$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: 2qrCkhnoKpsDsq8zq7aBdrRzlg+d/gJfy13X11DJuBA= Subject key identifier: 3E:A5:64:B9:31:2A:F7:9E:27:72:25:A8:E3:60:C8:65:27:61:20:DC Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 87 Signing time: Fri 25 Apr 2025 05:31:56 +0000 Manifest this update: Fri 25 Apr 2025 05:31:56 +0000 Manifest next update: Fri 02 May 2025 05:31:56 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: cR09tUdSddAKzn9PAGZhK6mw9s9k1hu/G+5CShPhbrc=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Apr 25 05:31:56 2025 GMT Not After : May 2 05:31:56 2025 GMT Subject: CN=680b1e4c-016e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0c:e5:8d:2d:6d:87:62:73:43:01:eb:2f:32: 02:1b:8a:7e:84:a4:c8:28:24:6c:d1:1d:20:4e:f1: c6:a1:46:b4:e6:e5:20:6c:ed:89:22:43:b0:12:cb: b2:e7:dd:83:b8:20:6f:b6:c1:02:13:c8:4d:a2:3f: 2f:76:cc:1d:55:bf:56:cd:c2:2d:b7:a6:7d:e0:37: 62:3b:29:d1:38:0a:69:4b:fb:da:68:32:ec:4b:4c: fc:da:ee:00:fe:aa:c5:6a:02:7f:1c:d9:ae:9c:5c: ec:1f:74:75:38:83:85:89:ea:f5:a0:12:83:41:cb: b9:19:8e:d0:71:06:16:92:b1:ad:ed:19:5b:06:58: f5:17:68:5c:ac:1c:c2:ba:2c:5b:b6:a7:50:f4:70: 4c:76:ce:18:a2:17:51:41:90:b2:4e:d4:2b:04:20: c0:76:b7:5b:b7:9d:00:d6:0e:e1:a5:57:9e:8a:aa: 4d:e1:b3:43:d7:f4:5b:6c:31:fa:6b:13:e5:d0:c4: 4b:e4:4e:93:77:65:13:cf:0d:f1:49:29:96:40:da: d1:0a:a1:a5:15:1a:58:1f:c4:3c:b9:c5:06:51:a5: 0a:84:55:ed:b4:97:64:8c:02:1c:4b:a8:69:18:da: 8d:5f:ad:44:6f:a4:68:92:d1:6a:61:f7:32:54:0d: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A5:64:B9:31:2A:F7:9E:27:72:25:A8:E3:60:C8:65:27:61:20:DC X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a3:02:87:eb:8e:18:6b:ab:92:f6:d1:c9:91:fa:c8:73:76: b3:fd:db:d8:de:8e:d0:ae:3f:4a:ac:26:32:57:63:56:f5:c3: d6:10:a7:7a:ea:c7:f7:1d:9f:35:6d:d6:77:df:13:61:09:a4: 64:2e:82:20:3e:c5:0a:4f:74:f1:1d:b3:67:54:46:b0:9d:ba: 26:0f:14:d9:0e:93:b3:2a:c4:50:02:08:1f:89:f9:e7:54:bc: 72:ef:d6:59:c7:06:b4:4f:fe:0a:81:0c:0b:87:34:4e:db:08: b6:05:cd:17:50:30:f6:a2:15:5c:94:ee:af:c5:c9:a4:3d:49: 0c:16:59:ca:f2:99:f0:b4:04:49:db:b9:68:8b:c8:a1:84:a5: be:43:67:d3:17:03:d9:9f:ee:b8:30:20:8f:e9:18:37:df:2f: 7e:d5:ea:1f:e9:ec:31:39:31:28:e2:f3:9f:b9:a1:a0:9f:47: e5:3d:ce:39:ce:03:1d:e5:fe:1c:cc:29:0b:14:50:69:34:92: 05:44:64:9c:c3:96:fa:7d:91:4b:42:cf:aa:fd:b1:07:dd:8d: 8b:d0:15:50:30:aa:68:e9:d0:0e:07:85:c4:bc:14:02:c5:57: 5f:28:d5:db:72:48:15:1c:e6:f1:ca:62:c0:39:27:ae:c3:8c: 39:5c:c5:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjUwNDI1MDUzMTU2WhcNMjUwNTAyMDUzMTU2WjAYMRYwFAYD VQQDEw02ODBiMWU0Yy0wMTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wzljS1th2JzQwHrLzICG4p+hKTIKCRs0R0gTvHGoUa05uUgbO2JIkOwEsuy 592DuCBvtsECE8hNoj8vdswdVb9WzcItt6Z94DdiOynROAppS/vaaDLsS0z82u4A /qrFagJ/HNmunFzsH3R1OIOFier1oBKDQcu5GY7QcQYWkrGt7RlbBlj1F2hcrBzC uixbtqdQ9HBMds4YohdRQZCyTtQrBCDAdrdbt50A1g7hpVeeiqpN4bND1/RbbDH6 axPl0MRL5E6Td2UTzw3xSSmWQNrRCqGlFRpYH8Q8ucUGUaUKhFXttJdkjAIcS6hp GNqNX61Eb6RoktFqYfcyVA2xjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6lZLkx KveeJ3IlqONgyGUnYSDcMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoowKH644Ya6uS9tHJkfrIc3az/dvY3o7Qrj9KrCYyV2NW9cPWEKd6 6sf3HZ81bdZ33xNhCaRkLoIgPsUKT3TxHbNnVEawnbomDxTZDpOzKsRQAggfifnn VLxy79ZZxwa0T/4KgQwLhzRO2wi2Bc0XUDD2ohVclO6vxcmkPUkMFlnK8pnwtARJ 27loi8ihhKW+Q2fTFwPZn+64MCCP6Rg33y9+1eof6ewxOTEo4vOfuaGgn0flPc45 zgMd5f4czCkLFFBpNJIFRGScw5b6fZFLQs+q/bEH3Y2L0BVQMKpo6dAOB4XEvBQC xVdfKNXbckgVHObxymLAOSeuw4w5XMX1 -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:24 2025 by rpki-client