3:3b:1f:21:21:f5:ca:77:9e:dd:dc:6c:76:6f:67: 35:5c:94:c0:35:de:1d:60:4f:89:04:7f:6c:0e:78:cf:02:95: fe:b5:88:38:96:d7:8a:ec:4f:6e:eb:70:40:b0:9d:19:58:4d: 83:05:d1:a8:e4:17:5a:bd:24:33:af:cc:be:be:62:38:86:7f: 39:ee:6b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjUwNDI0MTkxMzAwWhcNMjUwNTAxMTkxMzAwWjAYMRYwFAYD VQQDEw02ODBhOGQzYy02ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V8AahgYde96L3q/WtUHErzilSO7cVSs6ht/Iau9aOCMpiJo1jey54uSik0I 4eqnOipOZOXDLobgYduLhc/VBtJQNg6mceizpLqcgdZT8zjDzRdzgEicw6s0CjmG gGhTHR7dQ3D17JglyItRlTguvY0qKcdOZsPArnSPBTZno29UcxbBu3tOueyIEWnP 4NHUmmtDRBaiUQ4oJgYdddfSJ3x4Z3S8lhxyRjjQ61ozFEztxzJojzy6ME6cneUT MtI6kU4ogNIJBj8SQn1YtRAWXaEWHYJUQppNWhXHDhtR2FDCErBSQt+d4o+vtIc1 fImwUzWPEIadbO1my0PJBDMgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7fC4ST /ZWVeT6BZUSbjSepbx3pMB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxjdR0/OqEjV6sleVbv26ZeQyXHig9y1nnDEbvZfLNY+bPGOoC/r59 OXWkDnyQYBLN+LxCxad87iY6pQz/ngkn2dsUougVCd1AJErf9dc6ALh4CyZTr+cl p8Jchit1SLmLt7EcUZOq9AzQDAi7BfTzdpjBQ73D+STpAc84gWeCrvo63cGb/TC3 su9ny6fVNKdabalSUE96RQyOvXPmP6C2s1d0VshZFRzfgh83J0ndldOAoym8VqLD Ox8hIfXKd57d3Gx2b2c1XJTANd4dYE+JBH9sDnjPApX+tYg4lteK7E9u63BAsJ0Z WE2DBdGo5BdavSQzr8y+vmI4hn857mvj -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:59 2025 by rpki-client