$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft File: JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json) Hash identifier: 9iUKDdbPNskbX3lesn591cmIgHkw3e+etdmBNxdnpwo= Subject key identifier: 2A:49:87:AA:61:CD:14:44:F8:0B:C3:31:0D:63:26:CD:99:41:65:85 Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Certificate serial: 1629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft Manifest number: 1619 Signing time: Thu 24 Apr 2025 16:44:46 +0000 Manifest this update: Thu 24 Apr 2025 16:44:46 +0000 Manifest next update: Thu 01 May 2025 16:44:46 +0000 Files and hashes: 1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: EbdbtJvJ6PAsCw/5LR8iffKNkfFH82X6t8rWAH06a8Q=) 2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: V1SwqzHI+ZNQe6jN+twymLot2bdeSiq+QMKz3KdM7RM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5673 (0x1629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Validity Not Before: Apr 24 16:44:46 2025 GMT Not After : May 1 16:44:46 2025 GMT Subject: CN=680a6a7e-7c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:15:d5:ed:bd:0f:01:5c:52:48:01:f6:81: 04:0f:7e:88:e1:98:06:9e:eb:57:5d:24:3f:ac:f9: b7:5e:0b:6d:57:44:79:24:4e:81:64:03:b6:cd:27: 83:a8:cd:df:e0:4b:65:cc:93:b7:14:0a:8e:cb:c4: e7:8a:2b:e0:c0:77:ac:79:49:5b:b2:6e:55:02:b8: 37:eb:05:32:dc:7b:25:92:ed:f6:73:3c:72:71:25: 21:67:82:62:29:9e:61:25:21:20:c4:95:db:75:7c: 76:4d:4e:03:ba:bb:be:2b:8c:8f:08:00:4a:41:18: 70:f2:d1:d7:13:d5:bb:b4:25:43:85:a8:53:35:f2: f2:de:93:a9:d4:ef:b2:20:87:2e:b9:ef:7a:3c:5e: ee:64:04:19:44:c4:a7:44:ca:81:e9:3d:6b:99:87: e9:e5:a3:b7:a3:d4:17:84:e7:9d:55:c7:92:a1:97: 3c:75:3d:72:e0:05:e2:50:8f:8c:ba:97:05:83:19: 6a:de:bb:b9:fd:87:9d:73:4a:ea:19:d6:6e:72:de: d7:02:1d:0d:f0:3a:11:29:bf:46:51:fd:aa:8b:6f: 38:ac:fc:48:1a:49:e9:4a:37:9e:8a:91:af:74:90: a7:a2:a6:02:53:7e:d6:4d:27:a7:2e:6c:6c:b6:fb: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:87:AA:61:CD:14:44:F8:0B:C3:31:0D:63:26:CD:99:41:65:85 X509v3 Authority Key Identifier: keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:d7:d8:4f:8f:42:82:4d:bc:97:06:ef:58:4a:ca:a8:15: 3a:a9:26:66:35:37:60:05:7a:32:ff:57:25:e7:cf:d1:d4:33: 07:e6:d3:4d:db:72:d4:5b:c0:5b:d4:ad:4b:55:af:05:03:6c: f5:67:b8:85:32:7a:5a:fe:92:b8:75:63:b8:0e:81:af:90:9b: 1f:34:a5:e4:ba:4e:8c:05:28:02:10:08:7f:f5:9b:39:10:e2: b7:22:af:a2:7b:e2:ee:6a:db:89:d1:6c:58:8e:99:d8:e3:4b: 46:45:1c:a9:c8:6c:7c:15:a7:09:35:c4:51:e0:00:d4:a1:50: ac:d7:ec:8f:bd:25:a4:01:86:6e:e2:b4:4b:af:63:96:cd:12: cc:56:e9:03:54:ba:62:3d:e3:ba:5c:47:da:91:16:99:ea:db: 8c:62:27:a0:5b:f7:4b:4c:a6:02:a1:24:d4:63:f8:38:73:a9: 26:25:46:2e:9d:00:dd:58:cc:34:7d:10:9f:7f:33:07:d5:61: 02:d0:61:fa:d3:f1:f7:24:66:ea:64:5f:82:b6:f4:1a:c2:b7: c5:c5:ac:00:3d:1a:c3:9f:37:6f:f2:b6:19:05:55:d3:67:e1: 10:07:e9:69:51:01:3a:7b:31:cd:14:45:8f:6b:32:1f:75:51: 35:ff:9b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1 Qzg3NTAzRkEwHhcNMjUwNDI0MTY0NDQ2WhcNMjUwNTAxMTY0NDQ2WjAYMRYwFAYD VQQDEw02ODBhNmE3ZS03YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jMV1e29DwFcUkgB9oEED36I4ZgGnutXXSQ/rPm3XgttV0R5JE6BZAO2zSeD qM3f4EtlzJO3FAqOy8TniivgwHeseUlbsm5VArg36wUy3Hslku32czxycSUhZ4Ji KZ5hJSEgxJXbdXx2TU4Duru+K4yPCABKQRhw8tHXE9W7tCVDhahTNfLy3pOp1O+y IIcuue96PF7uZAQZRMSnRMqB6T1rmYfp5aO3o9QXhOedVceSoZc8dT1y4AXiUI+M upcFgxlq3ru5/Yedc0rqGdZuct7XAh0N8DoRKb9GUf2qi284rPxIGknpSjeeipGv dJCnoqYCU37WTSenLmxstvuUQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpJh6ph zRRE+AvDMQ1jJs2ZQWWFMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1 RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REU2OC84MEIyRjNGODE1RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGty WDlxTnR0cldMTUZjaDFBX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPJdfYT49Cgk28lwbvWErKqBU6qSZmNTdgBXoy/1cl58/R1DMH5tNN 23LUW8Bb1K1LVa8FA2z1Z7iFMnpa/pK4dWO4DoGvkJsfNKXkuk6MBSgCEAh/9Zs5 EOK3Iq+ie+LuatuJ0WxYjpnY40tGRRypyGx8FacJNcRR4ADUoVCs1+yPvSWkAYZu 4rRLr2OWzRLMVukDVLpiPeO6XEfakRaZ6tuMYiegW/dLTKYCoSTUY/g4c6kmJUYu nQDdWMw0fRCffzMH1WEC0GH60/H3JGbqZF+CtvQawrfFxawAPRrDnzdv8rYZBVXT Z+EQB+lpUQE6ezHNFEWPazIfdVE1/5v6 -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:22 2025 by rpki-client