$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: bFGWxNpP8e3ZqxymoA32yyHlacaAkKVuw00f0ZcPFSk= Subject key identifier: 0E:14:B7:17:69:DA:BA:3E:0B:A8:BA:90:F7:B9:89:11:F5:83:D4:AD Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 021D Signing time: Fri 25 Apr 2025 02:12:11 +0000 Manifest this update: Fri 25 Apr 2025 02:12:10 +0000 Manifest next update: Fri 02 May 2025 02:12:10 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: VWwU2areu2GBqcaskqHi/r1tLNE9EMz6uPxc81KjxOc=) 2: 59E393C204D011F0B464E44DC4F9AE02.roa (hash: F/d9YZwkTTfQMW9az/pHb2W2rOLLgswMCEvuqBHWldg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Apr 25 02:12:10 2025 GMT Not After : May 2 02:12:10 2025 GMT Subject: CN=680aef7a-b98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:62:d0:86:59:82:44:49:f8:92:70:01:90: ee:ab:46:62:e7:b6:2c:ab:53:01:64:3f:19:1f:99: 45:ea:b0:7f:61:5c:dd:f0:e8:b3:56:6b:3f:13:01: 2e:1d:35:3f:31:f7:c0:fb:71:09:59:2f:3d:20:29: 09:b7:f0:6b:43:73:04:e7:cb:a4:82:b5:b1:3e:b9: de:54:f7:c6:29:cb:c5:c9:97:8e:b0:1d:31:fb:a7: 01:7f:70:39:45:10:cb:eb:19:6b:da:09:65:6a:65: ee:04:d5:33:37:77:6e:8f:f1:03:73:e0:d3:48:17: 84:73:17:2c:b6:7f:b7:45:e7:bf:1b:72:c0:7a:dd: 48:de:e1:7b:f4:fa:d3:29:6b:73:b9:ba:cf:4b:bd: 07:f9:67:ea:5c:2c:ee:6e:88:6c:93:4f:2e:af:f6: ae:c0:4d:f2:3f:84:12:88:48:23:8d:29:6b:33:e1: a0:34:18:e4:d0:e1:86:94:9a:13:f6:97:2c:30:79: 40:2d:dc:a1:64:cc:0d:51:98:5c:f7:6a:83:ba:e2: f9:eb:bc:ee:68:b5:3a:6d:25:04:4d:47:cd:99:21: 4c:8f:ad:6c:90:3a:ef:c3:f7:c3:58:ad:78:27:3a: b3:ab:3b:e7:95:70:4d:0e:1d:12:f0:a7:db:15:a6: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:14:B7:17:69:DA:BA:3E:0B:A8:BA:90:F7:B9:89:11:F5:83:D4:AD X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c4:bc:76:71:00:00:c0:6a:81:64:75:a8:2c:eb:5b:ff:65: f1:5f:43:f1:fe:c5:5e:5a:9f:68:fc:50:57:ac:2f:1f:2b:c0: 09:e9:59:83:3b:6e:76:84:84:3b:ea:e8:b3:01:cf:e7:34:93: 6a:ba:15:23:46:5d:32:c9:c1:10:91:44:48:f6:2d:c5:dc:89: 24:3e:51:bf:b6:33:a7:a1:85:88:88:0c:4b:db:55:0f:d0:9e: 0a:28:6b:91:d3:4e:3c:76:dd:cd:ff:2a:2d:4d:20:67:88:b5: 0f:89:cf:ed:dd:70:1f:0b:c6:3a:eb:86:89:5d:57:b9:65:0c: a1:60:ae:56:b8:f3:f0:70:e0:b8:88:05:9f:bb:6c:f3:0d:34: 29:95:14:7f:31:f9:10:e1:bc:4b:8d:50:58:bf:6b:a2:71:dc: de:23:09:ff:55:c4:b6:be:6e:3e:a2:97:74:bd:8f:4b:e6:b6: a5:78:74:52:e7:4c:fb:8a:83:62:3b:a4:40:45:ca:12:15:7d: 23:47:30:42:9a:19:08:e8:2e:89:7e:bc:34:c2:94:c1:44:c3: cd:a0:0d:0b:42:ac:e7:b7:4f:92:b0:b0:16:d1:6a:35:45:cb: 36:ab:3e:78:f1:e3:40:34:20:ab:50:61:5f:01:cf:6e:27:3e: 9a:59:f8:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwNDI1MDIxMjEwWhcNMjUwNTAyMDIxMjEwWjAYMRYwFAYD VQQDEw02ODBhZWY3YS1iOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszJi0IZZgkRJ+JJwAZDuq0Zi57Ysq1MBZD8ZH5lF6rB/YVzd8OizVms/EwEu HTU/MffA+3EJWS89ICkJt/BrQ3ME58ukgrWxPrneVPfGKcvFyZeOsB0x+6cBf3A5 RRDL6xlr2gllamXuBNUzN3duj/EDc+DTSBeEcxcstn+3Ree/G3LAet1I3uF79PrT KWtzubrPS70H+WfqXCzubohsk08ur/auwE3yP4QSiEgjjSlrM+GgNBjk0OGGlJoT 9pcsMHlALdyhZMwNUZhc92qDuuL567zuaLU6bSUETUfNmSFMj61skDrvw/fDWK14 JzqzqzvnlXBNDh0S8KfbFaY+uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4Utxdp 2ro+C6i6kPe5iRH1g9StMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0xLx2cQAAwGqBZHWoLOtb/2XxX0Px/sVeWp9o/FBXrC8fK8AJ6VmD O252hIQ76uizAc/nNJNquhUjRl0yycEQkURI9i3F3IkkPlG/tjOnoYWIiAxL21UP 0J4KKGuR0048dt3N/yotTSBniLUPic/t3XAfC8Y664aJXVe5ZQyhYK5WuPPwcOC4 iAWfu2zzDTQplRR/MfkQ4bxLjVBYv2uicdzeIwn/VcS2vm4+opd0vY9L5raleHRS 50z7ioNiO6RARcoSFX0jRzBCmhkI6C6Jfrw0wpTBRMPNoA0LQqznt0+SsLAW0Wo1 Rcs2qz548eNANCCrUGFfAc9uJz6aWfgL -----END CERTIFICATE-----Generated at Sat Apr 26 05:01:33 2025 by rpki-client