$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: K7PqxHo/cFQzqh5XfT4ZfJtHyiHHKsvl84rqjhMQX54= Subject key identifier: 73:42:66:34:5E:5E:09:7E:97:F9:2A:40:18:40:B7:36:6B:9D:CC:63 Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 03 Signing time: Fri 25 Apr 2025 07:12:45 +0000 Manifest this update: Fri 25 Apr 2025 07:12:45 +0000 Manifest next update: Fri 02 May 2025 07:12:45 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: 25+62f0qde3gilAQG8EhZDMNUTZMRG14Hp5jFkF1WIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: Apr 25 07:12:45 2025 GMT Not After : May 2 07:12:45 2025 GMT Subject: CN=680b35ed-5438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5d:fe:92:c9:79:7e:27:d7:19:fb:be:f1:ca: cd:ac:67:d9:db:ec:9d:5b:cc:1c:dc:f8:01:39:82: f9:40:fa:68:cb:10:c0:2b:41:35:48:77:d1:ac:d4: 7f:a1:78:ce:5b:dd:94:c2:64:39:5d:46:18:59:c1: 8d:d3:34:9c:7f:8e:a8:df:9a:13:36:f5:12:d4:ad: 9a:74:0d:9f:3d:2a:ae:c8:3c:90:f5:15:56:e3:ac: b3:92:ff:08:0d:b3:3a:fe:14:59:90:18:46:f0:13: 7e:ef:b7:14:c8:2f:0b:02:f7:08:e8:89:2a:79:23: cd:ae:71:cd:f1:17:a5:29:7a:a1:75:36:c2:92:a1: f6:21:25:5b:05:d5:8c:6f:62:0c:b4:db:f4:4c:4e: bc:ea:8c:17:ba:e2:e2:40:91:fb:2c:33:88:af:b8: 06:f2:7c:1d:69:cf:c9:62:3a:85:a8:f7:c7:16:4e: 02:72:60:63:0a:49:8f:7d:28:89:10:e9:6a:a1:11: 3d:36:21:1c:1c:a6:cf:d1:47:32:a2:1e:01:ec:cf: c0:12:68:ff:2b:d0:89:ab:96:25:d7:34:c1:36:3b: ac:cd:80:82:12:77:63:38:44:8a:bb:fc:f3:b6:b9: 2d:89:3f:97:44:0d:91:91:25:a9:e9:b1:3e:1b:01: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:42:66:34:5E:5E:09:7E:97:F9:2A:40:18:40:B7:36:6B:9D:CC:63 X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ab:af:3f:07:92:86:41:20:76:27:23:6b:d7:95:0c:7c:de: e5:00:8e:1b:34:56:30:99:c4:85:63:46:76:3a:98:5b:c3:8c: 0f:b2:a6:1b:7b:d2:72:2d:51:e6:ac:56:04:67:f5:68:ae:61: 37:a3:0c:08:23:dc:fb:b3:5b:c3:d2:41:57:0d:a3:0d:ff:66: 21:eb:e7:eb:02:2d:fb:ac:44:44:43:79:49:3f:63:5e:8b:74: e0:9a:d3:d5:6f:32:00:27:cf:77:5e:30:f0:48:04:1c:5b:1b: c2:bd:81:de:86:ee:e8:77:3c:6c:42:4e:ab:b6:7e:ba:75:5f: e0:4a:90:fb:88:0c:b4:49:af:c5:b9:80:ef:fc:24:4d:f4:07: b3:c3:88:60:7c:fb:a5:82:50:3b:39:68:dd:aa:8b:b7:ae:f2: ad:0e:a2:6a:d4:ae:51:fe:ed:e4:a1:a2:21:d4:5c:54:af:87: aa:11:a1:2e:e0:a2:c4:7a:72:69:16:f2:77:9e:0f:01:3a:f0: 18:58:1b:15:06:b0:bc:80:3f:9f:0e:1a:ba:ed:7e:12:d2:78: e8:62:e8:2d:e4:f7:e7:a7:ad:fa:07:45:c4:e4:9f:b4:6d:2e: 9f:1e:e3:24:a1:15:4e:5a:ae:e0:18:88:e7:e3:d4:20:37:2d: 06:b5:c1:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTA0MjUwNzEyNDVaFw0yNTA1MDIwNzEyNDVaMBgxFjAUBgNV BAMTDTY4MGIzNWVkLTU0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpXf6SyXl+J9cZ+77xys2sZ9nb7J1bzBzc+AE5gvlA+mjLEMArQTVId9Gs1H+h eM5b3ZTCZDldRhhZwY3TNJx/jqjfmhM29RLUrZp0DZ89Kq7IPJD1FVbjrLOS/wgN szr+FFmQGEbwE37vtxTILwsC9wjoiSp5I82ucc3xF6UpeqF1NsKSofYhJVsF1Yxv Ygy02/RMTrzqjBe64uJAkfssM4ivuAbyfB1pz8liOoWo98cWTgJyYGMKSY99KIkQ 6WqhET02IRwcps/RRzKiHgHsz8ASaP8r0ImrliXXNME2O6zNgIISd2M4RIq7/PO2 uS2JP5dEDZGRJanpsT4bAaG9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc0JmNF5e CX6X+SpAGEC3NmudzGMwHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADyrrz8HkoZBIHYnI2vXlQx83uUAjhs0VjCZxIVjRnY6mFvDjA+ypht7 0nItUeasVgRn9WiuYTejDAgj3PuzW8PSQVcNow3/ZiHr5+sCLfusRERDeUk/Y16L dOCa09VvMgAnz3deMPBIBBxbG8K9gd6G7uh3PGxCTqu2frp1X+BKkPuIDLRJr8W5 gO/8JE30B7PDiGB8+6WCUDs5aN2qi7eu8q0OomrUrlH+7eShoiHUXFSvh6oRoS7g osR6cmkW8neeDwE68BhYGxUGsLyAP58OGrrtfhLSeOhi6C3k9+enrfoHRcTkn7Rt Lp8e4yShFU5aruAYiOfj1CA3LQa1wcM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:44 2025 by rpki-client