$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft File: jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json) Hash identifier: CAyH3v2D671QwM4on84vfEURBjViOTkUaSy+771PTkA= Subject key identifier: D4:76:26:3B:59:D7:39:22:C9:59:C6:98:6D:94:3A:83:15:E8:8C:35 Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 Certificate issuer: /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Certificate serial: 1BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft Manifest number: 1BB6 Signing time: Thu 24 Apr 2025 16:14:56 +0000 Manifest this update: Thu 24 Apr 2025 16:14:56 +0000 Manifest next update: Thu 01 May 2025 16:14:56 +0000 Files and hashes: 1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: icDmW1iSjPEPtSgFA0JoLpHvh6jqe85o7e01elts0Rg=) 2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: adZvd/ecrn/69jFBmaF8532OMU/h1NSuA6iJnPKo2nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7104 (0x1bc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87 Validity Not Before: Apr 24 16:14:56 2025 GMT Not After : May 1 16:14:56 2025 GMT Subject: CN=680a6380-5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:24:4a:33:90:12:72:dd:9f:3e:c3:42:e4: 68:6e:eb:93:09:06:3d:c9:dd:41:4a:f2:59:0e:7b: 09:e2:d2:bb:b1:f3:0a:1e:9c:96:af:05:d3:b3:a6: 9c:09:9c:4b:35:e7:7e:92:58:1f:85:67:23:92:77: f6:2d:c4:8e:62:a3:2c:83:78:78:b9:06:66:f4:77: 89:8c:a5:f7:9e:58:ac:23:fe:cf:98:d3:c6:fe:e2: 1d:c3:c0:39:f0:ef:97:c1:81:aa:91:f1:4a:96:d7: d6:25:58:83:0c:71:69:85:d2:22:d4:d9:ad:e3:fd: 12:1a:d6:58:e6:83:84:ff:72:08:87:a0:f2:56:36: 98:5f:89:ad:44:dc:9d:d3:b7:48:4f:1c:0c:2a:d4: 7c:f1:bf:50:db:8d:6a:f2:8f:f0:87:1a:f5:3f:eb: 3b:3c:57:f0:aa:0a:5b:3c:34:9e:08:c8:fc:1a:8b: e0:de:5d:f4:0d:6e:34:d3:02:24:52:f1:7e:73:1f: 3c:0a:7a:1d:73:90:e5:22:80:cb:f6:f1:d9:0c:38: f7:5a:de:d9:f0:1a:af:67:42:8c:e6:5b:9a:16:f9: 57:66:ec:e0:14:33:c2:72:4c:4d:4f:14:81:de:23: 9c:b5:1b:bf:da:7f:cf:7d:5c:e6:c7:95:da:69:16: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:26:3B:59:D7:39:22:C9:59:C6:98:6D:94:3A:83:15:E8:8C:35 X509v3 Authority Key Identifier: keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:05:bb:62:d4:54:8f:73:fd:b4:41:a5:dc:c4:de:d0:f2:5a: 62:ea:ab:53:41:b0:dd:a1:df:46:22:24:1e:04:92:b8:a9:eb: ef:08:f9:bc:9b:18:29:e5:8a:45:0c:c8:ab:dc:10:70:38:2a: 09:cd:4f:ef:36:c3:2f:19:7c:2a:ba:71:12:d9:90:e4:e1:86: 3a:dc:24:bd:55:f4:ad:95:6d:0f:bc:8d:3e:1a:72:40:a8:93: 6d:08:30:5c:f0:98:ec:f9:e2:f7:cd:8a:d9:7f:c5:2d:5a:2e: 45:a0:56:0e:91:55:ed:0f:c6:61:fa:23:0f:35:89:20:10:52: c0:ac:6d:cd:98:48:ef:9c:5f:d0:3e:4f:24:71:b0:91:78:c1: 9e:d8:6d:20:3a:5c:01:9f:a3:2c:fa:f6:ed:8c:76:95:19:b0: ef:50:1c:ac:f2:ff:9c:fd:67:6a:66:41:c8:d3:dd:a0:d3:fe: 64:5e:d5:69:bf:7c:f9:35:11:ee:e9:8d:d0:03:2a:75:6e:27: 6d:2a:2d:3d:c9:72:27:db:ed:1a:1d:5e:2f:b6:37:9d:40:f4: 86:8f:fd:cb:ad:fc:0a:16:94:d8:14:d3:40:b3:ec:c8:e9:4b: 7b:3f:19:bd:9e:ff:ac:17:b9:26:7f:9d:b3:59:f0:29:17:9e: 6c:df:f4:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2 M0Q4QTlEODcwHhcNMjUwNDI0MTYxNDU2WhcNMjUwNTAxMTYxNDU2WjAYMRYwFAYD VQQDEw02ODBhNjM4MC01MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvD4kSjOQEnLdnz7DQuRobuuTCQY9yd1BSvJZDnsJ4tK7sfMKHpyWrwXTs6ac CZxLNed+klgfhWcjknf2LcSOYqMsg3h4uQZm9HeJjKX3nlisI/7PmNPG/uIdw8A5 8O+XwYGqkfFKltfWJViDDHFphdIi1Nmt4/0SGtZY5oOE/3IIh6DyVjaYX4mtRNyd 07dITxwMKtR88b9Q241q8o/whxr1P+s7PFfwqgpbPDSeCMj8Govg3l30DW400wIk UvF+cx88Cnodc5DlIoDL9vHZDDj3Wt7Z8BqvZ0KM5luaFvlXZuzgFDPCckxNTxSB 3iOctRu/2n/PfVzmx5XaaRbPawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR2JjtZ 1zkiyVnGmG2UOoMV6Iw1MB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4 QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB N2xwREl3ZXpReXhqMktuWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Bbti1FSPc/20QaXcxN7Q8lpi6qtTQbDdod9GIiQeBJK4qevvCPm8 mxgp5YpFDMir3BBwOCoJzU/vNsMvGXwqunES2ZDk4YY63CS9VfStlW0PvI0+GnJA qJNtCDBc8Jjs+eL3zYrZf8UtWi5FoFYOkVXtD8Zh+iMPNYkgEFLArG3NmEjvnF/Q Pk8kcbCReMGe2G0gOlwBn6Ms+vbtjHaVGbDvUBys8v+c/WdqZkHI092g0/5kXtVp v3z5NRHu6Y3QAyp1bidtKi09yXIn2+0aHV4vtjedQPSGj/3LrfwKFpTYFNNAs+zI 6Ut7Pxm9nv+sF7kmf52zWfApF55s3/SW -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:09 2025 by rpki-client