$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: EOUde2IrTDDNOhSlumfgvh9aTJO53j/ACJqXK9Ep29U= Subject key identifier: 4C:40:3B:A0:ED:D1:71:0A:8C:35:0D:7E:AE:53:48:A1:66:84:9C:37 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 05:24:19 +0000 Manifest this update: Fri 25 Apr 2025 05:24:19 +0000 Manifest next update: Fri 02 May 2025 05:24:19 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: ZbCalZUIhHfnXMdzbkuUSU7c8yIhlDI2pygCKQnNeD4=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Apr 25 05:24:19 2025 GMT Not After : May 2 05:24:19 2025 GMT Subject: CN=680b1c83-435c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:5b:1a:a7:9d:43:f3:c3:80:70:04:e1:3a: ac:6f:8f:a6:07:ca:f3:f3:02:b7:bc:9e:e9:a9:6a: 75:35:60:63:ec:0a:47:ad:f6:7f:2d:ca:4f:d4:49: 27:ac:bb:aa:61:a0:1c:eb:aa:4d:9f:41:2d:a2:c5: ff:90:34:5a:e4:b8:57:52:3f:47:b7:5b:d8:a2:3d: e2:ad:0c:7b:b6:ad:a7:da:e4:e6:a9:2b:30:b7:a4: e3:e4:c9:d1:33:37:96:a5:48:ed:53:05:82:5d:71: a6:96:3e:d5:87:34:7a:2a:00:7f:1d:15:1b:fb:c4: 7e:b2:3c:2b:59:2d:3b:33:29:98:16:48:78:17:ba: a2:a1:56:cd:24:8f:d1:f2:ab:a3:a7:e0:82:15:f7: 2c:a0:b3:e4:60:75:9d:7e:bc:2f:9d:48:82:cb:1b: 1f:b8:02:d8:4d:aa:23:aa:14:e8:76:07:db:33:72: 16:a4:41:5e:a8:2d:c2:77:61:4a:dc:a6:b0:f2:b7: 74:b4:cb:8b:2b:a3:3d:3d:ef:b8:5b:ab:89:fd:a0: 03:e7:15:42:aa:65:0c:4d:0d:04:66:d0:2c:7d:67: 25:59:f3:bb:48:a0:89:f9:a9:15:77:3d:4b:67:48: 49:dd:6c:f0:20:1b:28:7d:b0:cc:82:4a:d1:8e:40: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:40:3B:A0:ED:D1:71:0A:8C:35:0D:7E:AE:53:48:A1:66:84:9C:37 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e1:e0:6d:24:65:5a:53:37:11:65:a0:e2:76:58:8c:d1:22: 84:ad:cb:12:0f:ec:28:55:74:e4:ca:9e:9d:4c:04:a2:94:3c: b6:ba:61:93:15:85:9d:64:c9:51:43:c9:49:90:2d:c7:71:43: 60:04:c5:d6:8f:58:cc:6f:be:a3:1a:84:9a:86:94:08:d2:e8: 68:5f:20:59:82:ae:5a:35:e9:18:b4:05:2b:de:33:b7:87:91: 61:b4:ab:b7:37:16:39:19:28:b3:df:38:8c:54:19:f8:68:2a: 0f:a6:a1:d7:db:68:d3:2f:50:11:2b:e5:69:29:67:e8:82:97: d5:3b:4a:c1:4c:30:40:f8:c0:7d:56:62:76:15:a4:ba:96:39: 12:a5:56:ae:f9:7e:5c:e2:91:21:c1:5a:3b:9c:d9:27:4d:2f: 57:bb:2f:ef:58:83:51:a6:2c:62:6c:c8:19:90:c0:79:bc:25: bc:75:e2:0f:f2:46:ee:f1:d4:c5:11:10:6b:a7:87:91:0b:ed: 05:88:49:a1:3e:7c:b6:b5:b3:61:7f:fa:d5:49:2f:68:50:07: c7:c3:09:a9:4a:1f:c3:7d:de:6f:de:13:80:8d:54:cf:d4:4f: 5a:ee:1c:3f:d7:ee:3a:ea:d8:8c:70:3e:43:c6:11:d4:d6:3e: e7:58:6c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwNDI1MDUyNDE5WhcNMjUwNTAyMDUyNDE5WjAYMRYwFAYD VQQDEw02ODBiMWM4My00MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwydbGqedQ/PDgHAE4Tqsb4+mB8rz8wK3vJ7pqWp1NWBj7ApHrfZ/LcpP1Ekn rLuqYaAc66pNn0EtosX/kDRa5LhXUj9Ht1vYoj3irQx7tq2n2uTmqSswt6Tj5MnR MzeWpUjtUwWCXXGmlj7VhzR6KgB/HRUb+8R+sjwrWS07MymYFkh4F7qioVbNJI/R 8qujp+CCFfcsoLPkYHWdfrwvnUiCyxsfuALYTaojqhTodgfbM3IWpEFeqC3Cd2FK 3Kaw8rd0tMuLK6M9Pe+4W6uJ/aAD5xVCqmUMTQ0EZtAsfWclWfO7SKCJ+akVdz1L Z0hJ3WzwIBsofbDMgkrRjkChDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExAO6Dt 0XEKjDUNfq5TSKFmhJw3MB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX4eBtJGVaUzcRZaDidliM0SKErcsSD+woVXTkyp6dTASilDy2umGT FYWdZMlRQ8lJkC3HcUNgBMXWj1jMb76jGoSahpQI0uhoXyBZgq5aNekYtAUr3jO3 h5FhtKu3NxY5GSiz3ziMVBn4aCoPpqHX22jTL1ARK+VpKWfogpfVO0rBTDBA+MB9 VmJ2FaS6ljkSpVau+X5c4pEhwVo7nNknTS9Xuy/vWINRpixibMgZkMB5vCW8deIP 8kbu8dTFERBrp4eRC+0FiEmhPny2tbNhf/rVSS9oUAfHwwmpSh/Dfd5v3hOAjVTP 1E9a7hw/1+466tiMcD5DxhHU1j7nWGzs -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:18 2025 by rpki-client