$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: Coi4pd8RC8Aw43np5dnWvoVi31aVO03TX37HgpXai1A= Subject key identifier: C1:91:40:E4:EB:9D:BC:D1:0A:55:47:03:8D:AB:6F:0F:1D:E2:3E:65 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A0B Signing time: Sat 26 Apr 2025 19:38:33 +0000 Manifest this update: Sat 26 Apr 2025 19:38:33 +0000 Manifest next update: Sat 03 May 2025 19:38:33 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: AAiIuIds/TO69PwzgHdxJz3D2fJsFzdjUPKvFT173xk=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: m/p8bbAHJM24HdYiY9DoNYUeIyo2VNJNxbaHYIEgDWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: Apr 26 19:38:33 2025 GMT Not After : May 3 19:38:33 2025 GMT Subject: CN=680d3639-a6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:1b:be:0b:4e:5d:7a:12:d3:e9:33:54:59: db:cd:5c:78:45:60:c0:61:99:7c:4d:6d:97:10:db: 7c:c5:b0:1f:7f:20:90:18:54:e0:98:f4:49:d7:e3: b7:61:bc:b7:6f:2d:84:9f:c7:46:54:d2:f6:a4:34: e4:43:73:e3:99:4b:b8:2c:67:e9:d7:df:3b:44:a0: 03:53:39:da:96:6b:bc:b3:15:06:f2:35:01:6f:1e: 7d:75:2c:09:e0:41:47:94:4c:7c:f0:ad:8f:b3:95: 97:f8:a9:ec:67:c2:5e:20:a6:67:2e:b3:49:ef:6b: da:c1:ae:05:68:b5:e2:9b:19:d4:c2:b0:1f:4f:87: f3:4f:27:75:98:0c:5e:f8:c7:17:f0:1c:b9:9b:52: 2a:40:a5:3a:2a:b5:7f:f8:b8:1d:0a:0f:3e:f9:75: 28:0a:be:59:38:e0:21:25:51:28:83:a2:fe:48:2f: 50:33:8f:8b:de:d5:91:47:b0:81:6f:bf:db:ce:e0: 5c:51:f9:5c:b5:68:d1:0b:d5:1e:ee:b7:80:46:e6: 65:bc:03:02:33:00:e0:b1:65:8e:ae:2a:8b:0d:ad: c3:1e:36:8c:54:72:ce:31:48:6a:03:b1:a4:7d:27: 4a:d7:50:0f:5c:80:51:64:99:63:06:84:5d:37:de: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:91:40:E4:EB:9D:BC:D1:0A:55:47:03:8D:AB:6F:0F:1D:E2:3E:65 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a2:72:32:a2:12:9d:38:59:46:91:4d:24:20:6d:83:44:ca: 15:fa:8c:7d:4f:99:69:08:25:ea:54:a7:b4:e5:c3:f3:a9:8e: cf:0c:fa:9e:70:8e:b4:c6:86:48:64:cc:28:60:dd:bf:aa:72: 63:b9:c9:a2:71:c6:29:82:e1:70:ed:62:69:cb:f8:0c:1d:c6: bb:05:39:d6:7a:15:f5:86:e0:d2:78:2c:77:f7:77:bd:4f:78: 1c:69:56:7c:f1:4d:41:94:02:7e:f1:ff:84:d8:15:02:77:fc: 2d:44:84:07:5c:11:2a:de:a8:0a:25:a0:fc:5b:33:f6:33:e5: bf:c5:c2:f9:a8:75:e2:d1:55:85:50:33:8e:87:ca:4a:d8:54: 41:e7:ee:8f:36:3b:aa:01:0c:37:f7:26:65:87:f2:be:7b:2d: 4c:91:ae:bf:16:12:7e:0b:72:35:9f:8e:4c:e1:9b:1d:dc:58: 6b:e2:e1:8f:5d:39:e3:d9:15:8c:7a:ef:87:9e:5b:94:5a:4d: d3:43:c0:db:9a:4a:ab:b0:97:a6:7f:49:7e:36:23:ba:14:15: e9:29:68:c5:01:96:b1:52:d4:c3:a9:02:71:25:0a:26:6f:48: 04:56:0a:fb:9a:12:ce:22:0a:57:a5:4a:2b:4a:4f:5d:a3:10: 3a:d1:78:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwNDI2MTkzODMzWhcNMjUwNTAzMTkzODMzWjAYMRYwFAYD VQQDEw02ODBkMzYzOS1hNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlUbvgtOXXoS0+kzVFnbzVx4RWDAYZl8TW2XENt8xbAffyCQGFTgmPRJ1+O3 Yby3by2En8dGVNL2pDTkQ3PjmUu4LGfp1987RKADUznalmu8sxUG8jUBbx59dSwJ 4EFHlEx88K2Ps5WX+KnsZ8JeIKZnLrNJ72vawa4FaLXimxnUwrAfT4fzTyd1mAxe +McX8By5m1IqQKU6KrV/+LgdCg8++XUoCr5ZOOAhJVEog6L+SC9QM4+L3tWRR7CB b7/bzuBcUflctWjRC9Ue7reARuZlvAMCMwDgsWWOriqLDa3DHjaMVHLOMUhqA7Gk fSdK11APXIBRZJljBoRdN95OpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGRQOTr nbzRClVHA42rbw8d4j5lMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/onIyohKdOFlGkU0kIG2DRMoV+ox9T5lpCCXqVKe05cPzqY7PDPqe cI60xoZIZMwoYN2/qnJjucmiccYpguFw7WJpy/gMHca7BTnWehX1huDSeCx393e9 T3gcaVZ88U1BlAJ+8f+E2BUCd/wtRIQHXBEq3qgKJaD8WzP2M+W/xcL5qHXi0VWF UDOOh8pK2FRB5+6PNjuqAQw39yZlh/K+ey1Mka6/FhJ+C3I1n45M4Zsd3Fhr4uGP XTnj2RWMeu+HnluUWk3TQ8DbmkqrsJemf0l+NiO6FBXpKWjFAZaxUtTDqQJxJQom b0gEVgr7mhLOIgpXpUorSk9doxA60Xif -----END CERTIFICATE-----Generated at Sun Apr 27 00:18:00 2025 by rpki-client