$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: bLUdRZVPlnesBRF7T9GH03Cj5isU5d2SdGBCkiKRm9o= Subject key identifier: 7C:43:68:9B:30:6C:F6:FB:65:93:62:66:24:D5:40:91:40:E4:45:5D Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0D55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0D4E Signing time: Sat 26 Apr 2025 17:52:15 +0000 Manifest this update: Sat 26 Apr 2025 17:52:14 +0000 Manifest next update: Sat 03 May 2025 17:52:14 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: Qx8Zs1hcKf6qxuYi7PgxkBfvQJ24LB4nuaN8SqzzIhQ=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: 7nwi4xt2gy9ofefrS7G3QotlbXQ09IRHuywiHjLXzG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Apr 26 17:52:14 2025 GMT Not After : May 3 17:52:14 2025 GMT Subject: CN=680d1d4e-68ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:b1:0d:76:f6:f7:e5:6d:e3:4f:3a:f6:81: 36:68:8a:e7:51:76:5b:1f:19:73:aa:4f:f4:be:ca: d7:d3:1f:e3:9d:ab:37:c9:5b:ba:69:58:f2:4f:f5: fd:55:c0:a3:93:27:38:bf:11:dc:45:e1:e8:b3:16: c7:7c:7c:dd:98:96:84:23:29:04:a8:e7:03:84:db: 55:1e:cb:70:18:29:af:da:20:26:d8:af:f9:5c:66: db:ea:a3:06:e1:c4:38:33:0b:b9:ac:3a:c0:6e:09: ea:22:a8:ba:3f:42:bc:db:fd:bb:2a:bb:b5:70:c5: bc:93:b0:29:e3:43:23:cf:4e:a0:aa:51:a4:a8:1f: 48:73:35:13:0b:af:69:73:e3:23:31:d6:65:40:7d: 52:80:1f:f2:d2:3e:de:56:90:7b:8e:73:2e:04:78: 99:70:d1:59:f4:ec:b4:1b:b7:3f:b7:72:00:9e:d2: 41:4b:a9:5f:10:30:ba:81:ae:c2:e7:3f:87:1c:cc: 94:51:d0:f2:5a:ac:82:cb:62:20:d8:03:29:b0:a4: 86:db:22:bb:6a:f2:1e:b0:02:06:3e:7f:a6:6a:58: 88:d0:55:45:5e:15:3a:cd:ef:fc:90:cb:d2:7c:e9: 51:c9:22:bc:e8:eb:c9:90:4e:c7:ab:4f:35:f9:d7: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:43:68:9B:30:6C:F6:FB:65:93:62:66:24:D5:40:91:40:E4:45:5D X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:64:6b:42:70:ed:39:12:b9:a3:f0:c1:b1:b6:b8:8f:9d:c5: 91:1e:e7:22:74:f4:53:1c:bd:67:39:63:a0:21:34:04:05:99: 7d:f0:b1:44:d7:d8:c1:26:24:e5:1f:b4:f2:ee:57:59:13:a8: f4:9f:72:26:ef:90:92:fc:db:4b:e7:8b:dd:23:76:3c:7c:70: 7d:d1:d4:d8:a7:60:25:a0:ac:94:33:6d:7d:b9:ed:79:3c:72: 5a:47:31:3a:92:04:8f:ca:2a:92:50:55:e9:0c:0b:c0:31:dd: 6c:e9:eb:4f:04:94:fa:5f:e8:03:aa:e6:d2:63:ae:15:6b:0c: 07:0b:3b:92:49:f1:5c:53:f3:75:6d:4e:0f:e8:c0:ec:3c:aa: e6:01:c0:65:f4:5d:83:ed:bd:83:6d:18:a3:e2:0f:32:eb:bd: 22:fc:f4:97:46:b6:7e:37:e7:53:94:e4:1a:65:9b:90:4d:d2: 58:f3:97:7e:2e:8a:0a:9d:c1:d0:6d:01:90:3d:e2:fd:48:85: af:b6:10:c6:01:40:b2:1b:5c:18:c6:92:71:ea:25:5b:f0:15: 59:b1:29:8b:90:30:31:79:e9:b6:f6:3c:37:1e:25:64:47:80: 0c:b5:6f:49:bf:99:19:0c:81:ac:08:a3:21:44:c5:50:0b:c2: 75:2b:61:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUwNDI2MTc1MjE0WhcNMjUwNTAzMTc1MjE0WjAYMRYwFAYD VQQDEw02ODBkMWQ0ZS02OGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9GxDXb29+Vt40869oE2aIrnUXZbHxlzqk/0vsrX0x/jnas3yVu6aVjyT/X9 VcCjkyc4vxHcReHosxbHfHzdmJaEIykEqOcDhNtVHstwGCmv2iAm2K/5XGbb6qMG 4cQ4Mwu5rDrAbgnqIqi6P0K82/27Kru1cMW8k7Ap40Mjz06gqlGkqB9IczUTC69p c+MjMdZlQH1SgB/y0j7eVpB7jnMuBHiZcNFZ9Oy0G7c/t3IAntJBS6lfEDC6ga7C 5z+HHMyUUdDyWqyCy2Ig2AMpsKSG2yK7avIesAIGPn+maliI0FVFXhU6ze/8kMvS fOlRySK86OvJkE7Hq081+dfhvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxDaJsw bPb7ZZNiZiTVQJFA5EVdMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUZGtCcO05Ermj8MGxtriPncWRHucidPRTHL1nOWOgITQEBZl98LFE 19jBJiTlH7Ty7ldZE6j0n3Im75CS/NtL54vdI3Y8fHB90dTYp2AloKyUM219ue15 PHJaRzE6kgSPyiqSUFXpDAvAMd1s6etPBJT6X+gDqubSY64VawwHCzuSSfFcU/N1 bU4P6MDsPKrmAcBl9F2D7b2DbRij4g8y670i/PSXRrZ+N+dTlOQaZZuQTdJY85d+ LooKncHQbQGQPeL9SIWvthDGAUCyG1wYxpJx6iVb8BVZsSmLkDAxeem29jw3HiVk R4AMtW9Jv5kZDIGsCKMhRMVQC8J1K2F8 -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:32 2025 by rpki-client