$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft File: JyyuXyHIv2trSRWvAATH78_H2z0.mft (raw, json) Hash identifier: PXAn7i65oNwWlrzwMah4P5NN18BC2ldBs8S7LjLZDUw= Subject key identifier: 16:E2:6F:C7:DB:EC:F6:51:C9:54:61:5D:7C:DB:9B:75:1C:3F:F2:2B Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D Certificate issuer: /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft Manifest number: 028E Signing time: Fri 25 Apr 2025 01:19:59 +0000 Manifest this update: Fri 25 Apr 2025 01:19:59 +0000 Manifest next update: Fri 02 May 2025 01:19:59 +0000 Files and hashes: 1: JyyuXyHIv2trSRWvAATH78_H2z0.crl (hash: 5SwT5fP6dIse2OcXfn0RGCBMGBmQjE2eZmRo8Gmh1NY=) 2: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (hash: 8amN8Nk9oVQpcGLG743ZVOV+dvrusSJP1h0AZ4Q+u2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Validity Not Before: Apr 25 01:19:59 2025 GMT Not After : May 2 01:19:59 2025 GMT Subject: CN=680ae33f-871a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:46:6a:f1:97:b6:cb:db:32:0c:49:8d:46: b4:3a:92:4f:e5:d8:07:03:e9:25:a1:c6:4c:41:a7: 59:9c:aa:55:09:bf:7b:40:99:dc:6b:f5:39:b2:fd: a2:93:07:2a:b8:18:dc:f2:d0:f9:9c:67:2d:aa:63: da:be:03:72:bd:f2:b6:78:c0:16:03:f4:33:0c:ad: 5b:ea:08:1e:c0:e3:5d:72:22:db:1f:4e:d4:02:8f: 53:96:28:cf:ac:b5:37:c9:87:a0:08:c7:1a:16:1e: 99:27:25:1b:5e:c9:1e:c7:35:63:ec:51:8d:37:1b: b0:d4:25:d2:b2:c7:7a:b7:18:73:ea:f0:32:30:b3: 74:5c:ca:df:16:0b:73:e6:5e:54:99:1c:c6:42:48: fb:11:fe:37:2f:a8:ee:7e:cb:47:1e:d7:53:19:54: 9a:82:ed:df:0e:57:26:9c:df:12:c9:f3:9d:2b:23: bc:40:a5:e5:cd:40:70:60:c2:5b:28:d8:64:4d:2a: f7:fe:8d:dc:44:65:1e:5e:66:ac:b6:8d:be:15:d9: ca:a7:e4:ce:90:b8:21:5f:93:e6:34:d1:ea:12:7d: e4:43:76:94:e5:34:ad:f8:8c:b4:4b:28:00:05:e3: f8:78:df:57:7c:b7:ca:f7:e0:b6:4e:2c:e1:65:6b: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:6F:C7:DB:EC:F6:51:C9:54:61:5D:7C:DB:9B:75:1C:3F:F2:2B X509v3 Authority Key Identifier: keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2e:37:e8:65:c3:cc:cf:92:34:70:d0:a8:e4:96:c3:75:3e: 67:3d:75:2c:6c:19:6f:0d:f8:02:2a:eb:65:76:4f:0b:34:18: 59:49:ae:a8:8b:eb:8e:76:80:fe:26:2d:c7:3b:08:f4:fd:51: 1e:b9:2a:c5:b5:1a:02:71:19:8f:5a:a5:6e:54:ac:49:9a:3b: 4f:c3:9d:cd:f5:08:82:23:dd:8f:ff:a6:c5:04:b8:3e:6d:d3: d8:e3:0d:fa:74:11:55:a2:76:0a:5e:98:33:39:99:c2:18:ba: 41:7f:23:aa:69:6d:6a:72:79:95:c6:3f:75:bb:57:52:35:4c: d4:da:f4:e0:96:2e:5c:d2:0e:a7:9b:9b:76:d6:27:f5:a0:0c: e5:29:93:e6:e3:79:b4:7f:b5:a1:87:85:84:94:d1:97:d2:d2: 59:a5:bc:b6:37:c1:43:b6:1e:bf:1f:dc:8e:40:d8:9b:fe:70: 28:43:f2:52:be:6e:2b:1b:7c:c7:8c:17:4e:f3:aa:1f:dc:0e: cf:e4:a6:bc:d3:70:03:94:4f:f9:16:7f:64:df:b6:f7:36:c3: 47:06:4a:08:62:36:71:f0:82:f3:71:89:57:b2:d5:56:88:57: 96:ae:0b:24:15:27:75:53:c8:0b:85:23:00:80:4f:86:87:38: de:01:c9:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNEExMTAvBgNVBAUTKDI3MkNBRTVGMjFDOEJGNkI2QjQ5MTVBRjAwMDRDN0VG Q0ZDN0RCM0QwHhcNMjUwNDI1MDExOTU5WhcNMjUwNTAyMDExOTU5WjAYMRYwFAYD VQQDEw02ODBhZTMzZi04NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6q5GavGXtsvbMgxJjUa0OpJP5dgHA+klocZMQadZnKpVCb97QJnca/U5sv2i kwcquBjc8tD5nGctqmPavgNyvfK2eMAWA/QzDK1b6ggewONdciLbH07UAo9TlijP rLU3yYegCMcaFh6ZJyUbXskexzVj7FGNNxuw1CXSssd6txhz6vAyMLN0XMrfFgtz 5l5UmRzGQkj7Ef43L6jufstHHtdTGVSagu3fDlcmnN8SyfOdKyO8QKXlzUBwYMJb KNhkTSr3/o3cRGUeXmasto2+FdnKp+TOkLghX5PmNNHqEn3kQ3aU5TSt+Iy0SygA BeP4eN9XfLfK9+C2TizhZWtrpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbib8fb 7PZRyVRhXXzbm3UcP/IrMB8GA1UdIwQYMBaAFCcsrl8hyL9ra0kVrwAEx+/Px9s9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE0QS81RUY4QTkxNjAw RUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYydHJTUld2QUFUSDc4X0gy ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5eXVYeUhJdjJ0clNSV3ZBQVRINzhfSDJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE0QS81RUY4QTkxNjAwRUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYy dHJTUld2QUFUSDc4X0gyejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALLjfoZcPMz5I0cNCo5JbDdT5nPXUsbBlvDfgCKutldk8LNBhZSa6o i+uOdoD+Ji3HOwj0/VEeuSrFtRoCcRmPWqVuVKxJmjtPw53N9QiCI92P/6bFBLg+ bdPY4w36dBFVonYKXpgzOZnCGLpBfyOqaW1qcnmVxj91u1dSNUzU2vTgli5c0g6n m5t21if1oAzlKZPm43m0f7Whh4WElNGX0tJZpby2N8FDth6/H9yOQNib/nAoQ/JS vm4rG3zHjBdO86of3A7P5Ka803ADlE/5Fn9k37b3NsNHBkoIYjZx8ILzcYlXstVW iFeWrgskFSd1U8gLhSMAgE+GhzjeAclR -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:36 2025 by rpki-client