$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json) Hash identifier: 5SVzjyTLZ6zt+ITS5N2UqJzBYceqD/Ym4Nl7cKUWoPU= Subject key identifier: 76:6D:A8:4F:97:3B:BB:C0:EE:B6:59:4E:B3:48:D6:83:70:74:16:44 Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft Manifest number: 0310 Signing time: Fri 25 Apr 2025 00:58:27 +0000 Manifest this update: Fri 25 Apr 2025 00:58:26 +0000 Manifest next update: Fri 02 May 2025 00:58:26 +0000 Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: 6EUi/D69hyiHFVvGFsY0NP0XxgDkGHgvcHmFf38NADE=) 2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: 86l1R+M09/2NPXx9I8sqm1xbxQxFvP0FLDSgRGwtfyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Validity Not Before: Apr 25 00:58:26 2025 GMT Not After : May 2 00:58:26 2025 GMT Subject: CN=680ade33-2673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:00:db:9f:e8:80:c6:cb:85:b8:37:56:a4: a0:ee:ed:39:20:18:f4:c1:fc:c4:55:c5:40:21:31: 23:3f:5d:b7:1a:bf:42:63:b8:bb:89:ec:0b:d0:17: f5:97:52:7c:b4:41:02:f2:20:a1:75:98:36:c9:dd: 45:97:3b:d6:e9:71:06:bf:9a:9f:1a:ac:9c:0b:6a: f8:02:13:5d:da:39:4a:70:f4:71:5b:d8:b4:10:0a: 04:5d:75:e8:83:dd:a1:f6:3b:62:a0:4d:03:18:73: 2d:e7:16:fb:78:4d:15:52:ef:89:aa:f8:8e:e0:c7: e1:db:9b:e3:2b:f4:a1:e2:da:b8:7c:4e:0b:e9:fd: 42:14:8c:9b:c4:4f:56:80:c6:f3:31:66:ed:0b:22: 42:38:3c:84:6f:cc:91:96:0d:c5:eb:d1:71:d9:41: aa:c9:e5:9e:36:ed:e9:f2:4e:21:f4:ba:49:1e:85: 02:80:23:50:b8:65:e1:7e:a4:a9:ad:49:12:19:7e: c5:b8:d5:b8:4c:5e:d8:b9:9c:32:a6:56:5d:7d:11: 02:73:cf:92:d2:c8:7a:28:a1:cb:68:2a:4e:d6:c3: c8:ff:e6:dc:9f:51:a8:cf:bb:7c:79:c3:15:80:f1: 05:d6:9b:bb:79:49:3c:72:a2:33:3d:15:08:c5:19: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6D:A8:4F:97:3B:BB:C0:EE:B6:59:4E:B3:48:D6:83:70:74:16:44 X509v3 Authority Key Identifier: keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c3:41:1a:62:9d:52:b4:98:63:4e:da:2d:a1:8f:3b:09:d8: dc:07:77:5b:ea:94:34:02:9d:73:05:cb:f6:73:25:66:b7:12: 50:d3:9a:42:5a:0f:b9:f7:0a:e9:bd:ec:8f:47:c7:93:6d:f1: bf:fe:a3:af:82:2a:c9:5e:fb:e0:e6:d6:55:28:17:3c:ab:3a: 88:75:a3:8a:1f:33:e4:cd:25:b4:ed:2a:24:1f:64:d2:6e:97: a0:81:35:9d:a5:b1:87:87:3c:48:31:15:66:47:82:dc:4f:2c: 48:d9:7d:1d:f6:15:71:c8:ef:1c:df:ed:dc:7d:cb:73:d4:7e: d6:e8:a6:a6:21:2a:d1:a8:f6:90:82:b1:36:a2:a5:14:1c:c2: 7c:77:84:6a:7d:ec:f6:61:b9:ab:cb:10:13:19:de:5b:41:03: 04:bb:72:4e:31:5f:99:59:24:a3:5a:de:33:63:91:bc:61:b4: 97:47:e8:ee:bd:08:f0:aa:f1:21:d1:76:6c:62:3e:ae:b0:26: 39:2b:65:28:1c:60:c4:e9:d0:d1:4b:62:fe:56:66:40:0c:67: b8:5a:a1:d0:75:c9:0b:dd:67:98:7d:b7:6b:44:5f:67:d6:76: b4:97:0d:5d:0e:0b:dc:81:6d:be:0b:fc:8e:2b:f1:4e:b2:04: e4:dc:ab:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE REJGQjc1QUIwHhcNMjUwNDI1MDA1ODI2WhcNMjUwNTAyMDA1ODI2WjAYMRYwFAYD VQQDEw02ODBhZGUzMy0yNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeoA25/ogMbLhbg3VqSg7u05IBj0wfzEVcVAITEjP123Gr9CY7i7iewL0Bf1 l1J8tEEC8iChdZg2yd1FlzvW6XEGv5qfGqycC2r4AhNd2jlKcPRxW9i0EAoEXXXo g92h9jtioE0DGHMt5xb7eE0VUu+JqviO4Mfh25vjK/Sh4tq4fE4L6f1CFIybxE9W gMbzMWbtCyJCODyEb8yRlg3F69Fx2UGqyeWeNu3p8k4h9LpJHoUCgCNQuGXhfqSp rUkSGX7FuNW4TF7YuZwyplZdfRECc8+S0sh6KKHLaCpO1sPI/+bcn1Goz7t8ecMV gPEF1pu7eUk8cqIzPRUIxRkowwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZtqE+X O7vA7rZZTrNI1oNwdBZEMB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY5Qi9CMDkzNUQ1NENDNjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWlt ME1PUm82OE4xa1RkdjdkYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCww0EaYp1StJhjTtotoY87CdjcB3db6pQ0Ap1zBcv2cyVmtxJQ05pC Wg+59wrpveyPR8eTbfG//qOvgirJXvvg5tZVKBc8qzqIdaOKHzPkzSW07SokH2TS bpeggTWdpbGHhzxIMRVmR4LcTyxI2X0d9hVxyO8c3+3cfctz1H7W6KamISrRqPaQ grE2oqUUHMJ8d4Rqfez2YbmryxATGd5bQQMEu3JOMV+ZWSSjWt4zY5G8YbSXR+ju vQjwqvEh0XZsYj6usCY5K2UoHGDE6dDRS2L+VmZADGe4WqHQdckL3WeYfbdrRF9n 1na0lw1dDgvcgW2+C/yOK/FOsgTk3Kvp -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:40 2025 by rpki-client