$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json) Hash identifier: ZnDzesZr3NLVFqCFgAri58Rx+dw/lCY6NNDvOLe0v3E= Subject key identifier: 79:2A:B9:6F:59:CB:A4:B2:02:0B:73:73:22:E6:7D:21:0D:73:00:49 Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft Manifest number: 0B52 Signing time: Thu 24 Apr 2025 19:01:48 +0000 Manifest this update: Thu 24 Apr 2025 19:01:48 +0000 Manifest next update: Thu 01 May 2025 19:01:48 +0000 Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: okUbCWCQWFOCIcoNkYBLiyPI1Q7t0VFUV9Jdimpkqvs=) 2: A540A624378611EABE283384C4F9AE02.roa (hash: wqMWiXdgCu3cScL0mYpc0UCwGRMk2VdkUHOf3iWaHHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Validity Not Before: Apr 24 19:01:48 2025 GMT Not After : May 1 19:01:48 2025 GMT Subject: CN=680a8a9c-9b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:62:2e:bc:36:a3:b3:60:8c:15:cd:b0:6d: 80:af:93:ed:69:99:02:1b:f1:98:d9:e3:f8:8b:94: 6d:ca:4b:54:bc:26:a1:59:5c:9d:a5:78:33:02:98: fe:28:f5:f4:37:ec:a1:02:d3:26:db:51:93:0a:8f: 97:1a:3c:9b:5a:39:f4:23:00:8d:72:58:71:fa:fe: 69:e3:35:f5:3f:4d:71:4e:f7:39:ae:e8:28:3b:dc: fd:e8:4a:93:d6:5c:fc:e6:36:d1:31:59:59:41:70: 6f:f2:28:71:01:7d:b0:88:b9:cd:2e:15:ca:c2:9a: f0:e5:d6:66:36:b2:2b:72:c2:cc:f1:0d:58:20:4d: cd:bd:f0:96:e0:4f:b3:73:7f:f7:87:d4:b7:6d:ff: 9f:54:3c:fe:0c:6d:25:b2:2b:0b:8c:1e:44:b4:b2: e6:1e:77:b1:35:74:5b:8c:ee:e0:bc:76:52:81:00: b8:2a:39:46:ef:c9:0c:db:11:f1:e4:a4:c9:09:d3: dc:3f:1d:08:1f:71:97:03:bd:a8:22:b6:e9:b8:85: 48:6c:49:b3:b1:ab:ba:36:76:c8:0f:fd:4f:41:ea: 2d:e5:27:5c:74:58:14:d0:7c:86:04:e6:43:9c:fb: 49:1b:bf:ca:51:93:45:d2:50:de:2e:b9:96:1f:d3: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2A:B9:6F:59:CB:A4:B2:02:0B:73:73:22:E6:7D:21:0D:73:00:49 X509v3 Authority Key Identifier: keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2e:a3:a1:05:cb:91:88:63:11:98:73:79:bc:71:05:ca:63: b8:3e:12:34:ee:5d:37:92:60:7d:de:72:07:d5:ac:64:25:cc: 78:6b:56:71:32:2d:92:fa:4e:ee:05:3f:58:0f:61:eb:01:68: 5c:1b:8b:81:de:9a:e4:6b:18:a7:09:6e:c2:cf:70:dd:10:b1: e6:84:19:cc:0b:0c:34:a2:d8:ae:e3:8c:a5:6d:f3:73:49:c8: aa:b2:b4:55:13:4d:40:d7:1e:c0:a0:19:9c:19:93:90:e3:97: a1:0f:fa:b3:ea:70:1e:43:40:05:af:71:bb:cf:e8:d6:ac:a2: bd:00:37:81:73:78:04:4a:16:24:6b:4a:b1:12:32:d7:2c:6b: 3d:d9:97:32:37:81:0d:ff:25:5c:4a:fe:b6:a1:6a:a5:88:cb: d6:44:3e:fa:0c:50:7c:95:3c:89:42:3c:d3:f5:0a:3b:e7:31: d8:b0:24:0b:6a:5b:53:42:05:8d:76:24:33:67:f9:34:0d:8b: 05:d1:47:5d:1e:e8:3c:96:8b:b3:38:45:be:e9:93:9f:36:35: 0c:63:63:4e:9d:cc:da:87:13:09:d9:81:fb:2d:8b:80:73:93: 24:9f:e9:18:98:e3:c0:db:24:6a:8f:ac:29:43:4d:d9:cb:8f: b4:2e:a1:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw REUxMEY5QjkwHhcNMjUwNDI0MTkwMTQ4WhcNMjUwNTAxMTkwMTQ4WjAYMRYwFAYD VQQDEw02ODBhOGE5Yy05YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23xiLrw2o7NgjBXNsG2Ar5PtaZkCG/GY2eP4i5RtyktUvCahWVydpXgzApj+ KPX0N+yhAtMm21GTCo+XGjybWjn0IwCNclhx+v5p4zX1P01xTvc5rugoO9z96EqT 1lz85jbRMVlZQXBv8ihxAX2wiLnNLhXKwprw5dZmNrIrcsLM8Q1YIE3NvfCW4E+z c3/3h9S3bf+fVDz+DG0lsisLjB5EtLLmHnexNXRbjO7gvHZSgQC4KjlG78kM2xHx 5KTJCdPcPx0IH3GXA72oIrbpuIVIbEmzsau6NnbID/1PQeot5SdcdFgU0HyGBOZD nPtJG7/KUZNF0lDeLrmWH9N8wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkquW9Z y6SyAgtzcyLmfSENcwBJMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3 d1pySWI4RTJFek1ONFEtYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFLqOhBcuRiGMRmHN5vHEFymO4PhI07l03kmB93nIH1axkJcx4a1Zx Mi2S+k7uBT9YD2HrAWhcG4uB3prkaxinCW7Cz3DdELHmhBnMCww0otiu44ylbfNz SciqsrRVE01A1x7AoBmcGZOQ45ehD/qz6nAeQ0AFr3G7z+jWrKK9ADeBc3gEShYk a0qxEjLXLGs92ZcyN4EN/yVcSv62oWqliMvWRD76DFB8lTyJQjzT9Qo75zHYsCQL altTQgWNdiQzZ/k0DYsF0UddHug8louzOEW+6ZOfNjUMY2NOnczahxMJ2YH7LYuA c5Mkn+kYmOPA2yRqj6wpQ03Zy4+0LqHQ -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:02 2025 by rpki-client