$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: ZNOT8vqrfS3JZvRKykfwIia5L97CVz3q1FcvXCugjPM= Subject key identifier: 57:95:5E:1D:D0:C7:76:F0:11:1C:73:90:39:32:EB:9A:40:CA:B8:90 Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 04F5 Signing time: Thu 24 Apr 2025 23:29:26 +0000 Manifest this update: Thu 24 Apr 2025 23:29:25 +0000 Manifest next update: Thu 01 May 2025 23:29:25 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: AQmxrR89VDUUuVIpT7moVE33xZhbU3aHV6pvoud6gtI=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Validity Not Before: Apr 24 23:29:25 2025 GMT Not After : May 1 23:29:25 2025 GMT Subject: CN=680ac956-5a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:47:45:de:11:d6:56:d7:d6:99:09:3d:e5: ba:04:16:92:0c:b4:8e:03:f7:1a:ce:a8:5e:15:81: d9:49:b3:3e:59:14:e0:93:d9:4c:8f:45:15:98:d0: cd:c7:88:58:6d:da:3f:5f:6c:03:ea:55:61:d2:75: 9b:1f:20:46:6a:68:e1:88:47:61:08:b9:b5:a8:54: 5f:80:3d:53:d8:da:22:a6:a0:df:da:da:d3:d5:87: b0:70:6f:a3:57:02:1c:10:99:6e:23:1e:75:19:06: a8:08:90:77:bf:96:44:65:2f:9d:94:4a:a8:93:3d: 8f:1e:cf:36:36:d9:07:43:8d:2c:66:cd:b7:21:59: 80:ba:da:73:27:e5:02:9b:37:e1:a8:55:fd:61:71: 3a:dd:bd:fc:b9:c4:75:af:54:a1:19:c3:98:a0:3a: a9:9f:aa:24:76:64:a6:d4:c7:41:8d:f0:8f:87:a5: 0c:26:59:29:6a:c7:e0:36:b6:a7:fc:9a:a8:e1:d0: 6d:cb:21:79:54:d0:24:65:71:8f:53:9c:1b:af:64: c4:06:c7:a7:90:60:e7:fa:fa:8d:d0:45:aa:47:2b: 9b:54:06:4f:6f:8f:2a:b6:cc:85:04:13:80:db:69: 6c:47:d5:b4:13:53:8c:4e:5e:b3:56:0d:50:39:a2: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:95:5E:1D:D0:C7:76:F0:11:1C:73:90:39:32:EB:9A:40:CA:B8:90 X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f3:66:69:00:1c:de:88:81:b7:c8:96:56:d4:c1:ef:d6:21: 6c:38:a5:d0:bc:f3:43:88:1a:63:51:1e:98:87:2f:6c:a4:23: 0d:cf:ac:84:76:52:70:9c:84:f7:e0:93:b5:59:d5:8f:64:e3: 89:90:0e:d8:eb:18:d8:88:ac:e4:82:df:3c:18:b6:2d:46:2d: 00:71:9d:2c:01:38:e5:3e:14:fd:d3:5c:a5:20:10:62:75:ec: 94:56:42:ee:43:db:aa:5c:f2:02:c9:9d:a9:11:2a:89:f1:d6: 22:f9:ac:57:11:04:2f:ea:15:c2:70:d0:97:4c:b9:4d:85:ed: e6:1a:5f:26:aa:58:15:c3:74:71:6d:28:f0:64:08:9a:80:6c: ba:1c:06:bc:ab:e0:41:f8:93:dd:f1:ac:95:4d:78:c2:45:e7: 63:aa:60:4c:75:a5:d3:52:61:18:3f:f0:a0:39:e6:ae:d0:05: ea:2c:38:5a:8c:fa:75:dc:81:f9:f4:d7:4b:50:7a:2a:8d:df: c0:4d:2b:b7:5a:fc:db:a9:12:a2:53:b0:0b:df:62:a5:ee:f1: 60:3c:db:09:ed:6e:71:8a:a5:fe:e0:63:6a:a6:2b:32:47:39: 80:7a:75:5a:f0:b5:96:c6:7f:41:2a:0c:f4:df:d1:b8:e5:af: 67:57:e6:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjUwNDI0MjMyOTI1WhcNMjUwNTAxMjMyOTI1WjAYMRYwFAYD VQQDEw02ODBhYzk1Ni01YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte5HRd4R1lbX1pkJPeW6BBaSDLSOA/cazqheFYHZSbM+WRTgk9lMj0UVmNDN x4hYbdo/X2wD6lVh0nWbHyBGamjhiEdhCLm1qFRfgD1T2NoipqDf2trT1YewcG+j VwIcEJluIx51GQaoCJB3v5ZEZS+dlEqokz2PHs82NtkHQ40sZs23IVmAutpzJ+UC mzfhqFX9YXE63b38ucR1r1ShGcOYoDqpn6okdmSm1MdBjfCPh6UMJlkpasfgNran /Jqo4dBtyyF5VNAkZXGPU5wbr2TEBsenkGDn+vqN0EWqRyubVAZPb48qtsyFBBOA 22lsR9W0E1OMTl6zVg1QOaIBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeVXh3Q x3bwERxzkDky65pAyriQMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd82ZpABzeiIG3yJZW1MHv1iFsOKXQvPNDiBpjUR6Yhy9spCMNz6yE dlJwnIT34JO1WdWPZOOJkA7Y6xjYiKzkgt88GLYtRi0AcZ0sATjlPhT901ylIBBi deyUVkLuQ9uqXPICyZ2pESqJ8dYi+axXEQQv6hXCcNCXTLlNhe3mGl8mqlgVw3Rx bSjwZAiagGy6HAa8q+BB+JPd8ayVTXjCRedjqmBMdaXTUmEYP/CgOeau0AXqLDha jPp13IH59NdLUHoqjd/ATSu3WvzbqRKiU7AL32Kl7vFgPNsJ7W5xiqX+4GNqpisy RzmAenVa8LWWxn9BKgz039G45a9nV+bd -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:20 2025 by rpki-client