$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft File: JJNuE2nJDB7fka9Qctc_50V9yUM.mft (raw, json) Hash identifier: FUE67GJds3D9R+Bh64adLvgqKdySEVohaVI6OVaB0X4= Subject key identifier: 1E:28:BD:82:BE:EF:42:F0:6B:87:AB:7F:78:B0:8D:9E:F3:07:2A:54 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 13AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft Manifest number: 13A0 Signing time: Thu 24 Apr 2025 16:58:29 +0000 Manifest this update: Thu 24 Apr 2025 16:58:28 +0000 Manifest next update: Thu 01 May 2025 16:58:28 +0000 Files and hashes: 1: JJNuE2nJDB7fka9Qctc_50V9yUM.crl (hash: T7emvkGvKNzcWBNZZBMMO8lDHJvTCaqQXBpcnWoFe0c=) 2: C2AB1A10B64411E89321A417C4F9AE02.roa (hash: sQZhVCqGnQgPNsHomc/Him+uzpF3a8NDcj08KMyeCpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5035 (0x13ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Apr 24 16:58:28 2025 GMT Not After : May 1 16:58:28 2025 GMT Subject: CN=680a6db4-fe81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:9c:0f:09:6c:a8:37:51:ed:fb:aa:16:2c: 01:8c:28:63:81:36:ee:a2:46:af:e1:48:45:97:6d: ed:c6:3d:f1:85:37:e9:a6:22:ff:43:af:12:01:b8: 4a:9d:84:13:ee:41:80:77:59:63:a9:dd:fe:f3:80: 10:a0:93:9d:19:84:ae:dc:bb:12:83:8a:51:6a:f8: 0c:6b:18:9c:5f:83:2a:60:08:b1:13:a3:b9:ed:34: 08:19:fb:c2:e2:86:24:72:f8:53:49:79:b3:0f:7a: 74:a8:11:6d:01:f0:8f:d7:15:7d:3c:6b:0f:7f:b7: b5:58:51:e8:29:65:ac:24:5e:69:fd:e7:13:b0:5e: c3:d5:42:37:ef:fd:c2:5e:e2:0c:39:79:3a:ff:8c: 74:d3:de:c3:c5:48:ce:14:19:9f:8d:49:6d:8b:54: aa:2a:da:7d:24:3d:a3:2c:70:3c:32:70:6d:b5:2b: dd:b0:98:fd:31:08:67:0b:67:de:ca:f5:f9:6b:bf: 2c:d1:e7:7d:0e:9f:07:1e:49:19:0f:31:1c:db:b3: 3d:44:8f:8c:11:89:90:e6:fd:7a:09:fb:18:54:27: f9:63:40:c8:8e:af:bf:1d:61:ce:b4:63:26:35:c6: ef:49:63:00:ef:1e:ea:61:72:8a:b8:5f:bb:5d:96: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:28:BD:82:BE:EF:42:F0:6B:87:AB:7F:78:B0:8D:9E:F3:07:2A:54 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a6:82:a9:59:b0:03:42:ca:99:77:b8:f6:2d:21:8f:d4:7d: 86:6e:f3:9c:b0:3b:59:6f:ff:66:c1:89:a0:fa:f4:f7:81:bb: ab:41:15:5d:68:56:e6:a8:34:5b:6b:a9:58:78:f5:24:34:73: 29:b8:d2:21:ef:69:38:47:52:34:9d:80:1f:35:e0:20:21:ae: b8:64:84:26:d0:28:04:97:42:f0:a1:6d:c9:3b:e5:0b:25:f3: 65:61:31:87:75:0a:41:0a:4b:02:09:de:b9:f7:2e:4a:63:fc: 2c:9f:5f:1f:51:51:c4:0b:b3:e5:68:e3:7c:fb:32:44:d3:8d: 0b:0b:3f:e7:fb:ee:a7:90:d6:85:92:29:c6:04:98:49:5f:ec: b2:6f:43:bd:cb:66:2c:31:60:e5:3a:5b:0c:17:88:ca:dd:c4: 80:21:40:57:fc:40:cb:38:69:fa:ad:95:48:05:7b:50:23:61: 40:33:bd:ea:51:3d:4a:b8:d6:a3:49:0e:bd:80:87:e3:ee:99: 88:e8:f0:a1:99:59:a9:dc:e9:b4:52:17:34:90:fb:e8:d3:52: 3e:df:e9:56:18:fa:b2:4c:9d:eb:27:1c:56:81:29:ae:c3:63: 5b:18:78:1f:89:9f:90:0b:4c:e8:94:81:8f:51:9d:18:38:00: 46:49:f6:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUwNDI0MTY1ODI4WhcNMjUwNTAxMTY1ODI4WjAYMRYwFAYD VQQDEw02ODBhNmRiNC1mZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyWcDwlsqDdR7fuqFiwBjChjgTbuokav4UhFl23txj3xhTfppiL/Q68SAbhK nYQT7kGAd1ljqd3+84AQoJOdGYSu3LsSg4pRavgMaxicX4MqYAixE6O57TQIGfvC 4oYkcvhTSXmzD3p0qBFtAfCP1xV9PGsPf7e1WFHoKWWsJF5p/ecTsF7D1UI37/3C XuIMOXk6/4x0097DxUjOFBmfjUlti1SqKtp9JD2jLHA8MnBttSvdsJj9MQhnC2fe yvX5a78s0ed9Dp8HHkkZDzEc27M9RI+MEYmQ5v16CfsYVCf5Y0DIjq+/HWHOtGMm NcbvSWMA7x7qYXKKuF+7XZboFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4ovYK+ 70Lwa4erf3iwjZ7zBypUMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI3Qy85NUZEQTFGQThGNTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRC N2ZrYTlRY3RjXzUwVjl5VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2poKpWbADQsqZd7j2LSGP1H2GbvOcsDtZb/9mwYmg+vT3gburQRVd aFbmqDRba6lYePUkNHMpuNIh72k4R1I0nYAfNeAgIa64ZIQm0CgEl0LwoW3JO+UL JfNlYTGHdQpBCksCCd659y5KY/wsn18fUVHEC7PlaON8+zJE040LCz/n++6nkNaF kinGBJhJX+yyb0O9y2YsMWDlOlsMF4jK3cSAIUBX/EDLOGn6rZVIBXtQI2FAM73q UT1KuNajSQ69gIfj7pmI6PChmVmp3Om0Uhc0kPvo01I+3+lWGPqyTJ3rJxxWgSmu w2NbGHgfiZ+QC0zolIGPUZ0YOABGSfbL -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:19 2025 by rpki-client