$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft File: 81Jo-XbornH--mbKRRY2HFiuHZE.mft (raw, json) Hash identifier: xH/gcAzJtCCzLOc1Vi3hcvQ3BQNcuxxmg8Z5nd2PLk0= Subject key identifier: 24:F0:AF:D4:D6:52:FC:51:A0:02:20:89:36:BF:4F:CE:75:A3:02:08 Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft Manifest number: 0C41 Signing time: Thu 24 Apr 2025 18:25:13 +0000 Manifest this update: Thu 24 Apr 2025 18:25:12 +0000 Manifest next update: Thu 01 May 2025 18:25:12 +0000 Files and hashes: 1: 81Jo-XbornH--mbKRRY2HFiuHZE.crl (hash: 1Ll88F1ONSnYd5B0LFPRTofzA1hL1G27pQT33CeEoUE=) 2: 9D4131DE13D511EF883BC527C4F9AE02.roa (hash: JQNpQ6gxCAzbnnH9Yf0p2LfKBc2ucCX716tqFsvKS60=) 3: 68979DAE337B11EA9A024941C4F9AE02.roa (hash: yknf5baNHpdbQw+5+DV1Hf8P1RfW3RXTHE9Kk1UXKho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: Apr 24 18:25:12 2025 GMT Not After : May 1 18:25:12 2025 GMT Subject: CN=680a8208-93f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:35:8a:e5:3c:2c:dc:a1:be:c6:d9:fa:a9: 33:9b:3d:fc:b0:af:45:d9:2f:78:82:63:87:d4:0a: 34:6a:69:df:49:95:a4:23:92:b4:43:ec:e4:c7:fb: e6:32:19:8b:24:84:b7:cd:c5:d4:3a:e6:2c:5e:3c: 62:88:8d:f1:10:6f:80:25:b7:d6:02:18:89:6b:59: 10:14:5c:47:e9:70:a1:ca:84:6e:a9:18:5d:e5:0a: be:5a:ab:a8:04:d0:98:56:e2:d3:2d:73:d8:88:4e: 58:d1:68:0b:e0:7a:2d:86:74:19:38:56:88:fd:20: 58:ad:6e:0b:e8:37:a5:8e:e1:03:0a:c5:bf:7b:5b: 9e:14:30:2b:d4:b4:60:95:16:0e:db:21:46:5e:bb: c0:44:f7:c2:77:f4:8b:17:b0:82:63:77:2e:6f:32: 5a:74:ce:91:0c:ab:a6:cd:aa:cb:54:ee:d4:0b:d0: fd:6a:41:bc:d8:b8:d8:3f:1e:18:96:de:c5:82:82: 8a:c7:0d:d6:3d:3d:6c:10:ae:16:b9:ad:2f:0b:fb: 94:34:74:db:38:5b:6d:a9:4f:49:9a:10:e6:69:ab: 06:02:87:50:2c:6a:e3:6c:e9:8f:cc:ec:b0:27:07: c2:2e:58:25:da:97:64:9e:e4:a3:c2:30:ef:d7:1f: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:AF:D4:D6:52:FC:51:A0:02:20:89:36:BF:4F:CE:75:A3:02:08 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:16:b8:3e:87:ea:24:6e:48:b1:94:aa:05:d6:cf:e5:d1:2f: fb:5c:58:b1:c2:36:0f:8b:54:12:10:83:93:04:84:9b:1d:a3: 2a:66:08:ce:e5:2d:45:87:6a:22:85:34:5b:9e:77:3d:13:06: 8b:f2:76:d6:43:63:90:f9:33:f7:06:25:53:67:c3:d4:54:4d: 53:31:d3:33:f8:c9:0d:2f:ee:7c:cb:eb:7a:a1:f2:44:c7:a1: e2:fd:e5:71:fe:f6:1b:56:9a:3d:00:97:5a:2c:4d:91:cd:10: 18:5c:83:a6:9b:04:aa:9a:14:46:53:79:b8:04:3c:6f:f4:e6: 1f:7d:11:cf:2e:05:23:86:9c:41:81:3e:d0:46:9e:aa:23:16: fc:d6:18:ad:65:b0:fb:23:da:17:31:c2:cb:65:9a:a8:16:30: 34:b6:29:6b:83:3e:0b:74:d0:22:ef:fa:10:55:17:e6:05:47: 22:92:40:80:5b:9f:6b:a6:ad:b3:87:17:b5:92:87:a1:94:27: 52:65:78:1c:3c:b4:8d:05:d7:ac:59:66:e2:cf:2f:20:38:42: a5:8f:ef:f8:5d:e5:0c:8a:08:48:99:ea:c6:78:3c:ff:cb:56: 77:ca:0e:f9:14:d9:dc:73:d9:1d:6b:f2:fd:28:44:88:7c:8b: 92:49:77:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjUwNDI0MTgyNTEyWhcNMjUwNTAxMTgyNTEyWjAYMRYwFAYD VQQDEw02ODBhODIwOC05M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxs1iuU8LNyhvsbZ+qkzmz38sK9F2S94gmOH1Ao0amnfSZWkI5K0Q+zkx/vm MhmLJIS3zcXUOuYsXjxiiI3xEG+AJbfWAhiJa1kQFFxH6XChyoRuqRhd5Qq+Wquo BNCYVuLTLXPYiE5Y0WgL4HothnQZOFaI/SBYrW4L6DeljuEDCsW/e1ueFDAr1LRg lRYO2yFGXrvARPfCd/SLF7CCY3cubzJadM6RDKumzarLVO7UC9D9akG82LjYPx4Y lt7FgoKKxw3WPT1sEK4Wua0vC/uUNHTbOFttqU9JmhDmaasGAodQLGrjbOmPzOyw JwfCLlgl2pdknuSjwjDv1x/4vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTwr9TW UvxRoAIgiTa/T851owIIMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNFMS85RkQ1OERBNjA1QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3Ju SC0tbWJLUlJZMkhGaXVIWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeFrg+h+okbkixlKoF1s/l0S/7XFixwjYPi1QSEIOTBISbHaMqZgjO 5S1Fh2oihTRbnnc9EwaL8nbWQ2OQ+TP3BiVTZ8PUVE1TMdMz+MkNL+58y+t6ofJE x6Hi/eVx/vYbVpo9AJdaLE2RzRAYXIOmmwSqmhRGU3m4BDxv9OYffRHPLgUjhpxB gT7QRp6qIxb81hitZbD7I9oXMcLLZZqoFjA0tilrgz4LdNAi7/oQVRfmBUcikkCA W59rpq2zhxe1koehlCdSZXgcPLSNBdesWWbizy8gOEKlj+/4XeUMighImerGeDz/ y1Z3yg75FNncc9kda/L9KESIfIuSSXfk -----END CERTIFICATE-----Generated at Sat Apr 26 15:11:19 2025 by rpki-client