$ rpki-client -vvf rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft File: JlnO0VJ9LKvYssUwdezNlO1x_pg.mft (raw, json) Hash identifier: N3t6zhxX2Cv9lmLBArge8Al0KsSpbsAIDLlTCpx7+JQ= Subject key identifier: E9:50:86:16:59:09:A0:EB:13:E2:B7:73:BD:4A:4F:0D:D9:FE:79:37 Authority key identifier: 26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 Certificate issuer: /CN=A9197227/serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft Manifest number: 0679 Signing time: Thu 24 Apr 2025 22:10:13 +0000 Manifest this update: Thu 24 Apr 2025 22:10:12 +0000 Manifest next update: Thu 01 May 2025 22:10:12 +0000 Files and hashes: 1: JlnO0VJ9LKvYssUwdezNlO1x_pg.crl (hash: hLz1q8KUMdXgNYzmicIsTDbkyi72OATNVV8tlD7zVFs=) 2: AE2B714A72E911EEA3EFD34AC4F9AE02.roa (hash: qqj7UCGnWQlkIFv4nnOfekkdwebohncfHRfjEEZBUBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197227, serialNumber=2659CED1527D2CABD8B2C53075ECCD94ED71FE98 Validity Not Before: Apr 24 22:10:12 2025 GMT Not After : May 1 22:10:12 2025 GMT Subject: CN=680ab6c5-0f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:64:05:11:1c:6e:a3:c2:d6:87:f3:75:06: c5:45:84:ca:85:f5:f4:eb:6f:61:d0:42:18:b5:52: f2:07:a5:48:46:a3:16:29:34:d1:76:85:01:c3:b3: d9:c7:46:2b:33:5c:ab:e1:e5:99:95:65:22:4d:b9: 5b:5b:9c:29:30:3d:50:a1:cd:3c:76:0b:f2:f2:f7: c3:6b:d3:5b:6b:b8:1e:5f:cf:81:1d:e1:52:d2:04: 81:fa:02:1f:a7:fd:11:36:33:d0:ab:96:ea:34:52: 71:9a:ab:b4:92:e0:fd:b2:59:8a:b7:0d:69:2f:6d: bf:dd:2b:47:51:fc:6d:d3:4c:9a:0a:7d:ec:f8:c7: ef:b8:05:05:cf:8d:fe:c7:62:e5:7f:a9:c9:fe:5e: 14:26:bf:07:40:13:29:09:13:1e:23:40:75:49:58: e5:f6:4a:08:e0:52:98:55:71:86:22:d9:66:1c:c1: 1f:38:0b:b1:01:d6:79:ae:9c:66:f4:93:88:2b:14: 6f:01:61:ba:cb:99:1d:cf:83:63:ea:2d:0d:be:c4: 8f:d9:2f:de:aa:aa:8a:bc:69:ef:0a:7e:8c:9c:49: 9b:4d:6a:05:e2:b0:eb:41:60:f9:11:6e:85:e0:c3: 35:c8:58:5a:7d:70:34:21:00:a1:15:51:d9:34:96: d4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:50:86:16:59:09:A0:EB:13:E2:B7:73:BD:4A:4F:0D:D9:FE:79:37 X509v3 Authority Key Identifier: keyid:26:59:CE:D1:52:7D:2C:AB:D8:B2:C5:30:75:EC:CD:94:ED:71:FE:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlnO0VJ9LKvYssUwdezNlO1x_pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197227/4FCF568E7B0711EB9AF84384C4F9AE02/JlnO0VJ9LKvYssUwdezNlO1x_pg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f0:96:5b:3c:d2:98:ad:6d:3a:30:3f:3d:fe:16:37:4f:aa: 14:74:9e:b1:67:46:82:5a:71:ee:a5:9f:fb:b7:e4:ce:ae:65: 27:45:3f:c8:27:d1:0f:0d:0c:52:0a:5b:0d:d2:07:96:c0:78: 7d:4d:44:d8:2b:90:db:b4:dc:ea:dd:f3:92:8b:1a:70:3b:ca: 55:0b:65:ea:e6:74:52:79:d6:12:bf:14:6c:ca:4c:68:f5:ee: 1d:f4:26:c2:70:0a:d8:a9:0f:07:9d:63:5a:bc:bc:09:03:91: a6:23:97:0a:e5:ce:8f:c3:29:9a:72:8e:7c:ea:cf:9b:32:ff: ba:a4:c1:5f:82:21:dd:18:0e:02:45:dd:ea:2a:05:5f:92:e8: 15:7d:14:b4:d5:f5:b5:27:02:b5:1d:48:ca:d9:d1:0f:bf:e2: 32:f9:93:4c:7d:e4:e8:70:df:07:67:2a:5a:df:a5:4d:b7:23: fb:ac:c8:06:b9:85:b9:77:ee:08:79:2a:60:b4:27:51:3a:0f: b3:dd:07:be:81:bb:b7:b9:fe:60:8c:57:f9:85:62:47:96:bf: 5f:1c:b1:87:d9:15:f2:db:d3:73:a9:58:80:8c:2f:26:9a:d6: 76:cd:ff:8a:95:20:f8:b2:3e:11:a9:e3:f1:90:4c:78:3c:10: 71:c2:8f:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMjcxMTAvBgNVBAUTKDI2NTlDRUQxNTI3RDJDQUJEOEIyQzUzMDc1RUNDRDk0 RUQ3MUZFOTgwHhcNMjUwNDI0MjIxMDEyWhcNMjUwNTAxMjIxMDEyWjAYMRYwFAYD VQQDEw02ODBhYjZjNS0wZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1JkBREcbqPC1ofzdQbFRYTKhfX0629h0EIYtVLyB6VIRqMWKTTRdoUBw7PZ x0YrM1yr4eWZlWUiTblbW5wpMD1Qoc08dgvy8vfDa9Nba7geX8+BHeFS0gSB+gIf p/0RNjPQq5bqNFJxmqu0kuD9slmKtw1pL22/3StHUfxt00yaCn3s+MfvuAUFz43+ x2Llf6nJ/l4UJr8HQBMpCRMeI0B1SVjl9koI4FKYVXGGItlmHMEfOAuxAdZ5rpxm 9JOIKxRvAWG6y5kdz4Nj6i0NvsSP2S/eqqqKvGnvCn6MnEmbTWoF4rDrQWD5EW6F 4MM1yFhafXA0IQChFVHZNJbU/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlQhhZZ CaDrE+K3c71KTw3Z/nk3MB8GA1UdIwQYMBaAFCZZztFSfSyr2LLFMHXszZTtcf6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIyNy80RkNGNTY4RTdC MDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxLdllzc1V3ZGV6TmxPMXhf cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psbk8wVko5TEt2WXNzVXdkZXpObE8xeF9wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIyNy80RkNGNTY4RTdCMDcxMUVCOUFGODQzODRDNEY5QUUwMi9KbG5PMFZKOUxL dllzc1V3ZGV6TmxPMXhfcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz8JZbPNKYrW06MD89/hY3T6oUdJ6xZ0aCWnHupZ/7t+TOrmUnRT/I J9EPDQxSClsN0geWwHh9TUTYK5DbtNzq3fOSixpwO8pVC2Xq5nRSedYSvxRsykxo 9e4d9CbCcArYqQ8HnWNavLwJA5GmI5cK5c6Pwymaco586s+bMv+6pMFfgiHdGA4C Rd3qKgVfkugVfRS01fW1JwK1HUjK2dEPv+Iy+ZNMfeTocN8HZypa36VNtyP7rMgG uYW5d+4IeSpgtCdROg+z3Qe+gbu3uf5gjFf5hWJHlr9fHLGH2RXy29NzqViAjC8m mtZ2zf+KlSD4sj4RqePxkEx4PBBxwo/I -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:12 2025 by rpki-client