$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: iGCyj190zwMkFWVTEBXtRyeeSGeIY2DrlTO14uzoA68= Subject key identifier: 57:EC:30:FA:59:1D:C0:CF:38:98:75:FF:F8:E6:8D:8B:49:2E:54:D8 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 039F Signing time: Fri 25 Apr 2025 00:32:45 +0000 Manifest this update: Fri 25 Apr 2025 00:32:45 +0000 Manifest next update: Fri 02 May 2025 00:32:45 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: T3tYnG/+goeJ98eLBwK0nb8sVzvXdEXETpUM7kg80RQ=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 53okBBihrVod9gd5c53/fKO2EZYSA4Bon9/JWGkN+Rg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: 2N56kFgApjf7qIYT6IwxnOYom7Jlq6/P84ID+wKdJxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Apr 25 00:32:45 2025 GMT Not After : May 2 00:32:45 2025 GMT Subject: CN=680ad82d-7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:1a:0b:6a:16:c6:8a:38:68:bf:44:bd:d3: 8e:b7:84:5f:3a:19:28:a4:c6:22:61:c4:e2:3b:e0: e3:aa:85:a9:f9:b2:f4:2a:07:90:88:ac:68:2b:5e: 8a:6e:db:57:dc:a0:f3:2e:49:57:d4:6f:e3:93:78: 28:3c:33:1f:b8:2e:c0:f0:f6:0e:d6:89:2b:1d:74: 33:19:f3:b7:f0:a1:ea:1d:20:df:5a:a7:d1:27:53: 77:0b:31:b1:ad:8f:c2:15:1d:62:6f:56:89:ef:70: 06:79:0b:3d:1a:e4:28:4d:ec:0c:17:20:5e:f4:54: ec:f4:e3:6e:da:39:06:69:65:0f:04:f0:88:79:24: ad:44:99:19:e9:07:74:dc:74:8a:41:dc:27:20:38: 66:2d:58:6e:fd:8f:bd:46:f7:8d:07:36:1c:9a:85: 4f:b2:a9:d1:31:3e:2d:44:a5:a9:17:af:73:e7:0f: 79:f6:05:65:df:47:0b:6c:d7:5f:65:0f:76:7f:20: 64:91:d5:3b:9b:51:9d:41:82:94:d3:2d:d1:72:0d: 79:ee:7c:f1:63:a1:bf:cf:af:ba:b3:22:8d:a1:be: 12:00:f8:a9:0a:d0:9f:56:a6:c7:27:e3:62:49:df: 2b:67:c9:9e:22:a1:ab:64:ef:1d:4c:71:e1:a7:23: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EC:30:FA:59:1D:C0:CF:38:98:75:FF:F8:E6:8D:8B:49:2E:54:D8 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ab:ee:e5:7f:19:f0:61:de:90:f1:34:09:8d:cc:7d:cd:10: 27:86:d2:ad:b5:09:fa:2a:44:19:16:37:03:85:16:3e:a8:27: 0f:09:6e:6f:e1:f9:6a:03:b8:56:de:48:72:9b:9c:40:49:a0: 8e:b7:eb:92:34:f4:71:65:81:f9:3a:a7:fb:5c:7f:24:8c:ca: 8f:fc:38:ec:66:3b:01:79:4d:9b:24:25:a1:c5:36:cb:e4:03: da:27:3c:8a:fe:9d:94:0d:d7:38:8b:97:5f:9f:96:1b:96:89: f4:12:c7:33:0c:95:98:02:cc:b3:1e:9a:a0:c3:57:d1:c7:29: b1:7e:e6:e2:c3:23:2c:d4:ee:93:b6:e5:ef:0a:53:e4:cb:92: 32:05:0c:94:5b:3d:98:6a:d0:e9:86:08:4c:dc:54:77:2f:0f: 5d:e7:2c:c2:ce:63:0a:b1:a1:2a:31:bc:84:a2:ec:37:0a:ae: 82:da:32:18:4d:9d:44:f2:34:ef:59:5c:d8:5b:cf:a3:07:4b: 5d:3a:f3:f6:f2:36:ae:09:1f:78:9c:cd:06:fd:de:70:45:16: b0:d5:60:94:aa:a8:1b:99:cb:7e:4a:10:40:f2:86:b2:f4:5c: e1:9f:d4:c1:e3:da:f0:71:a5:3f:bf:fb:3f:7c:df:ec:72:f3: 20:77:05:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwNDI1MDAzMjQ1WhcNMjUwNTAyMDAzMjQ1WjAYMRYwFAYD VQQDEw02ODBhZDgyZC03NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSwaC2oWxoo4aL9EvdOOt4RfOhkopMYiYcTiO+DjqoWp+bL0KgeQiKxoK16K bttX3KDzLklX1G/jk3goPDMfuC7A8PYO1okrHXQzGfO38KHqHSDfWqfRJ1N3CzGx rY/CFR1ib1aJ73AGeQs9GuQoTewMFyBe9FTs9ONu2jkGaWUPBPCIeSStRJkZ6Qd0 3HSKQdwnIDhmLVhu/Y+9RveNBzYcmoVPsqnRMT4tRKWpF69z5w959gVl30cLbNdf ZQ92fyBkkdU7m1GdQYKU0y3Rcg157nzxY6G/z6+6syKNob4SAPipCtCfVqbHJ+Ni Sd8rZ8meIqGrZO8dTHHhpyNNDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfsMPpZ HcDPOJh1//jmjYtJLlTYMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8q+7lfxnwYd6Q8TQJjcx9zRAnhtKttQn6KkQZFjcDhRY+qCcPCW5v 4flqA7hW3khym5xASaCOt+uSNPRxZYH5Oqf7XH8kjMqP/DjsZjsBeU2bJCWhxTbL 5APaJzyK/p2UDdc4i5dfn5Yblon0EsczDJWYAsyzHpqgw1fRxymxfubiwyMs1O6T tuXvClPky5IyBQyUWz2YatDphghM3FR3Lw9d5yzCzmMKsaEqMbyEouw3Cq6C2jIY TZ1E8jTvWVzYW8+jB0tdOvP28jauCR94nM0G/d5wRRaw1WCUqqgbmct+ShBA8oay 9Fzhn9TB49rwcaU/v/s/fN/scvMgdwWx -----END CERTIFICATE-----Generated at Sat Apr 26 03:54:01 2025 by rpki-client