$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: XAOlz/8UAe3l2CQfqKlR7OKZDM63ld9DMfLJDVum8F0= Subject key identifier: D8:3A:4D:1C:95:E5:5E:6A:1B:09:68:F2:CC:E4:15:28:00:85:84:CD Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A48 Signing time: Thu 24 Apr 2025 16:21:47 +0000 Manifest this update: Thu 24 Apr 2025 16:21:47 +0000 Manifest next update: Thu 01 May 2025 16:21:47 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: zzv+bphMqVkhRrVOcK4cF0TMNLby260vmCrxJYyfLM8=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6738 (0x1a52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Apr 24 16:21:47 2025 GMT Not After : May 1 16:21:47 2025 GMT Subject: CN=680a651b-a51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:92:06:96:42:b8:96:ea:9e:5e:a0:e6:12: 96:2c:52:3d:fa:c1:99:71:cd:fd:0b:3b:37:95:05: 1b:af:59:3e:c4:9b:b1:21:bd:ee:72:7d:89:50:1c: 35:1e:6b:d6:bd:ad:ac:9c:fb:f5:ea:42:21:e6:e9: a0:4c:b9:1a:65:26:9a:40:ad:c8:0f:2d:db:1d:33: 7d:12:22:a1:01:89:00:09:24:a2:20:93:1c:f3:00: cf:fc:ba:73:44:0e:72:78:87:89:2a:06:54:38:88: ec:17:48:fa:8d:a0:01:4d:67:f9:a0:57:42:d7:25: 20:2c:cf:3a:6f:aa:56:20:04:a3:65:cb:f7:c0:3d: fe:ad:19:90:f5:aa:e4:b3:61:72:d4:4d:b3:1f:60: 0f:07:28:99:c7:bb:a9:6e:56:6a:90:fb:06:31:8c: b7:53:d4:53:8f:43:cf:fe:35:28:ad:d9:00:9f:fb: a1:ce:3d:12:2a:db:44:21:96:4a:9f:51:c9:6d:9b: cf:68:c3:67:74:ed:43:24:92:ca:06:4c:1e:fc:95: f4:62:0e:31:ee:fa:31:73:cf:38:92:98:db:6c:71: 37:86:99:3f:90:49:53:27:a0:2f:13:d8:79:ec:7c: be:e0:49:5c:e1:96:ae:5d:95:2a:41:cc:e9:1a:42: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:4D:1C:95:E5:5E:6A:1B:09:68:F2:CC:E4:15:28:00:85:84:CD X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5b:76:c7:fd:88:3c:14:8f:f6:4c:8c:89:16:e2:b7:b1:f2: 45:4a:3a:83:9f:32:7b:10:02:f0:6f:f9:de:5f:09:7e:d2:d3: df:88:d3:9a:db:03:b7:e1:06:0e:a7:09:d4:44:8d:9c:a4:c9: bf:b1:fb:38:a6:40:2f:a1:6e:67:2e:11:98:32:31:f4:d1:0e: a3:88:cb:62:42:a8:44:26:d4:3c:3c:3e:40:49:81:7a:3f:8e: c1:91:7d:42:d6:e8:c7:88:19:32:94:e2:05:ca:97:15:1c:7d: 85:f3:66:7f:23:88:4d:59:28:73:c8:73:13:4e:c3:28:fc:1a: f5:57:98:a3:c5:5b:b7:fe:00:92:b8:c2:4b:24:97:28:d8:ae: 9b:f5:0f:4b:03:2b:54:d7:17:5f:2f:e5:f8:f0:5a:5d:a0:60: 91:64:12:f7:45:37:4e:11:33:3f:cb:4b:10:d3:d8:83:93:e4: f7:da:34:83:99:b3:32:1e:c0:24:23:ac:6d:6b:06:84:bf:3e: f9:d9:8b:de:4b:da:25:48:15:0a:0f:9c:fa:67:2c:d1:35:ab: 16:16:bc:19:c2:56:dd:e9:9b:76:fa:7c:b8:0e:fe:48:96:d2: ac:9e:da:27:d6:ee:29:4d:a7:44:7b:8e:fa:f0:9a:00:21:c7: d2:08:44:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwNDI0MTYyMTQ3WhcNMjUwNTAxMTYyMTQ3WjAYMRYwFAYD VQQDEw02ODBhNjUxYi1hNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fSSBpZCuJbqnl6g5hKWLFI9+sGZcc39Czs3lQUbr1k+xJuxIb3ucn2JUBw1 HmvWva2snPv16kIh5umgTLkaZSaaQK3IDy3bHTN9EiKhAYkACSSiIJMc8wDP/Lpz RA5yeIeJKgZUOIjsF0j6jaABTWf5oFdC1yUgLM86b6pWIASjZcv3wD3+rRmQ9ark s2Fy1E2zH2APByiZx7upblZqkPsGMYy3U9RTj0PP/jUordkAn/uhzj0SKttEIZZK n1HJbZvPaMNndO1DJJLKBkwe/JX0Yg4x7voxc884kpjbbHE3hpk/kElTJ6AvE9h5 7Hy+4Elc4ZauXZUqQczpGkKNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNg6TRyV 5V5qGwlo8szkFSgAhYTNMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChW3bH/Yg8FI/2TIyJFuK3sfJFSjqDnzJ7EALwb/neXwl+0tPfiNOa 2wO34QYOpwnURI2cpMm/sfs4pkAvoW5nLhGYMjH00Q6jiMtiQqhEJtQ8PD5ASYF6 P47BkX1C1ujHiBkylOIFypcVHH2F82Z/I4hNWShzyHMTTsMo/Br1V5ijxVu3/gCS uMJLJJco2K6b9Q9LAytU1xdfL+X48FpdoGCRZBL3RTdOETM/y0sQ09iDk+T32jSD mbMyHsAkI6xtawaEvz752YveS9olSBUKD5z6ZyzRNasWFrwZwlbd6Zt2+ny4Dv5I ltKsnton1u4pTadEe4768JoAIcfSCERi -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:41 2025 by rpki-client