$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft File: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft (raw, json) Hash identifier: qSxZ3Vc3QlilZ6VBNxdCQWfxf0hErV9HFwkCk3Z090M= Subject key identifier: E1:B0:88:27:74:1B:E9:68:D8:B4:28:1E:61:AD:1E:7F:1F:4C:0B:CE Authority key identifier: 8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 Certificate issuer: /CN=A918497E/serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft Manifest number: F5 Signing time: Tue 29 Apr 2025 05:18:37 +0000 Manifest this update: Tue 29 Apr 2025 05:18:37 +0000 Manifest next update: Tue 06 May 2025 05:18:37 +0000 Files and hashes: 1: jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl (hash: VnRZR2qG1GTJM/ujKGmMxkkHTv2a21DcUGgem1j3o/4=) 2: D8FEAF6C637611EFB2D9FD47C4F9AE02.roa (hash: Dufn2bl2x79yMqHJgaUJAzhvDE7hxEwAGg5UyaJazhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 05:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=8D4BF79A419EEC0FA533E5FCA50FF372A33CB390 Validity Not Before: Apr 29 05:18:37 2025 GMT Not After : May 6 05:18:37 2025 GMT Subject: CN=6810612d-38be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:e4:41:59:99:9a:4f:be:81:8a:f0:a4:02: 45:ca:58:47:3b:4e:63:8f:88:8b:dd:fe:96:66:1a: 7f:41:04:0d:8c:86:7b:df:48:ae:cf:3c:9e:4b:bf: b4:75:e5:83:7b:03:7c:57:27:f3:2f:a6:c9:7f:34: f9:7e:93:56:32:67:a1:b1:cf:9f:c5:5d:4a:0b:97: 1c:42:d2:74:88:ea:bd:87:ec:43:00:ff:6b:2f:7e: 26:8c:0d:93:99:9c:81:24:70:a0:72:cf:5c:7e:4b: cd:ce:cd:90:e6:92:a5:7f:50:7d:81:ba:a4:18:5d: 16:5d:64:e9:4e:a3:74:2a:4f:78:35:49:8e:1d:56: 4d:9a:47:19:46:6c:24:ea:05:74:fb:16:84:a4:b8: 1a:28:5e:da:f9:05:d6:da:53:13:de:d8:c5:19:36: 3c:1a:c3:5e:7d:dd:87:a8:54:aa:a5:82:a5:05:90: d8:15:b2:47:12:1c:26:e4:3b:65:22:e4:66:ef:9b: 2d:9e:fa:a1:db:e2:2a:e4:59:ec:42:dc:cd:e5:6e: 06:fc:9c:81:8c:41:11:83:8c:e0:33:0b:db:32:25: 8f:fe:2f:7d:b9:53:88:df:49:02:58:48:84:1e:77: b8:52:c8:9d:c4:30:7a:3b:17:5e:54:2f:47:80:13: a3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:88:27:74:1B:E9:68:D8:B4:28:1E:61:AD:1E:7F:1F:4C:0B:CE X509v3 Authority Key Identifier: keyid:8D:4B:F7:9A:41:9E:EC:0F:A5:33:E5:FC:A5:0F:F3:72:A3:3C:B3:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/C320C226B5D811EE8DA66D85C4F9AE02/jUv3mkGe7A-lM-X8pQ_zcqM8s5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cc:9a:50:df:27:07:7a:a6:df:77:91:b2:e8:20:60:e5:18: 1a:11:ba:39:01:e4:41:d4:b4:ca:2a:55:20:7e:a4:3f:c2:79: 72:01:42:eb:06:de:f3:73:e6:87:cb:99:40:98:10:44:5d:e9: bb:ac:0e:f2:f7:63:8c:cc:59:c5:65:36:1b:b9:eb:ec:fc:ad: 37:31:4e:bf:e9:93:43:ec:6c:a3:e3:bd:1c:50:c3:bc:35:0a: 3d:6f:b5:39:48:43:c5:60:26:30:9f:d0:7e:aa:3f:d0:c2:f1: 09:0a:28:40:da:21:9c:08:64:39:38:6e:f9:b4:10:e3:c8:a7: 2e:5d:a2:ef:79:c6:78:f3:19:4f:d7:25:20:1e:ad:8a:f5:bb: f1:db:56:41:1f:8e:66:c6:b8:49:eb:ed:6d:c8:3f:c2:fb:1c: 6b:c3:88:ed:5e:1d:ee:a0:72:18:11:bf:78:d6:89:32:56:ea: 96:da:15:fa:32:03:a3:49:35:3b:ec:82:b3:13:b1:15:7d:c4: be:50:7f:30:cc:f3:cd:bf:06:85:4e:fa:fc:a5:47:f6:63:2a: aa:6a:99:fb:ba:01:37:09:8a:53:f1:df:a6:8c:58:54:70:ee: 7b:fe:0e:b2:7a:54:6b:18:99:3c:e1:11:2d:95:01:0b:26:32: c8:ff:9b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDhENEJGNzlBNDE5RUVDMEZBNTMzRTVGQ0E1MEZGMzcy QTMzQ0IzOTAwHhcNMjUwNDI5MDUxODM3WhcNMjUwNTA2MDUxODM3WjAYMRYwFAYD VQQDEw02ODEwNjEyZC0zOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpzkQVmZmk++gYrwpAJFylhHO05jj4iL3f6WZhp/QQQNjIZ730iuzzyeS7+0 deWDewN8VyfzL6bJfzT5fpNWMmehsc+fxV1KC5ccQtJ0iOq9h+xDAP9rL34mjA2T mZyBJHCgcs9cfkvNzs2Q5pKlf1B9gbqkGF0WXWTpTqN0Kk94NUmOHVZNmkcZRmwk 6gV0+xaEpLgaKF7a+QXW2lMT3tjFGTY8GsNefd2HqFSqpYKlBZDYFbJHEhwm5Dtl IuRm75stnvqh2+Iq5FnsQtzN5W4G/JyBjEERg4zgMwvbMiWP/i99uVOI30kCWEiE Hne4UsidxDB6OxdeVC9HgBOjPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGwiCd0 G+lo2LQoHmGtHn8fTAvOMB8GA1UdIwQYMBaAFI1L95pBnuwPpTPl/KUP83KjPLOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9DMzIwQzIyNkI1 RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdBLWxNLVg4cFFfemNxTThz NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVdjNta0dlN0EtbE0tWDhwUV96Y3FNOHM1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9DMzIwQzIyNkI1RDgxMUVFOERBNjZEODVDNEY5QUUwMi9qVXYzbWtHZTdB LWxNLVg4cFFfemNxTThzNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbzJpQ3ycHeqbfd5Gy6CBg5RgaEbo5AeRB1LTKKlUgfqQ/wnlyAULr Bt7zc+aHy5lAmBBEXem7rA7y92OMzFnFZTYbuevs/K03MU6/6ZND7Gyj470cUMO8 NQo9b7U5SEPFYCYwn9B+qj/QwvEJCihA2iGcCGQ5OG75tBDjyKcuXaLvecZ48xlP 1yUgHq2K9bvx21ZBH45mxrhJ6+1tyD/C+xxrw4jtXh3uoHIYEb941okyVuqW2hX6 MgOjSTU77IKzE7EVfcS+UH8wzPPNvwaFTvr8pUf2Yyqqapn7ugE3CYpT8d+mjFhU cO57/g6yelRrGJk84REtlQELJjLI/5ud -----END CERTIFICATE-----Generated at Tue Apr 29 08:34:09 2025 by rpki-client