$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: h9yeYdRnhs2X4IXreTzw9gtGgi+keGka17T/s5JrQco= Subject key identifier: 57:07:37:5B:E2:35:D5:49:47:B3:5F:5E:CA:84:6E:2F:DD:E3:64:3D Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0102 Signing time: Fri 25 Apr 2025 04:12:12 +0000 Manifest this update: Fri 25 Apr 2025 04:12:11 +0000 Manifest next update: Fri 02 May 2025 04:12:11 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: 3NfeQ04nA7ieG0cEGib42VeWxYJbiMYV0iPYkj1c2qM=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Apr 25 04:12:11 2025 GMT Not After : May 2 04:12:11 2025 GMT Subject: CN=680b0b9b-5e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:78:56:ce:e5:2d:13:16:38:b6:99:a1:78: 45:29:0b:60:ab:71:ac:b9:06:97:6c:01:14:e9:a1: 87:b3:75:51:f3:5d:bb:63:32:c1:f7:26:66:94:4d: ec:82:13:25:8f:40:10:2f:7d:2a:27:2b:79:96:7e: 3b:2a:ff:f4:bd:b7:3b:7c:32:b2:12:2c:1b:d1:0f: 9e:91:35:8a:5f:b7:06:f1:a7:cf:a0:74:d6:65:56: 76:97:f1:18:28:40:a4:25:13:bb:27:41:c6:82:26: aa:a9:49:35:10:de:77:45:dc:94:a0:f6:84:4c:47: ca:54:e6:74:cf:8a:c4:9a:b3:8b:5e:2b:0a:c9:75: 14:84:2b:ad:8b:eb:de:9d:d5:2e:8d:5e:6c:2a:ea: bd:5e:c0:e6:e5:bb:99:be:75:b7:9f:e1:bf:97:43: 6d:bd:16:96:43:fb:4e:50:da:ff:e8:ef:73:1b:9e: 5a:e4:11:f5:5d:d0:bd:3d:a9:41:79:2e:7b:26:f0: 91:4f:1b:4c:15:e5:a1:1e:e0:c2:f3:f4:f4:2f:3c: 07:51:c4:17:06:28:ec:ad:11:74:f5:20:c3:0f:6e: 1f:aa:5a:65:f5:a5:95:be:a5:6b:d9:d4:aa:43:38: 03:9a:e8:34:b4:fe:92:0b:b2:ba:58:cd:f3:7d:5f: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:37:5B:E2:35:D5:49:47:B3:5F:5E:CA:84:6E:2F:DD:E3:64:3D X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a5:ab:b2:00:7e:0b:e0:e5:35:b2:86:86:c4:06:ab:19:97: ac:56:ee:2c:70:1a:45:e8:c8:6e:ba:6b:03:91:1f:5c:ff:27: 11:9b:83:8f:65:0e:a0:0a:87:82:b2:55:04:a6:00:5a:da:b0: 00:3c:97:0a:b6:3f:01:13:f0:8e:f3:33:3a:01:3e:34:4d:ef: a8:d0:5b:68:c3:ec:4e:5c:94:52:53:a3:ea:9c:bc:22:e3:69: 20:21:5c:25:cb:cb:1f:15:bf:ff:1e:30:7c:a8:17:34:84:f1: 00:16:3e:6c:00:ad:7f:74:76:c3:d3:a6:d8:7b:8c:1d:bc:f6: 61:8e:62:aa:28:8f:7c:97:b8:88:74:2a:4b:65:f2:8b:6f:d8: b5:c1:0c:cf:74:2b:57:96:f2:f1:87:67:b4:98:b8:17:10:2d: 3a:c2:81:0a:77:27:e3:d9:ac:fe:f2:d3:60:48:24:3f:06:01: 97:4e:36:33:54:71:4c:48:40:12:72:5a:ea:aa:85:31:db:3d: fc:c3:17:cd:2a:59:61:17:3c:2a:56:52:8f:3c:cd:3e:2d:c4: fb:a0:0a:aa:cd:b8:f4:1f:8f:b2:af:1f:89:32:1e:bb:30:7f: 07:33:74:af:cc:58:da:42:b4:7f:1f:c9:6b:9d:eb:c3:22:73: 38:86:48:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUwNDI1MDQxMjExWhcNMjUwNTAyMDQxMjExWjAYMRYwFAYD VQQDEw02ODBiMGI5Yi01ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpZ4Vs7lLRMWOLaZoXhFKQtgq3GsuQaXbAEU6aGHs3VR8127YzLB9yZmlE3s ghMlj0AQL30qJyt5ln47Kv/0vbc7fDKyEiwb0Q+ekTWKX7cG8afPoHTWZVZ2l/EY KECkJRO7J0HGgiaqqUk1EN53RdyUoPaETEfKVOZ0z4rEmrOLXisKyXUUhCuti+ve ndUujV5sKuq9XsDm5buZvnW3n+G/l0NtvRaWQ/tOUNr/6O9zG55a5BH1XdC9PalB eS57JvCRTxtMFeWhHuDC8/T0LzwHUcQXBijsrRF09SDDD24fqlpl9aWVvqVr2dSq QzgDmug0tP6SC7K6WM3zfV9qnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcHN1vi NdVJR7NfXsqEbi/d42Q9MB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSpauyAH4L4OU1soaGxAarGZesVu4scBpF6MhuumsDkR9c/ycRm4OP ZQ6gCoeCslUEpgBa2rAAPJcKtj8BE/CO8zM6AT40Te+o0Ftow+xOXJRSU6PqnLwi 42kgIVwly8sfFb//HjB8qBc0hPEAFj5sAK1/dHbD06bYe4wdvPZhjmKqKI98l7iI dCpLZfKLb9i1wQzPdCtXlvLxh2e0mLgXEC06woEKdyfj2az+8tNgSCQ/BgGXTjYz VHFMSEASclrqqoUx2z38wxfNKllhFzwqVlKPPM0+LcT7oAqqzbj0H4+yrx+JMh67 MH8HM3SvzFjaQrR/H8lrnevDInM4hkh3 -----END CERTIFICATE-----Generated at Sat Apr 26 12:59:40 2025 by rpki-client