$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: 5A+dFMh8PnEzIzpRdMmVy+E98Iyjur3TloAUxVxKclQ= Subject key identifier: 72:AD:3A:2F:E6:DC:2E:35:23:56:92:38:E9:F7:83:E1:01:3C:F4:67 Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 04E4 Signing time: Thu 24 Apr 2025 23:32:56 +0000 Manifest this update: Thu 24 Apr 2025 23:32:55 +0000 Manifest next update: Thu 01 May 2025 23:32:55 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: VrP+oAscTsHjrC2HlMvAsDaDsI8YInMre8syHaRWbAg=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Apr 24 23:32:55 2025 GMT Not After : May 1 23:32:55 2025 GMT Subject: CN=680aca28-e98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:49:50:6b:50:8c:ed:53:a9:67:43:7c:be: 7a:94:8e:3a:6e:83:ce:c6:95:4b:b9:66:cc:d7:6c: 08:d9:42:d7:06:c1:22:07:55:c3:e0:27:40:3c:4e: 79:54:89:86:c8:38:17:a7:54:8e:16:b2:b6:d3:cd: d7:e8:89:63:2c:7a:a3:36:40:eb:70:c6:54:1a:35: b3:2a:5c:f2:86:8e:52:61:ca:2a:fb:a5:f8:5d:24: 96:3b:1e:1d:a5:3f:e8:dc:fc:1e:1b:50:9a:1b:15: 1b:67:8b:65:51:e8:e7:f0:1c:6c:61:1a:25:0a:04: 36:b6:5d:13:ef:d2:10:11:b0:47:49:42:2a:0e:63: 08:c6:09:07:e8:f7:3b:d7:86:95:b7:c7:12:79:b8: 8c:b0:97:14:0b:04:7c:28:4a:d5:b9:ef:e6:f2:37: b3:c0:a4:ed:52:f5:06:fa:e7:bb:96:35:24:1d:f0: 5c:4d:f2:66:09:e1:6f:0b:e0:59:aa:1d:e1:b0:a0: 6a:62:9d:90:f9:45:3a:b6:81:ab:f0:c5:88:e2:76: cf:c8:48:5a:8c:43:98:5e:83:ea:e5:1f:e0:70:81: 15:f2:25:96:88:99:fa:06:f2:3c:50:7d:56:69:d5: 27:79:60:8f:fe:21:ca:64:2d:ec:f7:a2:82:3e:3a: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AD:3A:2F:E6:DC:2E:35:23:56:92:38:E9:F7:83:E1:01:3C:F4:67 X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5c:12:a9:21:b1:36:18:8c:30:98:fd:23:e3:93:55:bb:1a: 00:1f:ac:11:51:31:4e:0e:6d:6a:cb:f4:9b:4b:bb:e4:51:c3: b8:9a:e9:e0:89:40:2a:9f:b8:3d:d5:2f:f8:79:48:27:d9:3f: 58:31:fe:f0:76:60:6b:e2:99:d4:08:b0:87:c0:02:29:98:c3: ce:5c:5b:e3:45:1d:f4:67:98:1c:ab:0e:14:c1:6f:d5:5a:e8: 73:0d:47:99:d7:1b:8f:5c:23:8e:6f:20:bf:c4:0c:67:33:17: c4:ae:7e:9d:fe:03:19:92:6b:54:ff:7b:c6:67:b2:0e:f1:d8: cc:d9:bc:77:17:47:59:d7:7f:13:49:81:62:8d:7f:eb:a1:50: 94:af:ea:c8:ad:6a:91:e7:11:a0:f9:54:88:ea:54:48:a2:94: a8:01:04:dc:eb:d9:53:7a:f7:5c:42:f6:84:68:22:93:1e:4a: df:6d:b2:a6:13:1c:c5:37:fd:97:95:08:90:80:b2:c6:82:58: 23:13:00:4e:69:e6:f3:98:84:dd:35:bc:14:4e:14:07:fa:5b: ed:9a:93:0b:81:30:31:5f:b6:8f:bb:20:93:73:ad:d2:33:60: 22:2b:51:54:87:ce:8e:31:70:6f:7b:56:94:da:a5:db:6e:2f: c3:3e:07:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUwNDI0MjMzMjU1WhcNMjUwNTAxMjMzMjU1WjAYMRYwFAYD VQQDEw02ODBhY2EyOC1lOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk9JUGtQjO1TqWdDfL56lI46boPOxpVLuWbM12wI2ULXBsEiB1XD4CdAPE55 VImGyDgXp1SOFrK2083X6IljLHqjNkDrcMZUGjWzKlzyho5SYcoq+6X4XSSWOx4d pT/o3PweG1CaGxUbZ4tlUejn8BxsYRolCgQ2tl0T79IQEbBHSUIqDmMIxgkH6Pc7 14aVt8cSebiMsJcUCwR8KErVue/m8jezwKTtUvUG+ue7ljUkHfBcTfJmCeFvC+BZ qh3hsKBqYp2Q+UU6toGr8MWI4nbPyEhajEOYXoPq5R/gcIEV8iWWiJn6BvI8UH1W adUneWCP/iHKZC3s96KCPjomNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKtOi/m 3C41I1aSOOn3g+EBPPRnMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhXBKpIbE2GIwwmP0j45NVuxoAH6wRUTFODm1qy/SbS7vkUcO4mung iUAqn7g91S/4eUgn2T9YMf7wdmBr4pnUCLCHwAIpmMPOXFvjRR30Z5gcqw4UwW/V WuhzDUeZ1xuPXCOObyC/xAxnMxfErn6d/gMZkmtU/3vGZ7IO8djM2bx3F0dZ138T SYFijX/roVCUr+rIrWqR5xGg+VSI6lRIopSoAQTc69lTevdcQvaEaCKTHkrfbbKm ExzFN/2XlQiQgLLGglgjEwBOaebzmITdNbwUThQH+lvtmpMLgTAxX7aPuyCTc63S M2AiK1FUh86OMXBve1aU2qXbbi/DPgdj -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:58 2025 by rpki-client