$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: Z56EWeISV9RquwSFqNg9Bv3TAcdz61bv+ebFILtE1Ds= Subject key identifier: 5B:41:F1:C4:12:17:A1:09:58:CC:1E:A3:8E:12:13:FA:EC:F9:D0:58 Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 0654 Signing time: Thu 24 Apr 2025 22:17:22 +0000 Manifest this update: Thu 24 Apr 2025 22:17:21 +0000 Manifest next update: Thu 01 May 2025 22:17:21 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: RhyEZ40ULMGqqXHhlvDVtA1Sj8KXbiKFvqGOWctt71s=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325, serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Validity Not Before: Apr 24 22:17:21 2025 GMT Not After : May 1 22:17:21 2025 GMT Subject: CN=680ab872-022e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:80:36:58:3b:da:65:f1:a9:c6:05:f5:1e: 9d:6c:6b:15:df:fc:e1:fc:92:54:b3:f2:e1:4b:80: aa:9e:54:5b:ba:a3:29:2b:88:fa:12:af:ff:fe:3e: ac:72:f0:12:ab:34:8c:50:bf:69:a7:e1:3b:f4:ce: 14:6a:7a:95:86:91:07:f2:f5:f1:a0:fb:e8:c8:18: 60:7e:92:f6:88:e2:45:b3:bf:05:00:c3:c9:53:42: 3b:59:3b:72:df:e8:9b:a2:bf:b1:9c:f8:ba:9e:fb: 6f:c0:04:18:c0:9a:b1:62:cd:96:a3:28:36:33:03: a7:bd:2c:c3:c9:ed:40:5d:0e:fb:ff:f1:95:ba:db: 0a:57:be:dc:e6:fa:6e:c0:93:15:ba:3b:9f:13:57: c8:c7:0c:d6:bf:01:fb:01:b6:07:cd:db:2b:01:f6: a8:50:69:b8:3a:61:18:2d:47:0a:1c:7e:53:47:41: db:7e:f3:e9:29:04:05:0d:16:f1:d9:a9:d8:f8:64: 4f:63:30:a1:b6:37:82:d1:3a:bb:ff:a4:91:ba:81: 64:64:ec:7d:30:39:99:ff:d2:d8:72:b7:71:83:95: 63:dc:98:a8:7a:96:a1:ea:91:e0:1a:cf:23:81:c0: f7:61:1a:33:84:ba:42:a2:22:78:69:96:b9:3d:28: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:41:F1:C4:12:17:A1:09:58:CC:1E:A3:8E:12:13:FA:EC:F9:D0:58 X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:eb:25:82:28:43:57:54:4f:80:a3:5f:14:17:e9:92:4d:cc: 6a:aa:72:5f:01:41:10:cb:7c:49:08:60:c6:52:af:04:71:7c: ae:25:ab:87:f4:c9:b4:3a:16:65:da:af:3b:ba:a3:3e:0c:a8: e9:f5:9f:f6:bb:df:ab:32:84:39:72:07:9e:47:5f:e5:ed:67: 9b:ce:a7:ae:08:7d:8a:6a:de:06:b7:52:26:a2:b7:e2:d9:36: 42:a2:92:76:da:b5:7a:35:ae:74:78:3e:35:cc:8b:9c:6e:f8: e8:dc:e7:32:c2:f5:f7:cf:77:d3:cb:7a:7f:75:a3:1d:88:87: fd:6d:e3:7e:b5:95:39:2b:3b:47:fb:bd:38:6b:1d:2c:9f:2d: 21:22:1a:fb:e4:c1:48:6b:60:cb:8a:14:f8:15:9b:db:e2:7e: bb:ad:1b:ce:a4:12:cc:99:fb:2d:d0:ec:02:b5:9b:08:88:5f: b1:cd:9e:7f:3f:56:08:ce:b3:85:87:ca:69:4a:1b:36:29:1d: 6c:97:7f:45:db:16:f7:36:cd:11:e0:8a:20:10:c8:62:5b:24: e5:9f:cb:cc:a7:0b:d2:f7:6b:46:1a:42:87:b8:55:50:05:aa: 7a:4e:b3:db:e2:cd:49:25:7e:bc:c6:ae:6b:34:77:79:75:58: d0:c8:19:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUwNDI0MjIxNzIxWhcNMjUwNTAxMjIxNzIxWjAYMRYwFAYD VQQDEw02ODBhYjg3Mi0wMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5f6ANlg72mXxqcYF9R6dbGsV3/zh/JJUs/LhS4CqnlRbuqMpK4j6Eq///j6s cvASqzSMUL9pp+E79M4UanqVhpEH8vXxoPvoyBhgfpL2iOJFs78FAMPJU0I7WTty 3+ibor+xnPi6nvtvwAQYwJqxYs2Woyg2MwOnvSzDye1AXQ77//GVutsKV77c5vpu wJMVujufE1fIxwzWvwH7AbYHzdsrAfaoUGm4OmEYLUcKHH5TR0HbfvPpKQQFDRbx 2anY+GRPYzChtjeC0Tq7/6SRuoFkZOx9MDmZ/9LYcrdxg5Vj3Jioepah6pHgGs8j gcD3YRozhLpCoiJ4aZa5PSilhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtB8cQS F6EJWMweo44SE/rs+dBYMB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx6yWCKENXVE+Ao18UF+mSTcxqqnJfAUEQy3xJCGDGUq8EcXyuJauH 9Mm0OhZl2q87uqM+DKjp9Z/2u9+rMoQ5cgeeR1/l7WebzqeuCH2Kat4Gt1Imorfi 2TZCopJ22rV6Na50eD41zIucbvjo3OcywvX3z3fTy3p/daMdiIf9beN+tZU5KztH +704ax0sny0hIhr75MFIa2DLihT4FZvb4n67rRvOpBLMmfst0OwCtZsIiF+xzZ5/ P1YIzrOFh8ppShs2KR1sl39F2xb3Ns0R4IogEMhiWyTln8vMpwvS92tGGkKHuFVQ Bap6TrPb4s1JJX68xq5rNHd5dVjQyBlq -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:16 2025 by rpki-client