$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft File: jegu_2I015t6ZfpgoFMAfagoH8w.mft (raw, json) Hash identifier: PqiyJmitA+NcfOGXG+Qq4jmrGTP2ph898+eqqq+W+Jg= Subject key identifier: B7:6C:ED:51:A4:13:A0:D6:D9:34:FF:3E:80:A1:26:4A:C8:45:32:FE Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft Manifest number: C4 Signing time: Fri 25 Apr 2025 04:59:00 +0000 Manifest this update: Fri 25 Apr 2025 04:59:00 +0000 Manifest next update: Fri 02 May 2025 04:59:00 +0000 Files and hashes: 1: jegu_2I015t6ZfpgoFMAfagoH8w.crl (hash: v8hj3gjfE6n6iayXwd5dI4bod0J/Zg3UIXr+6CbQk8I=) 2: F71189FC0C3211EF98143258C4F9AE02.roa (hash: 1AY7vatzUpFHp5X1pZedPLvi7H/JL85AC54mCkIIjVQ=) 3: 21D692500C1E11EFBA32F937C4F9AE02.roa (hash: SqF3faGShmfVPpXoXHL91JRHc62cO3NIyQXQDMCvuMY=) 4: 591DB9860C1F11EF9FC57C84C4F9AE02.roa (hash: biXO0as9Jxz6iqfKtDJWe3xCLQ4Ga58pXoS+qJsNKSs=) 5: 269D906E0C1D11EF87936F72C4F9AE02.roa (hash: TkvEA48hkZdfXv9N6AC+PYtqjUdjJ0lc4V/6xa2JEy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC Validity Not Before: Apr 25 04:59:00 2025 GMT Not After : May 2 04:59:00 2025 GMT Subject: CN=680b1694-80e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:d1:ea:dd:14:63:c7:85:15:eb:45:82:dd: a9:e9:cc:39:3f:4a:50:7a:67:38:41:92:52:7c:18: 5f:57:00:d0:15:7b:ab:25:20:e4:13:de:d8:32:fe: c0:58:98:b8:8f:8b:7c:da:99:18:91:ba:a2:f9:ed: ac:69:84:a8:6c:76:1e:87:0f:c2:8a:64:b1:35:d4: b8:bc:aa:69:ff:4b:03:74:08:af:80:20:bb:51:6e: 58:ea:a9:55:55:15:d1:cb:ca:f1:4b:c5:58:8a:e5: 6e:a2:89:b0:7f:36:e0:6a:55:3c:bd:9b:67:a9:ec: fa:a3:08:bf:b8:ab:3b:a0:f5:b7:ec:2e:d0:4a:16: cc:1c:b0:b9:c2:3b:1e:a1:e9:34:75:50:4b:78:32: 42:da:07:a4:33:66:c8:a6:44:13:f5:c6:49:1b:5e: 0d:70:85:b1:50:ca:23:94:f2:52:36:88:69:97:a4: 31:dc:ff:83:fd:41:f1:b8:5f:be:64:b3:b5:62:9a: 15:e6:c4:0c:be:82:92:ff:3c:3c:e7:d4:35:d9:df: 9c:c5:64:ca:94:bf:47:18:0a:05:cc:e8:5a:f6:fb: 0f:c6:62:33:b5:c6:a4:7d:cf:de:bc:fd:8b:fc:e4: 8c:27:52:2c:a6:be:2f:34:80:49:47:4e:e7:38:d0: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6C:ED:51:A4:13:A0:D6:D9:34:FF:3E:80:A1:26:4A:C8:45:32:FE X509v3 Authority Key Identifier: keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d6:f0:6e:d9:a6:ac:0f:b8:fa:4d:a0:b3:1d:62:e9:82:71: 67:29:4b:2f:72:91:c9:06:d2:a5:f3:d7:c4:75:b2:6e:eb:88: 46:99:67:2d:14:52:02:bb:f4:1d:2f:6a:4a:33:eb:fd:e8:75: 8b:a5:0c:98:38:ba:e8:c9:db:9e:8c:8d:6b:dc:b0:43:c6:7f: 7a:87:97:0f:c9:e3:77:8d:62:ca:dc:42:92:fd:fc:a9:0b:fb: c1:9e:24:57:df:58:e7:02:95:da:42:26:ae:84:70:84:b2:7f: 45:f8:c5:47:cc:1f:ca:8c:d1:03:78:a7:9b:75:f3:27:c4:f6: 1e:6b:38:81:37:d0:e5:ec:13:aa:c4:f6:23:b8:6c:06:a4:c1: db:ef:f2:53:b2:b9:e3:27:db:4f:78:7a:ef:15:94:c3:bd:2b: ba:de:d6:cb:d5:8e:f6:e9:94:73:ad:15:99:56:17:13:6f:fe: 60:c4:f2:07:9e:ff:fd:3b:6a:83:b6:33:a8:05:b0:98:58:e9: b6:84:f0:a0:0b:5e:37:8e:65:a8:40:f6:e1:32:7e:57:d0:90: f9:5b:e2:93:2a:28:3f:83:29:55:d9:eb:41:c9:5e:22:0e:bd: f1:d7:ff:0b:66:f8:ab:41:91:ae:f6:ad:e3:4e:89:32:29:83: 9b:c8:70:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ2RjYxMTAvBgNVBAUTKDhERTgyRUZGNjIzNEQ3OUI3QTY1RkE2MEEwNTMwMDdE QTgyODFGQ0MwHhcNMjUwNDI1MDQ1OTAwWhcNMjUwNTAyMDQ1OTAwWjAYMRYwFAYD VQQDEw02ODBiMTY5NC04MGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz43R6t0UY8eFFetFgt2p6cw5P0pQemc4QZJSfBhfVwDQFXurJSDkE97YMv7A WJi4j4t82pkYkbqi+e2saYSobHYehw/CimSxNdS4vKpp/0sDdAivgCC7UW5Y6qlV VRXRy8rxS8VYiuVuoomwfzbgalU8vZtnqez6owi/uKs7oPW37C7QShbMHLC5wjse oek0dVBLeDJC2gekM2bIpkQT9cZJG14NcIWxUMojlPJSNohpl6Qx3P+D/UHxuF++ ZLO1YpoV5sQMvoKS/zw859Q12d+cxWTKlL9HGAoFzOha9vsPxmIztcakfc/evP2L /OSMJ1Ispr4vNIBJR07nONBW8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLds7VGk E6DW2TT/PoChJkrIRTL+MB8GA1UdIwQYMBaAFI3oLv9iNNebemX6YKBTAH2oKB/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDZGNi9GNEExQjJEODBD MTgxMUVGOUZGNzAxNDFDNEY5QUUwMi9qZWd1XzJJMDE1dDZaZnBnb0ZNQWZhZ29I OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plZ3VfMkkwMTV0NlpmcGdvRk1BZmFnb0g4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDZGNi9GNEExQjJEODBDMTgxMUVGOUZGNzAxNDFDNEY5QUUwMi9qZWd1XzJJMDE1 dDZaZnBnb0ZNQWZhZ29IOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg1vBu2aasD7j6TaCzHWLpgnFnKUsvcpHJBtKl89fEdbJu64hGmWct FFICu/QdL2pKM+v96HWLpQyYOLroyduejI1r3LBDxn96h5cPyeN3jWLK3EKS/fyp C/vBniRX31jnApXaQiauhHCEsn9F+MVHzB/KjNEDeKebdfMnxPYeaziBN9Dl7BOq xPYjuGwGpMHb7/JTsrnjJ9tPeHrvFZTDvSu63tbL1Y726ZRzrRWZVhcTb/5gxPIH nv/9O2qDtjOoBbCYWOm2hPCgC143jmWoQPbhMn5X0JD5W+KTKig/gylV2etByV4i Dr3x1/8LZvirQZGu9q3jTokyKYObyHC1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:05 2025 by rpki-client