$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: 0/JPw2IVsupMhuQ+yPgjjEQXs97gnVrg5/yW/0czLtU= Subject key identifier: A0:3C:6C:50:32:DD:56:8E:76:48:02:C1:2C:A9:04:4D:0C:33:44:69 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: ED Signing time: Fri 25 Apr 2025 04:23:48 +0000 Manifest this update: Fri 25 Apr 2025 04:23:47 +0000 Manifest next update: Fri 02 May 2025 04:23:47 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: kKczwSM/c8fsUBT8egqrGH3DSj4ru3pNuicJjWFYi+Q=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: Ehjuv5Uf0g7hk8vGihsJTixHlQEY1frs5IM1jFNhEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Apr 25 04:23:47 2025 GMT Not After : May 2 04:23:47 2025 GMT Subject: CN=680b0e53-fe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3a:57:39:4e:9b:3b:a5:c4:14:b7:3b:0c:4d: 55:82:87:7c:9b:42:06:39:7a:dc:26:41:1d:f1:3a: 40:b8:8b:5b:47:38:6a:59:74:0d:aa:82:9a:f6:15: c2:e0:b3:c3:1a:1a:a3:2c:aa:03:5a:b8:18:e5:5c: f7:3d:2d:0a:76:bf:75:4f:4f:3c:d9:bc:07:b4:e2: 85:99:9e:93:8e:d8:20:93:b9:54:24:99:c7:a4:68: 52:10:76:35:4f:2d:bd:fc:c3:4d:d3:c9:b3:ff:07: 67:1f:c1:e3:c4:19:da:10:84:85:b6:5d:46:13:f3: 3e:31:83:dc:37:b8:a1:4a:82:81:eb:7d:e4:23:82: 10:ca:53:f7:95:44:56:73:b1:af:63:63:94:7f:5f: 90:3f:62:5a:59:4e:0d:63:37:b4:29:2c:57:fe:ce: 10:6c:fa:03:c8:7d:24:67:fc:db:04:39:3b:c7:8c: a1:c9:48:28:a1:37:a4:55:4b:e5:c1:e3:cb:58:46: dc:9a:5d:bf:8e:c1:ca:cb:37:98:d6:2a:6c:57:06: 10:dc:b1:4e:5c:b5:b0:80:36:c3:3b:05:1e:7f:c0: 6c:df:26:94:6f:0a:db:26:e7:82:8c:6a:04:a8:af: 54:7d:6f:f0:e4:a4:87:e3:68:ec:a2:f4:72:c8:11: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3C:6C:50:32:DD:56:8E:76:48:02:C1:2C:A9:04:4D:0C:33:44:69 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0f:1a:4b:71:b9:c6:2e:4c:c4:1f:97:cc:4b:ca:6a:a4:e8: 12:e7:19:44:d4:48:f3:d4:ab:1a:45:ac:70:4c:8d:22:d7:13: e3:a7:f8:c5:e6:91:d3:09:83:c5:85:79:57:70:67:7c:5a:7e: 94:a4:aa:91:b4:31:e8:94:5f:3b:c7:32:bb:6c:c7:67:bb:4a: 29:c3:e3:8e:f6:25:7d:bb:3d:dc:7f:e6:09:c6:47:25:86:3d: 98:4b:c9:0b:50:b2:e2:09:a1:9c:31:df:ed:24:b7:83:87:20: 0f:5c:ea:a8:dd:d3:36:3d:f6:3a:59:8b:04:c2:50:03:6c:c5: 7e:62:60:7e:ed:c2:39:a8:fc:26:dd:73:b5:46:ad:23:09:cb: af:a2:9f:62:a8:6d:d1:f0:b0:f2:35:ea:ff:e4:da:53:af:bd: 95:59:e1:63:34:c5:0f:20:8d:df:b2:18:31:aa:ba:7d:fe:34: 6a:8b:07:19:35:f5:c8:49:23:56:d7:47:17:b8:c4:f7:f3:db: 16:1a:9e:12:f1:a6:a5:56:da:10:88:4a:6c:43:7c:90:43:2d: 7e:ce:f2:b3:fc:30:47:dc:de:a5:e3:09:7c:9c:cd:15:05:e4: ec:41:09:12:cc:a8:76:fc:b3:bf:a6:d5:2b:24:e0:98:49:16: a4:60:4e:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNDI1MDQyMzQ3WhcNMjUwNTAyMDQyMzQ3WjAYMRYwFAYD VQQDEw02ODBiMGU1My1mZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DpXOU6bO6XEFLc7DE1Vgod8m0IGOXrcJkEd8TpAuItbRzhqWXQNqoKa9hXC 4LPDGhqjLKoDWrgY5Vz3PS0Kdr91T0882bwHtOKFmZ6Tjtggk7lUJJnHpGhSEHY1 Ty29/MNN08mz/wdnH8HjxBnaEISFtl1GE/M+MYPcN7ihSoKB633kI4IQylP3lURW c7GvY2OUf1+QP2JaWU4NYze0KSxX/s4QbPoDyH0kZ/zbBDk7x4yhyUgooTekVUvl wePLWEbcml2/jsHKyzeY1ipsVwYQ3LFOXLWwgDbDOwUef8Bs3yaUbwrbJueCjGoE qK9UfW/w5KSH42jsovRyyBFZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKA8bFAy 3VaOdkgCwSypBE0MM0RpMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASDxpLcbnGLkzEH5fMS8pqpOgS5xlE1Ejz1KsaRaxwTI0i1xPjp/jF 5pHTCYPFhXlXcGd8Wn6UpKqRtDHolF87xzK7bMdnu0opw+OO9iV9uz3cf+YJxkcl hj2YS8kLULLiCaGcMd/tJLeDhyAPXOqo3dM2PfY6WYsEwlADbMV+YmB+7cI5qPwm 3XO1Rq0jCcuvop9iqG3R8LDyNer/5NpTr72VWeFjNMUPII3fshgxqrp9/jRqiwcZ NfXISSNW10cXuMT389sWGp4S8aalVtoQiEpsQ3yQQy1+zvKz/DBH3N6l4wl8nM0V BeTsQQkSzKh2/LO/ptUrJOCYSRakYE41 -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:45 2025 by rpki-client