$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft File: jprppXQf-n7Wju-jrYsFjQHMJRk.mft (raw, json) Hash identifier: iRUwnPuDIJlXgoaajrNjgeMWjN2pA9l6oLdtMeE1jss= Subject key identifier: 56:5F:66:1A:78:28:B9:6A:5B:7C:78:03:C7:52:A7:7A:41:C1:7A:6F Authority key identifier: 8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19 Certificate issuer: /CN=A91B0C2E/serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519 Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft Manifest number: 05CA Signing time: Thu 24 Apr 2025 22:48:22 +0000 Manifest this update: Thu 24 Apr 2025 22:48:22 +0000 Manifest next update: Thu 01 May 2025 22:48:22 +0000 Files and hashes: 1: jprppXQf-n7Wju-jrYsFjQHMJRk.crl (hash: cptVaa1MaP37307uD6P8jpuNbf0wKfSyfCN0SrlD2ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0C2E, serialNumber=8E9AE9A5741FFA7ED68EEFA3AD8B058D01CC2519 Validity Not Before: Apr 24 22:48:22 2025 GMT Not After : May 1 22:48:22 2025 GMT Subject: CN=680abfb6-6af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:cb:7f:f1:dd:a0:08:8d:30:e0:4f:c2:64: ca:4f:41:31:06:30:f1:be:fb:be:96:58:01:3c:03: 8c:a9:af:15:2c:74:0e:1e:20:71:19:5b:52:53:82: a3:70:a3:38:20:88:3d:03:c7:24:1f:02:d3:8f:7f: e1:19:6c:6c:9c:13:c2:da:33:cf:6c:28:b5:a3:62: ae:fa:17:48:ef:f4:5a:c4:13:e2:81:70:40:05:ce: 69:6a:e6:16:7d:99:6c:25:cc:be:d8:f6:39:e4:7d: 55:07:86:13:28:4c:96:26:99:ee:1d:92:fd:f6:66: c7:9c:87:8a:86:9c:fa:6a:21:e1:18:7c:0a:23:18: 0e:26:c0:04:88:bc:c1:1e:68:3b:45:26:99:08:c6: 8b:ff:24:78:50:71:ac:87:c1:4b:6a:d4:85:4b:ee: 1c:3d:25:ed:40:7d:23:9c:e4:06:76:37:e4:2b:7c: 85:fe:cf:75:89:89:15:d9:c6:81:d9:a7:db:71:5e: a4:d6:0a:7f:04:6f:c1:b5:da:b2:58:15:2c:d3:13: 92:68:01:f8:3a:26:09:6e:2c:9a:23:7f:8f:61:9e: 04:dc:c3:29:f8:8b:e1:66:9b:77:9c:57:6a:f9:2d: d9:00:bf:c0:dd:aa:1c:24:48:da:d7:c3:cf:8a:4f: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5F:66:1A:78:28:B9:6A:5B:7C:78:03:C7:52:A7:7A:41:C1:7A:6F X509v3 Authority Key Identifier: keyid:8E:9A:E9:A5:74:1F:FA:7E:D6:8E:EF:A3:AD:8B:05:8D:01:CC:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jprppXQf-n7Wju-jrYsFjQHMJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0C2E/A7168368B48711EB9723FD33C4F9AE02/jprppXQf-n7Wju-jrYsFjQHMJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:dc:89:66:bb:a3:11:4c:56:88:65:98:5b:5c:f8:8a:6a:f4: 97:32:0e:42:c5:c3:3f:b2:4e:74:5f:2e:19:c2:7c:9f:1f:6c: da:be:9e:25:44:58:85:1b:2d:17:57:47:28:27:1a:69:e0:88: 7a:39:cf:f1:6c:8f:28:1d:25:79:ac:5e:aa:31:92:5b:e8:23: 18:60:55:7a:43:e6:87:b8:d3:73:7a:da:07:18:9c:a4:02:4a: c5:ab:14:48:30:80:67:4e:cd:11:42:0a:72:48:36:77:6f:d7: b1:54:9a:cd:e1:58:5f:61:55:aa:d9:58:ae:08:dd:07:6c:e0: ce:2f:dd:2f:50:5b:a0:5b:94:44:9a:23:d9:75:41:d9:87:38: c0:54:5d:59:8a:f3:01:3a:2d:39:ad:f7:35:a7:ff:b3:42:2b: d6:91:32:01:d4:62:6e:1f:1d:0f:31:af:25:0e:1c:71:eb:48: 1c:77:86:7e:53:85:d5:40:6e:ac:8f:29:7a:2c:8c:67:33:dd: 1a:9c:0a:af:f1:08:6a:84:37:48:3b:7c:bb:18:da:5f:46:79: ff:e9:a1:b9:03:ec:07:ed:e7:38:4d:f8:10:df:0d:86:70:57: d8:2b:d2:f6:16:6b:a8:f7:0d:0e:c5:92:a8:ac:8f:72:f0:3d: 9e:a3:86:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBDMkUxMTAvBgNVBAUTKDhFOUFFOUE1NzQxRkZBN0VENjhFRUZBM0FEOEIwNThE MDFDQzI1MTkwHhcNMjUwNDI0MjI0ODIyWhcNMjUwNTAxMjI0ODIyWjAYMRYwFAYD VQQDEw02ODBhYmZiNi02YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUfLf/HdoAiNMOBPwmTKT0ExBjDxvvu+llgBPAOMqa8VLHQOHiBxGVtSU4Kj cKM4IIg9A8ckHwLTj3/hGWxsnBPC2jPPbCi1o2Ku+hdI7/RaxBPigXBABc5pauYW fZlsJcy+2PY55H1VB4YTKEyWJpnuHZL99mbHnIeKhpz6aiHhGHwKIxgOJsAEiLzB Hmg7RSaZCMaL/yR4UHGsh8FLatSFS+4cPSXtQH0jnOQGdjfkK3yF/s91iYkV2caB 2afbcV6k1gp/BG/BtdqyWBUs0xOSaAH4OiYJbiyaI3+PYZ4E3MMp+IvhZpt3nFdq +S3ZAL/A3aocJEja18PPik917wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZfZhp4 KLlqW3x4A8dSp3pBwXpvMB8GA1UdIwQYMBaAFI6a6aV0H/p+1o7vo62LBY0BzCUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEMyRS9BNzE2ODM2OEI0 ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1uN1dqdS1qcllzRmpRSE1K UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pwcnBwWFFmLW43V2p1LWpyWXNGalFITUpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEMyRS9BNzE2ODM2OEI0ODcxMUVCOTcyM0ZEMzNDNEY5QUUwMi9qcHJwcFhRZi1u N1dqdS1qcllzRmpRSE1KUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR3Ilmu6MRTFaIZZhbXPiKavSXMg5CxcM/sk50Xy4ZwnyfH2zavp4l RFiFGy0XV0coJxpp4Ih6Oc/xbI8oHSV5rF6qMZJb6CMYYFV6Q+aHuNNzetoHGJyk AkrFqxRIMIBnTs0RQgpySDZ3b9exVJrN4VhfYVWq2ViuCN0HbODOL90vUFugW5RE miPZdUHZhzjAVF1ZivMBOi05rfc1p/+zQivWkTIB1GJuHx0PMa8lDhxx60gcd4Z+ U4XVQG6sjyl6LIxnM90anAqv8QhqhDdIO3y7GNpfRnn/6aG5A+wH7ec4TfgQ3w2G cFfYK9L2Fmuo9w0OxZKorI9y8D2eo4Yb -----END CERTIFICATE-----Generated at Sat Apr 26 12:18:57 2025 by rpki-client