$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft File: jxr96TYoAxM_-8pwz39qr7Az13E.mft (raw, json) Hash identifier: nTT8doU1bNj7JdF+0yt+ZCveFPkXohaYVr67AfaWcms= Subject key identifier: A1:7E:0A:16:39:19:81:A1:EB:23:23:D4:D9:F1:46:D2:B6:0F:41:AC Authority key identifier: 8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 Certificate issuer: /CN=A91D9611/serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft Manifest number: 08E6 Signing time: Thu 24 Apr 2025 20:16:13 +0000 Manifest this update: Thu 24 Apr 2025 20:16:12 +0000 Manifest next update: Thu 01 May 2025 20:16:12 +0000 Files and hashes: 1: jxr96TYoAxM_-8pwz39qr7Az13E.crl (hash: +pggTHu2TEuRLV8odr+Gyh5zv9p5sTPD4MVZlhHLW8s=) 2: 9A1AEF16A9F511EAAEF63A52C4F9AE02.roa (hash: /K6l2Nk5DFl51F71/YofhWzfQ52cGcF53r9oxtYQCag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9611, serialNumber=8F1AFDE9362803133FFBCA70CF7F6AAFB033D771 Validity Not Before: Apr 24 20:16:12 2025 GMT Not After : May 1 20:16:12 2025 GMT Subject: CN=680a9c0c-97c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:b9:e6:8c:d7:0c:ef:9c:59:cc:b0:de:04: f8:97:d8:88:95:60:65:8f:0f:40:1e:e7:c8:f0:13: 09:50:e9:ef:99:a7:51:ab:83:be:bc:00:f1:c2:cd: d7:fc:91:5c:f8:aa:55:76:2b:d8:8a:ae:64:59:e5: 7a:22:58:a0:85:73:b7:95:be:a4:4c:86:50:40:9f: c4:0a:79:34:c5:7c:af:0d:c2:4c:17:b9:8b:6d:31: 9f:39:29:e9:47:d3:34:8f:48:56:ea:7c:94:d5:ac: a3:5d:98:36:c2:eb:76:97:0b:ab:6e:cc:27:75:2b: 83:7a:3a:35:52:d9:b6:25:23:5e:9c:60:2e:2e:95: 2c:c7:25:d7:4d:50:d5:be:77:74:d9:f1:50:ca:65: 7b:68:b5:e7:ee:b5:7d:62:d6:17:f2:bb:20:08:b2: 9b:aa:b5:9a:09:15:f2:21:f0:b4:3b:39:c7:cd:93: ac:7b:e2:99:c2:3c:ef:ad:c8:13:d2:6e:1e:2c:cd: b6:af:01:c3:78:fa:d2:7d:65:aa:2d:f0:e7:34:5c: 48:43:78:f7:94:a0:bc:d7:ed:a4:f9:82:00:ec:5c: 56:ab:d9:6e:39:cd:33:9c:4d:10:35:52:20:32:81: 6b:ff:8d:33:c9:b2:a3:13:c0:96:84:f2:58:08:9a: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7E:0A:16:39:19:81:A1:EB:23:23:D4:D9:F1:46:D2:B6:0F:41:AC X509v3 Authority Key Identifier: keyid:8F:1A:FD:E9:36:28:03:13:3F:FB:CA:70:CF:7F:6A:AF:B0:33:D7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxr96TYoAxM_-8pwz39qr7Az13E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9611/8EA2475AA9F111EAADD38949C4F9AE02/jxr96TYoAxM_-8pwz39qr7Az13E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:90:9c:26:94:27:57:bc:f1:31:76:df:3c:5f:b5:df:61:b5: 78:19:86:37:0f:7e:d2:98:75:6a:9c:de:46:15:18:b4:51:41: ae:1c:68:c5:cb:bb:86:e2:7b:93:de:53:02:a9:fd:6f:2f:0f: 50:f6:a7:f3:18:42:7c:b5:b0:7f:5d:a2:ce:b7:45:66:8f:59: cb:40:cd:4b:a4:76:ce:51:e3:6a:2f:2d:8f:bf:a6:10:e2:79: c3:cc:36:24:41:65:33:ce:c4:88:e1:2d:57:9f:41:49:3a:4a: 5f:f7:70:18:8b:ca:21:22:0a:1c:ef:1c:83:ea:9f:3a:4e:79: 9c:aa:ac:96:a4:69:10:28:26:ee:5d:6c:31:28:0c:43:20:2f: 0f:8e:bb:e2:45:97:ec:af:ef:5d:0a:61:9c:9c:dd:b1:ae:d0: 1b:47:85:36:c7:97:af:0e:a2:0c:02:ac:7c:15:27:7c:ff:5c: 80:c0:d8:bf:12:41:12:a8:de:bd:0b:01:6a:69:bf:b4:2a:b7: 5c:bf:6a:9e:82:86:e2:9e:6e:dd:37:a4:6c:52:09:9d:df:fe: b6:7f:dc:b9:1e:9c:c1:de:a9:ec:66:1e:24:c4:38:08:ec:f0: ad:33:ac:96:48:71:ba:70:51:77:f1:0c:b7:97:2c:97:e2:20: 4b:93:fe:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MTExMTAvBgNVBAUTKDhGMUFGREU5MzYyODAzMTMzRkZCQ0E3MENGN0Y2QUFG QjAzM0Q3NzEwHhcNMjUwNDI0MjAxNjEyWhcNMjUwNTAxMjAxNjEyWjAYMRYwFAYD VQQDEw02ODBhOWMwYy05N2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwei55ozXDO+cWcyw3gT4l9iIlWBljw9AHufI8BMJUOnvmadRq4O+vADxws3X /JFc+KpVdivYiq5kWeV6IlighXO3lb6kTIZQQJ/ECnk0xXyvDcJMF7mLbTGfOSnp R9M0j0hW6nyU1ayjXZg2wut2lwurbswndSuDejo1Utm2JSNenGAuLpUsxyXXTVDV vnd02fFQymV7aLXn7rV9YtYX8rsgCLKbqrWaCRXyIfC0OznHzZOse+KZwjzvrcgT 0m4eLM22rwHDePrSfWWqLfDnNFxIQ3j3lKC81+2k+YIA7FxWq9luOc0znE0QNVIg MoFr/40zybKjE8CWhPJYCJrMbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF+ChY5 GYGh6yMj1NnxRtK2D0GsMB8GA1UdIwQYMBaAFI8a/ek2KAMTP/vKcM9/aq+wM9dx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYxMS84RUEyNDc1QUE5 RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4TV8tOHB3ejM5cXI3QXox M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4cjk2VFlvQXhNXy04cHd6MzlxcjdBejEzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYxMS84RUEyNDc1QUE5RjExMUVBQUREMzg5NDlDNEY5QUUwMi9qeHI5NlRZb0F4 TV8tOHB3ejM5cXI3QXoxM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPkJwmlCdXvPExdt88X7XfYbV4GYY3D37SmHVqnN5GFRi0UUGuHGjF y7uG4nuT3lMCqf1vLw9Q9qfzGEJ8tbB/XaLOt0Vmj1nLQM1LpHbOUeNqLy2Pv6YQ 4nnDzDYkQWUzzsSI4S1Xn0FJOkpf93AYi8ohIgoc7xyD6p86TnmcqqyWpGkQKCbu XWwxKAxDIC8PjrviRZfsr+9dCmGcnN2xrtAbR4U2x5evDqIMAqx8FSd8/1yAwNi/ EkESqN69CwFqab+0Krdcv2qegobinm7dN6RsUgmd3/62f9y5HpzB3qnsZh4kxDgI 7PCtM6yWSHG6cFF38Qy3lyyX4iBLk/4x -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:20 2025 by rpki-client