$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft File: jwvqPZb8ji7R6MaDcEdpRWnu484.mft (raw, json) Hash identifier: +BGt6yP8reOMzOztg4wQe8EgMLFIuj0/S/6wuEF3G5g= Subject key identifier: 43:B8:EF:AD:43:D1:A2:98:C7:F3:68:21:84:35:63:74:14:11:C2:62 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft Manifest number: 01EE Signing time: Fri 25 Apr 2025 01:54:01 +0000 Manifest this update: Fri 25 Apr 2025 01:54:00 +0000 Manifest next update: Fri 02 May 2025 01:54:00 +0000 Files and hashes: 1: jwvqPZb8ji7R6MaDcEdpRWnu484.crl (hash: VN19k8W/PSVyVSUMhmkrN5CnMey2kSksSjg2UtKmEw8=) 2: 99E52804462E11ED90035452C4F9AE02.roa (hash: mhhqfIxRoBjhuINkZ3XIMhFtJRPA+gdmIPhSIee7DFc=) 3: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (hash: gcq2OURWYuZ9mt7r/ew2O7bw4Is8Oj5yrAJBkVF7NPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Apr 25 01:54:00 2025 GMT Not After : May 2 01:54:00 2025 GMT Subject: CN=680aeb38-0502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:ff:70:5a:f9:ea:68:06:c3:95:39:f5:ba: e1:12:92:c1:56:fd:4d:ad:56:85:67:f8:7f:1c:19: 01:9b:81:ee:0a:1a:f1:f5:1e:62:ee:44:32:93:1b: 6d:ca:40:39:94:9c:89:e4:88:32:66:c2:a3:dd:da: 81:f9:55:a0:8c:da:d8:77:5d:47:d9:df:4e:4b:d5: e7:69:14:bc:a4:fb:8d:51:6f:7f:d6:89:57:ae:9d: 4a:f0:8d:a6:a4:f2:a6:9d:f7:1c:f6:7a:9e:05:b3: a3:8a:b7:cb:bb:e5:8e:a5:40:6f:58:bb:fd:e7:85: fd:4c:5b:2b:d3:b9:55:1d:84:bb:59:ba:80:8e:1e: 72:01:f8:18:c2:bb:5b:3b:1b:0c:b4:18:d5:7a:d4: c8:0e:ad:5e:ec:9c:49:0e:a0:23:b3:2b:fe:30:8a: b0:5e:20:94:38:47:89:37:29:b5:be:a1:3c:dd:4e: 3c:ac:8e:17:67:a4:db:7a:7b:1c:0c:b2:4d:48:1a: fe:7f:34:59:46:8e:52:99:4b:9b:15:1a:73:9e:a2: 49:ec:58:46:b4:ee:9a:75:d6:c8:6c:fc:77:75:d7: 73:9f:df:ef:96:36:36:fd:93:ff:54:d8:57:00:81: 7c:5d:27:3b:a9:59:fa:dd:2d:75:df:33:26:5b:6e: 81:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B8:EF:AD:43:D1:A2:98:C7:F3:68:21:84:35:63:74:14:11:C2:62 X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cd:cc:db:f4:cb:15:62:c3:41:0f:12:fd:ad:af:24:f2:d2: 6f:8e:d8:aa:e1:a1:d1:d9:b2:bf:45:3f:00:6a:78:c3:19:fa: 15:5b:bc:a9:93:36:f7:ca:cc:c9:9e:c4:85:b7:9f:80:83:a1: 50:0f:11:b0:f1:f3:81:ed:5b:c7:c2:db:21:14:72:43:86:91: 0d:a4:ad:e3:13:72:d7:a6:e6:4d:68:47:b9:6b:4a:89:17:1c: 49:19:04:93:36:e2:2e:73:78:05:ea:93:44:b7:09:38:c6:6a: 21:1e:cf:97:10:53:5c:74:64:00:d5:97:de:47:e3:7e:53:4d: e7:ab:6c:4f:e8:9e:b1:b3:66:b5:95:5b:c9:62:ef:36:5a:be: bb:40:f4:25:80:b8:33:54:10:11:ee:07:15:c2:23:e2:83:38: c0:dc:35:0a:93:1f:aa:38:ce:fa:4f:a3:26:a7:a4:57:d5:d6: 4a:f3:bb:45:d8:1b:ae:4c:f9:85:af:08:6c:25:72:c8:ff:a4: b3:c8:1c:6b:94:5d:99:ae:89:d6:76:07:eb:26:29:43:44:e8: 1a:29:83:bd:04:17:b3:07:87:14:6b:4a:f4:e7:34:4b:47:3c: 04:a1:6d:89:fb:ed:79:97:a6:88:20:98:84:13:c0:82:cc:41: 54:64:f8:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjUwNDI1MDE1NDAwWhcNMjUwNTAyMDE1NDAwWjAYMRYwFAYD VQQDEw02ODBhZWIzOC0wNTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6j/cFr56mgGw5U59brhEpLBVv1NrVaFZ/h/HBkBm4HuChrx9R5i7kQykxtt ykA5lJyJ5IgyZsKj3dqB+VWgjNrYd11H2d9OS9XnaRS8pPuNUW9/1olXrp1K8I2m pPKmnfcc9nqeBbOjirfLu+WOpUBvWLv954X9TFsr07lVHYS7WbqAjh5yAfgYwrtb OxsMtBjVetTIDq1e7JxJDqAjsyv+MIqwXiCUOEeJNym1vqE83U48rI4XZ6Tbensc DLJNSBr+fzRZRo5SmUubFRpznqJJ7FhGtO6addbIbPx3dddzn9/vljY2/ZP/VNhX AIF8XSc7qVn63S113zMmW26B8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO4761D 0aKYx/NoIYQ1Y3QUEcJiMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9EQTIyNDBFNjQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGpp N1I2TWFEY0VkcFJXbnU0ODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArzczb9MsVYsNBDxL9ra8k8tJvjtiq4aHR2bK/RT8AanjDGfoVW7yp kzb3yszJnsSFt5+Ag6FQDxGw8fOB7VvHwtshFHJDhpENpK3jE3LXpuZNaEe5a0qJ FxxJGQSTNuIuc3gF6pNEtwk4xmohHs+XEFNcdGQA1ZfeR+N+U03nq2xP6J6xs2a1 lVvJYu82Wr67QPQlgLgzVBAR7gcVwiPigzjA3DUKkx+qOM76T6Mmp6RX1dZK87tF 2BuuTPmFrwhsJXLI/6SzyBxrlF2ZronWdgfrJilDROgaKYO9BBezB4cUa0r05zRL RzwEoW2J++15l6aIIJiEE8CCzEFUZPii -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:07 2025 by rpki-client