$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: WC5jORPOa4o9I4QN6MjHrpNTcfqGKtbD7IhRWGWsSRA= Subject key identifier: C4:B3:20:DD:55:F3:87:00:A2:75:6F:EC:03:E1:09:7D:73:47:22:A6 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01AF Signing time: Tue 29 Apr 2025 03:15:50 +0000 Manifest this update: Tue 29 Apr 2025 03:15:50 +0000 Manifest next update: Tue 06 May 2025 03:15:49 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: ug6copARKdg1VOC7Xv8E9X1U0DR0DMKE8s9quiaIEto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 03:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Apr 29 03:15:50 2025 GMT Not After : May 6 03:15:49 2025 GMT Subject: CN=68104466-8ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:1d:f0:6d:15:03:14:81:27:42:22:89:bd: dc:45:fc:5a:f5:5a:3e:72:ca:f7:ba:31:3c:38:44: 50:a5:04:11:3e:86:8b:c1:67:5d:22:eb:35:2b:88: af:a4:29:b8:dd:e6:73:25:a8:7f:f0:a7:5f:21:cd: 11:98:9d:9e:bf:3d:71:d4:2e:8e:53:b8:aa:08:5c: 08:b4:c1:bd:26:91:59:17:42:30:ae:11:dd:be:d3: 6f:c9:3c:8e:cd:14:19:49:d1:bf:d8:51:6a:4f:ce: 5f:10:33:91:3a:82:31:8b:f4:10:eb:e5:9c:a5:9d: 6b:49:5d:2b:29:70:93:5a:93:a7:e7:45:2e:c0:8e: 24:37:7d:b1:87:46:b4:ff:b3:74:c8:b7:96:55:43: 7a:23:b2:18:a2:77:6e:93:99:48:08:d6:a1:09:ff: f9:1a:9f:29:0c:a6:8f:11:8c:28:a5:31:06:25:30: fd:39:48:2b:a3:8d:ad:36:98:20:59:00:55:be:c0: 36:51:96:d9:79:ba:5f:e3:2e:0c:13:a4:53:48:f6: bb:1a:5c:29:fc:d3:d5:85:98:dd:da:a3:65:fe:81: 4e:ca:88:5f:1f:cd:72:d4:fd:df:7a:a0:99:9d:47: 73:22:1d:bd:ca:da:20:27:a3:fb:f4:76:ef:be:96: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B3:20:DD:55:F3:87:00:A2:75:6F:EC:03:E1:09:7D:73:47:22:A6 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:16:0d:1e:87:2b:0d:59:97:77:66:b5:08:4a:83:13:f8:13: ce:96:61:71:97:c3:84:bd:49:95:f5:5f:20:a7:90:9a:a4:2e: 62:1b:fd:b0:c4:65:48:19:3a:e7:85:4d:dd:41:ae:c1:61:cb: 67:08:d7:84:c0:5a:b1:34:c2:0e:43:35:dd:2d:b2:41:b8:60: 7d:18:4d:10:66:af:16:0b:c5:ec:f6:96:d4:2b:a6:de:09:71: 96:3a:48:57:3d:93:00:ae:47:2c:c9:a1:b6:b8:4b:49:d2:27: 29:94:bf:40:e6:8a:0c:59:57:77:07:05:fa:c6:7a:92:fe:4c: b0:b5:19:e5:09:17:df:8d:a5:52:b5:1b:cd:60:f6:2b:be:2c: e8:24:05:ca:6e:33:86:a9:19:76:ac:88:ba:35:de:d5:77:a4: 06:2b:e4:a2:95:41:74:b8:c3:12:c7:be:7e:6d:19:8d:61:be: 99:2d:bb:c6:8f:0a:8e:e8:b3:75:15:86:12:1f:1c:5e:29:a4: 92:e3:0c:33:b6:1d:37:37:07:5f:87:3a:10:06:c3:77:67:17: 74:1c:46:98:f6:20:6c:6d:6c:07:68:49:e6:76:f0:d3:92:30: bd:a0:d9:e3:ea:c4:76:33:4b:78:75:b7:58:94:53:af:79:5e: cc:7f:cc:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwNDI5MDMxNTUwWhcNMjUwNTA2MDMxNTQ5WjAYMRYwFAYD VQQDEw02ODEwNDQ2Ni04YWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsEd8G0VAxSBJ0Iiib3cRfxa9Vo+csr3ujE8OERQpQQRPoaLwWddIus1K4iv pCm43eZzJah/8KdfIc0RmJ2evz1x1C6OU7iqCFwItMG9JpFZF0IwrhHdvtNvyTyO zRQZSdG/2FFqT85fEDOROoIxi/QQ6+WcpZ1rSV0rKXCTWpOn50UuwI4kN32xh0a0 /7N0yLeWVUN6I7IYonduk5lICNahCf/5Gp8pDKaPEYwopTEGJTD9OUgro42tNpgg WQBVvsA2UZbZebpf4y4ME6RTSPa7Glwp/NPVhZjd2qNl/oFOyohfH81y1P3feqCZ nUdzIh29ytogJ6P79HbvvpZk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSzIN1V 84cAonVv7APhCX1zRyKmMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvFg0ehysNWZd3ZrUISoMT+BPOlmFxl8OEvUmV9V8gp5CapC5iG/2w xGVIGTrnhU3dQa7BYctnCNeEwFqxNMIOQzXdLbJBuGB9GE0QZq8WC8Xs9pbUK6be CXGWOkhXPZMArkcsyaG2uEtJ0icplL9A5ooMWVd3BwX6xnqS/kywtRnlCRffjaVS tRvNYPYrvizoJAXKbjOGqRl2rIi6Nd7Vd6QGK+SilUF0uMMSx75+bRmNYb6ZLbvG jwqO6LN1FYYSHxxeKaSS4wwzth03NwdfhzoQBsN3Zxd0HEaY9iBsbWwHaEnmdvDT kjC9oNnj6sR2M0t4dbdYlFOveV7Mf8ws -----END CERTIFICATE-----Generated at Wed Apr 30 23:56:50 2025 by rpki-client