$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: N1f1Sfd6NsXB7/QMSoNApar8jWm2RQw5REu9n6ba0u0= Subject key identifier: DA:EF:DA:DB:85:EE:A7:A0:FA:F0:88:FE:3F:7B:EF:8A:F5:62:87:B6 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: F2 Signing time: Fri 25 Apr 2025 04:23:27 +0000 Manifest this update: Fri 25 Apr 2025 04:23:26 +0000 Manifest next update: Fri 02 May 2025 04:23:26 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: nvDP7x7JnhrMQVxCERZjQSWihZSgqlhLq8kgTy9P8bQ=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Apr 25 04:23:26 2025 GMT Not After : May 2 04:23:26 2025 GMT Subject: CN=680b0e3e-7a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:fa:7f:3d:15:a8:ea:c1:ec:2e:39:14:dc: ed:d0:b3:62:5c:8d:6a:02:bf:2b:25:eb:be:34:2e: c7:ce:6e:c8:dc:e5:9c:3e:ae:98:91:4b:2c:0c:f6: 51:b2:a2:6c:29:b5:35:45:84:04:fb:e0:4e:c8:6e: 09:e8:17:06:d3:ae:90:96:30:68:17:a6:38:1b:28: 54:ee:b5:0e:3c:2e:39:8d:3f:1c:20:af:6a:d3:3a: 4c:dd:cb:a0:7a:c4:48:fc:70:dc:5a:13:7d:12:65: 78:99:34:7d:fb:9b:ef:b3:5d:6a:60:c8:83:8a:c2: 95:7b:f7:8c:e8:b0:88:9b:9c:df:2a:40:ec:07:c6: af:b8:79:11:89:fd:a7:d3:7f:b2:44:ed:26:b3:5d: 9b:d1:45:2c:43:6e:68:04:92:c5:49:63:6b:1c:90: d3:4d:c5:53:a3:9c:98:00:d4:07:59:1e:08:de:95: 2b:df:19:17:63:13:1b:c2:53:4f:36:46:3a:34:28: 18:3e:ec:56:5f:97:b3:4f:b7:24:34:cd:59:be:2a: 5d:a7:95:a5:e6:e3:7f:f3:c6:70:2c:51:ac:de:2c: 64:ae:ca:2b:7e:ca:79:31:af:b8:14:9c:36:cc:2c: fe:6a:41:5f:5a:59:a8:9d:83:45:77:65:ba:fd:c7: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EF:DA:DB:85:EE:A7:A0:FA:F0:88:FE:3F:7B:EF:8A:F5:62:87:B6 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c4:2a:1b:74:fa:b2:a1:0a:8c:59:a9:14:cb:c8:7d:29:ea: 6f:cf:9f:1a:d2:7c:87:cf:3b:6d:3c:90:3d:25:2a:c4:5e:1c: 79:b7:42:24:c2:8a:0e:32:c7:fd:13:ee:2f:f4:b9:f9:11:15: f2:1b:de:6e:b8:e4:2d:44:40:e0:85:9c:91:4c:ea:99:98:d5: c4:6c:12:cd:73:42:64:51:d3:a9:a5:93:c3:2a:4d:aa:f6:78: 08:37:e3:bb:b5:8e:ca:a8:4a:88:7f:c5:f9:3e:a3:d8:5e:57: 27:bb:9f:31:13:16:5c:8e:08:13:63:05:ad:9f:8e:fd:ec:2d: 74:b3:85:c5:8c:bf:f8:98:43:21:60:80:b4:26:86:e6:15:fe: 17:84:73:57:c4:51:d7:78:66:ba:fe:28:21:da:6f:6e:89:74: af:23:9a:66:f5:28:f7:9b:80:71:32:d3:93:6c:cc:cf:4e:ed: 06:49:0d:80:8d:0b:2b:c7:b2:11:a5:ed:c6:78:53:84:d6:cd: 0e:c7:3b:8f:f7:29:9c:a2:97:f6:ad:8c:1d:5d:5b:3c:fa:5b: 0f:85:a4:c4:aa:6f:a0:ab:7d:48:e5:4e:de:21:a9:9b:90:7c: 73:2f:62:87:22:3d:1b:37:97:d0:98:d2:a2:21:06:a5:a0:f4: 8e:88:60:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwNDI1MDQyMzI2WhcNMjUwNTAyMDQyMzI2WjAYMRYwFAYD VQQDEw02ODBiMGUzZS03YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8z6fz0VqOrB7C45FNzt0LNiXI1qAr8rJeu+NC7Hzm7I3OWcPq6YkUssDPZR sqJsKbU1RYQE++BOyG4J6BcG066QljBoF6Y4GyhU7rUOPC45jT8cIK9q0zpM3cug esRI/HDcWhN9EmV4mTR9+5vvs11qYMiDisKVe/eM6LCIm5zfKkDsB8avuHkRif2n 03+yRO0ms12b0UUsQ25oBJLFSWNrHJDTTcVTo5yYANQHWR4I3pUr3xkXYxMbwlNP NkY6NCgYPuxWX5ezT7ckNM1Zvipdp5Wl5uN/88ZwLFGs3ixkrsorfsp5Ma+4FJw2 zCz+akFfWlmonYNFd2W6/ccauQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrv2tuF 7qeg+vCI/j9774r1Yoe2MB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcxCobdPqyoQqMWakUy8h9Kepvz58a0nyHzzttPJA9JSrEXhx5t0Ik wooOMsf9E+4v9Ln5ERXyG95uuOQtREDghZyRTOqZmNXEbBLNc0JkUdOppZPDKk2q 9ngIN+O7tY7KqEqIf8X5PqPYXlcnu58xExZcjggTYwWtn4797C10s4XFjL/4mEMh YIC0JobmFf4XhHNXxFHXeGa6/igh2m9uiXSvI5pm9Sj3m4BxMtOTbMzPTu0GSQ2A jQsrx7IRpe3GeFOE1s0OxzuP9ymcopf2rYwdXVs8+lsPhaTEqm+gq31I5U7eIamb kHxzL2KHIj0bN5fQmNKiIQaloPSOiGDD -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:03 2025 by rpki-client