$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft File: Ju9sebsP64Ta_Ot0DzluVzz79N8.mft (raw, json) Hash identifier: 9WC7jq2Z9RrISuWhnK835Xh73o4s27/b2M1Mqo+qn1k= Subject key identifier: 04:BB:F8:29:1D:29:79:AC:F0:34:43:F6:A3:E7:0C:F7:07:15:E8:D3 Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft Manifest number: 0579 Signing time: Thu 24 Apr 2025 23:05:20 +0000 Manifest this update: Thu 24 Apr 2025 23:05:19 +0000 Manifest next update: Thu 01 May 2025 23:05:19 +0000 Files and hashes: 1: Ju9sebsP64Ta_Ot0DzluVzz79N8.crl (hash: Z72QlEztU3IQ3NKOaV+Z7glTvXFkmnh4g2tSNOMtRSQ=) 2: 39397B6C69BE11EFA850E254C4F9AE02.roa (hash: bvi2PqNlW+oMVQ1UwJQ0bSEdv/ndyrJ9LYRWbNa29XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Apr 24 23:05:19 2025 GMT Not After : May 1 23:05:19 2025 GMT Subject: CN=680ac3b0-7bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:67:17:59:fb:5d:8d:c9:23:fd:6e:18:95: 0c:52:f6:1c:be:47:25:1e:54:90:e1:7d:ce:65:a3: d4:1a:b7:6e:54:1e:36:17:c1:b0:2e:64:6c:3d:1f: 58:de:e8:2f:cc:4d:5f:8c:db:28:15:21:44:20:9e: 92:f9:16:99:dc:10:40:de:5c:47:5b:99:e9:c7:b7: 07:7b:49:0e:ba:b6:c3:6b:5a:97:41:90:81:42:be: 8e:53:4d:b1:47:70:24:91:c0:20:5d:d2:88:d0:32: de:3e:34:d3:0d:f9:74:99:0c:13:fb:45:dc:9d:df: af:84:a7:b1:4f:84:46:6a:37:24:99:c4:63:a5:53: ac:f7:f1:da:e3:99:a7:05:c7:77:dd:f7:bf:96:3e: de:66:60:1a:9b:aa:43:f6:c8:d8:f5:7d:cd:6b:90: 7c:2c:93:59:19:01:f2:9d:61:eb:20:f7:a5:93:d4: 95:be:35:94:e8:68:ac:ad:57:1d:1a:ff:d7:61:ee: 5b:dc:db:a6:89:12:9e:c0:af:c9:a0:8d:1c:b8:e8: b5:81:fe:cf:1e:3d:9b:7e:8c:ac:a5:96:41:9d:cb: 3b:7e:bb:11:29:0a:3b:d3:6e:61:74:84:66:3f:91: a2:81:cc:67:71:88:73:35:7b:54:66:01:96:a1:f7: cf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:F8:29:1D:29:79:AC:F0:34:43:F6:A3:E7:0C:F7:07:15:E8:D3 X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:41:e0:9b:39:b4:b5:93:4a:0c:7e:7b:a7:5f:e5:e3:2a: 20:c0:a0:63:7f:8e:62:d2:fa:6c:36:16:2a:b1:13:ad:7c:ed: 34:f7:0d:f2:c5:f8:df:a2:77:24:65:89:f0:86:3e:f9:29:fe: 8c:33:32:05:0b:d4:bd:3e:79:5c:48:c8:ef:a6:50:7c:a3:87: ba:49:72:dc:b6:d8:a4:cf:b8:2a:6b:b4:11:82:f3:a1:92:12: 5e:06:97:dd:bb:b6:6e:8e:39:59:02:62:ac:ec:43:ea:56:1d: a2:1c:1e:be:52:c5:13:4d:96:21:05:d1:9d:11:f4:27:78:e5: f5:87:3f:04:ae:d7:73:a7:24:ed:07:af:0f:fe:94:02:30:41: 14:3c:3e:a9:e8:16:20:40:13:63:2b:16:05:31:44:45:d1:1b: 67:6f:27:63:06:55:93:d9:ef:50:d0:d9:8a:6d:fe:8d:d6:b7: 94:c5:3d:1a:82:cb:9f:b4:72:b9:8f:06:2a:e8:75:09:3e:2b: 1e:9d:b9:04:84:1a:86:65:eb:88:b6:b3:ae:ef:16:d6:86:d9: e4:5f:e2:18:5b:54:f1:56:10:7c:ea:4b:19:15:4b:6d:e3:16: 14:78:ab:f9:11:d5:fa:d6:c5:17:01:b8:b1:cf:09:ef:5d:7b: 7b:20:1a:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUwNDI0MjMwNTE5WhcNMjUwNTAxMjMwNTE5WjAYMRYwFAYD VQQDEw02ODBhYzNiMC03YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW1nF1n7XY3JI/1uGJUMUvYcvkclHlSQ4X3OZaPUGrduVB42F8GwLmRsPR9Y 3ugvzE1fjNsoFSFEIJ6S+RaZ3BBA3lxHW5npx7cHe0kOurbDa1qXQZCBQr6OU02x R3AkkcAgXdKI0DLePjTTDfl0mQwT+0Xcnd+vhKexT4RGajckmcRjpVOs9/Ha45mn Bcd33fe/lj7eZmAam6pD9sjY9X3Na5B8LJNZGQHynWHrIPelk9SVvjWU6GisrVcd Gv/XYe5b3NumiRKewK/JoI0cuOi1gf7PHj2bfoyspZZBncs7frsRKQo7025hdIRm P5GigcxncYhzNXtUZgGWoffPwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS7+Ckd KXms8DRD9qPnDPcHFejTMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzlDNC84Qjg5QTQyQUQ4QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0 VGFfT3QwRHpsdVZ6ejc5TjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS/EHgmzm0tZNKDH57p1/l4yogwKBjf45i0vpsNhYqsROtfO009w3y xfjfonckZYnwhj75Kf6MMzIFC9S9PnlcSMjvplB8o4e6SXLcttikz7gqa7QRgvOh khJeBpfdu7ZujjlZAmKs7EPqVh2iHB6+UsUTTZYhBdGdEfQneOX1hz8ErtdzpyTt B68P/pQCMEEUPD6p6BYgQBNjKxYFMURF0RtnbydjBlWT2e9Q0NmKbf6N1reUxT0a gsuftHK5jwYq6HUJPisenbkEhBqGZeuItrOu7xbWhtnkX+IYW1TxVhB86ksZFUtt 4xYUeKv5EdX61sUXAbixzwnvXXt7IBq4 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:57 2025 by rpki-client