$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: 4cQDwPubUCdGml6FUsLWQuzDJx0uB6GNNVkJ0m7pW4Q= Subject key identifier: 7C:22:AF:BE:8A:16:90:CE:80:CD:72:B3:70:79:F8:3A:2D:12:1E:9A Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: 4D Signing time: Fri 25 Apr 2025 06:25:40 +0000 Manifest this update: Fri 25 Apr 2025 06:25:40 +0000 Manifest next update: Fri 02 May 2025 06:25:40 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: qMUb3UPIAl7+bbxUt6IHtqmVY1mNP7WmdBaUcsovy6M=) 2: A719B1F01B0811F08F3C3B09C4F9AE02.roa (hash: +0VuYuGfUe694y8p1nRfDg+dRfTnSFCQz77nwwmEWEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Validity Not Before: Apr 25 06:25:40 2025 GMT Not After : May 2 06:25:40 2025 GMT Subject: CN=680b2ae4-e580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:7f:85:6a:32:5a:aa:04:88:a5:e6:3a:20: 44:a3:23:e2:08:89:8b:a6:6a:dc:cf:a1:8e:c9:ea: 40:27:d8:9d:29:6f:5b:07:18:64:7b:3b:3f:40:18: 0f:64:91:9f:9a:ea:d2:94:86:d1:7b:a1:2e:d0:9b: 45:58:39:71:38:1a:dd:09:7a:a0:da:36:6c:a4:17: ab:19:b8:cb:bf:28:7d:b6:36:64:33:0a:bb:98:ee: fc:58:f0:7a:44:a2:ca:da:b3:20:d8:82:28:8d:00: d3:da:6b:87:4a:96:11:26:70:f5:29:46:28:16:e7: 24:9a:d8:b9:8a:44:bf:84:97:4c:53:dd:dc:41:2c: 89:03:88:4b:de:c4:b4:a4:93:7e:db:35:31:f2:b0: 96:86:79:ca:29:7b:56:06:80:fe:e4:4e:99:06:8a: b5:09:18:3a:0d:c6:1f:d3:c7:5a:90:cd:cf:f0:65: 62:88:b6:69:67:5c:bc:c8:ae:bf:b7:8a:2a:1c:57: b1:43:1a:23:c5:90:4c:0c:39:06:da:15:0c:09:37: 91:8e:d4:2a:ec:db:48:c1:c3:7f:87:e7:7f:3f:12: 54:bb:1d:1e:0e:e0:bf:16:6c:a2:68:6a:30:09:53: d8:48:75:03:cd:e3:5e:ee:24:8a:26:bd:ae:45:5d: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:22:AF:BE:8A:16:90:CE:80:CD:72:B3:70:79:F8:3A:2D:12:1E:9A X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9e:9c:7b:98:71:79:ee:e6:ca:95:2a:a9:86:78:f5:25:f0: 89:77:4e:dd:34:3a:6b:62:76:93:00:04:20:d2:d8:09:ad:ea: c6:ef:ea:0d:99:79:99:88:7e:63:32:74:13:4a:8b:53:c0:c4: f0:63:eb:da:4d:29:db:94:38:61:b4:0d:71:40:b6:1e:8b:d4: 40:1c:0f:0d:37:01:e3:de:22:e9:93:f5:96:c6:67:45:e6:57: 91:e6:25:6f:fc:f8:23:53:8d:d6:99:a6:6b:f4:e9:8f:c8:a9: 9f:23:c4:ae:3c:3f:60:a0:9e:c2:b2:07:17:30:34:cc:94:a7: a5:a7:e0:66:0b:03:46:06:4e:45:ea:5d:dd:d9:84:9f:ca:44: cc:f4:bd:65:8f:bf:1c:79:25:a9:e1:fc:c6:35:17:ed:ce:4a: fd:b3:88:4a:28:d5:8b:b1:5d:ed:ad:a8:84:cf:90:fb:bb:61: a8:13:d9:3b:f2:ff:63:e7:51:d2:32:d5:65:4e:0a:88:b4:a0: 48:f8:e3:67:9f:76:19:d2:c4:be:02:53:9f:b7:07:38:1d:ef: 6e:2d:40:6d:62:77:2e:55:e7:53:7b:d6:b3:b6:88:79:7b:63: 77:f2:30:a0:cd:91:dc:3f:2c:82:46:61:21:97:3b:71:b0:89: 1e:71:bd:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODlBQTExMC8GA1UEBRMoMjc3RjEyMjQ0QTUwQkM2NTRFRTU2M0ZFNzM5RkU0RUI3 MTk5NjZCNjAeFw0yNTA0MjUwNjI1NDBaFw0yNTA1MDIwNjI1NDBaMBgxFjAUBgNV BAMTDTY4MGIyYWU0LWU1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA+H+FajJaqgSIpeY6IESjI+IIiYumatzPoY7J6kAn2J0pb1sHGGR7Oz9AGA9k kZ+a6tKUhtF7oS7Qm0VYOXE4Gt0JeqDaNmykF6sZuMu/KH22NmQzCruY7vxY8HpE osrasyDYgiiNANPaa4dKlhEmcPUpRigW5ySa2LmKRL+El0xT3dxBLIkDiEvexLSk k37bNTHysJaGecope1YGgP7kTpkGirUJGDoNxh/Tx1qQzc/wZWKItmlnXLzIrr+3 iiocV7FDGiPFkEwMOQbaFQwJN5GO1Crs20jBw3+H538/ElS7HR4O4L8WbKJoajAJ U9hIdQPN417uJIomva5FXU0FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfCKvvooW kM6AzXKzcHn4Oi0SHpowHwYDVR0jBBgwFoAUJ38SJEpQvGVO5WP+c5/k63GZZrYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4OUFBLzg1RDBGMzQ2QkM2 MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjM4U0pFcFF2R1ZPNVdQLWM1X2s2M0daWnJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 OUFBLzg1RDBGMzQ2QkM2MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdW TzVXUC1jNV9rNjNHWlpyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+enHuYcXnu5sqVKqmGePUl8Il3Tt00OmtidpMABCDS2Amt6sbv6g2Z eZmIfmMydBNKi1PAxPBj69pNKduUOGG0DXFAth6L1EAcDw03AePeIumT9ZbGZ0Xm V5HmJW/8+CNTjdaZpmv06Y/IqZ8jxK48P2CgnsKyBxcwNMyUp6Wn4GYLA0YGTkXq Xd3ZhJ/KRMz0vWWPvxx5Janh/MY1F+3OSv2ziEoo1YuxXe2tqITPkPu7YagT2Tvy /2PnUdIy1WVOCoi0oEj442efdhnSxL4CU5+3Bzgd724tQG1idy5V51N71rO2iHl7 Y3fyMKDNkdw/LIJGYSGXO3GwiR5xvYU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:47 2025 by rpki-client