$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json) Hash identifier: /pZ2pkyeumgOAccoIP2K54IRazyZ9jnebgR2Scvc0XM= Subject key identifier: 4C:9B:81:E4:38:CC:B2:C0:B1:82:B5:5A:76:89:C4:44:2B:97:50:8F Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Certificate serial: 1473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft Manifest number: 146A Signing time: Thu 24 Apr 2025 16:54:33 +0000 Manifest this update: Thu 24 Apr 2025 16:54:32 +0000 Manifest next update: Thu 01 May 2025 16:54:32 +0000 Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: zV8J6bN80TLTsDGRy5nNtNZ44bQMbkH2xKUBWNUXUUs=) 2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mkbx/bzyF+QWS8oqI8XyH1scPq9ynG9SZktcZG6GCNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5235 (0x1473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Validity Not Before: Apr 24 16:54:32 2025 GMT Not After : May 1 16:54:32 2025 GMT Subject: CN=680a6cc9-319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:fc:1a:7d:15:0e:28:93:47:ff:8c:bd:2a: b6:a0:c8:d2:89:3d:90:fa:7d:65:b0:9d:62:50:94: 0b:f1:37:bb:ae:ef:d1:e8:13:ba:a6:57:df:e8:69: be:3d:b2:82:a0:e8:e9:45:b2:46:9d:89:72:33:85: 11:1f:45:27:31:34:9f:d7:d0:5e:2b:c4:89:fa:ad: 8b:dd:5c:d5:e6:61:aa:32:10:8c:96:e0:97:3f:ab: a3:cb:be:97:a9:e2:c5:6c:a8:69:c6:a3:ac:c2:6b: 0e:2d:2f:cf:aa:a3:27:cc:44:9a:25:a3:2d:3b:3e: 16:37:1d:8c:c8:8d:af:fe:cd:f7:49:42:62:ed:c7: 5f:8c:5e:24:bf:e3:65:76:22:db:ae:5d:f7:9b:52: b4:cb:8c:2b:b7:19:73:90:e0:b9:70:d5:58:c2:db: 4c:43:a4:c5:c4:75:0b:0c:71:a7:ac:46:a6:1c:80: 69:7e:e5:bb:10:3e:a4:6b:6c:d1:d0:76:49:03:de: 9b:f1:b0:9e:0c:84:f4:ee:a4:32:eb:0c:b9:c1:61: 87:26:c1:35:b0:99:5e:33:29:0d:50:53:86:b8:42: 93:9f:8b:37:fa:80:9c:9e:e5:e3:91:b9:de:de:4b: 75:f0:38:9f:a6:0f:66:90:e4:74:8e:d3:25:df:68: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:81:E4:38:CC:B2:C0:B1:82:B5:5A:76:89:C4:44:2B:97:50:8F X509v3 Authority Key Identifier: keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:78:fc:e0:9b:3c:63:3b:63:43:10:d2:a6:ae:3f:f1:94:ba: 24:c4:62:2a:7e:18:7f:f7:b4:c8:35:5c:c2:3a:79:b0:e3:ca: e7:2d:9b:a5:13:f7:13:75:a2:97:7c:d0:cd:a6:78:84:66:5e: e6:17:e6:55:33:4a:d9:07:0c:08:b3:95:a3:1b:33:71:1e:c4: 9c:51:f7:fa:3c:10:c5:d2:64:06:d9:05:0d:c5:4a:03:59:c8: 7f:28:14:93:64:82:33:f3:fb:6e:5a:c9:bc:07:e8:b4:d5:20: 96:68:9e:e6:24:08:e0:d9:ee:a7:64:e1:17:01:ff:57:f9:8d: 9f:16:1c:36:dd:15:08:a3:20:4c:fe:34:ad:62:87:f9:bc:da: 9f:0a:26:0e:e9:47:89:6c:2b:9c:18:6d:38:58:75:24:d3:29: 53:3d:5e:b3:87:a7:e7:46:4c:1e:01:43:4d:e0:e8:0d:53:b2: 3e:d5:af:22:fb:36:ef:8c:4f:1f:d7:bd:9a:b0:e3:6e:e1:b3: 7b:d3:4c:ef:72:4e:6f:a6:4d:64:7c:00:47:0f:ed:9b:1b:c5: 52:4f:0e:56:ff:0a:be:f1:b9:b4:ab:8c:00:29:be:fa:f5:95: 70:94:dc:be:46:df:3f:e2:03:e0:90:08:19:2d:56:0c:58:bf: e6:9f:43:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE OUU0MTlCNEYwHhcNMjUwNDI0MTY1NDMyWhcNMjUwNTAxMTY1NDMyWjAYMRYwFAYD VQQDEw02ODBhNmNjOS0zMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfX8Gn0VDiiTR/+MvSq2oMjSiT2Q+n1lsJ1iUJQL8Te7ru/R6BO6plff6Gm+ PbKCoOjpRbJGnYlyM4URH0UnMTSf19BeK8SJ+q2L3VzV5mGqMhCMluCXP6ujy76X qeLFbKhpxqOswmsOLS/PqqMnzESaJaMtOz4WNx2MyI2v/s33SUJi7cdfjF4kv+Nl diLbrl33m1K0y4wrtxlzkOC5cNVYwttMQ6TFxHULDHGnrEamHIBpfuW7ED6ka2zR 0HZJA96b8bCeDIT07qQy6wy5wWGHJsE1sJleMykNUFOGuEKTn4s3+oCcnuXjkbne 3kt18Difpg9mkOR0jtMl32gzCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEybgeQ4 zLLAsYK1WnaJxEQrl1CPMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ePzgmzxjO2NDENKmrj/xlLokxGIqfhh/97TINVzCOnmw48rnLZul E/cTdaKXfNDNpniEZl7mF+ZVM0rZBwwIs5WjGzNxHsScUff6PBDF0mQG2QUNxUoD Wch/KBSTZIIz8/tuWsm8B+i01SCWaJ7mJAjg2e6nZOEXAf9X+Y2fFhw23RUIoyBM /jStYof5vNqfCiYO6UeJbCucGG04WHUk0ylTPV6zh6fnRkweAUNN4OgNU7I+1a8i +zbvjE8f172asONu4bN700zvck5vpk1kfABHD+2bG8VSTw5W/wq+8bm0q4wAKb76 9ZVwlNy+Rt8/4gPgkAgZLVYMWL/mn0M8 -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:25 2025 by rpki-client