$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: hkBlAt/GUqN5Z8sQllfT4VCuJrISthUV339LbYW5v7M= Subject key identifier: 56:1E:D0:D5:27:05:DE:48:56:50:AE:2A:F7:AC:A3:26:3F:FC:AA:48 Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: B7 Signing time: Fri 25 Apr 2025 05:00:37 +0000 Manifest this update: Fri 25 Apr 2025 05:00:36 +0000 Manifest next update: Fri 02 May 2025 05:00:36 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: yVhNvB0mqOpMj1yUN+qOwTeJAYk7GcRYXRB9otAo5g0=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Apr 25 05:00:36 2025 GMT Not After : May 2 05:00:36 2025 GMT Subject: CN=680b16f5-f961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:fd:21:3f:be:ed:81:65:12:36:d9:53:78: a5:9c:25:81:3f:51:e6:43:94:32:45:04:bf:65:c5: aa:1a:04:52:38:76:52:dd:ff:8d:a8:07:9f:01:f1: e5:a1:73:99:5c:03:ef:f3:11:69:78:cf:ef:9e:10: ff:97:64:2f:81:05:38:a8:ed:d1:84:a7:44:d6:e0: d2:e5:17:02:09:ec:ab:00:da:54:ff:f4:a6:20:cc: 8d:80:27:17:b8:01:bd:5a:d6:b0:40:64:54:24:65: c1:ab:12:38:a7:a9:4f:ca:97:04:c7:c4:75:bc:81: 08:78:89:1b:4e:fa:c9:7b:bb:14:9a:d4:1f:26:5e: 11:6d:c0:d0:c6:f6:12:ef:34:d6:fe:01:b7:11:87: 02:b4:ae:27:9f:e2:36:72:1c:15:cb:06:51:4d:5b: 69:c2:3a:14:d3:8d:dc:2a:53:15:07:27:d5:df:c7: 20:fe:33:ac:41:47:2f:91:28:62:df:9b:5e:c2:d4: 01:c0:d9:53:d5:ab:56:c4:8b:8f:d0:75:ad:bb:ee: 15:e8:98:71:7c:cc:aa:60:27:bc:a0:90:57:5d:a3: 02:c5:b1:1e:74:3e:4b:44:6c:72:f2:b4:a7:1e:71: 5f:d2:f6:69:d1:41:60:ff:2b:bc:d5:4c:7d:86:09: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1E:D0:D5:27:05:DE:48:56:50:AE:2A:F7:AC:A3:26:3F:FC:AA:48 X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a6:bf:b7:d9:c7:b3:f2:b1:cd:0b:5c:7d:18:12:f5:f2:ab: 4e:ba:14:64:0c:71:1b:29:9c:3b:ba:52:5d:68:c1:89:23:a3: e5:0c:b3:5b:f1:9a:bd:b7:39:d4:1c:e0:93:92:bc:0c:c2:18: 88:a7:5b:71:0e:bd:8b:f4:02:bc:6b:55:53:60:ee:10:9d:8d: 87:28:5a:95:c2:b1:7f:7f:da:13:68:b7:da:17:09:9a:de:b1: 1d:2b:fc:07:84:12:30:38:c4:63:23:7c:7e:25:77:9f:d9:e7: 46:6e:8d:88:ce:04:ce:a5:21:66:52:22:ca:47:34:ad:7e:5f: d4:08:9f:08:3d:d4:b6:7b:f6:ac:a4:c0:66:2b:b8:ca:4b:5d: 03:a7:8f:50:b2:82:60:14:3a:18:c8:a7:b5:15:9c:38:e5:87: e4:19:62:76:02:03:35:2d:c0:2e:f1:5f:94:d3:30:d0:f0:42: 33:fa:9d:c6:52:b6:bc:d9:11:8b:b4:3f:79:f7:f4:5a:16:44: 70:5e:d6:bb:20:b0:e0:99:1f:13:c4:89:05:63:1e:52:64:99: 3f:d3:c2:d4:4a:c9:52:b5:ab:b5:24:66:6a:b5:d2:4e:9a:6c: bc:ba:b8:86:0d:66:c5:02:45:ac:24:ae:94:d9:5e:21:a6:31: a2:0f:24:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG QzkyRDlENDQwHhcNMjUwNDI1MDUwMDM2WhcNMjUwNTAyMDUwMDM2WjAYMRYwFAYD VQQDEw02ODBiMTZmNS1mOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwb9IT++7YFlEjbZU3ilnCWBP1HmQ5QyRQS/ZcWqGgRSOHZS3f+NqAefAfHl oXOZXAPv8xFpeM/vnhD/l2QvgQU4qO3RhKdE1uDS5RcCCeyrANpU//SmIMyNgCcX uAG9WtawQGRUJGXBqxI4p6lPypcEx8R1vIEIeIkbTvrJe7sUmtQfJl4RbcDQxvYS 7zTW/gG3EYcCtK4nn+I2chwVywZRTVtpwjoU043cKlMVByfV38cg/jOsQUcvkShi 35tewtQBwNlT1atWxIuP0HWtu+4V6JhxfMyqYCe8oJBXXaMCxbEedD5LRGxy8rSn HnFf0vZp0UFg/yu81Ux9hgmN/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYe0NUn Bd5IVlCuKvesoyY//KpIMB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCypr+32cez8rHNC1x9GBL18qtOuhRkDHEbKZw7ulJdaMGJI6PlDLNb 8Zq9tznUHOCTkrwMwhiIp1txDr2L9AK8a1VTYO4QnY2HKFqVwrF/f9oTaLfaFwma 3rEdK/wHhBIwOMRjI3x+JXef2edGbo2IzgTOpSFmUiLKRzStfl/UCJ8IPdS2e/as pMBmK7jKS10Dp49QsoJgFDoYyKe1FZw45YfkGWJ2AgM1LcAu8V+U0zDQ8EIz+p3G Ura82RGLtD959/RaFkRwXta7ILDgmR8TxIkFYx5SZJk/08LUSslStau1JGZqtdJO mmy8uriGDWbFAkWsJK6U2V4hpjGiDyS7 -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:38 2025 by rpki-client