$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: jjM89PQl4Wv3tpSGxSm5MpwPC9+3ERyGQFK423JLOPo= Subject key identifier: A5:DE:11:47:34:AD:29:BA:42:F5:F9:1C:0F:DD:01:29:F0:22:91:92 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 92 Signing time: Tue 29 Apr 2025 06:21:12 +0000 Manifest this update: Tue 29 Apr 2025 06:21:12 +0000 Manifest next update: Tue 06 May 2025 06:21:11 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: Gj1nlD0fgOTQzcj/WOXd+nF0l+ot3TOYRKQw9Lpcd6Y=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: sQnDZ28ShoG2UHrLE3jAaWJSXhAZi6W2QAWeAKQ2Dy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 06:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: Apr 29 06:21:12 2025 GMT Not After : May 6 06:21:11 2025 GMT Subject: CN=68106fd8-b93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:db:c3:39:d7:07:0a:db:9c:09:b8:d3:be: 04:09:83:87:f0:59:f7:6b:16:5d:6e:f0:00:94:d7: 99:4f:c8:b6:3b:c7:e3:7b:cb:78:bb:50:6c:06:54: 07:54:e7:cd:d5:83:62:ea:c6:42:c7:18:89:83:c0: d7:7a:3e:34:e3:ac:5e:6e:b2:ed:53:7c:95:35:c6: b7:f9:c9:62:ee:8e:2d:7f:0d:d3:3f:c0:b3:c5:da: b9:9f:d8:87:b8:dd:8d:2d:28:95:17:17:ba:1c:c0: fb:d0:b7:b5:f4:6e:7b:73:ea:de:95:8a:54:0a:64: 45:32:15:47:e5:64:2c:2c:85:f4:60:0a:74:97:82: f5:09:d2:72:c7:a9:c2:b8:90:6e:79:ef:42:e5:2d: 17:4f:97:4f:1a:64:e2:52:fa:2c:1f:34:5b:6e:4b: 1d:6f:07:7b:de:31:86:90:20:c2:d8:01:69:a4:d9: ce:0e:36:58:60:2e:7c:c0:6c:f9:bd:3b:0b:93:fe: cb:fc:77:ae:31:3e:21:14:35:1d:f7:40:c4:c2:14: bc:30:6a:e7:9b:4c:7d:55:f7:08:bd:2a:52:43:63: 7c:a8:a7:21:35:cc:29:37:99:d4:51:af:6e:67:ab: ee:f0:51:51:eb:9f:29:87:ee:bc:39:44:6a:9b:12: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:11:47:34:AD:29:BA:42:F5:F9:1C:0F:DD:01:29:F0:22:91:92 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:76:60:d1:df:c8:27:9f:e4:ce:db:80:15:61:dc:74:9d:a0: 46:18:d3:b0:75:a5:48:3f:56:67:9f:95:08:0b:57:97:37:51: 77:fb:a6:04:df:9d:7d:85:eb:fa:91:75:ff:93:4d:4a:e7:33: d2:08:8b:77:b9:a8:f6:45:73:07:64:9c:0e:c5:9b:15:1a:c5: 7c:58:09:8f:3c:24:1f:2b:91:d3:49:94:fa:48:38:e0:33:97: 43:ce:0b:66:66:63:c8:83:7d:20:8b:0b:f0:e6:09:fc:eb:48: 1b:7d:57:46:a3:5a:5c:1d:e0:e2:ff:d1:a7:cd:ff:9f:89:1b: b4:d8:4d:a4:da:5b:02:5a:60:9b:84:f9:38:0a:1e:ee:39:a0: 67:14:9a:ab:7d:bf:f8:db:18:d1:46:78:fb:c1:8d:f7:a3:d4: 08:bc:48:be:20:95:1d:4a:ac:af:c9:2b:dc:1f:1c:2a:9d:0f: 9b:1a:e0:a2:72:b0:d7:b1:55:cf:10:70:47:1d:3f:46:73:16: e9:f7:2f:96:ca:d0:95:fe:fd:6d:f1:92:d5:cb:30:97:ae:4b: 87:be:bc:a1:26:46:2e:2c:da:f8:b5:cb:9a:34:69:04:8a:b7: 81:e5:04:5d:bd:6f:e1:84:e5:a6:83:36:54:7e:a1:e2:fe:c8: 2d:8b:93:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUwNDI5MDYyMTEyWhcNMjUwNTA2MDYyMTExWjAYMRYwFAYD VQQDEw02ODEwNmZkOC1iOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWLbwznXBwrbnAm4074ECYOH8Fn3axZdbvAAlNeZT8i2O8fje8t4u1BsBlQH VOfN1YNi6sZCxxiJg8DXej4046xebrLtU3yVNca3+cli7o4tfw3TP8Czxdq5n9iH uN2NLSiVFxe6HMD70Le19G57c+relYpUCmRFMhVH5WQsLIX0YAp0l4L1CdJyx6nC uJBuee9C5S0XT5dPGmTiUvosHzRbbksdbwd73jGGkCDC2AFppNnODjZYYC58wGz5 vTsLk/7L/HeuMT4hFDUd90DEwhS8MGrnm0x9VfcIvSpSQ2N8qKchNcwpN5nUUa9u Z6vu8FFR658ph+68OURqmxJQjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXeEUc0 rSm6QvX5HA/dASnwIpGSMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTdmDR38gnn+TO24AVYdx0naBGGNOwdaVIP1Znn5UIC1eXN1F3+6YE 3519hev6kXX/k01K5zPSCIt3uaj2RXMHZJwOxZsVGsV8WAmPPCQfK5HTSZT6SDjg M5dDzgtmZmPIg30giwvw5gn860gbfVdGo1pcHeDi/9Gnzf+fiRu02E2k2lsCWmCb hPk4Ch7uOaBnFJqrfb/42xjRRnj7wY33o9QIvEi+IJUdSqyvySvcHxwqnQ+bGuCi crDXsVXPEHBHHT9Gcxbp9y+WytCV/v1t8ZLVyzCXrkuHvryhJkYuLNr4tcuaNGkE ireB5QRdvW/hhOWmgzZUfqHi/sgti5Ol -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:30 2025 by rpki-client