$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft File: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft (raw, json) Hash identifier: GP9Co3kd/LwhTSfCqxYeIoukp3AFlRonhrAKCvFb3gE= Subject key identifier: 5B:D3:95:69:0F:28:66:91:EF:FF:2E:B2:47:FB:EE:56:AA:75:4B:93 Authority key identifier: 24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E Certificate issuer: /CN=A91D8392/serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft Manifest number: 0627 Signing time: Thu 24 Apr 2025 22:31:12 +0000 Manifest this update: Thu 24 Apr 2025 22:31:11 +0000 Manifest next update: Thu 01 May 2025 22:31:11 +0000 Files and hashes: 1: JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl (hash: GKSWcs+Q++6lp+J3ryEsphHhSEsXQCSypW+QUN7NHmI=) 2: 7510FBA2928911EBB0B38272C4F9AE02.roa (hash: vY9vDu953Z8A1LvSP1j7BcrWJjcpDb2f8NtmWuSIPts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8392, serialNumber=2452181CB108AF11F46287371B0413FF5F82E82E Validity Not Before: Apr 24 22:31:11 2025 GMT Not After : May 1 22:31:11 2025 GMT Subject: CN=680abbaf-178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:d5:d1:ad:2b:18:d6:1b:a2:30:95:37:7b: d3:c7:83:e2:fa:83:6d:7e:86:53:b6:67:41:06:46: 62:2f:ca:3b:64:06:5f:f6:f8:83:2f:3c:a1:0f:22: 36:74:7a:09:6f:71:f5:84:e8:b1:cb:a8:cc:1b:cd: dd:f9:b8:f8:af:51:a3:00:a4:16:40:cb:8f:7b:4b: 8d:e4:3f:e2:f5:43:e5:d7:11:9f:06:87:87:1a:fd: 91:48:a8:6d:92:6c:d9:eb:b9:cf:4b:1f:11:e6:7d: 67:dd:cb:d8:23:c0:8e:4f:43:82:42:85:cf:18:2f: fe:20:ae:cc:24:0f:1d:1a:55:01:4c:c6:63:39:0a: 63:28:3d:77:b4:55:c6:47:78:b8:b0:12:e2:e3:04: 2e:f7:16:e1:aa:aa:f0:da:3c:aa:15:bb:e9:39:5c: 6b:b3:9f:c0:a9:52:9d:de:00:af:4d:29:f5:56:d2: e7:98:0a:54:8a:37:d4:e8:0a:12:69:96:43:86:23: 8a:85:f0:b7:c5:4a:b7:0f:9f:e0:45:aa:ff:1f:ee: 50:be:e4:2e:e9:77:d4:09:3b:bf:be:02:e7:1f:1e: 74:2b:cd:f5:e8:76:18:37:aa:24:b5:38:72:be:17: e3:2a:1d:6a:59:e4:2a:25:57:31:3b:3a:21:43:fb: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D3:95:69:0F:28:66:91:EF:FF:2E:B2:47:FB:EE:56:AA:75:4B:93 X509v3 Authority Key Identifier: keyid:24:52:18:1C:B1:08:AF:11:F4:62:87:37:1B:04:13:FF:5F:82:E8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8392/14D9E38A928811EBBBD45671C4F9AE02/JFIYHLEIrxH0Yoc3GwQT_1-C6C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:37:95:01:0c:79:04:9c:0e:35:30:29:f2:10:b6:80:22:1e: 58:d9:55:20:54:ba:b2:9c:8f:35:5e:97:55:60:0d:37:1b:01: 3b:c7:55:fd:bd:f7:6a:37:10:b8:37:82:bd:1c:4a:de:0c:be: 28:44:4a:7d:a6:82:17:c9:55:cf:c6:fb:7a:7f:da:4b:ec:8b: b1:70:eb:30:fb:cc:e2:3f:dd:f0:33:e0:e5:48:28:72:ee:6e: 22:22:56:23:77:54:43:4f:e8:49:d8:3c:da:ee:4d:10:b6:cb: f9:2b:a2:d5:11:e4:29:06:f3:15:c1:4e:b1:fb:ce:9f:f8:03: 3e:46:a2:7d:5d:f3:be:c7:9a:08:2e:d9:92:0f:14:df:e1:54: 0a:8b:70:05:87:1c:84:14:2a:15:5f:0b:68:25:8b:cd:c0:71: 87:04:56:ca:17:7d:5b:ff:7d:15:9d:a5:85:55:d2:4a:6f:4b: cd:ff:c3:3e:a7:99:16:52:8f:4d:95:af:d7:0d:3d:5e:d7:46: 03:2c:6a:79:b4:7d:f9:59:6f:ad:b8:6b:00:60:01:7e:8e:97: 91:52:8f:fd:b8:aa:c3:53:37:c4:51:f4:25:8b:05:c9:04:75: 8a:2a:0b:51:ee:25:a9:2e:da:03:cb:d7:2e:c4:c8:ca:a9:e7: 02:13:69:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzOTIxMTAvBgNVBAUTKDI0NTIxODFDQjEwOEFGMTFGNDYyODczNzFCMDQxM0ZG NUY4MkU4MkUwHhcNMjUwNDI0MjIzMTExWhcNMjUwNTAxMjIzMTExWjAYMRYwFAYD VQQDEw02ODBhYmJhZi0xNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XzV0a0rGNYbojCVN3vTx4Pi+oNtfoZTtmdBBkZiL8o7ZAZf9viDLzyhDyI2 dHoJb3H1hOixy6jMG83d+bj4r1GjAKQWQMuPe0uN5D/i9UPl1xGfBoeHGv2RSKht kmzZ67nPSx8R5n1n3cvYI8COT0OCQoXPGC/+IK7MJA8dGlUBTMZjOQpjKD13tFXG R3i4sBLi4wQu9xbhqqrw2jyqFbvpOVxrs5/AqVKd3gCvTSn1VtLnmApUijfU6AoS aZZDhiOKhfC3xUq3D5/gRar/H+5QvuQu6XfUCTu/vgLnHx50K8316HYYN6oktThy vhfjKh1qWeQqJVcxOzohQ/tXrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvTlWkP KGaR7/8uskf77laqdUuTMB8GA1UdIwQYMBaAFCRSGByxCK8R9GKHNxsEE/9fgugu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM5Mi8xNEQ5RTM4QTky ODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4SDBZb2MzR3dRVF8xLUM2 QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pGSVlITEVJcnhIMFlvYzNHd1FUXzEtQzZDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM5Mi8xNEQ5RTM4QTkyODgxMUVCQkJENDU2NzFDNEY5QUUwMi9KRklZSExFSXJ4 SDBZb2MzR3dRVF8xLUM2QzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAN5UBDHkEnA41MCnyELaAIh5Y2VUgVLqynI81XpdVYA03GwE7x1X9 vfdqNxC4N4K9HEreDL4oREp9poIXyVXPxvt6f9pL7IuxcOsw+8ziP93wM+DlSChy 7m4iIlYjd1RDT+hJ2Dza7k0Qtsv5K6LVEeQpBvMVwU6x+86f+AM+RqJ9XfO+x5oI LtmSDxTf4VQKi3AFhxyEFCoVXwtoJYvNwHGHBFbKF31b/30VnaWFVdJKb0vN/8M+ p5kWUo9Nla/XDT1e10YDLGp5tH35WW+tuGsAYAF+jpeRUo/9uKrDUzfEUfQliwXJ BHWKKgtR7iWpLtoDy9cuxMjKqecCE2kX -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:22 2025 by rpki-client