$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft File: j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json) Hash identifier: u7Dp7V+xgPTRnqIWU7BIDsGSkN44JtYu8Qc6tmZVOAo= Subject key identifier: 0C:0B:F8:BC:33:A9:B2:1D:5C:D7:81:BD:37:79:A3:15:32:94:6E:A4 Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5 Certificate issuer: /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft Manifest number: 0A08 Signing time: Thu 24 Apr 2025 20:23:10 +0000 Manifest this update: Thu 24 Apr 2025 20:23:09 +0000 Manifest next update: Thu 01 May 2025 20:23:09 +0000 Files and hashes: 1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: /tONgXB41VGLvHOt9TTldb/DOKxgYFcZHO61iEwM3b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5 Validity Not Before: Apr 24 20:23:09 2025 GMT Not After : May 1 20:23:09 2025 GMT Subject: CN=680a9dad-33dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:e3:07:dd:66:df:98:66:1f:70:c7:c7:73: 97:c1:87:7c:96:8e:28:f4:c2:b0:a5:b0:cf:03:b7: 21:f8:3e:83:88:95:01:84:fd:6e:fb:99:64:f5:21: 70:b2:06:41:2a:6e:e2:af:81:f3:da:dc:8c:0a:b9: e5:e5:97:7f:cf:85:bb:9b:78:09:cf:ae:dd:d0:ff: 49:55:4a:89:82:e8:29:0b:f5:71:b4:e8:8b:59:dd: b5:ed:c5:bf:f2:cf:17:3e:70:5b:9b:41:70:94:cc: 58:c6:e2:f3:20:14:82:9a:77:91:97:61:80:42:43: f3:d6:d5:4d:42:b8:4f:a5:9e:16:1a:fb:9d:1d:10: 16:67:08:42:cf:4e:8b:11:ab:24:8a:c6:e2:e3:65: 46:42:6a:b6:83:7e:94:bf:57:7b:0d:56:d0:ff:24: bb:dc:fb:2a:2b:43:25:49:01:77:99:0a:69:43:9c: 4f:c2:65:c0:36:bc:90:26:17:3a:52:44:f7:a9:30: b8:ca:41:83:cb:58:c3:ac:d3:1b:e4:dd:2c:52:cd: 45:a1:70:f0:72:d5:88:b2:09:bf:29:36:a2:d0:8c: 12:9f:f1:29:bc:d7:cd:89:70:69:b5:34:60:e4:ef: 46:cd:cc:6d:d0:23:a8:00:99:89:5b:e8:c8:98:74: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:F8:BC:33:A9:B2:1D:5C:D7:81:BD:37:79:A3:15:32:94:6E:A4 X509v3 Authority Key Identifier: keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:71:df:9b:16:03:93:a4:72:ab:3b:d2:7f:86:2f:18:3f:6d: e8:12:f4:61:08:02:9c:b2:2b:18:f8:8c:db:f4:53:c3:1d:84: 42:89:c4:12:f4:71:40:b6:b3:c4:79:87:da:1f:c8:fe:72:6f: b4:c5:3c:19:83:71:07:24:c8:dd:9f:65:25:fd:02:04:bb:09: c7:89:e6:11:12:c1:41:5e:c9:9a:f5:82:61:65:4f:cc:39:3f: 1f:7f:ea:1f:be:a5:42:00:d4:be:bd:89:9f:b6:be:55:90:17: e3:b5:a4:23:87:a9:5d:d8:fc:ab:ad:19:84:07:5a:ce:9f:78: b7:a4:b1:00:67:95:b9:8a:a9:d0:25:be:27:ff:31:5d:d0:c8: ca:c4:9a:f5:0e:7a:43:8d:bd:ed:00:e5:5a:8a:81:2d:8a:92: df:51:99:73:71:bf:b1:c3:cd:31:0b:25:33:47:8e:b6:06:fc: cf:ef:e7:ea:71:9c:cd:ff:29:e0:e3:23:fb:56:9f:d3:e1:f7: 06:41:a2:be:6f:cc:b1:cf:91:21:68:25:0c:dd:f3:01:e0:df: 2c:7e:cf:4e:17:91:5e:66:92:24:1f:f9:34:d1:24:21:d7:a9: 10:86:cc:1a:bf:1f:f9:f1:0f:6f:8c:e0:f2:ea:2e:24:f0:f9: b9:b2:c9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKDhGOEI1QUZDMkQzMzg4REREMjUxOEFFOUEwNzM5MDhG OEZBNUEwQTUwHhcNMjUwNDI0MjAyMzA5WhcNMjUwNTAxMjAyMzA5WjAYMRYwFAYD VQQDEw02ODBhOWRhZC0zM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SnjB91m35hmH3DHx3OXwYd8lo4o9MKwpbDPA7ch+D6DiJUBhP1u+5lk9SFw sgZBKm7ir4Hz2tyMCrnl5Zd/z4W7m3gJz67d0P9JVUqJgugpC/VxtOiLWd217cW/ 8s8XPnBbm0FwlMxYxuLzIBSCmneRl2GAQkPz1tVNQrhPpZ4WGvudHRAWZwhCz06L Easkisbi42VGQmq2g36Uv1d7DVbQ/yS73PsqK0MlSQF3mQppQ5xPwmXANryQJhc6 UkT3qTC4ykGDy1jDrNMb5N0sUs1FoXDwctWIsgm/KTai0IwSn/EpvNfNiXBptTRg 5O9Gzcxt0COoAJmJW+jImHSiDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwL+Lwz qbIdXNeBvTd5oxUylG6kMB8GA1UdIwQYMBaAFI+LWvwtM4jd0lGK6aBzkI+PpaCl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0MwemlOM1NVWXJwb0hPUWo0LWxv S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0dGFfQzB6aU4zU1VZcnBvSE9RajQtbG9LVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9qNHRhX0MwemlO M1NVWXJwb0hPUWo0LWxvS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwcd+bFgOTpHKrO9J/hi8YP23oEvRhCAKcsisY+Izb9FPDHYRCicQS 9HFAtrPEeYfaH8j+cm+0xTwZg3EHJMjdn2Ul/QIEuwnHieYREsFBXsma9YJhZU/M OT8ff+ofvqVCANS+vYmftr5VkBfjtaQjh6ld2PyrrRmEB1rOn3i3pLEAZ5W5iqnQ Jb4n/zFd0MjKxJr1DnpDjb3tAOVaioEtipLfUZlzcb+xw80xCyUzR462BvzP7+fq cZzN/yng4yP7Vp/T4fcGQaK+b8yxz5EhaCUM3fMB4N8sfs9OF5FeZpIkH/k00SQh 16kQhswavx/58Q9vjODy6i4k8Pm5ssnx -----END CERTIFICATE-----Generated at Sat Apr 26 05:27:01 2025 by rpki-client