$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft File: jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json) Hash identifier: V4vBIl2xO85XAYDwIAoJlBhHgT//yUEu5Xfwu7pLMKk= Subject key identifier: 6A:06:CD:B1:31:64:9A:00:A8:8C:FF:A0:57:02:BD:23:59:B6:39:68 Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D Certificate issuer: /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Certificate serial: 20B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft Manifest number: 20AA Signing time: Thu 24 Apr 2025 15:58:40 +0000 Manifest this update: Thu 24 Apr 2025 15:58:40 +0000 Manifest next update: Thu 01 May 2025 15:58:40 +0000 Files and hashes: 1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: 1qEJufw8OiE0PVmIrupS7YEfCBNxqoAw+OynF98FRbg=) 2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: KDA9/GHhy0rjdE5GkXBH2Mt48KB9YjSR7eGXIC67yec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8369 (0x20b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D Validity Not Before: Apr 24 15:58:40 2025 GMT Not After : May 1 15:58:40 2025 GMT Subject: CN=680a5fb0-7bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:15:08:ea:c1:6b:00:f3:72:a8:48:6f:6f: cc:a4:62:d7:fc:9e:f4:aa:bf:03:fe:2f:82:df:e2: 22:23:c1:56:75:8b:52:d2:04:89:cb:e6:f8:b6:5b: 38:1c:e6:ed:31:22:d9:a6:97:8e:b0:8f:2e:2e:41: 50:91:93:c0:85:5d:06:b6:9e:a3:5a:36:3a:94:2c: a2:07:00:e6:21:db:60:34:a6:dc:90:a8:1a:bf:5c: 9e:d0:c5:b2:15:cf:47:68:ab:8a:85:98:02:58:37: 1f:93:e1:04:fc:36:e2:f4:6f:41:c4:22:45:22:20: 89:89:65:7f:5d:9c:ca:74:61:83:21:99:b2:18:a7: a1:57:c6:ac:10:15:7a:e1:b2:6e:15:bc:9b:1f:03: 6f:66:54:cc:e8:42:19:09:56:e3:c6:82:1c:2e:d1: cc:ce:8b:f2:23:85:fe:2a:43:6e:20:53:22:1d:b0: 82:62:a0:76:c8:ae:fd:d8:a1:42:43:f0:c8:e5:d0: d1:d3:e5:00:e6:3d:da:9b:b3:6c:6d:1a:9e:ba:1e: 89:8b:e1:bf:67:27:44:6c:37:aa:0f:ee:52:3f:34: 85:48:94:6e:c0:73:19:0d:68:a0:8f:76:c5:76:41: 0f:33:30:51:24:0e:ca:14:b3:92:98:86:e5:78:dd: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:06:CD:B1:31:64:9A:00:A8:8C:FF:A0:57:02:BD:23:59:B6:39:68 X509v3 Authority Key Identifier: keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:c8:bc:cd:d2:66:0e:b8:06:35:c1:11:5f:a4:8d:9d:cc: 8d:79:7d:8c:71:43:46:d3:86:96:e4:7b:2f:47:84:86:01:35: ac:db:d2:fa:0b:55:ad:d9:ad:a2:d1:78:b0:8c:b1:f8:01:29: 8f:86:cb:d8:48:db:07:53:0c:39:95:22:ee:0a:db:2e:c9:4f: 96:9c:13:04:6f:54:09:8c:5b:7e:a3:6f:4d:2b:3d:bc:46:fc: a5:0b:6e:56:84:22:fa:6f:15:ef:04:5c:22:3d:04:98:97:b5: 54:6b:21:38:00:35:96:5a:af:f5:7a:75:e9:86:34:4b:33:37: c8:0f:04:64:f5:66:e4:84:a3:65:f8:6c:26:21:7a:f6:52:1e: ac:36:0d:aa:8d:84:57:fb:35:69:20:4b:4d:fc:3b:5d:f8:d0: 93:84:1d:10:e7:73:6c:e5:ba:fa:d6:ef:f6:43:88:c4:a4:92: 09:95:30:f6:25:30:80:d7:6d:fb:26:e0:93:b8:db:2c:e6:08: cf:80:98:f9:a1:19:17:fa:7a:cf:5f:a5:9e:71:fb:32:e7:80: b7:1e:8b:8b:c8:63:df:ef:89:b7:c7:83:95:14:2c:2c:cd:bb: 27:48:61:cb:60:4d:85:ba:63:9c:0a:a0:dc:51:06:2e:12:f7: d3:6a:12:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICILEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5MEQxMTAvBgNVBAUTKDhEMzc4OTRCMDk0MUVDRkQ0RDZCMDVFMUUxNENBQjg1 Njk4N0IwNUQwHhcNMjUwNDI0MTU1ODQwWhcNMjUwNTAxMTU1ODQwWjAYMRYwFAYD VQQDEw02ODBhNWZiMC03YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm0VCOrBawDzcqhIb2/MpGLX/J70qr8D/i+C3+IiI8FWdYtS0gSJy+b4tls4 HObtMSLZppeOsI8uLkFQkZPAhV0Gtp6jWjY6lCyiBwDmIdtgNKbckKgav1ye0MWy Fc9HaKuKhZgCWDcfk+EE/Dbi9G9BxCJFIiCJiWV/XZzKdGGDIZmyGKehV8asEBV6 4bJuFbybHwNvZlTM6EIZCVbjxoIcLtHMzovyI4X+KkNuIFMiHbCCYqB2yK792KFC Q/DI5dDR0+UA5j3am7NsbRqeuh6Ji+G/ZydEbDeqD+5SPzSFSJRuwHMZDWigj3bF dkEPMzBRJA7KFLOSmIbleN30OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoGzbEx ZJoAqIz/oFcCvSNZtjloMB8GA1UdIwQYMBaAFI03iUsJQez9TWsF4eFMq4Vph7Bd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODkwRC8yMUI3QTgwRUZG RkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQMU5hd1hoNFV5cmhXbUhz RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pUZUpTd2xCN1AxTmF3WGg0VXlyaFdtSHNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODkwRC8yMUI3QTgwRUZGRkMxMUU1ODZCNEQ5NjRDNEY5QUUwMi9qVGVKU3dsQjdQ MU5hd1hoNFV5cmhXbUhzRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Ysi8zdJmDrgGNcERX6SNncyNeX2McUNG04aW5HsvR4SGATWs29L6 C1Wt2a2i0XiwjLH4ASmPhsvYSNsHUww5lSLuCtsuyU+WnBMEb1QJjFt+o29NKz28 RvylC25WhCL6bxXvBFwiPQSYl7VUayE4ADWWWq/1enXphjRLMzfIDwRk9WbkhKNl +GwmIXr2Uh6sNg2qjYRX+zVpIEtN/Dtd+NCThB0Q53Ns5br61u/2Q4jEpJIJlTD2 JTCA1237JuCTuNss5gjPgJj5oRkX+nrPX6Wecfsy54C3HouLyGPf74m3x4OVFCws zbsnSGHLYE2FumOcCqDcUQYuEvfTahK9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:01 2025 by rpki-client