$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft File: jcAuucfBcJwTt0jXBDtY9DW_qXI.mft (raw, json) Hash identifier: Yqm6LX4G/Uf0tE3uP26MQEuyt+AaOCd/dGLoXadeI3o= Subject key identifier: 00:1C:CB:21:63:9F:FC:9C:9D:61:DD:7C:CC:84:5A:E7:5C:9E:2C:C1 Authority key identifier: 8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 Certificate issuer: /CN=A912E92E/serialNumber=8DC02EB9C7C1709C13B748D7043B58F435BFA972 Certificate serial: 0DB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft Manifest number: 35BA Signing time: Fri 04 Apr 2025 16:02:18 +0000 Manifest this update: Fri 04 Apr 2025 16:02:17 +0000 Manifest next update: Fri 11 Apr 2025 16:02:17 +0000 Files and hashes: 1: jcAuucfBcJwTt0jXBDtY9DW_qXI.crl (hash: yTWpnp2S0uYbcNjpioaPXXX2si4ChVF9GIH/k61gmZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3512 (0xdb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E Validity Not Before: Apr 4 16:02:17 2025 GMT Not After : Apr 11 16:02:17 2025 GMT Subject: CN=67f0028a-4a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:51:82:25:20:95:29:92:42:27:41:18:b9: f1:20:f2:b1:08:b1:df:2f:6b:35:de:4b:15:2f:23: 56:f4:15:8a:b8:1e:91:64:54:ae:3c:49:aa:fe:c5: a9:01:ee:fa:63:4b:35:ca:da:46:d5:75:4c:bb:ab: 3c:e0:0c:1a:1a:54:f1:88:a8:16:ab:d1:70:22:f4: 44:2e:6f:f2:c9:bc:fd:a6:45:4e:78:53:c0:3b:41: a6:4f:6a:2e:5c:51:5a:2e:6c:58:aa:45:33:38:aa: d7:f5:31:ad:07:08:ea:37:79:90:bd:5f:8e:29:57: d9:b2:ca:67:8e:66:40:00:12:e5:d7:34:b7:84:1a: 1d:d4:52:5f:9b:c8:d6:c0:de:59:a4:d3:d9:1d:92: 6a:ed:d8:19:8c:17:4f:bd:be:c9:57:70:b9:19:b7: ea:ad:06:b0:50:6a:63:34:dc:6f:18:e1:50:fb:db: 3d:1a:8a:da:a9:90:2f:c4:09:54:aa:89:b6:30:d2: 6d:2e:e1:aa:72:c1:25:55:0f:8c:68:71:12:dc:d9: 84:e7:be:72:1c:96:7e:c9:64:3b:3e:5b:4a:a4:3e: 36:d4:92:a9:33:07:2e:b5:5b:4e:f1:5e:f3:01:2c: 5c:da:f7:fc:79:a3:a8:41:8a:4b:a9:1f:60:ad:6f: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:CB:21:63:9F:FC:9C:9D:61:DD:7C:CC:84:5A:E7:5C:9E:2C:C1 X509v3 Authority Key Identifier: keyid:8D:C0:2E:B9:C7:C1:70:9C:13:B7:48:D7:04:3B:58:F4:35:BF:A9:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcAuucfBcJwTt0jXBDtY9DW_qXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/jcAuucfBcJwTt0jXBDtY9DW_qXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:36:d7:bf:4a:b9:cc:d0:a4:d6:43:04:51:fb:8c:6d:30:2c: ef:46:6d:77:27:92:cd:37:55:46:94:f8:b3:f2:ef:de:24:f4: 02:15:df:d1:8d:d4:55:df:aa:99:59:a4:57:26:5c:e9:e8:52: dc:7d:88:3a:7a:e6:7b:05:be:f7:14:1d:d0:0e:cc:c2:d4:61: 20:52:5d:7c:7f:24:9e:67:cd:be:df:93:fc:59:ba:8d:0a:77: 11:16:a5:b9:55:b0:4e:3c:e1:c2:0c:9f:f1:d0:88:0c:5e:33: 25:1a:ab:f3:fc:9b:69:12:6d:cd:db:5d:a4:49:c0:7b:eb:01: 5f:84:ed:7a:ec:82:04:94:a3:52:9b:ce:ae:15:71:61:29:08: 5e:d3:b4:08:c4:30:fa:ef:d4:e6:f8:6f:8a:29:44:ce:af:4d: 23:35:f3:26:13:38:8f:4a:5a:58:1c:d0:0b:56:11:c8:1c:28: 9d:c8:f4:5d:42:14:1d:a5:a0:50:f3:1b:71:c0:96:07:c6:7a: 17:ca:85:4e:ba:4b:1a:05:38:07:36:ce:80:5f:d2:1f:f2:f7: 75:99:6a:32:f6:34:4d:d6:74:77:7d:28:ee:2d:92:a2:65:72: d3:0d:1b:72:4f:a8:07:f1:65:df:ec:e3:64:e0:25:d9:9f:30: de:c1:4e:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDhEQzAyRUI5QzdDMTcwOUMxM0I3NDhENzA0M0I1OEY0 MzVCRkE5NzIwHhcNMjUwNDA0MTYwMjE3WhcNMjUwNDExMTYwMjE3WjAYMRYwFAYD VQQDEw02N2YwMDI4YS00YTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvclRgiUglSmSQidBGLnxIPKxCLHfL2s13ksVLyNW9BWKuB6RZFSuPEmq/sWp Ae76Y0s1ytpG1XVMu6s84AwaGlTxiKgWq9FwIvRELm/yybz9pkVOeFPAO0GmT2ou XFFaLmxYqkUzOKrX9TGtBwjqN3mQvV+OKVfZsspnjmZAABLl1zS3hBod1FJfm8jW wN5ZpNPZHZJq7dgZjBdPvb7JV3C5GbfqrQawUGpjNNxvGOFQ+9s9GoraqZAvxAlU qom2MNJtLuGqcsElVQ+MaHES3NmE575yHJZ+yWQ7PltKpD421JKpMwcutVtO8V7z ASxc2vf8eaOoQYpLqR9grW84AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAcyyFj n/ycnWHdfMyEWudcnizBMB8GA1UdIwQYMBaAFI3ALrnHwXCcE7dI1wQ7WPQ1v6ly MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNKd1R0MGpYQkR0WTlEV19x WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjQXV1Y2ZCY0p3VHQwalhCRHRZOURXX3FYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9qY0F1dWNmQmNK d1R0MGpYQkR0WTlEV19xWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdNte/SrnM0KTWQwRR+4xtMCzvRm13J5LNN1VGlPiz8u/eJPQCFd/R jdRV36qZWaRXJlzp6FLcfYg6euZ7Bb73FB3QDszC1GEgUl18fySeZ82+35P8WbqN CncRFqW5VbBOPOHCDJ/x0IgMXjMlGqvz/JtpEm3N212kScB76wFfhO167IIElKNS m86uFXFhKQhe07QIxDD679Tm+G+KKUTOr00jNfMmEziPSlpYHNALVhHIHCidyPRd QhQdpaBQ8xtxwJYHxnoXyoVOuksaBTgHNs6AX9If8vd1mWoy9jRN1nR3fSjuLZKi ZXLTDRtyT6gH8WXf7ONk4CXZnzDewU45 -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:47 2025 by rpki-client