$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft File: jcAuucfBcJwTt0jXBDtY9DW_qXI.mft (raw, json) Hash identifier: fHa9ckrPZ7UD2pA07xoWX04RtR6ipTQESL42JZOMqdk= Subject key identifier: BC:20:53:EE:7D:50:9A:1D:19:75:2C:DD:FA:3F:1E:80:3E:49:34:92 Authority key identifier: 8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 Certificate issuer: /CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Certificate serial: 0DC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft Manifest number: 35DB Signing time: Sat 26 Apr 2025 15:57:59 +0000 Manifest this update: Sat 26 Apr 2025 15:57:58 +0000 Manifest next update: Sat 03 May 2025 15:57:58 +0000 Files and hashes: 1: jcAuucfBcJwTt0jXBDtY9DW_qXI.crl (hash: 7x4ab+hfVC5vaiORIwxBN1CzNWOCmAat9lJ8fMlk+Rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3523 (0xdc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Validity Not Before: Apr 26 15:57:58 2025 GMT Not After : May 3 15:57:58 2025 GMT Subject: CN=680d0286-8b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:91:93:92:df:5a:d0:15:8a:56:3b:94:71: 87:85:c3:32:71:db:2f:03:85:dc:b7:6a:9e:02:e8: 8a:26:f0:96:ee:e6:fa:94:05:d0:61:e1:0a:ac:73: d8:85:b3:0e:33:0c:ae:d7:2a:9c:4b:c3:bd:9e:2b: 4b:0f:10:63:67:ca:40:51:94:4d:0c:cd:2b:f5:da: 75:1f:5f:1c:43:a7:9a:5a:92:24:6b:49:dd:40:d9: c5:f4:3f:24:55:b0:31:20:58:58:a1:90:e5:29:7f: d0:60:b3:eb:19:07:6b:d0:b6:07:25:d5:a4:00:4b: e8:d2:ee:3a:4d:15:4b:72:9a:77:af:d8:b0:57:af: 8f:b6:6d:38:b9:76:81:6e:dc:53:69:22:7c:2a:6e: f4:6c:e7:dc:e4:60:ff:b3:9d:fa:a7:64:4e:c6:e1: 0d:0f:40:0e:74:ba:f7:e9:61:47:d9:de:82:2d:2f: b3:9e:91:73:67:ce:fb:c7:3d:c8:bd:0d:fa:28:54: 6e:f6:00:e0:6c:22:d9:b1:dc:82:f9:dd:a4:cc:97: 79:c2:4a:6f:b0:fe:5f:3c:8b:d4:e6:e6:a4:4e:ec: 19:e3:8b:5f:bc:4a:22:53:a0:49:f6:8e:40:36:b0: 5e:29:45:a5:fa:58:25:44:67:48:98:b4:4f:ed:c5: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:53:EE:7D:50:9A:1D:19:75:2C:DD:FA:3F:1E:80:3E:49:34:92 X509v3 Authority Key Identifier: keyid:8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d3:58:ad:4a:9c:4d:b2:d2:85:8b:f6:6e:bf:b9:30:e4:ef: 95:e2:be:65:d9:1d:fc:be:c9:8f:c8:7b:ae:24:ba:79:70:48: f9:67:d3:5f:e9:46:dd:6d:6a:a8:43:c6:36:e7:03:84:b3:5f: c5:1c:e2:98:92:72:68:96:ad:e4:55:90:28:73:ec:a5:9e:94: ad:f5:5e:fb:7d:9a:bf:18:40:de:e6:88:2a:d7:a1:34:ee:7c: 4b:f3:5e:95:66:60:d0:fe:99:47:fe:e0:66:2c:59:2c:97:9e: 56:eb:cb:30:7b:b0:d5:5d:14:f6:91:ae:92:24:87:c5:d8:23: 12:d0:d5:27:a0:1a:80:1e:42:70:fa:98:0d:6c:22:4e:f7:6d: a9:f1:cc:e6:ec:a4:13:72:08:40:e4:e6:62:4a:67:a1:33:59: aa:3d:4b:13:56:27:c1:e5:5a:5b:c9:1d:8f:d4:07:44:77:84: 5f:aa:49:37:72:14:c7:f3:8b:d7:e2:f6:2a:f0:15:a3:cb:25: 24:97:53:8f:ec:e9:bc:14:a6:8d:fe:99:f5:80:2d:8c:a7:ef: 4b:84:ce:ea:9d:a3:3c:fa:4a:42:7f:67:ef:83:e4:be:d4:21: 82:a6:1d:c8:b5:10:63:09:77:2b:db:d1:38:19:40:ba:59:75: 05:92:7a:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDhEQzAyRUI5QzdDMTcwOUMxM0I3NDhENzA0M0I1OEY0 MzVCRkE5NzIwHhcNMjUwNDI2MTU1NzU4WhcNMjUwNTAzMTU1NzU4WjAYMRYwFAYD VQQDEw02ODBkMDI4Ni04YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf2Rk5LfWtAVilY7lHGHhcMycdsvA4Xct2qeAuiKJvCW7ub6lAXQYeEKrHPY hbMOMwyu1yqcS8O9nitLDxBjZ8pAUZRNDM0r9dp1H18cQ6eaWpIka0ndQNnF9D8k VbAxIFhYoZDlKX/QYLPrGQdr0LYHJdWkAEvo0u46TRVLcpp3r9iwV6+Ptm04uXaB btxTaSJ8Km70bOfc5GD/s536p2ROxuEND0AOdLr36WFH2d6CLS+znpFzZ877xz3I vQ36KFRu9gDgbCLZsdyC+d2kzJd5wkpvsP5fPIvU5uakTuwZ44tfvEoiU6BJ9o5A NrBeKUWl+lglRGdImLRP7cWBGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwgU+59 UJodGXUs3fo/HoA+STSSMB8GA1UdIwQYMBaAFI3ALrnHwXCcE7dI1wQ7WPQ1v6ly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNKd1R0MGpYQkR0WTlEV19x WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjQXV1Y2ZCY0p3VHQwalhCRHRZOURXX3FYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNK d1R0MGpYQkR0WTlEV19xWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc01itSpxNstKFi/Zuv7kw5O+V4r5l2R38vsmPyHuuJLp5cEj5Z9Nf 6UbdbWqoQ8Y25wOEs1/FHOKYknJolq3kVZAoc+ylnpSt9V77fZq/GEDe5ogq16E0 7nxL816VZmDQ/plH/uBmLFksl55W68swe7DVXRT2ka6SJIfF2CMS0NUnoBqAHkJw +pgNbCJO922p8czm7KQTcghA5OZiSmehM1mqPUsTVifB5VpbyR2P1AdEd4Rfqkk3 chTH84vX4vYq8BWjyyUkl1OP7Om8FKaN/pn1gC2Mp+9LhM7qnaM8+kpCf2fvg+S+ 1CGCph3ItRBjCXcr29E4GUC6WXUFknoz -----END CERTIFICATE-----Generated at Sat Apr 26 19:44:22 2025 by rpki-client