$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: SZUPxDAihnZwde/Ol0SJZVuAXUVv/OIJSPT6P2Bl2fA= Subject key identifier: B8:9E:1A:A6:F8:4B:41:35:EE:21:F4:D3:4C:94:77:A9:A1:5B:C9:F7 Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 073F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 0738 Signing time: Thu 24 Apr 2025 21:31:52 +0000 Manifest this update: Thu 24 Apr 2025 21:31:51 +0000 Manifest next update: Thu 01 May 2025 21:31:51 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: A1yrZ1rgsBulkjn8kgcrlMqEqk0V0htWf/pviInIV68=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1855 (0x73f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Apr 24 21:31:51 2025 GMT Not After : May 1 21:31:51 2025 GMT Subject: CN=680aadc7-b84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:9c:ec:96:02:f2:1f:a0:79:87:a6:85:00: fd:d9:07:62:bc:94:dd:43:a9:b3:10:ed:13:72:06: f8:3e:6c:9a:92:f6:4f:b0:a7:87:8b:68:6c:3d:11: 49:11:9e:3f:a8:62:12:9e:0b:f7:e7:4a:f7:e4:bc: 1c:c7:63:39:c4:8c:39:48:a2:04:11:ab:d7:32:3b: e5:c4:53:17:78:9d:34:0c:c6:88:05:1d:e1:28:32: be:0d:a8:97:29:7a:33:97:a3:c2:14:3c:f3:6f:12: 0f:31:76:14:31:af:04:34:3d:56:4e:2b:c7:0a:ea: 61:b0:81:fd:e0:7e:62:d4:9b:af:26:eb:49:64:5b: c1:b0:03:a0:7b:60:2e:3f:7f:e0:46:b3:6b:8d:05: 2f:0e:31:20:c2:f6:3a:d9:3a:bb:e0:cc:cb:40:43: 3e:3e:96:51:b6:36:9a:ec:1d:cc:8e:06:41:e2:df: 20:01:d4:c0:fd:97:c1:90:a3:2e:ec:90:96:05:99: c6:22:b7:ef:2e:8f:4c:4d:95:c3:7c:be:b0:65:d2: 41:fc:c0:87:be:38:2c:c3:7a:37:7b:5d:fd:21:fd: c1:5c:87:1e:a9:bd:de:e8:54:54:8c:fa:64:20:29: cf:87:c2:53:43:c3:6f:e0:06:1c:b5:c6:ea:e3:0c: d6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:1A:A6:F8:4B:41:35:EE:21:F4:D3:4C:94:77:A9:A1:5B:C9:F7 X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:ef:92:49:62:39:ca:6c:d0:4c:e3:ee:1f:95:b5:54:42: 97:6e:3e:ff:d9:4a:df:d3:de:24:7e:d9:0d:98:59:f4:bd:74: bd:46:a6:1d:67:c6:c4:5a:3e:7b:3b:f4:0e:f0:41:77:03:55: 3f:1b:eb:93:1c:ea:43:50:48:3b:51:a7:ef:d2:0e:da:7f:f3: 07:00:52:7b:72:2b:1e:ee:32:97:de:68:c6:6b:6f:a4:8a:15: 94:fb:84:29:8b:25:39:d8:27:8a:98:0e:f5:52:17:22:f2:bf: a3:20:85:d5:6b:d2:bc:39:02:70:89:bf:67:58:e1:d5:4d:a5: fc:16:30:3e:06:47:cd:1a:df:ab:1f:34:e2:de:57:55:76:0a: dc:74:ba:31:4a:68:30:14:40:96:64:6b:57:a0:e8:53:15:d1: 1b:99:bc:88:99:df:aa:1c:4c:40:47:5c:21:60:9d:a0:af:52: c5:3b:7c:ee:9f:11:2e:28:31:56:28:37:a9:4d:af:68:db:9a: 52:d2:08:61:a0:da:b2:60:6a:8c:2e:6e:dc:a0:50:14:7b:d4: 55:e4:d3:ed:35:e6:b4:38:3d:16:e5:33:0c:f4:d2:0d:dc:22: 1b:af:61:4e:bb:ea:31:0d:39:3c:c0:28:d8:b3:89:76:38:05: cd:25:7a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjUwNDI0MjEzMTUxWhcNMjUwNTAxMjEzMTUxWjAYMRYwFAYD VQQDEw02ODBhYWRjNy1iODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp+c7JYC8h+geYemhQD92QdivJTdQ6mzEO0Tcgb4PmyakvZPsKeHi2hsPRFJ EZ4/qGISngv350r35Lwcx2M5xIw5SKIEEavXMjvlxFMXeJ00DMaIBR3hKDK+DaiX KXozl6PCFDzzbxIPMXYUMa8END1WTivHCuphsIH94H5i1JuvJutJZFvBsAOge2Au P3/gRrNrjQUvDjEgwvY62Tq74MzLQEM+PpZRtjaa7B3MjgZB4t8gAdTA/ZfBkKMu 7JCWBZnGIrfvLo9MTZXDfL6wZdJB/MCHvjgsw3o3e139If3BXIceqb3e6FRUjPpk ICnPh8JTQ8Nv4AYctcbq4wzW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLieGqb4 S0E17iH000yUd6mhW8n3MB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLu+SSWI5ymzQTOPuH5W1VEKXbj7/2Urf094kftkNmFn0vXS9RqYd Z8bEWj57O/QO8EF3A1U/G+uTHOpDUEg7Uafv0g7af/MHAFJ7cise7jKX3mjGa2+k ihWU+4QpiyU52CeKmA71Uhci8r+jIIXVa9K8OQJwib9nWOHVTaX8FjA+BkfNGt+r HzTi3ldVdgrcdLoxSmgwFECWZGtXoOhTFdEbmbyImd+qHExAR1whYJ2gr1LFO3zu nxEuKDFWKDepTa9o25pS0ghhoNqyYGqMLm7coFAUe9RV5NPtNea0OD0W5TMM9NIN 3CIbr2FOu+oxDTk8wCjYs4l2OAXNJXrB -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:42 2025 by rpki-client