$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: WT2lfSYN9/4HwgNjCvzHFXzaFkNJIZpPTz1wbNGGUSg= Subject key identifier: B4:FA:AE:8E:C6:22:75:DD:AE:4B:7E:86:1D:43:FF:60:9F:E9:D9:0A Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 01E1 Signing time: Fri 25 Apr 2025 01:53:01 +0000 Manifest this update: Fri 25 Apr 2025 01:53:01 +0000 Manifest next update: Fri 02 May 2025 01:53:01 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: qDb9hi66tfhJwzetyUrp/5tv+Li2ZGuR9hZNo1CLmk8=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Apr 25 01:53:01 2025 GMT Not After : May 2 01:53:01 2025 GMT Subject: CN=680aeafd-412b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:08:a8:6c:73:99:e0:b8:a0:cc:ae:37:80: f8:2c:5d:2d:2f:0e:c2:7e:b5:86:3f:50:1e:f5:d6: a3:ce:a4:65:0e:f3:d9:32:d5:55:a6:c9:56:2d:07: c9:4a:99:19:5a:ec:9f:04:69:46:5f:8d:c2:93:dd: 0f:bb:d7:9a:c0:da:59:b8:e7:5f:79:ce:b0:66:f7: ad:92:51:d8:04:47:86:d8:34:89:e2:b6:1a:79:e5: 2d:38:34:be:6c:20:1a:77:f1:f1:d2:3e:2c:30:31: aa:59:36:ff:d3:38:17:ae:49:6e:d1:dd:55:ff:c8: e0:5d:91:99:83:a1:f5:cc:a3:24:73:53:e3:b6:4f: 5e:05:48:9b:37:30:b6:f8:2a:15:c2:c1:54:e5:34: 7e:60:fa:09:db:cd:9b:b4:63:f7:ae:e3:10:6e:6b: 75:ab:df:b7:a2:1a:41:7f:52:77:9f:81:4a:1f:78: e2:02:80:53:45:ff:d9:f1:12:ef:96:6c:36:a9:f8: fe:12:5c:5d:0d:b1:6c:c0:f2:80:89:c4:67:e7:e3: 96:de:c5:17:65:d9:03:5e:da:6a:70:e9:40:52:6c: d7:ea:43:ae:fb:fb:8b:88:3b:ae:dd:7b:ce:0e:59: 2e:98:4e:04:08:45:29:14:a5:d3:9c:7c:8b:9c:d0: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:AE:8E:C6:22:75:DD:AE:4B:7E:86:1D:43:FF:60:9F:E9:D9:0A X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:89:49:4c:aa:5c:14:03:38:f6:9b:13:e8:a6:6f:9d:2b:a8: 82:28:99:1c:fd:9e:bf:8c:80:6c:2c:bc:30:d2:78:6b:46:af: 58:b3:84:ef:b8:1b:b9:4c:21:72:5b:e4:fe:44:37:3c:71:32: b6:86:a6:3d:1c:a5:35:09:9d:73:59:ec:41:57:c6:bc:61:d2: 48:71:f6:84:ae:ce:6f:d0:92:c1:92:08:85:39:57:5f:6b:82: 41:7f:cf:02:56:fe:c1:b9:28:23:9c:1b:06:12:fd:0f:8e:a8: 78:4c:84:dd:e7:fe:1b:d7:75:9e:6a:7d:2d:94:4a:ba:f5:31: 16:da:01:c8:43:da:9e:25:1f:eb:88:d2:e9:91:21:bc:8f:68: af:1d:59:40:32:0c:d3:90:18:d2:33:59:18:7b:c2:81:3e:ed: 0b:c5:9d:b3:f8:2f:7c:7c:30:86:89:18:b1:89:5e:24:2b:f0: e5:b3:7e:81:ac:09:f2:13:b2:29:f6:28:52:17:10:fc:d4:73: be:a8:08:8d:49:f2:f4:91:24:2c:35:f8:40:75:57:96:74:8d: 9a:89:33:f6:09:ff:ee:bc:a3:31:79:e8:0f:f9:9f:74:68:26: 55:8d:fd:e1:1b:41:84:80:f3:a1:b3:e4:42:a4:a9:11:5f:1d: 1f:d0:10:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwNDI1MDE1MzAxWhcNMjUwNTAyMDE1MzAxWjAYMRYwFAYD VQQDEw02ODBhZWFmZC00MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1YIqGxzmeC4oMyuN4D4LF0tLw7CfrWGP1Ae9dajzqRlDvPZMtVVpslWLQfJ SpkZWuyfBGlGX43Ck90Pu9eawNpZuOdfec6wZvetklHYBEeG2DSJ4rYaeeUtODS+ bCAad/Hx0j4sMDGqWTb/0zgXrklu0d1V/8jgXZGZg6H1zKMkc1Pjtk9eBUibNzC2 +CoVwsFU5TR+YPoJ282btGP3ruMQbmt1q9+3ohpBf1J3n4FKH3jiAoBTRf/Z8RLv lmw2qfj+ElxdDbFswPKAicRn5+OW3sUXZdkDXtpqcOlAUmzX6kOu+/uLiDuu3XvO DlkumE4ECEUpFKXTnHyLnNBPHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT6ro7G InXdrkt+hh1D/2Cf6dkKMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6iUlMqlwUAzj2mxPopm+dK6iCKJkc/Z6/jIBsLLww0nhrRq9Ys4Tv uBu5TCFyW+T+RDc8cTK2hqY9HKU1CZ1zWexBV8a8YdJIcfaErs5v0JLBkgiFOVdf a4JBf88CVv7BuSgjnBsGEv0Pjqh4TITd5/4b13Wean0tlEq69TEW2gHIQ9qeJR/r iNLpkSG8j2ivHVlAMgzTkBjSM1kYe8KBPu0LxZ2z+C98fDCGiRixiV4kK/Dls36B rAnyE7Ip9ihSFxD81HO+qAiNSfL0kSQsNfhAdVeWdI2aiTP2Cf/uvKMxeegP+Z90 aCZVjf3hG0GEgPOhs+RCpKkRXx0f0BBV -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:38 2025 by rpki-client