$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json) Hash identifier: qozXJy8ksCIXqjX/TqTLVMcliJbCZmFFY/f5PHWBIBw= Subject key identifier: 7E:C3:46:1C:F0:77:2D:C7:41:33:26:49:7E:76:A2:A1:DF:F5:ED:12 Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft Manifest number: 32 Signing time: Fri 25 Apr 2025 06:39:24 +0000 Manifest this update: Fri 25 Apr 2025 06:39:23 +0000 Manifest next update: Fri 02 May 2025 06:39:23 +0000 Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: Vs2+L9GbuAMDOtsaVCaCOCP164ShWLak2FCdmrootiM=) 2: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: uGejxwookglu2iCow+tcNdEybEx5MchvlLEGb/BsAIc=) 3: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: pXIC9lifhNka63uxRfDrQycVb+TaKUuZE602Ci63ILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Validity Not Before: Apr 25 06:39:23 2025 GMT Not After : May 2 06:39:23 2025 GMT Subject: CN=680b2e1b-2a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:64:ea:5a:68:8a:85:ff:cc:24:3b:6b:6f: 41:38:98:e9:80:24:15:f3:d4:e3:7e:19:9f:70:62: 82:e8:e9:8f:41:f2:01:37:2f:b6:cb:aa:dd:0c:fa: 6b:e7:93:c6:f6:34:ef:c9:2d:a0:43:75:e1:5b:e5: 18:3f:c0:fe:0c:67:0e:9e:dd:c8:3e:78:91:b0:60: 4a:ad:eb:b7:62:9c:7b:ed:b8:6f:b9:01:0f:c0:28: ba:d7:01:9a:30:a1:55:43:95:e3:a2:c8:bf:1d:17: 21:2f:f5:7f:a5:d1:34:5d:d5:21:8f:fa:4a:46:0a: 78:7e:6e:67:07:e5:15:1e:97:34:0a:bd:3e:fc:c5: d3:ac:62:30:b5:dd:cc:3d:c9:8e:7f:0b:6d:3f:5c: 28:2e:91:6d:ec:e9:33:b2:45:94:81:e1:42:34:0c: 75:d7:b6:38:84:56:8a:65:b7:7b:c8:d2:ae:b9:4f: e0:62:43:9c:f3:6f:4f:1e:32:b5:60:0a:33:3d:18: 0b:1f:7f:2e:75:ce:a3:d3:a9:cf:7a:0d:23:ab:bb: bd:21:e5:8a:e1:35:78:53:bb:83:9a:99:af:49:a9: 86:02:61:d5:8f:c2:79:67:87:70:2c:13:9c:3b:eb: 8f:f9:a3:95:5c:7b:ea:d5:b4:d8:83:7b:a9:78:40: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C3:46:1C:F0:77:2D:C7:41:33:26:49:7E:76:A2:A1:DF:F5:ED:12 X509v3 Authority Key Identifier: keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5b:b4:8e:76:c5:a1:8b:c5:58:f0:fc:8f:73:4e:d5:7a:05: 2c:85:bc:f6:9c:20:b8:94:2a:c8:22:b8:bd:0a:25:be:96:68: 7b:18:eb:15:0c:b3:72:a2:27:59:eb:4e:8f:b8:dd:eb:ff:a6: 1f:24:9f:f5:f2:42:85:05:00:7d:86:0f:8d:9a:c8:06:8a:4d: 91:be:4f:df:51:a1:90:c2:f4:17:fd:10:7a:19:f9:86:91:00: fd:65:87:9f:ca:82:58:48:ed:3c:c6:9a:9e:04:45:eb:43:de: 49:a7:f4:62:16:93:34:fe:76:4f:98:e5:ba:ed:a4:b2:5f:f5: 99:d4:98:b2:c7:8d:de:82:14:40:38:ab:d4:ff:06:5b:be:11: 06:75:b6:06:7a:d7:67:ce:e6:90:bb:19:34:8c:16:90:ca:34: 5f:fc:24:8f:99:3e:fb:4b:f4:ea:08:97:35:d5:e7:40:0a:15: 0d:af:75:b0:56:b2:bf:70:9a:43:3b:ee:81:f2:97:f5:06:99: 93:05:d6:ae:81:9e:16:18:ff:2d:8d:b4:88:a6:a5:89:18:e7: 12:79:c8:19:3f:6f:bb:90:18:a3:83:ad:55:4c:d0:f1:12:17: 64:3c:3d:d5:41:ed:78:45:4f:25:9c:4f:7c:35:67:6d:88:f7: 1a:c1:62:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDU5RTExMC8GA1UEBRMoNzI1OERGRDU2RkE1QTQ4N0YwRDRBQ0M2OUNBREIxQkVB QzJGOTcwRTAeFw0yNTA0MjUwNjM5MjNaFw0yNTA1MDIwNjM5MjNaMBgxFjAUBgNV BAMTDTY4MGIyZTFiLTJhN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/R2TqWmiKhf/MJDtrb0E4mOmAJBXz1ON+GZ9wYoLo6Y9B8gE3L7bLqt0M+mvn k8b2NO/JLaBDdeFb5Rg/wP4MZw6e3cg+eJGwYEqt67dinHvtuG+5AQ/AKLrXAZow oVVDleOiyL8dFyEv9X+l0TRd1SGP+kpGCnh+bmcH5RUelzQKvT78xdOsYjC13cw9 yY5/C20/XCgukW3s6TOyRZSB4UI0DHXXtjiEVoplt3vI0q65T+BiQ5zzb08eMrVg CjM9GAsffy51zqPTqc96DSOru70h5YrhNXhTu4Oama9JqYYCYdWPwnlnh3AsE5w7 64/5o5Vce+rVtNiDe6l4QJThAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfsNGHPB3 LcdBMyZJfnaiod/17RIwHwYDVR0jBBgwFoAUcljf1W+lpIfw1KzGnK2xvqwvlw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFLzU1NjY2QjU2RDlE MDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2xqZjFXLWxwSWZ3MUt6R25LMnh2cXd2bHc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NTlFLzU1NjY2QjU2RDlEMDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElm dzFLekduSzJ4dnF3dmx3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNbtI52xaGLxVjw/I9zTtV6BSyFvPacILiUKsgiuL0KJb6WaHsY6xUM s3KiJ1nrTo+43ev/ph8kn/XyQoUFAH2GD42ayAaKTZG+T99RoZDC9Bf9EHoZ+YaR AP1lh5/KglhI7TzGmp4ERetD3kmn9GIWkzT+dk+Y5brtpLJf9ZnUmLLHjd6CFEA4 q9T/Blu+EQZ1tgZ612fO5pC7GTSMFpDKNF/8JI+ZPvtL9OoIlzXV50AKFQ2vdbBW sr9wmkM77oHyl/UGmZMF1q6BnhYY/y2NtIimpYkY5xJ5yBk/b7uQGKODrVVM0PES F2Q8PdVB7XhFTyWcT3w1Z22I9xrBYiI= -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:06 2025 by rpki-client