$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: M0gojG73m/+9I5ONGlPekSO8Tq5XUY7Y59MuF0RrTfY= Subject key identifier: 35:D1:FC:F2:BF:76:74:41:57:F8:93:13:0F:2C:07:8D:6F:03:5F:3E Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 15F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 15EE Signing time: Thu 24 Apr 2025 16:47:29 +0000 Manifest this update: Thu 24 Apr 2025 16:47:28 +0000 Manifest next update: Thu 01 May 2025 16:47:28 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: hT9ffW/tQ4uBXqZZ5fSVS+NDOpE/HaFWXivVBonQzHw=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5624 (0x15f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: Apr 24 16:47:28 2025 GMT Not After : May 1 16:47:28 2025 GMT Subject: CN=680a6b20-94ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:73:12:be:a4:2c:7a:c3:91:f2:dd:ee:46: c4:22:0c:c7:5c:78:42:fc:df:6a:5e:40:ea:bf:8a: 58:b2:f9:1e:0c:30:c5:45:4a:c7:e5:89:3d:7a:a7: 39:33:a4:c3:b7:12:7a:68:6b:6f:bf:0b:17:a4:80: 8d:1b:68:ad:cd:e1:73:e3:84:36:63:9e:9a:e2:d9: 25:4c:42:cf:e5:e9:c5:b4:f9:9a:cf:eb:e6:94:5b: f9:dd:62:77:9e:25:20:9a:17:a2:f2:36:90:09:84: 00:10:ba:6c:13:6f:18:e3:af:23:9f:0b:70:de:de: a8:0d:29:8f:c8:a8:fe:92:16:02:26:e2:ab:c4:7a: c1:e4:98:71:87:44:f6:b9:f4:64:9f:36:cc:a3:59: 10:21:7f:4a:4d:02:e4:c0:f5:88:4d:46:4d:8c:e4: 2d:4a:dc:8a:9c:b5:0b:d8:2f:0f:64:0f:57:62:4a: 89:14:88:43:59:ad:82:c8:cd:25:a5:49:8d:8d:1c: ce:74:9a:e8:10:b6:da:24:38:86:22:4c:eb:59:85: 70:aa:18:64:40:68:3b:40:36:31:e6:82:74:37:0d: 97:1a:ce:d9:7a:bd:ac:2e:ae:2d:c3:ba:45:0a:90: 40:3e:b9:31:04:16:0d:66:63:95:a1:77:0d:30:2a: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:FC:F2:BF:76:74:41:57:F8:93:13:0F:2C:07:8D:6F:03:5F:3E X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:83:bc:f4:e2:28:af:08:37:40:43:1e:83:3a:53:d4:78:c2: 4a:c8:f6:1f:65:e5:c7:47:d5:65:0c:b0:77:83:86:36:04:11: da:40:7f:aa:ff:2a:e8:a9:b0:c8:bd:10:16:45:6c:31:1e:f3: bd:6f:7e:94:7b:b7:b5:23:c7:b3:dc:99:9c:3c:fc:b2:9c:e3: cd:3f:27:bd:7a:82:59:f0:ab:18:d6:e2:f3:0f:e3:13:0f:88: 6c:85:18:f9:23:cf:6a:c5:a0:26:da:0b:69:ba:6c:e5:b0:fb: 37:1b:9b:c2:45:85:3a:55:9c:d6:72:ff:d1:c6:86:22:c5:89: 5b:65:86:9a:fe:12:57:83:f8:8a:62:ba:cf:26:da:49:24:bc: 4c:81:d5:49:82:8d:1c:21:e2:38:72:3c:34:e4:a0:9a:3e:8d: b1:b6:57:04:c6:9b:1b:2d:c1:ae:94:ea:0d:b2:79:3b:b2:ce: 07:9f:0f:d8:44:58:63:4e:8e:2a:b8:63:99:43:dd:80:e7:36: d0:3f:63:38:2c:fc:f2:02:1d:36:2e:5a:d8:cd:d7:32:13:f8: 6f:e8:dc:27:a0:f6:6f:c0:f4:ee:aa:ae:34:93:84:c7:07:1e: 0b:a4:a6:55:48:2a:d0:0b:ca:a2:fa:3c:db:5d:ec:34:6d:f8: 6c:36:bd:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwNDI0MTY0NzI4WhcNMjUwNTAxMTY0NzI4WjAYMRYwFAYD VQQDEw02ODBhNmIyMC05NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Z1zEr6kLHrDkfLd7kbEIgzHXHhC/N9qXkDqv4pYsvkeDDDFRUrH5Yk9eqc5 M6TDtxJ6aGtvvwsXpICNG2itzeFz44Q2Y56a4tklTELP5enFtPmaz+vmlFv53WJ3 niUgmhei8jaQCYQAELpsE28Y468jnwtw3t6oDSmPyKj+khYCJuKrxHrB5Jhxh0T2 ufRknzbMo1kQIX9KTQLkwPWITUZNjOQtStyKnLUL2C8PZA9XYkqJFIhDWa2CyM0l pUmNjRzOdJroELbaJDiGIkzrWYVwqhhkQGg7QDYx5oJ0Nw2XGs7Zer2sLq4tw7pF CpBAPrkxBBYNZmOVoXcNMCqBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXR/PK/ dnRBV/iTEw8sB41vA18+MB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZg7z04iivCDdAQx6DOlPUeMJKyPYfZeXHR9VlDLB3g4Y2BBHaQH+q /yroqbDIvRAWRWwxHvO9b36Ue7e1I8ez3JmcPPyynOPNPye9eoJZ8KsY1uLzD+MT D4hshRj5I89qxaAm2gtpumzlsPs3G5vCRYU6VZzWcv/RxoYixYlbZYaa/hJXg/iK YrrPJtpJJLxMgdVJgo0cIeI4cjw05KCaPo2xtlcExpsbLcGulOoNsnk7ss4Hnw/Y RFhjTo4quGOZQ92A5zbQP2M4LPzyAh02LlrYzdcyE/hv6NwnoPZvwPTuqq40k4TH Bx4LpKZVSCrQC8qi+jzbXew0bfhsNr1u -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:16 2025 by rpki-client