$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft File: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft (raw, json) Hash identifier: eYPomxB9qGppwzySqLxFQ7ttS6cfjPzWVsVt0JgbmLA= Subject key identifier: 81:F8:7A:43:2D:FC:7D:73:92:A7:21:FD:4C:79:2C:2C:AC:41:AD:E5 Authority key identifier: 27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD Certificate issuer: /CN=A91E5FCD/serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft Manifest number: 1EA8 Signing time: Thu 24 Apr 2025 16:25:45 +0000 Manifest this update: Thu 24 Apr 2025 16:25:44 +0000 Manifest next update: Thu 01 May 2025 16:25:44 +0000 Files and hashes: 1: Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl (hash: GLgwG0icX3fBmATPP9JzqbVceaPuQMBRWshpFFhrfxE=) 2: 08CD5AD2DA2B11EBA1C6AA3CC4F9AE02.roa (hash: 18yGqSgC4OjskRlJV7bTeEZSgygKIsdz22IPs64qVtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=273AAAE2E3BE994FC2833F85712923CD417B7FAD Validity Not Before: Apr 24 16:25:44 2025 GMT Not After : May 1 16:25:44 2025 GMT Subject: CN=680a6609-53c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:4c:f6:b9:05:e5:79:d2:ce:87:12:ba:73: 60:b1:1a:36:ec:f0:9b:40:14:0b:f6:df:8f:9a:7b: 47:e4:e8:ba:8f:72:94:eb:be:31:b3:e6:f2:80:8c: a1:fc:f7:4d:12:36:39:fc:ea:f4:8f:34:00:f6:e3: 91:23:63:a3:27:c3:0f:1a:43:43:73:6f:25:65:b7: f0:b4:a9:79:2c:92:53:29:29:4d:be:8e:54:ac:21: 87:7e:6d:23:38:ab:76:f0:a8:69:f4:25:49:dc:fb: ad:70:d2:5e:61:73:ae:43:dd:e5:d8:1d:16:ee:4c: f0:b6:4f:7d:6d:bc:52:e7:c7:a6:d4:1c:f5:9f:fb: 30:d3:99:87:0e:04:73:36:ca:e3:52:0c:40:dd:02: 26:3e:8f:e1:0c:4f:e2:8d:07:f8:a2:ab:75:a5:09: 34:0b:19:e0:9f:95:71:99:8f:da:3f:e1:15:83:fa: 66:4e:46:79:39:43:24:d9:cf:e0:4c:84:0c:34:be: 53:23:b4:f3:d8:ff:56:72:6b:4e:e8:06:1d:9a:66: 9a:b7:93:95:33:33:54:dd:2e:9e:c3:ab:78:2c:ca: 31:de:da:ed:33:66:42:0a:11:4f:55:d6:72:6d:da: d4:46:82:cf:e0:21:b6:6f:2a:bf:eb:cf:fe:a0:63: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:7A:43:2D:FC:7D:73:92:A7:21:FD:4C:79:2C:2C:AC:41:AD:E5 X509v3 Authority Key Identifier: keyid:27:3A:AA:E2:E3:BE:99:4F:C2:83:3F:85:71:29:23:CD:41:7B:7F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/Jzqq4uO-mU_Cgz-FcSkjzUF7f60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:2a:7d:c7:c0:38:1f:d4:3b:11:c9:6c:2a:79:98:19:1d:92: dc:20:cd:30:04:2c:ad:a7:f0:cb:df:7f:62:a2:7b:06:73:8a: 27:48:56:f1:ad:42:e7:08:08:f9:eb:cb:61:3f:8a:8e:5c:02: 20:0c:ff:a4:92:ee:7b:72:1c:38:c3:2e:1a:39:d9:22:e1:77: 53:22:87:51:54:89:00:94:32:05:c0:ed:1a:4f:83:d7:76:d0: b5:e2:61:1b:82:a1:b2:aa:a2:41:4e:c4:6c:78:a0:b3:c0:e9: e0:39:39:47:fe:7b:be:6a:c0:42:b5:e0:70:3d:f3:d9:bf:8e: c7:1b:2b:24:1f:81:46:3f:d2:b5:35:62:f2:18:0d:94:99:22: cb:1f:21:e6:24:a3:0b:38:82:20:72:2f:01:14:74:86:a4:3d: ba:46:76:b7:01:04:fa:f0:e6:69:55:75:18:bf:41:fc:00:1b: ca:15:1a:9e:45:0e:a3:81:77:d6:a4:3c:5b:13:87:8b:96:80: dd:ec:08:79:ad:19:8c:db:6d:3a:af:6b:f1:91:df:59:b6:ec: 5d:eb:46:f4:26:ba:e9:eb:f4:58:d7:a5:ef:b1:07:6f:1b:b2: 98:a2:5e:91:af:a9:5b:f7:ab:bb:da:45:d2:63:0f:1d:d9:f0: fd:7d:1f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKDI3M0FBQUUyRTNCRTk5NEZDMjgzM0Y4NTcxMjkyM0NE NDE3QjdGQUQwHhcNMjUwNDI0MTYyNTQ0WhcNMjUwNTAxMTYyNTQ0WjAYMRYwFAYD VQQDEw02ODBhNjYwOS01M2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMJM9rkF5XnSzocSunNgsRo27PCbQBQL9t+PmntH5Oi6j3KU674xs+bygIyh /PdNEjY5/Or0jzQA9uORI2OjJ8MPGkNDc28lZbfwtKl5LJJTKSlNvo5UrCGHfm0j OKt28Khp9CVJ3PutcNJeYXOuQ93l2B0W7kzwtk99bbxS58em1Bz1n/sw05mHDgRz NsrjUgxA3QImPo/hDE/ijQf4oqt1pQk0Cxngn5VxmY/aP+EVg/pmTkZ5OUMk2c/g TIQMNL5TI7Tz2P9WcmtO6AYdmmaat5OVMzNU3S6ew6t4LMox3trtM2ZCChFPVdZy bdrURoLP4CG2byq/68/+oGOwlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH4ekMt /H1zkqch/Ux5LCysQa3lMB8GA1UdIwQYMBaAFCc6quLjvplPwoM/hXEpI81Be3+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1VX0Nnei1GY1NranpVRjdm NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6cXE0dU8tbVVfQ2d6LUZjU2tqelVGN2Y2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9KenFxNHVPLW1V X0Nnei1GY1NranpVRjdmNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrKn3HwDgf1DsRyWwqeZgZHZLcIM0wBCytp/DL339ionsGc4onSFbx rULnCAj568thP4qOXAIgDP+kku57chw4wy4aOdki4XdTIodRVIkAlDIFwO0aT4PX dtC14mEbgqGyqqJBTsRseKCzwOngOTlH/nu+asBCteBwPfPZv47HGyskH4FGP9K1 NWLyGA2UmSLLHyHmJKMLOIIgci8BFHSGpD26Rna3AQT68OZpVXUYv0H8ABvKFRqe RQ6jgXfWpDxbE4eLloDd7Ah5rRmM2206r2vxkd9Ztuxd60b0Jrrp6/RY16XvsQdv G7KYol6Rr6lb96u72kXSYw8d2fD9fR9u -----END CERTIFICATE-----Generated at Sat Apr 26 03:42:18 2025 by rpki-client