$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: nu0NbrmwYbUzodbU6ET8B9cVjmzOJ57diF0do25Jwy8= Subject key identifier: BD:78:5E:A3:E2:62:F4:8C:90:9E:EE:02:63:54:25:54:C2:69:B0:79 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 0874 Signing time: Thu 24 Apr 2025 20:30:15 +0000 Manifest this update: Thu 24 Apr 2025 20:30:14 +0000 Manifest next update: Thu 01 May 2025 20:30:14 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 5LmMUmLCZfIQmQHYxtIEx3eNW0l2FjB1nIj7wDO4shI=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 9wXMOm9fVh9YiiXGFKNsgIYR+u452tjlEUQ6Zp2HaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: Apr 24 20:30:14 2025 GMT Not After : May 1 20:30:14 2025 GMT Subject: CN=680a9f57-f131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:2e:16:b5:f5:c3:b5:ae:87:96:07:73:2f: d3:ec:99:66:98:4a:16:97:f1:a9:e2:6a:86:58:fe: 40:c4:1a:4f:f4:b6:ad:11:dc:42:de:7c:b4:51:12: ca:f5:aa:af:b9:2e:df:d6:22:db:b4:31:b2:bf:21: 1d:d3:a8:4c:ad:30:56:42:6c:8d:10:fa:a3:ec:8b: 18:6c:83:8b:47:ba:5d:89:5e:b2:fd:fd:c0:ea:e6: af:86:7b:fb:45:d6:5d:9e:d8:38:68:76:5a:2f:ab: 01:67:58:a6:63:65:c2:b8:9f:8e:94:40:bc:42:d4: 4b:2c:20:cd:15:89:ba:8a:6a:ff:06:26:9f:b4:eb: 47:28:fb:2e:e1:b8:2c:5c:ca:2d:2a:b5:c6:9e:c8: ae:a8:0d:2e:3f:28:b4:f6:cb:41:b1:62:dc:2f:d9: f6:ce:d4:fa:b5:97:e7:91:25:a0:95:b5:43:88:9c: 79:cc:b0:f5:76:d8:59:f7:25:cd:b6:63:ed:81:2f: d3:5e:c0:e8:b4:bc:7c:8e:ba:04:da:7d:49:15:e4: ec:5c:30:1f:36:6a:01:3c:2d:a3:2f:38:79:fb:ab: 83:67:7c:8e:b9:fe:1d:46:6c:cf:bf:63:57:fa:58: 89:98:e9:5f:f2:79:a4:7f:e7:3c:84:3b:1f:fd:0c: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:5E:A3:E2:62:F4:8C:90:9E:EE:02:63:54:25:54:C2:69:B0:79 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:4f:9d:ea:5e:e7:e2:0e:5e:3e:3a:42:1c:a7:a7:1d:c8:dc: e4:b5:92:ed:29:18:ec:a7:c1:a9:81:3d:6f:51:46:7e:70:4d: db:37:8b:88:f6:ea:f7:83:ea:5b:e5:d5:dd:bb:89:ec:95:46: 6c:6b:fd:1d:97:8a:8e:56:73:97:38:d1:8d:18:0a:74:fe:b6: 62:07:b6:ae:52:21:54:d6:76:9c:df:d4:74:f3:21:e7:9a:b1: b2:78:9f:cc:75:ae:d6:94:39:50:2c:7b:b8:68:46:2a:e0:36: 20:4e:1b:62:bc:51:9c:fb:a5:af:d4:5d:8c:f1:0a:f4:9c:18: 06:d3:c7:ee:bc:e0:9b:16:3e:e6:67:43:01:43:4b:a4:de:ea: eb:f7:44:ce:36:94:f7:3c:01:96:02:65:b0:66:1f:5d:53:de: 31:92:45:95:d4:02:13:17:47:d4:96:b2:af:68:14:8e:4e:f1: 98:6a:bb:25:01:38:94:45:c4:75:51:77:5c:64:e2:df:cc:6e: 7a:3e:be:eb:27:29:92:9d:8a:f2:9f:ca:c4:cc:d3:da:37:bc: 60:a2:3e:49:db:a9:8a:b4:72:20:dd:40:90:e3:60:29:e7:9b: 38:97:c9:3d:ee:2d:66:e7:c4:ce:35:2c:bc:bb:35:f7:ee:58: 66:3d:63:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjUwNDI0MjAzMDE0WhcNMjUwNTAxMjAzMDE0WjAYMRYwFAYD VQQDEw02ODBhOWY1Ny1mMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hMuFrX1w7Wuh5YHcy/T7JlmmEoWl/Gp4mqGWP5AxBpP9LatEdxC3ny0URLK 9aqvuS7f1iLbtDGyvyEd06hMrTBWQmyNEPqj7IsYbIOLR7pdiV6y/f3A6uavhnv7 RdZdntg4aHZaL6sBZ1imY2XCuJ+OlEC8QtRLLCDNFYm6imr/BiaftOtHKPsu4bgs XMotKrXGnsiuqA0uPyi09stBsWLcL9n2ztT6tZfnkSWglbVDiJx5zLD1dthZ9yXN tmPtgS/TXsDotLx8jroE2n1JFeTsXDAfNmoBPC2jLzh5+6uDZ3yOuf4dRmzPv2NX +liJmOlf8nmkf+c8hDsf/QyaAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL14XqPi YvSMkJ7uAmNUJVTCabB5MB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJT53qXufiDl4+OkIcp6cdyNzktZLtKRjsp8GpgT1vUUZ+cE3bN4uI 9ur3g+pb5dXdu4nslUZsa/0dl4qOVnOXONGNGAp0/rZiB7auUiFU1nac39R08yHn mrGyeJ/Mda7WlDlQLHu4aEYq4DYgThtivFGc+6Wv1F2M8Qr0nBgG08fuvOCbFj7m Z0MBQ0uk3urr90TONpT3PAGWAmWwZh9dU94xkkWV1AITF0fUlrKvaBSOTvGYarsl ATiURcR1UXdcZOLfzG56Pr7rJymSnYryn8rEzNPaN7xgoj5J26mKtHIg3UCQ42Ap 55s4l8k97i1m58TONSy8uzX37lhmPWM/ -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:14 2025 by rpki-client