$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: WBRLzGB2ywa5pmK6Uhz1kCBe6U8RWf9rtmCuXKYkdaw= Subject key identifier: A5:EC:2D:4F:31:5D:DE:F2:E0:CF:CA:58:FB:DA:F9:5B:6C:8A:ED:BD Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 2B Signing time: Fri 25 Apr 2025 06:42:39 +0000 Manifest this update: Fri 25 Apr 2025 06:42:37 +0000 Manifest next update: Fri 02 May 2025 06:42:37 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: KxqVb1AI05gFNaOq79DPAxIxnAAF4Kkk8C5hhw0tHWI=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: Apr 25 06:42:37 2025 GMT Not After : May 2 06:42:37 2025 GMT Subject: CN=680b2ede-edfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:3d:ca:60:6c:ec:d6:ee:dc:03:4b:bf:7c: ee:3a:0f:76:a3:47:21:af:dd:49:49:3b:e7:7d:68: 51:13:10:87:31:ec:6f:f8:e1:97:95:d5:06:db:23: a9:4c:b4:05:f5:df:20:80:28:2d:7c:b3:39:f5:c4: 4e:cd:26:83:20:a3:75:85:e6:49:1b:d6:31:c8:c5: 7c:fc:c5:a2:18:fd:81:f4:37:97:61:9a:6d:06:74: 5a:c5:ee:6f:8d:a6:67:3c:f9:12:c1:ab:97:01:c6: 39:d4:f5:64:c8:d7:18:ff:dc:f9:ee:08:ba:55:7f: d8:aa:48:cc:39:dd:1b:79:fb:59:75:11:e9:be:58: ec:2d:fe:0a:78:63:7b:32:b8:27:f2:0a:84:6d:e4: 1f:d2:92:f2:4d:e8:38:e2:5f:37:0c:bb:76:c3:63: 3b:b8:8f:3c:1c:4f:61:fe:31:9e:88:92:6e:06:51: ce:9b:6c:78:df:bf:d9:3e:df:cf:d4:0a:f6:78:4d: d3:74:10:67:9f:f9:9d:11:b9:d3:cb:5d:92:3a:bb: af:c2:7d:f5:02:ab:02:69:51:0e:ee:ad:aa:38:1b: 97:bc:b3:f8:da:44:e7:3c:a5:af:0f:c9:cf:96:8c: 50:49:a0:4e:d6:b2:0f:09:d4:7b:2a:c8:31:84:ad: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:2D:4F:31:5D:DE:F2:E0:CF:CA:58:FB:DA:F9:5B:6C:8A:ED:BD X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e5:7f:a6:0b:cc:01:7d:01:bc:0f:b6:27:69:c7:ef:5c:62: 95:48:66:5b:ae:e4:47:76:3c:9f:aa:99:25:1b:e1:7c:21:8b: 1c:92:7e:a3:21:fe:35:7e:f5:53:28:c0:48:ae:2e:96:bd:bb: b5:6d:18:39:59:0c:e4:2c:5c:94:f2:8c:af:2b:46:fd:d2:14: 3e:78:22:98:d9:6d:3e:40:7d:99:f9:e9:e0:9b:10:da:94:fe: f5:a0:81:b1:f7:6d:27:25:a0:6e:47:9f:df:45:2f:84:e1:df: 42:93:23:2e:26:b8:81:65:bd:fc:1c:fb:29:07:ff:3e:c8:7a: d1:0b:ca:35:dd:16:b1:4f:ed:54:9f:90:67:4b:75:76:7b:6d: e9:db:5b:98:5c:bc:2f:76:44:b7:cc:18:a7:70:60:b1:75:90: 74:cd:3e:18:d5:7f:b4:9a:9e:97:7c:a0:18:d1:9c:2a:95:36: 00:3d:84:88:9b:3b:e0:6d:d2:17:be:0d:0c:19:f1:3f:5c:bc: d3:e8:c4:50:64:df:23:9a:76:e8:c1:ba:6a:38:cf:c2:ee:40: 85:6b:66:ed:54:1b:08:17:2d:6f:26:86:70:84:9c:a2:e9:48: 47:61:5e:b7:76:31:8f:37:8b:7b:8d:16:6c:5c:aa:4b:52:31: 5e:e4:1f:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA0MjUwNjQyMzdaFw0yNTA1MDIwNjQyMzdaMBgxFjAUBgNV BAMTDTY4MGIyZWRlLWVkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjaz3KYGzs1u7cA0u/fO46D3ajRyGv3UlJO+d9aFETEIcx7G/44ZeV1QbbI6lM tAX13yCAKC18szn1xE7NJoMgo3WF5kkb1jHIxXz8xaIY/YH0N5dhmm0GdFrF7m+N pmc8+RLBq5cBxjnU9WTI1xj/3PnuCLpVf9iqSMw53Rt5+1l1Eem+WOwt/gp4Y3sy uCfyCoRt5B/SkvJN6DjiXzcMu3bDYzu4jzwcT2H+MZ6Ikm4GUc6bbHjfv9k+38/U CvZ4TdN0EGef+Z0RudPLXZI6u6/CffUCqwJpUQ7urao4G5e8s/jaROc8pa8Pyc+W jFBJoE7Wsg8J1HsqyDGErSKlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpewtTzFd 3vLgz8pY+9r5W2yK7b0wHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTlf6YLzAF9AbwPtidpx+9cYpVIZluu5Ed2PJ+qmSUb4XwhixySfqMh /jV+9VMowEiuLpa9u7VtGDlZDOQsXJTyjK8rRv3SFD54IpjZbT5AfZn56eCbENqU /vWggbH3bScloG5Hn99FL4Th30KTIy4muIFlvfwc+ykH/z7IetELyjXdFrFP7VSf kGdLdXZ7benbW5hcvC92RLfMGKdwYLF1kHTNPhjVf7Sanpd8oBjRnCqVNgA9hIib O+Bt0he+DQwZ8T9cvNPoxFBk3yOadujBumo4z8LuQIVrZu1UGwgXLW8mhnCEnKLp SEdhXrd2MY83i3uNFmxcqktSMV7kH5I= -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:11 2025 by rpki-client