$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft File: jnukzb-3xlg9SblHG83AaeSAZk0.mft (raw, json) Hash identifier: +TkJ1QnI9H1+akZZuDKMBVovL5KXpXblSlhpoSLEFy8= Subject key identifier: 3E:71:4E:CA:CD:2B:F4:3F:9E:10:7A:67:75:75:E2:5A:AE:B8:E2:BA Authority key identifier: 8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D Certificate issuer: /CN=A91F1610/serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft Manifest number: 03C7 Signing time: Fri 25 Apr 2025 00:23:28 +0000 Manifest this update: Fri 25 Apr 2025 00:23:28 +0000 Manifest next update: Fri 02 May 2025 00:23:28 +0000 Files and hashes: 1: jnukzb-3xlg9SblHG83AaeSAZk0.crl (hash: vGcV7xBKxW+lSBjYp07iDrzXwNyhHgkDDhFZMVkrgN8=) 2: 0AC48B08855211EC8C06075AC4F9AE02.roa (hash: 2QJmDZYcJvMKA1VD3KctOJhUNhu4gmHGXcVx8gxtotI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1610, serialNumber=8E7BA4CDBFB7C6583D49B9471BCDC069E480664D Validity Not Before: Apr 25 00:23:28 2025 GMT Not After : May 2 00:23:28 2025 GMT Subject: CN=680ad600-86cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:19:df:14:b3:7c:67:78:66:50:be:a1:96:54: 1c:6c:b6:e0:6c:85:21:43:f2:45:a7:91:46:75:e9: 94:2c:3c:3c:f6:bf:8e:fe:9d:1d:05:00:2d:71:b3: ae:11:7c:12:52:be:c2:b8:8e:0d:e9:c2:27:7a:39: 9c:2e:83:d1:38:32:54:a4:42:a5:8e:be:84:bb:c5: 6d:fa:c5:48:9f:a6:4f:15:76:dc:bc:47:5a:78:37: ad:1b:a3:fc:2f:89:08:8d:b8:f2:6a:f1:c8:22:51: 06:a5:f1:c0:49:f4:c7:27:27:5d:c6:62:34:62:d1: 87:bc:6d:20:b1:c6:5c:de:5f:96:66:19:9b:86:dd: 7f:0b:52:9b:35:19:7b:6e:99:4a:14:28:36:0a:46: 75:45:70:55:3e:b4:dc:ff:8b:2c:fa:32:8c:0b:cc: be:81:11:40:d4:36:2a:48:9b:7f:62:07:a1:cc:87: 94:19:0a:54:a0:2a:5c:ec:dd:15:f0:00:ad:a8:a3: 1a:3f:8b:a1:7c:5e:66:d1:25:88:3a:15:54:3f:ed: d2:2a:d6:68:2c:0a:3f:e1:0d:e0:e2:fc:7e:2a:9c: b3:c5:b2:60:f8:b2:77:e8:20:cc:8d:85:37:95:98: 5b:ed:45:2e:70:bc:7c:38:90:34:a8:7f:18:86:8d: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:4E:CA:CD:2B:F4:3F:9E:10:7A:67:75:75:E2:5A:AE:B8:E2:BA X509v3 Authority Key Identifier: keyid:8E:7B:A4:CD:BF:B7:C6:58:3D:49:B9:47:1B:CD:C0:69:E4:80:66:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnukzb-3xlg9SblHG83AaeSAZk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1610/66494424833011ECB8BA3282C4F9AE02/jnukzb-3xlg9SblHG83AaeSAZk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:cd:cc:65:11:47:d3:0b:f8:fe:fd:b8:a0:26:51:60:88:5d: 73:73:5f:fd:28:82:b7:0c:4f:13:66:9b:77:77:60:0a:72:60: 58:6c:51:b7:a6:79:01:b3:64:29:e7:75:80:40:80:b5:60:9f: 36:36:6d:40:b3:17:6c:86:a0:83:bd:ae:05:41:10:45:34:78: f0:e5:24:08:fc:d0:b5:6b:5a:12:00:21:6e:5c:db:7c:de:eb: da:e0:b5:6c:c3:9c:75:a1:73:56:b4:59:12:0f:11:85:c1:9d: e5:8c:85:3a:ba:42:b0:2e:c5:a9:03:fd:01:b2:33:a7:a1:76: b1:78:4f:a0:ed:cc:88:a7:e1:2b:df:d4:93:22:89:17:80:57: c0:95:61:ed:63:cb:c8:45:c0:ff:d8:e0:0d:0b:36:72:d5:90: 18:54:ae:54:5c:79:fd:6e:f6:c6:e7:b8:d4:86:8c:b4:cd:70: 86:05:4c:36:fe:52:71:4e:92:43:57:2e:3d:56:95:09:80:40: df:f2:c4:3d:21:b1:0c:08:b0:a1:89:b7:ff:37:6e:6b:f2:70: d5:3a:18:a3:35:23:7c:3f:58:82:d5:38:20:54:a6:58:e6:64: 75:90:42:16:2c:55:8f:31:a2:f7:95:d3:dc:71:80:3d:5d:4f: 3d:96:36:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MTAxMTAvBgNVBAUTKDhFN0JBNENEQkZCN0M2NTgzRDQ5Qjk0NzFCQ0RDMDY5 RTQ4MDY2NEQwHhcNMjUwNDI1MDAyMzI4WhcNMjUwNTAyMDAyMzI4WjAYMRYwFAYD VQQDEw02ODBhZDYwMC04NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xnfFLN8Z3hmUL6hllQcbLbgbIUhQ/JFp5FGdemULDw89r+O/p0dBQAtcbOu EXwSUr7CuI4N6cInejmcLoPRODJUpEKljr6Eu8Vt+sVIn6ZPFXbcvEdaeDetG6P8 L4kIjbjyavHIIlEGpfHASfTHJyddxmI0YtGHvG0gscZc3l+WZhmbht1/C1KbNRl7 bplKFCg2CkZ1RXBVPrTc/4ss+jKMC8y+gRFA1DYqSJt/YgehzIeUGQpUoCpc7N0V 8ACtqKMaP4uhfF5m0SWIOhVUP+3SKtZoLAo/4Q3g4vx+KpyzxbJg+LJ36CDMjYU3 lZhb7UUucLx8OJA0qH8Yho2bUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5xTsrN K/Q/nhB6Z3V14lquuOK6MB8GA1UdIwQYMBaAFI57pM2/t8ZYPUm5RxvNwGnkgGZN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYxMC82NjQ5NDQyNDgz MzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hsZzlTYmxIRzgzQWFlU0Fa azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pudWt6Yi0zeGxnOVNibEhHODNBYWVTQVprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYxMC82NjQ5NDQyNDgzMzAxMUVDQjhCQTMyODJDNEY5QUUwMi9qbnVremItM3hs ZzlTYmxIRzgzQWFlU0FaazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9zcxlEUfTC/j+/bigJlFgiF1zc1/9KIK3DE8TZpt3d2AKcmBYbFG3 pnkBs2Qp53WAQIC1YJ82Nm1AsxdshqCDva4FQRBFNHjw5SQI/NC1a1oSACFuXNt8 3uva4LVsw5x1oXNWtFkSDxGFwZ3ljIU6ukKwLsWpA/0BsjOnoXaxeE+g7cyIp+Er 39STIokXgFfAlWHtY8vIRcD/2OANCzZy1ZAYVK5UXHn9bvbG57jUhoy0zXCGBUw2 /lJxTpJDVy49VpUJgEDf8sQ9IbEMCLChibf/N25r8nDVOhijNSN8P1iC1TggVKZY 5mR1kEIWLFWPMaL3ldPccYA9XU89ljar -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:20 2025 by rpki-client