$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft File: JVLURML17uUkxsAbqk-d8rrsoqo.mft (raw, json) Hash identifier: rNy4CcyrVyqzYzhdoQ5FXkJRy+ILh5lW4J0CHkPzKvo= Subject key identifier: B4:1C:6F:4C:4E:63:F0:CE:9C:98:01:7A:8A:E8:BA:95:76:DD:F2:97 Authority key identifier: 25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA Certificate issuer: /CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft Manifest number: 0596 Signing time: Thu 24 Apr 2025 23:02:38 +0000 Manifest this update: Thu 24 Apr 2025 23:02:37 +0000 Manifest next update: Thu 01 May 2025 23:02:37 +0000 Files and hashes: 1: JVLURML17uUkxsAbqk-d8rrsoqo.crl (hash: 1Yw+aI3gLVBnNDl68jmblel9QfpX/UBc30Q5dh5B3/U=) 2: C4563C423ABB11ECA7767769C4F9AE02.roa (hash: 2/t4OED7jc6lYgcGwNs8Je0YJuMc/iNU0iFP+wDlgWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4BF, serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA Validity Not Before: Apr 24 23:02:37 2025 GMT Not After : May 1 23:02:37 2025 GMT Subject: CN=680ac30e-eac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:52:04:d3:40:2d:00:22:c1:c9:75:50:5f: a6:43:d4:42:39:5e:e1:d9:1b:cc:dd:a9:5d:31:db: f8:a4:50:ee:90:31:e0:41:9d:07:36:5b:c5:13:34: aa:a9:17:5f:b9:d5:97:52:5e:58:28:00:79:80:ae: 1c:32:29:46:d0:87:09:94:f5:54:b0:86:8f:ba:0d: 64:1b:f8:ce:06:9c:ff:c2:86:1c:8f:25:65:6d:49: fb:8a:6d:c2:0d:35:df:99:fa:7c:cf:01:bb:40:34: 9c:a2:e0:75:1e:58:f3:ea:66:d2:80:de:0e:3c:93: 23:dd:89:b4:bf:73:f7:0e:01:61:23:72:dd:8a:7e: 56:18:6e:d3:6b:dd:23:eb:f3:99:e2:f7:af:a1:8c: 2e:a8:19:62:3f:85:60:f7:30:db:4d:33:cf:96:24: ab:8c:61:26:4d:61:10:db:e4:4d:ac:0e:d6:16:8b: 90:29:3a:fa:fe:4c:88:85:8e:60:3b:88:c3:1a:00: f2:78:3c:b5:74:39:53:db:67:a4:ae:4a:83:7c:6e: 20:55:62:dd:9e:cc:a7:f9:4f:7d:75:7a:ab:81:37: 9f:5b:95:2c:14:75:22:0e:76:1e:40:85:a9:f7:23: 03:af:8b:6d:cd:c7:60:d0:6c:c2:ea:17:60:d9:d3: 8f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:6F:4C:4E:63:F0:CE:9C:98:01:7A:8A:E8:BA:95:76:DD:F2:97 X509v3 Authority Key Identifier: keyid:25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e6:21:8d:1e:ba:b6:68:3d:26:10:85:de:94:01:4f:08:7a: 09:c7:8b:69:1f:09:64:88:55:d9:1b:b7:f6:61:09:ba:3e:1f: d4:2f:d6:cc:72:ab:60:08:46:9c:10:35:6b:a3:82:2e:d2:0d: 91:b1:7c:40:49:3c:3c:b7:90:c7:75:1c:cd:85:22:c7:27:d1: 00:cd:6e:6d:20:72:ad:81:f9:6f:85:7e:d2:59:39:6f:25:a2: 9c:a4:ec:80:85:c6:97:aa:2a:ad:26:95:1a:ea:94:35:45:3d: 08:5b:0f:74:6a:73:52:ce:1c:e3:20:48:ab:19:35:78:cd:b7: 02:c9:3c:f3:14:0a:f0:08:19:80:5e:c3:9a:85:88:bd:4b:19: 4f:53:9c:4d:f6:06:1f:9a:57:a6:03:2b:62:2e:f1:bb:70:dc: a2:65:65:f0:8d:e4:f5:a1:fe:fc:cc:66:93:46:14:98:a9:93: 75:fd:f7:5f:78:b2:94:ff:8c:b3:7f:4e:04:87:fd:5e:00:3a: 09:81:bd:3c:63:a4:65:88:c8:7d:93:8a:03:39:50:ba:cb:d2: d7:78:9d:7b:7a:ac:cc:9f:45:44:ad:d1:da:d8:47:d0:3e:54: b8:8b:cd:4f:f0:f5:9d:30:db:57:ba:05:6d:65:2c:bc:21:9c: be:0f:f5:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0QkYxMTAvBgNVBAUTKDI1NTJENDQ0QzJGNUVFRTUyNEM2QzAxQkFBNEY5REYy QkFFQ0EyQUEwHhcNMjUwNDI0MjMwMjM3WhcNMjUwNTAxMjMwMjM3WjAYMRYwFAYD VQQDEw02ODBhYzMwZS1lYWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw5SBNNALQAiwcl1UF+mQ9RCOV7h2RvM3aldMdv4pFDukDHgQZ0HNlvFEzSq qRdfudWXUl5YKAB5gK4cMilG0IcJlPVUsIaPug1kG/jOBpz/woYcjyVlbUn7im3C DTXfmfp8zwG7QDScouB1Hljz6mbSgN4OPJMj3Ym0v3P3DgFhI3Ldin5WGG7Ta90j 6/OZ4vevoYwuqBliP4Vg9zDbTTPPliSrjGEmTWEQ2+RNrA7WFouQKTr6/kyIhY5g O4jDGgDyeDy1dDlT22ekrkqDfG4gVWLdnsyn+U99dXqrgTefW5UsFHUiDnYeQIWp 9yMDr4ttzcdg0GzC6hdg2dOPyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQcb0xO Y/DOnJgBeoroupV23fKXMB8GA1UdIwQYMBaAFCVS1ETC9e7lJMbAG6pPnfK67KKq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRCRi8zOUM0MjI0MkNG N0MxMUVCODFBMUFFMTlDNEY5QUUwMi9KVkxVUk1MMTd1VWt4c0FicWstZDhycnNv cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWTFVSTUwxN3VVa3hzQWJxay1kOHJyc29xby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRCRi8zOUM0MjI0MkNGN0MxMUVCODFBMUFFMTlDNEY5QUUwMi9KVkxVUk1MMTd1 VWt4c0FicWstZDhycnNvcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT5iGNHrq2aD0mEIXelAFPCHoJx4tpHwlkiFXZG7f2YQm6Ph/UL9bM cqtgCEacEDVro4Iu0g2RsXxASTw8t5DHdRzNhSLHJ9EAzW5tIHKtgflvhX7SWTlv JaKcpOyAhcaXqiqtJpUa6pQ1RT0IWw90anNSzhzjIEirGTV4zbcCyTzzFArwCBmA XsOahYi9SxlPU5xN9gYfmlemAytiLvG7cNyiZWXwjeT1of78zGaTRhSYqZN1/fdf eLKU/4yzf04Eh/1eADoJgb08Y6RliMh9k4oDOVC6y9LXeJ17eqzMn0VErdHa2EfQ PlS4i81P8PWdMNtXugVtZSy8IZy+D/WN -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:46 2025 by rpki-client