$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: N3OpQn+qjULgIAU6RmBhfjJWZIdE7dF7sYX6d42bSs4= Subject key identifier: 4D:F7:8F:D5:41:D2:BF:BF:65:2D:0F:E2:F7:3F:8B:A0:4B:14:DB:B5 Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: AC Signing time: Thu 03 Apr 2025 05:23:56 +0000 Manifest this update: Thu 03 Apr 2025 05:23:55 +0000 Manifest next update: Thu 10 Apr 2025 05:23:55 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: e4ghHbj7U85ySBcAZAkqk2x9q94aCSFvKbrhREdsFjo=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: OOJ1+VUkBTXiPH6FI49m6U+9LsJszz3rE5lM11lv5ng=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: XneMA7PZ1D1omHGzokuwA1vpjnnJXi3JuOuinXeIdkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB Validity Not Before: Apr 3 05:23:55 2025 GMT Not After : Apr 10 05:23:55 2025 GMT Subject: CN=67ee1b6c-5178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:3a:c5:8f:37:b1:9c:6a:94:de:92:19:bf: 29:22:eb:69:2c:3d:e3:01:e3:70:11:6d:53:57:41: 03:bb:14:bf:e2:79:b3:24:6a:0e:f6:c8:26:06:32: 95:4d:39:38:9a:5b:a7:17:81:0a:7c:38:c4:b1:ac: 7c:4f:56:d1:90:78:7a:f5:e4:1f:aa:92:ab:75:16: 38:f9:d9:d1:07:bb:f0:48:40:88:56:32:c3:69:87: 07:5d:49:77:15:da:17:cf:51:69:1a:93:83:d9:f7: 02:37:d3:72:74:20:0b:cb:7e:04:17:e6:ac:2f:bf: bf:85:7b:f9:15:05:75:3f:2f:2b:d4:ac:c9:42:eb: 32:20:7f:e0:72:22:c2:31:05:22:29:1b:13:09:82: 99:f8:7e:bc:8f:0b:3e:74:dd:81:74:91:44:5f:7d: cf:28:e8:2f:ca:0d:0f:8b:e3:7c:b1:bf:e3:60:f6: 23:2b:37:78:d2:61:ed:be:a3:61:c3:0c:ac:3a:bc: 0a:6a:f9:35:c7:11:cd:14:95:33:65:ab:25:01:6a: b9:a4:22:15:c2:0f:c9:3c:4a:81:8e:ad:96:03:e9: 62:18:12:51:2b:a9:c1:a8:8d:d4:2d:fe:f6:59:db: 3a:83:c7:70:bf:94:d1:47:82:58:ba:d5:68:87:15: 8b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:8F:D5:41:D2:BF:BF:65:2D:0F:E2:F7:3F:8B:A0:4B:14:DB:B5 X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c4:83:14:eb:be:e6:de:b7:a4:a9:e1:f3:f5:89:63:c3:01: bb:ff:25:4b:bb:05:4e:04:bd:37:61:71:eb:59:b2:19:3b:3a: e6:89:cb:ee:76:d5:d5:dc:5d:a8:b0:75:0f:42:a2:77:aa:e1: 1f:6d:61:6f:c3:00:f9:00:45:78:a4:bd:c9:3a:9a:f7:8f:9f: 7a:a5:65:dd:c7:fc:2a:09:81:15:b4:f0:9c:55:f6:c5:0a:b8: 0c:8d:2a:d9:1d:20:11:39:4c:cc:49:1f:8c:b3:4c:32:86:8d: b9:93:3d:c3:7d:e5:64:43:b5:a1:fe:9e:a0:09:f5:66:09:7b: a1:9f:2d:ae:cd:c9:49:d1:5f:2a:43:40:03:59:1e:74:83:d4: 0c:2b:3f:4f:94:08:07:11:51:22:ad:92:02:64:33:bd:4c:ff: 6f:a0:0a:d0:a7:10:31:44:f8:34:ce:8c:b9:8f:cd:64:28:38: e2:32:45:18:ee:8e:fa:11:fe:b0:06:11:2d:e6:8b:cd:52:bb: 69:e9:2b:41:33:bc:cb:a2:95:9f:9c:91:d5:b9:db:fa:56:55: 2d:c3:3d:dd:00:8e:7b:70:42:86:4a:ce:dd:ea:b7:67:64:68: 56:93:e5:51:3a:b8:e6:e6:b0:79:ed:90:13:10:9f:fc:a1:aa: 33:55:01:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEwQUIxMTAvBgNVBAUTKDI2NTcwM0Q4NTkzM0Y0NUQ5QjA0REFCNzcyMzc1ODRG QzkyRDlENDQwHhcNMjUwNDAzMDUyMzU1WhcNMjUwNDEwMDUyMzU1WjAYMRYwFAYD VQQDEw02N2VlMWI2Yy01MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZQ6xY83sZxqlN6SGb8pIutpLD3jAeNwEW1TV0EDuxS/4nmzJGoO9sgmBjKV TTk4mlunF4EKfDjEsax8T1bRkHh69eQfqpKrdRY4+dnRB7vwSECIVjLDaYcHXUl3 FdoXz1FpGpOD2fcCN9NydCALy34EF+asL7+/hXv5FQV1Py8r1KzJQusyIH/gciLC MQUiKRsTCYKZ+H68jws+dN2BdJFEX33PKOgvyg0Pi+N8sb/jYPYjKzd40mHtvqNh wwysOrwKavk1xxHNFJUzZaslAWq5pCIVwg/JPEqBjq2WA+liGBJRK6nBqI3ULf72 Wds6g8dwv5TRR4JYutVohxWL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE33j9VB 0r+/ZS0P4vc/i6BLFNu1MB8GA1UdIwQYMBaAFCZXA9hZM/RdmwTat3I3WE/JLZ1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTBBQi83NDQ1MjZGNjBG QTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlGMmJCTnEzY2pkWVQ4a3Ru VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTBBQi83NDQ1MjZGNjBGQTExMUVGQTY3ODg4ODZDNEY5QUUwMi9KbGNEMkZrejlG MmJCTnEzY2pkWVQ4a3RuVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6xIMU677m3rekqeHz9YljwwG7/yVLuwVOBL03YXHrWbIZOzrmicvu dtXV3F2osHUPQqJ3quEfbWFvwwD5AEV4pL3JOpr3j596pWXdx/wqCYEVtPCcVfbF CrgMjSrZHSAROUzMSR+Ms0wyho25kz3DfeVkQ7Wh/p6gCfVmCXuhny2uzclJ0V8q Q0ADWR50g9QMKz9PlAgHEVEirZICZDO9TP9voArQpxAxRPg0zoy5j81kKDjiMkUY 7o76Ef6wBhEt5ovNUrtp6StBM7zLopWfnJHVudv6VlUtwz3dAI57cEKGSs7d6rdn ZGhWk+VROrjm5rB57ZATEJ/8oaozVQEl -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:02 2025 by rpki-client