$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: IJwDrFh2TZtPGqSnV94mdRDf8TlU8prxfRpQF6UuLiU= Subject key identifier: DF:6A:D7:03:9B:23:B0:89:B2:D6:2C:BB:C6:F7:AC:C9:54:73:22:45 Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 01CF Signing time: Thu 03 Apr 2025 02:18:52 +0000 Manifest this update: Thu 03 Apr 2025 02:18:51 +0000 Manifest next update: Thu 10 Apr 2025 02:18:51 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: QResgx+pcEFVkq4UHSALmVw1MHfXiJ1Loox4oO+S8ac=) 2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=) 3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=) 4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C Validity Not Before: Apr 3 02:18:51 2025 GMT Not After : Apr 10 02:18:51 2025 GMT Subject: CN=67edf00b-8d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:0c:6d:94:c2:24:d9:82:9b:bb:c8:c2:3b: dc:ad:b0:a3:74:7b:14:31:d8:e5:ee:0f:b7:8f:e7: 6e:55:a2:36:f7:c3:a9:29:40:0b:04:4b:22:1c:23: 7d:76:60:a9:9f:90:43:9a:42:d0:de:e4:bf:ff:ba: e6:2b:af:51:d0:7d:02:09:82:15:f5:92:0e:54:b3: 52:62:b4:9a:bb:48:af:ea:43:98:bd:1a:ad:4b:e5: f9:5c:50:09:c6:17:0e:95:c4:2a:82:3c:3a:ce:c3: 5a:43:c5:d9:85:e5:34:32:48:92:ac:96:0f:dc:43: e8:8b:f9:3b:e9:ef:ce:4d:cf:ae:15:e6:1a:1d:60: fe:2c:1d:95:69:4b:b2:60:d7:3d:5e:ff:20:82:b3: 7c:df:b6:ce:3a:94:9f:02:f8:01:19:a3:4a:aa:71: 92:42:f6:cd:ba:6c:31:1f:c4:9a:37:94:e5:61:05: 84:c1:a8:c5:f9:71:90:3e:a8:20:a6:74:ff:74:8f: e5:0b:a8:aa:5b:22:8f:de:73:a3:16:4c:bd:e1:1b: 5a:10:54:24:32:a8:51:46:4a:9f:57:a8:79:67:af: 54:ff:2f:9e:75:4a:ba:da:fa:74:4b:38:03:32:3d: 3d:35:5f:80:81:91:20:6b:28:36:39:32:b3:6b:70: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:D7:03:9B:23:B0:89:B2:D6:2C:BB:C6:F7:AC:C9:54:73:22:45 X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:c3:bc:88:90:58:fa:5c:7d:88:be:f0:f1:35:f1:8a:12: fb:4d:7b:75:b4:29:7c:d1:2f:89:48:a3:91:32:c3:b8:28:16: a2:35:85:01:ba:f3:1a:1f:5f:aa:46:0a:1f:2e:51:4a:33:41: f6:e2:b0:cc:c6:58:bf:51:82:d2:09:f1:35:2c:00:b3:72:40: 65:8e:5f:7b:db:5d:28:d0:b1:64:43:8f:89:b3:14:45:83:a5: 18:93:96:78:d0:39:5f:dc:ef:6c:5d:e5:9d:89:d5:5b:b7:1a: 98:84:ec:67:af:22:9c:a8:a3:e1:7c:da:09:4f:ff:ec:e0:5a: a9:bb:15:98:be:ea:a0:03:29:42:aa:16:27:95:50:1e:5f:69: f7:75:51:25:30:29:a9:b4:9a:ff:21:20:e5:17:bc:a4:0f:be: 4b:35:b2:10:73:66:33:dd:fc:7a:c9:e7:77:b1:58:a4:e3:14: a7:3f:be:99:26:31:1c:b8:b4:8f:4c:a8:d5:96:de:f4:bf:1d: fb:5d:08:86:54:29:d3:4d:73:d8:64:93:d5:28:03:1d:7e:3d: 61:49:92:8a:27:5b:2e:d8:a4:b8:bb:03:ec:7f:43:f3:0f:fe: ea:4a:0b:41:13:f5:2b:b9:d1:44:5a:9b:0c:2e:fa:0d:93:a3: ae:1a:e1:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjUwNDAzMDIxODUxWhcNMjUwNDEwMDIxODUxWjAYMRYwFAYD VQQDEw02N2VkZjAwYi04ZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XoMbZTCJNmCm7vIwjvcrbCjdHsUMdjl7g+3j+duVaI298OpKUALBEsiHCN9 dmCpn5BDmkLQ3uS//7rmK69R0H0CCYIV9ZIOVLNSYrSau0iv6kOYvRqtS+X5XFAJ xhcOlcQqgjw6zsNaQ8XZheU0MkiSrJYP3EPoi/k76e/OTc+uFeYaHWD+LB2VaUuy YNc9Xv8ggrN837bOOpSfAvgBGaNKqnGSQvbNumwxH8SaN5TlYQWEwajF+XGQPqgg pnT/dI/lC6iqWyKP3nOjFky94RtaEFQkMqhRRkqfV6h5Z69U/y+edUq62vp0SzgD Mj09NV+AgZEgayg2OTKza3DPMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9q1wOb I7CJstYsu8b3rMlUcyJFMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjf8O8iJBY+lx9iL7w8TXxihL7TXt1tCl80S+JSKORMsO4KBaiNYUB uvMaH1+qRgofLlFKM0H24rDMxli/UYLSCfE1LACzckBljl97210o0LFkQ4+JsxRF g6UYk5Z40Dlf3O9sXeWdidVbtxqYhOxnryKcqKPhfNoJT//s4FqpuxWYvuqgAylC qhYnlVAeX2n3dVElMCmptJr/ISDlF7ykD75LNbIQc2Yz3fx6yed3sVik4xSnP76Z JjEcuLSPTKjVlt70vx37XQiGVCnTTXPYZJPVKAMdfj1hSZKKJ1su2KS4uwPsf0Pz D/7qSgtBE/UrudFEWpsMLvoNk6OuGuEC -----END CERTIFICATE-----Generated at Fri Apr 4 22:14:54 2025 by rpki-client