$ rpki-client -vvf rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft File: jBwU3BZ027aLSUMBWHs9L5jtcBs.mft (raw, json) Hash identifier: znpOG5m1dFJQL807lxUaR39TPqvLDbH7tGw+dTWaq4Y= Subject key identifier: D4:EB:A3:F0:D4:8F:3C:EF:10:40:E4:9E:59:56:80:D0:39:22:F0:85 Authority key identifier: 8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B Certificate issuer: /CN=A912ECA4/serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft Manifest number: D3 Signing time: Mon 21 Apr 2025 04:29:12 +0000 Manifest this update: Mon 21 Apr 2025 04:29:11 +0000 Manifest next update: Mon 28 Apr 2025 04:29:11 +0000 Files and hashes: 1: jBwU3BZ027aLSUMBWHs9L5jtcBs.crl (hash: TAl94M509UeWLEc3rP9QdnCmeSgYaNKgmglr9hN/Loc=) 2: 24241410E2A211EEBFC9412EC4F9AE02.roa (hash: js9vpe12lmlRNYkEaZ6rykB6+CvjAADY23ufAT3PPlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 04:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ECA4, serialNumber=8C1C14DC1674DBB68B494301587B3D2F98ED701B Validity Not Before: Apr 21 04:29:11 2025 GMT Not After : Apr 28 04:29:11 2025 GMT Subject: CN=6805c998-6467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8b:8c:37:7a:fe:2f:96:71:14:6d:72:67:45: f3:98:27:26:4c:c0:44:f3:b6:6a:d4:2d:d1:42:74: e8:b0:db:b1:3e:b5:c8:f0:6f:5a:36:02:9d:d5:73: e8:03:0e:f2:34:1b:95:d3:56:6a:6c:f5:82:f9:2d: fa:57:11:73:22:92:00:20:d2:38:8d:08:9a:ca:f6: 40:c6:a8:5c:59:a5:01:c8:37:60:3c:f9:4d:8a:94: 01:44:d7:3a:24:8f:0b:c8:a4:1c:a3:43:46:45:b9: a6:d6:08:45:8b:75:1d:97:c3:60:db:a8:7b:0d:a8: b5:1b:a0:8a:0f:22:91:bf:85:2c:d6:02:ff:6c:c1: 8e:48:9d:c8:bb:21:bc:7a:2e:29:9c:61:1c:7a:2b: 1a:fe:0a:4e:21:fc:52:c1:8d:fb:d1:2d:49:25:fb: 1c:66:fe:44:41:4a:53:fb:de:f0:da:48:98:20:57: 76:fd:71:ba:94:72:f1:a3:f7:e1:a8:e2:57:03:4b: f1:cf:9b:86:eb:c1:ca:80:12:08:43:74:e4:11:dd: a2:3c:df:a1:0d:5f:d5:98:94:af:cd:28:17:48:fe: 4f:82:fa:88:b6:cb:63:9e:16:9f:50:e3:c0:8c:68: 7e:41:2e:be:d5:24:6a:a3:32:21:da:03:aa:9a:f3: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EB:A3:F0:D4:8F:3C:EF:10:40:E4:9E:59:56:80:D0:39:22:F0:85 X509v3 Authority Key Identifier: keyid:8C:1C:14:DC:16:74:DB:B6:8B:49:43:01:58:7B:3D:2F:98:ED:70:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jBwU3BZ027aLSUMBWHs9L5jtcBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ECA4/485F336ADCED11EEBBBF402FC4F9AE02/jBwU3BZ027aLSUMBWHs9L5jtcBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b0:fe:49:53:34:b6:5e:cd:72:b5:e7:11:a9:5f:a3:ef:00: 3c:fc:57:a7:9e:bd:d8:25:9e:7e:c0:f4:0e:8d:06:1f:e6:3d: 3b:46:ab:76:1e:9d:36:5e:54:f3:c2:a2:9c:59:1c:8f:83:0c: bb:73:9c:d0:14:a0:40:d7:92:a2:4b:42:a3:79:7a:f1:e1:aa: 40:90:32:5c:0c:a2:0a:54:94:05:bd:0c:f9:3e:81:6c:03:b8: 75:69:48:15:f4:a5:e4:ef:cc:ec:76:b2:ad:34:cc:d5:a2:bb: 32:9a:94:0b:46:96:a8:4c:8d:58:1a:18:ea:3a:f3:46:08:b4: 7d:8c:61:3b:37:bd:cc:2e:4d:e0:f7:b0:42:39:83:89:d9:37: 8c:8b:34:c2:88:45:9f:29:d3:c1:1c:97:36:0a:d1:82:21:19: 8e:55:2b:4f:bd:01:76:80:23:0d:00:62:48:be:ea:5e:df:ff: ad:2d:34:1e:bb:04:b4:b5:5d:d4:28:d6:38:d3:6d:ce:72:d3: 57:e1:91:73:9d:c8:0a:2c:15:6e:1b:6e:2b:5c:52:84:2a:53: fc:7f:b8:99:48:29:ad:26:57:93:98:9e:a9:1b:a1:18:a5:28: 0c:87:6a:4f:5d:af:66:b0:7e:31:89:8a:db:92:50:71:f6:5f: a7:af:91:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVDQTQxMTAvBgNVBAUTKDhDMUMxNERDMTY3NERCQjY4QjQ5NDMwMTU4N0IzRDJG OThFRDcwMUIwHhcNMjUwNDIxMDQyOTExWhcNMjUwNDI4MDQyOTExWjAYMRYwFAYD VQQDEw02ODA1Yzk5OC02NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYuMN3r+L5ZxFG1yZ0XzmCcmTMBE87Zq1C3RQnTosNuxPrXI8G9aNgKd1XPo Aw7yNBuV01ZqbPWC+S36VxFzIpIAINI4jQiayvZAxqhcWaUByDdgPPlNipQBRNc6 JI8LyKQco0NGRbmm1ghFi3Udl8Ng26h7Dai1G6CKDyKRv4Us1gL/bMGOSJ3IuyG8 ei4pnGEceisa/gpOIfxSwY370S1JJfscZv5EQUpT+97w2kiYIFd2/XG6lHLxo/fh qOJXA0vxz5uG68HKgBIIQ3TkEd2iPN+hDV/VmJSvzSgXSP5PgvqItstjnhafUOPA jGh+QS6+1SRqozIh2gOqmvOtzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTro/DU jzzvEEDknllWgNA5IvCFMB8GA1UdIwQYMBaAFIwcFNwWdNu2i0lDAVh7PS+Y7XAb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUNBNC80ODVGMzM2QURD RUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3YUxTVU1CV0hzOUw1anRj QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pCd1UzQlowMjdhTFNVTUJXSHM5TDVqdGNCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUNBNC80ODVGMzM2QURDRUQxMUVFQkJCRjQwMkZDNEY5QUUwMi9qQndVM0JaMDI3 YUxTVU1CV0hzOUw1anRjQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSsP5JUzS2Xs1ytecRqV+j7wA8/Fennr3YJZ5+wPQOjQYf5j07Rqt2 Hp02XlTzwqKcWRyPgwy7c5zQFKBA15KiS0KjeXrx4apAkDJcDKIKVJQFvQz5PoFs A7h1aUgV9KXk78zsdrKtNMzVorsympQLRpaoTI1YGhjqOvNGCLR9jGE7N73MLk3g 97BCOYOJ2TeMizTCiEWfKdPBHJc2CtGCIRmOVStPvQF2gCMNAGJIvupe3/+tLTQe uwS0tV3UKNY4023OctNX4ZFzncgKLBVuG24rXFKEKlP8f7iZSCmtJleTmJ6pG6EY pSgMh2pPXa9msH4xiYrbklBx9l+nr5Hl -----END CERTIFICATE-----Generated at Tue Apr 22 19:15:04 2025 by rpki-client