$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft File: JTgA7RbtD_M39wQNDj3xFBwWFhw.mft (raw, json) Hash identifier: 9zwLdhlcHF3pNfsVpHTmv5If/2iyn/K4ejdbiP/jIDg= Subject key identifier: ED:74:11:F5:D7:99:E7:7B:55:AD:40:9B:74:F6:FB:00:25:C8:45:67 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft Manifest number: 01DF Signing time: Fri 25 Apr 2025 02:00:13 +0000 Manifest this update: Fri 25 Apr 2025 02:00:12 +0000 Manifest next update: Fri 02 May 2025 02:00:12 +0000 Files and hashes: 1: JTgA7RbtD_M39wQNDj3xFBwWFhw.crl (hash: OZPvNvnauYAsp8X3Lebp9BC9q0fT9fz3vANIEx4EajY=) 2: 2D215B32584111EDBE50107CC4F9AE02.roa (hash: up6WHjnsfS0bIxQesxTATm4WYD2tutF7YiezZwJi2Bc=) 3: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (hash: NqrZmcVp/US1PncX6fEsquuB9U+PwjdNaQFtiMmKje0=) 4: D45117DEEBF311EEAECC405FC4F9AE02.roa (hash: L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Apr 25 02:00:12 2025 GMT Not After : May 2 02:00:12 2025 GMT Subject: CN=680aecac-e8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:26:35:5b:fa:f7:3d:fa:87:51:1d:ed:df: a5:2d:e7:a8:45:af:a2:87:59:d9:51:ce:e6:d7:b4: a1:86:6a:69:e2:bd:0b:f8:b9:43:69:46:aa:f9:4c: b3:40:0d:2e:22:81:19:42:35:d0:8d:0e:9c:49:fb: 84:d1:75:13:4e:d6:61:fd:cb:ec:84:ec:3b:fb:02: 7f:d0:f9:4f:8d:77:42:02:f3:2a:d9:3a:b8:99:6a: ec:85:0a:f5:55:a6:5d:f0:d3:c9:7c:4e:8a:a3:b6: 5b:9a:a2:ac:72:4e:5b:d2:2f:70:b2:50:bd:c9:53: 22:a0:a8:ac:bc:f8:3f:d0:0a:51:4d:55:ab:9e:de: 72:28:24:5a:d8:5f:b4:49:bd:cd:54:04:3f:4f:70: 64:25:a4:90:d4:95:c1:65:f5:c4:65:73:20:58:20: 71:51:96:69:2d:90:a8:5a:c1:71:40:9f:00:59:f3: 44:26:be:c0:b0:17:cf:37:24:dc:2d:68:f4:b1:f6: 80:ef:c3:25:b5:65:8d:9d:e6:0a:70:c8:05:de:c5: c0:76:a4:d8:72:b4:b3:28:e6:b1:cd:c5:59:5a:fd: a2:58:90:b9:85:95:77:ab:c0:a2:8e:59:66:88:74: c3:8a:c8:2e:0b:8e:d1:e3:a2:17:6a:de:a5:31:16: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:74:11:F5:D7:99:E7:7B:55:AD:40:9B:74:F6:FB:00:25:C8:45:67 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3b:49:82:97:c1:ef:27:b3:9c:0f:64:93:31:8b:d5:8c:a5: 04:71:cf:43:e4:6d:0f:1d:b9:5f:d3:a9:b8:6d:c6:bd:58:bc: 0d:53:c4:a7:54:2d:aa:85:e1:3b:71:a6:b8:28:fa:0b:f7:d1: 04:06:5c:a9:3b:98:db:de:7c:ec:da:bd:10:ce:8c:8e:03:d2: 7e:19:04:ab:aa:e0:fe:bf:60:cb:9c:3a:45:01:3d:69:ab:2d: 61:1e:e7:12:99:30:2d:c5:4f:70:d4:10:45:c7:7e:b7:4a:a3: 19:0c:91:f5:f6:f4:c6:f0:8b:5d:7f:86:53:98:98:9b:39:0a: 5d:6a:87:21:f3:9b:6f:17:61:f5:1a:7a:dc:d1:2c:0d:6f:a4: ea:0b:32:e5:d9:12:9e:cf:fc:5d:74:d3:04:73:f6:20:96:75: 2c:a5:a3:cc:66:a6:01:50:42:2b:62:e8:3f:ea:ae:e9:42:63: 1a:2d:f7:b0:cf:4c:a7:f3:30:3f:42:27:8b:19:0f:cd:30:71: 5b:98:4a:a6:33:a4:af:ae:1d:4c:7c:a4:e8:7c:aa:9e:57:fa: 47:1d:b8:b0:10:15:64:66:00:0a:89:10:64:b0:f0:de:2b:92: d6:94:28:b6:75:f4:6a:24:c8:e7:c2:d3:e4:b9:fa:3f:73:09: c0:3c:33:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUwNDI1MDIwMDEyWhcNMjUwNTAyMDIwMDEyWjAYMRYwFAYD VQQDEw02ODBhZWNhYy1lOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgwmNVv69z36h1Ed7d+lLeeoRa+ih1nZUc7m17Shhmpp4r0L+LlDaUaq+Uyz QA0uIoEZQjXQjQ6cSfuE0XUTTtZh/cvshOw7+wJ/0PlPjXdCAvMq2Tq4mWrshQr1 VaZd8NPJfE6Ko7ZbmqKsck5b0i9wslC9yVMioKisvPg/0ApRTVWrnt5yKCRa2F+0 Sb3NVAQ/T3BkJaSQ1JXBZfXEZXMgWCBxUZZpLZCoWsFxQJ8AWfNEJr7AsBfPNyTc LWj0sfaA78MltWWNneYKcMgF3sXAdqTYcrSzKOaxzcVZWv2iWJC5hZV3q8Cijllm iHTDisguC47R46IXat6lMRbzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO10EfXX med7Va1Am3T2+wAlyEVnMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjhDOS8yMTk3QjA5MjU4M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERf TTM5d1FORGozeEZCd1dGaHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMO0mCl8HvJ7OcD2STMYvVjKUEcc9D5G0PHblf06m4bca9WLwNU8Sn VC2qheE7caa4KPoL99EEBlypO5jb3nzs2r0QzoyOA9J+GQSrquD+v2DLnDpFAT1p qy1hHucSmTAtxU9w1BBFx363SqMZDJH19vTG8Itdf4ZTmJibOQpdaoch85tvF2H1 Gnrc0SwNb6TqCzLl2RKez/xddNMEc/YglnUspaPMZqYBUEIrYug/6q7pQmMaLfew z0yn8zA/QieLGQ/NMHFbmEqmM6Svrh1MfKTofKqeV/pHHbiwEBVkZgAKiRBksPDe K5LWlCi2dfRqJMjnwtPkufo/cwnAPDOi -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:08 2025 by rpki-client