$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft File: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json) Hash identifier: 3UmuOr/lZiHtzafhhawgieE6OXb3iL4m61u95ptcH4w= Subject key identifier: 3F:2C:91:0D:E1:A6:7A:EB:D1:11:39:2F:3F:F7:5A:8B:93:09:AF:5B Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC Certificate issuer: /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC Certificate serial: 0763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft Manifest number: 075E Signing time: Thu 24 Apr 2025 21:23:07 +0000 Manifest this update: Thu 24 Apr 2025 21:23:06 +0000 Manifest next update: Thu 01 May 2025 21:23:06 +0000 Files and hashes: 1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: Xzq6B90DoedwPzC9B5KmzDl6G1wUiYGwITIv349fW88=) 2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: gqCE02CBOTTrdLIogzJpaYzWvwCHcIiO+EC46ysOtw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC Validity Not Before: Apr 24 21:23:06 2025 GMT Not After : May 1 21:23:06 2025 GMT Subject: CN=680aabbb-a5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8d:c2:b2:fb:b0:85:f1:f9:1d:74:ba:1f:2b: 50:e9:5c:e2:5e:f3:9c:ea:7f:d2:4e:00:18:b2:eb: 1b:90:8c:66:7e:3a:a3:32:ea:d6:2e:58:bc:d1:71: b5:83:5a:af:46:c1:74:d1:8a:05:7f:6d:bd:9c:e4: 30:0f:49:dc:49:5d:79:84:13:56:d7:16:04:72:18: 1b:dc:9d:7e:20:99:bf:e1:92:ca:bc:ec:2a:37:5b: 85:d5:9d:0b:c1:10:85:16:1f:88:53:3e:a4:af:91: e3:4f:81:71:3b:bf:1d:a5:e5:c7:bc:cb:af:df:88: f6:18:0d:7e:50:e4:db:3d:e9:86:45:7b:7a:e3:22: 10:e8:36:3d:38:38:cf:9f:b9:03:a4:8f:05:d6:11: 5d:a3:e7:ba:a3:73:60:ad:7b:43:36:2c:1b:7b:de: c8:55:9e:85:66:b7:be:56:f6:f1:4e:2f:0d:33:d6: f5:18:85:cd:3a:5c:e5:3e:49:58:e4:dc:30:39:7d: 74:2c:65:14:cc:73:9f:a2:2a:5e:73:0a:a1:f4:17: 2d:c5:ee:de:b0:52:f3:02:3a:a3:73:de:a2:15:ae: 31:85:b6:d6:07:18:c6:79:52:0f:4c:9e:59:a1:91: 71:f9:93:de:d8:d9:4a:d3:36:bd:93:0f:0d:18:79: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:91:0D:E1:A6:7A:EB:D1:11:39:2F:3F:F7:5A:8B:93:09:AF:5B X509v3 Authority Key Identifier: keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:b6:ca:9c:6f:88:29:22:b9:5f:0b:39:f7:b3:a2:ba:cb:16: 87:ef:e7:f4:35:c6:1d:38:c2:4e:99:29:6b:92:65:44:7d:53: 6a:2c:dc:20:6b:a8:7d:41:00:d1:a3:d0:14:53:c6:4e:46:e4: 0c:d3:d2:af:2e:34:17:fa:81:18:9b:5e:94:c2:26:7b:e5:1d: 53:18:b5:70:f5:e9:5d:ca:f9:8a:e1:4c:36:73:48:dc:85:d5: 95:11:2a:c1:3f:5f:fe:bd:32:de:7b:0b:36:1d:f5:9f:ff:46: aa:38:8d:e1:58:f6:0d:57:2d:55:17:35:10:7b:4e:bd:0d:88: 14:28:36:93:ca:7d:2c:f2:b2:15:87:70:cb:69:0c:65:e9:b8: 58:f7:e5:95:a0:8f:85:8d:36:dd:9f:70:1d:40:f3:58:a6:7f: 7c:9d:d7:44:32:8a:6c:2d:59:8f:2d:c6:3b:92:17:6a:00:b9: e5:99:d9:86:39:ff:eb:e8:dc:f1:89:a1:cd:a4:c5:58:70:d7: 10:56:84:f9:c4:fb:39:9a:6b:d1:e9:42:18:66:ea:9a:b6:b1: de:07:f4:fe:be:92:47:dc:74:08:6c:55:62:e1:74:78:db:70: 49:54:59:19:0c:75:64:1d:f6:0f:68:cb:fd:6e:f5:ef:49:be: b3:dd:d5:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERGMEMxMTAvBgNVBAUTKDhFMUI3MTg2ODY0MTc4NDhEOUQzRTYyMjYzQzZFMEQz MDRCRDM3RUMwHhcNMjUwNDI0MjEyMzA2WhcNMjUwNTAxMjEyMzA2WjAYMRYwFAYD VQQDEw02ODBhYWJiYi1hNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo3CsvuwhfH5HXS6HytQ6VziXvOc6n/STgAYsusbkIxmfjqjMurWLli80XG1 g1qvRsF00YoFf229nOQwD0ncSV15hBNW1xYEchgb3J1+IJm/4ZLKvOwqN1uF1Z0L wRCFFh+IUz6kr5HjT4FxO78dpeXHvMuv34j2GA1+UOTbPemGRXt64yIQ6DY9ODjP n7kDpI8F1hFdo+e6o3NgrXtDNiwbe97IVZ6FZre+VvbxTi8NM9b1GIXNOlzlPklY 5NwwOX10LGUUzHOfoipecwqh9Bctxe7esFLzAjqjc96iFa4xhbbWBxjGeVIPTJ5Z oZFx+ZPe2NlK0za9kw8NGHmtDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD8skQ3h pnrr0RE5Lz/3WouTCa9bMB8GA1UdIwQYMBaAFI4bcYaGQXhI2dPmImPG4NMEvTfs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REYwQy81QjE5MEUzMDE4 NDMxMUVCQjNBQTcxM0FDNEY5QUUwMi9qaHR4aG9aQmVFalowLVlpWThiZzB3UzlO LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2podHhob1pCZUVqWjAtWWlZOGJnMHdTOU4tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REYwQy81QjE5MEUzMDE4NDMxMUVCQjNBQTcxM0FDNEY5QUUwMi9qaHR4aG9aQmVF alowLVlpWThiZzB3UzlOLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZtsqcb4gpIrlfCzn3s6K6yxaH7+f0NcYdOMJOmSlrkmVEfVNqLNwg a6h9QQDRo9AUU8ZORuQM09KvLjQX+oEYm16UwiZ75R1TGLVw9eldyvmK4Uw2c0jc hdWVESrBP1/+vTLeews2HfWf/0aqOI3hWPYNVy1VFzUQe069DYgUKDaTyn0s8rIV h3DLaQxl6bhY9+WVoI+FjTbdn3AdQPNYpn98nddEMopsLVmPLcY7khdqALnlmdmG Of/r6NzxiaHNpMVYcNcQVoT5xPs5mmvR6UIYZuqatrHeB/T+vpJH3HQIbFVi4XR4 23BJVFkZDHVkHfYPaMv9bvXvSb6z3dWy -----END CERTIFICATE-----Generated at Sat Apr 26 15:27:24 2025 by rpki-client