$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: KVkzOwbq3H4bYWcAL1G4SC6qRvZvxqvqR+mM+wAGqO0= Subject key identifier: 06:5B:7A:52:BE:D9:CF:3D:7B:89:C5:00:F9:E6:4A:5E:FC:9E:BF:B7 Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C4B Signing time: Thu 24 Apr 2025 18:16:28 +0000 Manifest this update: Thu 24 Apr 2025 18:16:27 +0000 Manifest next update: Thu 01 May 2025 18:16:27 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: JqGpSU/fXUTU8QzkNz8qNv6IvpLoU1NOv4MQ2dvpBbM=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: uuWn9T24f2Om0t7b8gCBcBAECx+g28MfpKjTQARLOK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: Apr 24 18:16:27 2025 GMT Not After : May 1 18:16:27 2025 GMT Subject: CN=680a7ffb-fc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:46:1f:14:bb:ed:5b:3d:91:f7:bf:be:95: 9e:28:f1:9e:82:ef:27:f8:43:5f:df:ca:d4:88:ad: a2:3c:19:e5:81:bb:16:f8:78:d4:99:8d:b7:82:29: 78:d9:0d:7b:ac:d2:24:4c:71:4f:ec:f8:e2:fc:f4: a8:ae:b1:b6:6d:bc:e4:41:b0:ce:5f:c5:e9:8e:ac: 61:8d:d7:c8:72:57:8e:70:d8:32:f8:11:1a:27:00: e3:79:1f:0c:6a:1b:23:25:a6:2d:b8:5b:d7:7c:94: 82:06:2b:9f:bd:d5:d4:e8:d4:c6:7d:a9:19:c2:c2: 1b:dd:f0:bc:29:68:4b:94:f0:42:6b:87:9f:62:dc: 04:36:1e:96:cf:43:1a:89:d8:ab:a1:e0:45:ae:6d: 5d:bb:c6:a4:36:38:99:27:fd:ff:06:73:c9:66:03: 1d:f5:67:f9:f0:52:2d:06:86:ab:d1:4c:db:d8:8f: 14:46:16:68:c7:77:56:6b:a6:df:50:a2:a3:8d:43: 78:61:68:de:98:af:3e:c9:95:c3:c9:55:c4:0f:7a: c0:a0:55:4f:57:ba:d5:82:70:07:11:70:b3:28:f5: f1:a0:d7:ab:f6:25:da:88:6c:e3:2c:e4:00:10:cf: 3f:80:57:ad:53:c7:64:66:95:e6:c9:d9:35:3c:bf: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:7A:52:BE:D9:CF:3D:7B:89:C5:00:F9:E6:4A:5E:FC:9E:BF:B7 X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b9:ee:3b:f7:de:9d:09:c3:28:09:33:8c:af:00:ee:6a:2a: 65:81:79:67:1f:9a:e1:dd:68:98:05:f7:90:ff:78:85:d8:24: 05:6d:2d:83:99:fb:32:fc:41:22:4e:2e:7a:52:96:69:45:14: e9:cc:e4:e1:69:8d:6e:bb:9c:92:8d:79:ee:1c:cd:fd:e1:e8: 2b:2d:ff:66:87:b0:35:11:78:4d:9e:20:ef:8d:73:eb:23:d5: 59:a5:9f:af:9f:90:e7:96:05:5e:c6:02:89:10:14:54:b8:f6: ef:8b:a1:f3:ce:41:a3:69:92:f0:43:ee:4f:a4:72:15:a2:6f: ba:a6:d8:f7:59:97:9a:06:00:2e:c0:99:0e:9a:1a:e4:1c:ff: 6a:46:44:b1:a3:dd:fe:8a:78:db:bf:97:ed:6d:17:50:af:b0: 49:78:f5:66:5f:ac:b7:62:85:77:92:76:53:46:20:72:fa:79: 22:b7:e9:cb:3c:da:c1:8e:3f:65:21:d8:0e:73:8b:67:f1:7b: 48:ce:7b:b6:99:c7:ac:d9:dc:ea:e3:89:e1:39:74:b6:80:ae: 12:4d:6a:af:93:93:6e:dc:d3:49:eb:99:0b:ae:2d:ae:bb:3d: 4c:c1:07:a2:c7:0b:5b:fb:8f:62:73:cd:bd:7f:b8:4a:47:fb: cb:91:15:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwNDI0MTgxNjI3WhcNMjUwNTAxMTgxNjI3WjAYMRYwFAYD VQQDEw02ODBhN2ZmYi1mYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz49GHxS77Vs9kfe/vpWeKPGegu8n+ENf38rUiK2iPBnlgbsW+HjUmY23gil4 2Q17rNIkTHFP7Pji/PSorrG2bbzkQbDOX8XpjqxhjdfIcleOcNgy+BEaJwDjeR8M ahsjJaYtuFvXfJSCBiufvdXU6NTGfakZwsIb3fC8KWhLlPBCa4efYtwENh6Wz0Ma idiroeBFrm1du8akNjiZJ/3/BnPJZgMd9Wf58FItBoar0Uzb2I8URhZox3dWa6bf UKKjjUN4YWjemK8+yZXDyVXED3rAoFVPV7rVgnAHEXCzKPXxoNer9iXaiGzjLOQA EM8/gFetU8dkZpXmydk1PL/b7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZbelK+ 2c89e4nFAPnmSl78nr+3MB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEue47996dCcMoCTOMrwDuaiplgXlnH5rh3WiYBfeQ/3iF2CQFbS2D mfsy/EEiTi56UpZpRRTpzOThaY1uu5ySjXnuHM394egrLf9mh7A1EXhNniDvjXPr I9VZpZ+vn5DnlgVexgKJEBRUuPbvi6HzzkGjaZLwQ+5PpHIVom+6ptj3WZeaBgAu wJkOmhrkHP9qRkSxo93+injbv5ftbRdQr7BJePVmX6y3YoV3knZTRiBy+nkit+nL PNrBjj9lIdgOc4tn8XtIznu2mces2dzq44nhOXS2gK4STWqvk5Nu3NNJ65kLri2u uz1MwQeixwtb+49ic829f7hKR/vLkRWb -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:46 2025 by rpki-client