$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft File: JijmqJTN_JNz89uc_PvFFD_6Kj4.mft (raw, json) Hash identifier: xB4qkzl0hDw/4fG/GcmP9gLwdvsT/J6gtIWgLxho6Uc= Subject key identifier: DD:24:07:9E:5C:E2:49:74:26:F1:12:67:D3:F8:4D:35:30:88:DE:CB Authority key identifier: 26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E Certificate issuer: /CN=A91F98D7/serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft Manifest number: 57 Signing time: Fri 25 Apr 2025 06:15:24 +0000 Manifest this update: Fri 25 Apr 2025 06:15:23 +0000 Manifest next update: Fri 02 May 2025 06:15:23 +0000 Files and hashes: 1: JijmqJTN_JNz89uc_PvFFD_6Kj4.crl (hash: lZeHjYd6x43LvpfFjd39iH7q6+vBTEWbxz/izs+qSVY=) 2: D1E8FCF6A87111EF96B74932C4F9AE02.roa (hash: enXEkpBa0eGlKzSX90hnhUrWxqZsAsvyTyWFjRwdRIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98D7, serialNumber=2628E6A894CDFC9373F3DB9CFCFBC5143FFA2A3E Validity Not Before: Apr 25 06:15:23 2025 GMT Not After : May 2 06:15:23 2025 GMT Subject: CN=680b287c-83db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:14:cf:8b:88:e2:06:20:17:59:be:7b:4b: 22:bb:6f:24:bc:17:f8:8b:e7:63:b0:41:57:e0:50: f7:48:06:90:b8:b9:93:48:fd:61:f2:c5:d4:18:01: cd:40:25:17:6a:01:8f:51:bc:bc:bd:ac:e7:84:e7: 38:cf:2c:a6:5e:e9:b9:b1:e0:91:95:f0:79:dc:3f: d8:95:19:2c:9a:1d:37:0c:68:5b:00:f8:79:bf:a2: 69:56:14:45:c2:ed:e0:cc:83:88:3c:d0:fb:7e:04: a5:b9:dc:d7:11:b8:eb:7d:40:f6:25:50:5f:29:30: 11:d2:c3:42:77:2f:ce:a3:76:02:7f:0b:10:d1:e7: db:77:56:ab:28:69:df:d4:89:ec:50:67:3b:fa:62: 8a:24:6c:8c:d9:70:16:96:5a:1f:d9:cd:91:0d:2b: 4c:d3:2b:90:ca:d5:14:f2:ba:4a:c6:50:74:e1:2c: ad:90:52:52:d2:38:0a:0b:4f:d9:4c:a7:97:d5:7f: d8:9f:d2:10:65:72:18:b4:c1:0a:1c:46:09:dc:d2: d7:1e:9c:c3:0c:79:db:bd:14:7c:8c:be:b3:87:da: 51:f7:17:2d:88:f4:9d:1a:08:8f:ea:37:21:ca:f8: b5:73:82:50:c1:7a:e6:26:3c:9c:e9:6d:68:af:7b: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:24:07:9E:5C:E2:49:74:26:F1:12:67:D3:F8:4D:35:30:88:DE:CB X509v3 Authority Key Identifier: keyid:26:28:E6:A8:94:CD:FC:93:73:F3:DB:9C:FC:FB:C5:14:3F:FA:2A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JijmqJTN_JNz89uc_PvFFD_6Kj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98D7/8621AE62A87111EFAEA1C831C4F9AE02/JijmqJTN_JNz89uc_PvFFD_6Kj4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4c:73:84:11:cb:cd:17:fc:20:11:9b:8d:88:96:c7:9b:64: 9e:7a:75:2e:02:ec:e1:b4:1d:8a:43:07:89:58:3f:ae:a8:5c: b9:ea:45:96:d1:87:41:08:49:5a:40:19:e5:1f:49:a3:5f:ab: b7:c8:40:dc:57:a5:1e:b7:9f:19:d8:f1:4d:79:ab:0d:5a:9f: f5:8c:22:62:48:ef:03:2a:43:9f:98:aa:ec:7e:47:17:1b:50: 50:d1:15:a8:b4:d9:33:03:43:f1:37:77:48:f9:5c:a5:e3:6b: 43:db:f7:80:14:27:a2:70:f8:35:3a:a2:db:07:bd:d8:2e:e6: 91:e0:2f:b9:fe:f9:ef:c6:85:37:d1:ca:84:ff:af:c7:51:95: 7a:66:f2:ea:5d:f6:5f:84:bf:14:db:62:56:03:4f:ab:49:eb: 13:34:dc:ec:d5:b2:11:4e:5f:b7:0a:96:00:7f:ca:b4:f0:2b: 8f:b4:11:51:ff:29:97:6e:5b:6d:da:a8:f4:11:7f:d1:c7:48: 3d:6b:48:4a:77:ba:46:b7:2f:60:13:e2:59:28:30:53:c5:55: 34:af:29:66:65:e2:c4:8f:13:3c:73:92:72:0b:e6:4e:e2:97: 0c:40:32:38:10:d5:9f:45:28:b6:86:95:4d:4f:01:45:5a:4b: 1a:bb:bb:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThENzExMC8GA1UEBRMoMjYyOEU2QTg5NENERkM5MzczRjNEQjlDRkNGQkM1MTQz RkZBMkEzRTAeFw0yNTA0MjUwNjE1MjNaFw0yNTA1MDIwNjE1MjNaMBgxFjAUBgNV BAMTDTY4MGIyODdjLTgzZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiTxTPi4jiBiAXWb57SyK7byS8F/iL52OwQVfgUPdIBpC4uZNI/WHyxdQYAc1A JRdqAY9RvLy9rOeE5zjPLKZe6bmx4JGV8HncP9iVGSyaHTcMaFsA+Hm/omlWFEXC 7eDMg4g80Pt+BKW53NcRuOt9QPYlUF8pMBHSw0J3L86jdgJ/CxDR59t3Vqsoad/U iexQZzv6YookbIzZcBaWWh/ZzZENK0zTK5DK1RTyukrGUHThLK2QUlLSOAoLT9lM p5fVf9if0hBlchi0wQocRgnc0tcenMMMedu9FHyMvrOH2lH3Fy2I9J0aCI/qNyHK +LVzglDBeuYmPJzpbWive4CzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3SQHnlzi SXQm8RJn0/hNNTCI3sswHwYDVR0jBBgwFoAUJijmqJTN/JNz89uc/PvFFD/6Kj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEQ3Lzg2MjFBRTYyQTg3 MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pOejg5dWNfUHZGRkRfNktq NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmlqbXFKVE5fSk56ODl1Y19QdkZGRF82S2o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEQ3Lzg2MjFBRTYyQTg3MTExRUZBRUExQzgzMUM0RjlBRTAyL0ppam1xSlROX0pO ejg5dWNfUHZGRkRfNktqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIRMc4QRy80X/CARm42IlsebZJ56dS4C7OG0HYpDB4lYP66oXLnqRZbR h0EISVpAGeUfSaNfq7fIQNxXpR63nxnY8U15qw1an/WMImJI7wMqQ5+Yqux+Rxcb UFDRFai02TMDQ/E3d0j5XKXja0Pb94AUJ6Jw+DU6otsHvdgu5pHgL7n++e/GhTfR yoT/r8dRlXpm8upd9l+EvxTbYlYDT6tJ6xM03OzVshFOX7cKlgB/yrTwK4+0EVH/ KZduW23aqPQRf9HHSD1rSEp3uka3L2AT4lkoMFPFVTSvKWZl4sSPEzxzknIL5k7i lwxAMjgQ1Z9FKLaGlU1PAUVaSxq7uwU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:54 2025 by rpki-client