$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: k2d7vlUCD1JKKvhZtIWg4LNYLZH6VtqVS7Pbb0fnT2A= Subject key identifier: B9:9F:A2:64:F0:2C:71:D2:48:A8:3D:23:42:A2:BD:D7:71:FB:BB:7A Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 1F72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1F27 Signing time: Thu 24 Apr 2025 16:03:37 +0000 Manifest this update: Thu 24 Apr 2025 16:03:37 +0000 Manifest next update: Thu 01 May 2025 16:03:37 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: P4xsybf2SC5P0S470gxsV9OQr9cBlbQd4HYesfUNy6E=) 2: 5B425102C0E911EF978F1385C4F9AE02.roa (hash: k1pIrPdvh6z0dp5En85XqdbWfUA4ZO6tHmuvy2durEk=) 3: 51242EA0157A11EEBF2E043CC4F9AE02.roa (hash: gdgPydJrUkK8DpVlQ4wmxtIpuGhoHfbxVdF/ULwigco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8050 (0x1f72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Apr 24 16:03:37 2025 GMT Not After : May 1 16:03:37 2025 GMT Subject: CN=680a60d9-ecd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:1d:16:c9:d2:b7:20:fc:2c:c8:25:1d:a6: 97:ff:a7:cc:c9:03:5a:2c:15:17:d2:04:e7:70:27: 5f:12:7a:fd:dd:65:87:3a:61:c2:ce:a0:2c:ae:43: ec:2f:fe:21:9b:fa:96:f9:39:c1:b2:d0:dc:9b:61: d8:b3:af:db:85:54:4c:61:02:5f:e4:38:6d:14:08: 05:76:42:c2:7f:ac:01:79:01:9e:48:72:15:91:8c: 56:fa:fb:29:0f:67:8d:b6:d8:7d:31:4e:8d:df:91: ed:aa:ed:22:a1:12:d2:22:77:51:ad:6b:f3:7b:ba: 67:4b:39:33:5d:05:b9:19:5b:62:96:0f:42:3d:80: 15:26:84:4a:66:88:af:31:70:4f:08:b5:80:4d:62: 7e:01:64:c8:7e:d1:7d:be:38:ee:ee:01:42:21:46: 6f:35:89:e9:f1:a8:51:5d:83:2a:79:09:73:81:93: a9:5a:e6:3f:69:1e:73:0d:c7:63:4c:2a:af:71:08: c5:ac:9f:25:8e:f6:b9:6c:cd:c7:cc:23:6a:26:65: 44:61:ea:6b:4e:2d:6d:bf:d5:e4:1c:2d:81:0d:62: c3:1c:5c:62:ec:8e:41:cf:7c:82:1b:d2:bb:bc:19: b5:1b:3c:13:74:69:63:f5:16:36:fa:4f:13:ca:6d: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:A2:64:F0:2C:71:D2:48:A8:3D:23:42:A2:BD:D7:71:FB:BB:7A X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:dc:25:ff:ae:d5:50:a3:cc:34:96:95:b1:0c:85:9e:59:40: b9:4d:fe:ed:48:d5:bf:70:e7:49:b0:2e:79:f3:12:51:df:93: e1:67:77:0b:b8:c4:55:92:78:78:fa:c7:72:21:0d:97:47:d7: ba:32:01:d7:78:3d:7f:26:27:d6:25:35:fd:b0:3d:e5:7b:aa: 24:1c:71:c3:70:02:53:61:79:24:00:5e:1a:46:84:d1:88:8e: b7:43:26:55:b5:b2:01:49:93:4f:6d:2b:b8:8e:91:6d:d5:11: bc:16:7c:d5:1e:0e:c9:2c:66:2e:90:ce:09:27:26:cd:69:93: 06:f6:aa:ce:9c:82:59:35:12:86:82:4f:4e:8c:f0:b2:5e:e6: 64:1b:71:b6:c4:84:c9:80:83:cb:af:27:43:08:d9:44:6c:2f: f7:5d:00:0a:73:ab:d7:23:91:73:56:e2:05:93:92:f2:a2:cd: 7e:54:e8:07:a2:d0:b6:19:1b:cc:51:cb:4f:3e:8d:a9:f5:2b: 43:ce:70:7e:78:7a:b9:dd:ce:03:e0:75:b6:0f:e1:95:63:be: ef:b9:cd:51:f3:91:32:72:fb:be:ad:c6:6a:cc:8c:e9:46:e0: 1e:f9:7f:7b:6d:fd:88:1b:3f:3c:2c:d3:22:78:00:50:33:b1: 7d:52:3a:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjUwNDI0MTYwMzM3WhcNMjUwNTAxMTYwMzM3WjAYMRYwFAYD VQQDEw02ODBhNjBkOS1lY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NIdFsnStyD8LMglHaaX/6fMyQNaLBUX0gTncCdfEnr93WWHOmHCzqAsrkPs L/4hm/qW+TnBstDcm2HYs6/bhVRMYQJf5DhtFAgFdkLCf6wBeQGeSHIVkYxW+vsp D2eNtth9MU6N35Htqu0ioRLSIndRrWvze7pnSzkzXQW5GVtilg9CPYAVJoRKZoiv MXBPCLWATWJ+AWTIftF9vjju7gFCIUZvNYnp8ahRXYMqeQlzgZOpWuY/aR5zDcdj TCqvcQjFrJ8ljva5bM3HzCNqJmVEYeprTi1tv9XkHC2BDWLDHFxi7I5Bz3yCG9K7 vBm1GzwTdGlj9RY2+k8Tym1wIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmfomTw LHHSSKg9I0Kivddx+7t6MB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB43CX/rtVQo8w0lpWxDIWeWUC5Tf7tSNW/cOdJsC558xJR35PhZ3cL uMRVknh4+sdyIQ2XR9e6MgHXeD1/JifWJTX9sD3le6okHHHDcAJTYXkkAF4aRoTR iI63QyZVtbIBSZNPbSu4jpFt1RG8FnzVHg7JLGYukM4JJybNaZMG9qrOnIJZNRKG gk9OjPCyXuZkG3G2xITJgIPLrydDCNlEbC/3XQAKc6vXI5FzVuIFk5Lyos1+VOgH otC2GRvMUctPPo2p9StDznB+eHq53c4D4HW2D+GVY77vuc1R85Eycvu+rcZqzIzp RuAe+X97bf2IGz88LNMieABQM7F9UjpZ -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:40 2025 by rpki-client