$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft File: j4RQ6hjtZj3XYxNayPnBormb2W0.mft (raw, json) Hash identifier: 2nDHystWoVey3NX6j4dWJkxKs7ykZuVq18THS5y2FNg= Subject key identifier: 5B:06:8A:88:A4:8E:72:79:F0:7D:1A:5A:C0:20:26:20:BC:B7:E2:B2 Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft Manifest number: 083C Signing time: Thu 24 Apr 2025 20:37:16 +0000 Manifest this update: Thu 24 Apr 2025 20:37:15 +0000 Manifest next update: Thu 01 May 2025 20:37:15 +0000 Files and hashes: 1: j4RQ6hjtZj3XYxNayPnBormb2W0.crl (hash: OU2bi3UeIsnYQj3WMXq94WoVuA2donB8WqLuZ+9VtxU=) 2: D6CE2DE4CA3C11EAB3604C46C4F9AE02.roa (hash: Pre6mj3qji68nWX5VPNZNIBmXlVK+D7mKmGk/F/UT7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Apr 24 20:37:15 2025 GMT Not After : May 1 20:37:15 2025 GMT Subject: CN=680aa0fc-4213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:c7:aa:c7:ac:1a:73:b7:a5:dc:27:20:1e: ce:32:7b:91:9c:b1:33:36:07:3a:cc:54:a3:35:7e: 04:a8:19:f4:2d:5c:1d:7a:af:cd:7a:34:aa:50:db: fd:56:ba:24:8b:b2:b4:d2:38:60:9c:9b:f3:1f:cd: 2a:a5:5d:3b:3c:66:77:1e:71:39:d5:b7:34:c4:f2: ff:47:ef:ea:50:fa:2d:bf:f4:cd:91:d9:cc:37:9a: 26:ba:e9:f3:be:e2:3a:ba:e6:15:d9:58:d8:9d:b1: 05:c9:87:19:f0:94:63:81:28:2e:19:ea:f1:9a:89: 1d:ec:27:d7:5e:ed:dc:c4:84:ed:34:e7:8d:17:58: 86:d5:73:4a:59:52:e1:16:db:79:44:55:06:a4:83: 96:20:5b:6e:cf:46:11:e8:dd:9a:a1:4c:cb:fc:52: bc:88:a7:0a:dc:20:d0:4d:ae:76:71:5a:fb:bc:e5: 7e:37:d6:ba:97:d6:75:0a:da:d6:e3:e5:cc:4d:f5: 40:bb:f4:06:df:0f:92:96:a9:67:30:09:b0:00:dd: 08:6e:15:23:2e:7b:8f:49:1a:16:c2:09:20:e8:77: 6f:e1:15:fd:9f:d0:20:b1:f8:dc:03:d9:d2:34:ca: ea:ca:cd:fd:0f:b4:da:10:8b:bd:92:98:e3:22:10: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:06:8A:88:A4:8E:72:79:F0:7D:1A:5A:C0:20:26:20:BC:B7:E2:B2 X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:3c:64:d9:84:66:17:5c:3e:f7:5f:92:f2:45:3a:96:ac:0c: 6a:10:84:7e:dc:fe:7d:e4:eb:e3:0c:3a:a7:ef:1b:b4:40:71: 3c:49:33:30:dd:3b:c6:69:1a:b2:bc:ce:3b:e3:db:a0:12:a3: 60:db:30:12:f4:4c:93:55:5a:d0:f1:24:79:63:41:d7:bf:d0: a6:4d:06:70:03:61:65:04:c4:85:56:c7:92:a2:9e:60:ec:1b: 91:e5:c0:4a:06:c0:5d:82:74:fc:0f:53:1f:fc:18:d3:77:40: 29:5a:91:a2:dd:53:76:84:2c:ae:b4:4d:f0:a2:aa:41:27:25: 0c:22:fa:0d:24:06:27:cc:38:d9:ae:09:3a:d1:04:57:e8:25: 20:57:ce:6f:b5:e5:ee:5e:89:c8:bf:b0:4b:a2:94:a2:a0:a5: fc:71:57:0a:45:15:7f:e5:28:14:17:e2:58:7b:ac:f7:43:88: 25:4d:49:11:f5:81:38:30:75:32:2c:b0:4f:08:4d:eb:c2:78: 7a:85:6f:62:19:13:96:62:ae:e8:38:87:ee:d6:f0:97:7e:e1: 60:c3:ed:03:c5:eb:d6:66:6e:94:79:ea:9e:ec:70:2c:8f:6a: c4:ce:b5:f3:aa:59:e6:c4:8a:ec:a3:70:25:2f:3c:d1:ff:e6: 0f:f1:8b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjUwNDI0MjAzNzE1WhcNMjUwNTAxMjAzNzE1WjAYMRYwFAYD VQQDEw02ODBhYTBmYy00MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hrHqsesGnO3pdwnIB7OMnuRnLEzNgc6zFSjNX4EqBn0LVwdeq/NejSqUNv9 Vroki7K00jhgnJvzH80qpV07PGZ3HnE51bc0xPL/R+/qUPotv/TNkdnMN5omuunz vuI6uuYV2VjYnbEFyYcZ8JRjgSguGerxmokd7CfXXu3cxITtNOeNF1iG1XNKWVLh Ftt5RFUGpIOWIFtuz0YR6N2aoUzL/FK8iKcK3CDQTa52cVr7vOV+N9a6l9Z1CtrW 4+XMTfVAu/QG3w+SlqlnMAmwAN0IbhUjLnuPSRoWwgkg6Hdv4RX9n9AgsfjcA9nS NMrqys39D7TaEIu9kpjjIhAgqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsGioik jnJ58H0aWsAgJiC8t+KyMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDlDQi8zRkQyRDlDNENBMkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpq M1hZeE5heVBuQm9ybWIyVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrPGTZhGYXXD73X5LyRTqWrAxqEIR+3P595OvjDDqn7xu0QHE8STMw 3TvGaRqyvM4749ugEqNg2zAS9EyTVVrQ8SR5Y0HXv9CmTQZwA2FlBMSFVseSop5g 7BuR5cBKBsBdgnT8D1Mf/BjTd0ApWpGi3VN2hCyutE3woqpBJyUMIvoNJAYnzDjZ rgk60QRX6CUgV85vteXuXonIv7BLopSioKX8cVcKRRV/5SgUF+JYe6z3Q4glTUkR 9YE4MHUyLLBPCE3rwnh6hW9iGROWYq7oOIfu1vCXfuFgw+0DxevWZm6Ueeqe7HAs j2rEzrXzqlnmxIrso3AlLzzR/+YP8Yt9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:29 2025 by rpki-client