$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft File: JU6vZJB1T1B9uBzpDdtim2IvRmA.mft (raw, json) Hash identifier: zgsV0HdjWy+q56bXqiAtzxMuA7kSQhsqTAUUhAedLAk= Subject key identifier: 5F:F5:1C:FF:1E:78:F0:DE:BE:64:2E:27:EC:E1:82:D8:94:EC:EB:A8 Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft Manifest number: CF Signing time: Fri 25 Apr 2025 04:46:24 +0000 Manifest this update: Fri 25 Apr 2025 04:46:23 +0000 Manifest next update: Fri 02 May 2025 04:46:23 +0000 Files and hashes: 1: JU6vZJB1T1B9uBzpDdtim2IvRmA.crl (hash: 4QXiQZYTuSzh6z1pr2+a4ghuWDcpat7aQbNpKJrVfgo=) 2: 0B2E53E422B711EFB2B15160C4F9AE02.roa (hash: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4=) 3: FD6286EA22B611EFBF5D3960C4F9AE02.roa (hash: OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B8D0, serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660 Validity Not Before: Apr 25 04:46:23 2025 GMT Not After : May 2 04:46:23 2025 GMT Subject: CN=680b139f-8902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3c:4e:aa:39:34:45:ac:0b:7d:81:8e:0c:d5: d7:65:05:ce:6e:f6:23:26:b0:7a:e2:8b:37:8a:ba: 8a:c5:29:33:ca:c7:23:ec:23:77:71:c6:e9:4e:38: 53:d0:7c:3a:9f:af:c9:73:30:9d:6a:70:aa:91:95: 1e:fd:22:37:aa:b2:57:79:c5:26:1c:63:0e:4f:11: f1:55:c3:03:30:dc:3b:08:5e:43:06:95:f6:2e:f6: db:66:01:f1:67:c4:4a:f8:cf:79:68:db:45:9a:9d: 7e:32:17:c0:0e:d8:c5:9a:0d:dd:52:b8:60:55:b6: e5:02:3f:a0:ab:5b:41:4b:ed:49:6c:eb:8d:30:eb: 9e:a2:d7:6a:d0:07:69:d2:5d:d8:66:0c:09:b9:46: d9:07:b6:10:fc:9e:08:38:1f:ba:03:b0:78:5e:96: 18:50:e9:15:57:61:ba:89:08:59:b5:65:ab:21:97: 79:2e:c3:b0:3e:8b:ce:7a:28:90:75:cd:9e:70:ee: 85:d6:aa:84:7e:db:fa:3c:82:a7:39:cc:cc:79:cf: 9c:15:12:a1:5a:12:45:fa:e7:ac:fb:23:5d:3a:de: 96:ac:0c:31:7b:54:e5:9d:0f:9a:fd:ae:53:ec:4d: e9:a7:17:1d:1e:ae:b0:ff:28:41:f4:ae:45:8a:20: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:1C:FF:1E:78:F0:DE:BE:64:2E:27:EC:E1:82:D8:94:EC:EB:A8 X509v3 Authority Key Identifier: keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:83:b5:09:9f:d2:17:92:20:fc:81:67:65:b3:fa:f7:61:6b: 9f:22:62:e6:c7:ea:c9:5a:70:2c:36:33:53:44:56:b2:4f:a3: bf:50:70:17:30:b0:0f:49:d9:91:eb:19:33:9a:0a:b2:7e:38: e5:40:ec:2a:83:d1:d4:01:fc:9c:4a:72:a6:e2:e7:3e:b4:22: a4:0e:ea:a4:e2:87:a2:f7:40:7f:59:45:98:ba:14:fe:50:54: 10:3f:6f:1d:1d:b4:07:78:72:07:55:79:dc:ab:01:50:0a:90: e6:15:0d:4d:c3:16:7f:ca:a8:3c:4d:ea:ce:95:ba:76:9b:4d: e7:54:78:50:0a:98:d3:29:59:d9:8d:fd:80:c3:6d:e3:76:21: e9:36:85:a6:07:31:b3:16:3e:ed:e2:f9:3c:75:52:ee:d7:43: 74:dd:08:96:91:5b:15:24:12:73:8a:e2:d4:db:fc:83:09:9a: 16:a6:2e:a4:b0:53:8d:b4:cf:5e:a1:c0:79:e0:46:7c:76:f7: d9:72:7f:c3:8b:d1:ac:2a:37:8f:b9:bb:60:3c:1d:1a:6b:b0: a5:fa:60:4b:59:17:a9:e9:c5:15:01:fd:67:47:25:8f:50:82: 39:22:2a:47:77:3d:31:15:63:6c:24:14:79:00:78:c7:a1:45: eb:ce:74:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4RDAxMTAvBgNVBAUTKDI1NEVBRjY0OTA3NTRGNTA3REI4MUNFOTBEREI2MjlC NjIyRjQ2NjAwHhcNMjUwNDI1MDQ0NjIzWhcNMjUwNTAyMDQ0NjIzWjAYMRYwFAYD VQQDEw02ODBiMTM5Zi04OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TxOqjk0RawLfYGODNXXZQXObvYjJrB64os3irqKxSkzyscj7CN3ccbpTjhT 0Hw6n6/JczCdanCqkZUe/SI3qrJXecUmHGMOTxHxVcMDMNw7CF5DBpX2LvbbZgHx Z8RK+M95aNtFmp1+MhfADtjFmg3dUrhgVbblAj+gq1tBS+1JbOuNMOueotdq0Adp 0l3YZgwJuUbZB7YQ/J4IOB+6A7B4XpYYUOkVV2G6iQhZtWWrIZd5LsOwPovOeiiQ dc2ecO6F1qqEftv6PIKnOczMec+cFRKhWhJF+ues+yNdOt6WrAwxe1TlnQ+a/a5T 7E3ppxcdHq6w/yhB9K5FiiBT+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/1HP8e ePDevmQuJ+zhgtiU7OuoMB8GA1UdIwQYMBaAFCVOr2SQdU9Qfbgc6Q3bYptiL0Zg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjhEMC80MUUyQkUyOEVC NkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQxQjl1QnpwRGR0aW0ySXZS bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pVNnZaSkIxVDFCOXVCenBEZHRpbTJJdlJtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjhEMC80MUUyQkUyOEVCNkUxMUVFODNFM0FFNTFDNEY5QUUwMi9KVTZ2WkpCMVQx Qjl1QnpwRGR0aW0ySXZSbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYg7UJn9IXkiD8gWdls/r3YWufImLmx+rJWnAsNjNTRFayT6O/UHAX MLAPSdmR6xkzmgqyfjjlQOwqg9HUAfycSnKm4uc+tCKkDuqk4oei90B/WUWYuhT+ UFQQP28dHbQHeHIHVXncqwFQCpDmFQ1NwxZ/yqg8TerOlbp2m03nVHhQCpjTKVnZ jf2Aw23jdiHpNoWmBzGzFj7t4vk8dVLu10N03QiWkVsVJBJziuLU2/yDCZoWpi6k sFONtM9eocB54EZ8dvfZcn/Di9GsKjePubtgPB0aa7Cl+mBLWRep6cUVAf1nRyWP UII5IipHdz0xFWNsJBR5AHjHoUXrznR1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:08 2025 by rpki-client