$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft File: JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json) Hash identifier: vY/tt+Ep6ES83qxNU+OZ9Cx9zssCvnBQeN20JuXmDwM= Subject key identifier: E6:FC:F2:D2:AE:FD:A5:5E:7D:2F:B9:DE:E9:74:21:DF:CA:C1:36:C6 Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft Manifest number: 4E Signing time: Fri 25 Apr 2025 06:18:39 +0000 Manifest this update: Fri 25 Apr 2025 06:18:38 +0000 Manifest next update: Fri 02 May 2025 06:18:38 +0000 Files and hashes: 1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: FD074ZLOhTIYGrFAIHP64dfW1bvsaFDK5qiIi7eXuXs=) 2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: p9REZI6XDPrAeJqnqc1B0MeTxDYU3c56F2tmQCgzmOQ=) 3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: bwbNVEEQ7hFvkRd/k4mBE7/nAYExkKEvB+iEu0LX0Pg=) 4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Validity Not Before: Apr 25 06:18:38 2025 GMT Not After : May 2 06:18:38 2025 GMT Subject: CN=680b293e-8717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9d:2d:e9:95:a1:d4:1f:28:cc:89:ed:89:c9: 4c:8a:6b:f9:39:bc:fc:ab:28:f6:82:ba:02:3b:a2: 0a:9d:b8:ac:36:e1:91:81:ab:ef:0e:43:33:ce:d3: 16:f4:d8:88:fd:51:24:77:4a:df:c5:cf:01:14:c5: 56:5a:90:ff:24:e1:37:37:54:2a:d5:17:cb:3b:98: c8:52:06:8e:42:e7:63:16:46:8a:37:c9:25:d7:af: ca:c0:65:34:62:92:46:b0:21:f4:d6:ce:76:91:6e: 89:bf:2b:c6:99:01:0d:62:a0:6d:3c:37:12:50:41: bd:9a:ac:80:4e:34:5b:f0:ed:18:6d:08:53:18:c2: c8:6d:ad:50:f1:b5:36:ea:68:fc:c6:fb:96:27:5e: eb:50:3f:74:c9:36:7d:0d:a2:34:1e:03:5b:e9:e7: 24:12:ae:7d:10:f1:a4:90:f9:b5:9d:d4:d5:e2:43: 4b:fc:e9:cc:96:91:c9:00:ce:a0:75:2c:d5:2f:da: e0:1b:ca:a5:85:9f:2d:05:30:2c:67:b6:d1:61:5f: 8b:1b:ab:e3:3d:b1:8b:5b:d5:19:08:2a:8f:78:75: f8:a3:36:7f:64:54:57:18:1a:27:55:bc:cc:84:21: 6e:d2:5e:f1:e5:4c:f8:a8:1f:a4:5b:df:06:93:6a: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FC:F2:D2:AE:FD:A5:5E:7D:2F:B9:DE:E9:74:21:DF:CA:C1:36:C6 X509v3 Authority Key Identifier: keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ab:4b:1a:21:fc:bf:ce:7c:5e:49:54:86:14:cd:5c:f8:73: bd:d0:4e:f8:08:a4:b0:20:95:84:55:3a:7e:bc:e7:0a:b3:40: 5f:53:43:b3:01:88:85:b4:81:56:af:f8:b2:7f:fc:89:f4:ac: 16:f2:25:8a:08:d1:a3:59:5a:e9:40:9d:88:1d:05:5a:a8:50: 73:c7:f0:a9:b2:df:f1:a0:ed:05:cb:dd:a2:f8:fc:24:20:7c: e4:49:fa:e9:24:30:44:65:2e:66:e0:4a:60:1c:ea:c7:5e:8b: f2:c6:6e:17:49:6f:76:1e:42:ba:2f:4a:c2:b8:ca:21:b5:6f: 5d:bb:4c:20:37:d4:27:ba:2b:55:3e:2a:96:cf:1f:6a:ec:cc: 24:bc:10:e2:f7:f0:42:a4:c1:24:c3:5b:ef:38:26:9d:49:04: a9:8c:5a:48:b2:af:e1:28:98:b5:79:d1:7a:b2:72:94:97:50: 1a:90:89:30:c9:ae:85:ad:2b:13:45:ae:1b:7f:84:b9:99:ea: 13:d3:e4:a4:62:d3:91:3b:35:71:77:75:2d:c0:f2:6e:ff:12: 2e:e2:24:b6:5e:34:0a:07:8d:8b:bd:5c:0b:80:0d:54:37:3b: d3:97:9c:38:fc:e1:21:a5:1d:1a:47:0a:49:8c:27:a3:d7:e1: b8:9b:5c:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyQTExMC8GA1UEBRMoMjcyMkM1QUJCRUU2M0I3NkI5REE5NjZDNzhENzNBNjY1 N0QyNDRFQjAeFw0yNTA0MjUwNjE4MzhaFw0yNTA1MDIwNjE4MzhaMBgxFjAUBgNV BAMTDTY4MGIyOTNlLTg3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBnS3plaHUHyjMie2JyUyKa/k5vPyrKPaCugI7ogqduKw24ZGBq+8OQzPO0xb0 2Ij9USR3St/FzwEUxVZakP8k4Tc3VCrVF8s7mMhSBo5C52MWRoo3ySXXr8rAZTRi kkawIfTWznaRbom/K8aZAQ1ioG08NxJQQb2arIBONFvw7RhtCFMYwshtrVDxtTbq aPzG+5YnXutQP3TJNn0NojQeA1vp5yQSrn0Q8aSQ+bWd1NXiQ0v86cyWkckAzqB1 LNUv2uAbyqWFny0FMCxnttFhX4sbq+M9sYtb1RkIKo94dfijNn9kVFcYGidVvMyE IW7SXvHlTPioH6Rb3waTaicrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5vzy0q79 pV59L7ne6XQh38rBNsYwHwYDVR0jBBgwFoAUJyLFq77mO3a52pZseNc6ZlfSROsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTJBL0IxRDRBNTlDQUUz RDExRUY5NkI3NkM2QUM0RjlBRTAyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JP cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnlMRnE3N21PM2E1MnBac2VOYzZabGZTUk9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC MTJBL0IxRDRBNTlDQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyL0p5TEZxNzdtTzNh NTJwWnNlTmM2WmxmU1JPcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGWrSxoh/L/OfF5JVIYUzVz4c73QTvgIpLAglYRVOn685wqzQF9TQ7MB iIW0gVav+LJ//In0rBbyJYoI0aNZWulAnYgdBVqoUHPH8Kmy3/Gg7QXL3aL4/CQg fORJ+ukkMERlLmbgSmAc6sdei/LGbhdJb3YeQrovSsK4yiG1b127TCA31Ce6K1U+ KpbPH2rszCS8EOL38EKkwSTDW+84Jp1JBKmMWkiyr+EomLV50XqycpSXUBqQiTDJ roWtKxNFrht/hLmZ6hPT5KRi05E7NXF3dS3A8m7/Ei7iJLZeNAoHjYu9XAuADVQ3 O9OXnDj84SGlHRpHCkmMJ6PX4bibXLM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:23 2025 by rpki-client