$ rpki-client -vvf rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft File: JXjLyvyiaxcgV-N6t3phyBAyIi0.mft (raw, json) Hash identifier: TfmIYxU1UXM0OWqDMAKVdz5b+YIFhAeqNBB/m9avcNs= Subject key identifier: 14:F4:44:FA:15:C4:6A:E9:AA:8D:F3:E8:F9:C2:43:E5:F8:C3:9E:69 Authority key identifier: 25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D Certificate issuer: /CN=A9137AD6/serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft Manifest number: 031A Signing time: Thu 17 Apr 2025 00:51:15 +0000 Manifest this update: Thu 17 Apr 2025 00:51:14 +0000 Manifest next update: Thu 24 Apr 2025 00:51:14 +0000 Files and hashes: 1: JXjLyvyiaxcgV-N6t3phyBAyIi0.crl (hash: OyRcQnZgXngwoIuhAPrIhj2As2ozXLi+SJPpTNxpTWE=) 2: 2595D7A6063111EDB15E2E5FC4F9AE02.roa (hash: j4AbAcrSNJQt4KCCfWgLsvvoSyCYqNIdVPPppm3Zn7E=) 3: 7142AA1A062E11EDA95B3143C4F9AE02.roa (hash: sAHMyFBwbehSytK0bjkDhBpvCN1HCAvo6oyZeTkv4Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 00:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137AD6, serialNumber=2578CBCAFCA26B172057E37AB77A61C81032222D Validity Not Before: Apr 17 00:51:14 2025 GMT Not After : Apr 24 00:51:14 2025 GMT Subject: CN=68005082-8040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:e0:72:45:6d:eb:95:ca:b8:73:d0:f9:f0: 93:ca:5f:88:b9:61:2e:88:ff:25:5a:9d:32:e4:60: 82:d9:b8:66:c3:b6:f5:e4:5b:8a:e4:66:0c:23:30: d2:2e:87:3b:3d:70:06:04:8b:51:d7:47:bd:04:e8: 89:a2:85:66:00:f7:0c:16:a0:d0:9c:01:1c:6c:ff: 17:9f:d4:4a:65:fd:69:8c:da:52:6e:b7:2c:44:f5: f3:a0:ae:ea:2d:b2:60:3c:c4:15:fc:28:62:07:c8: 3a:5b:63:d8:59:49:86:94:20:03:5f:f4:88:6d:4f: ad:7e:71:31:a7:99:8b:e9:b3:6e:2c:a3:f9:1f:9d: cb:9e:03:fd:22:fc:14:d9:15:25:5b:23:33:f2:1f: e9:6c:2e:a0:8b:19:64:bc:18:5f:48:cf:79:64:0b: 57:16:94:e8:2f:8e:a9:c6:fd:a4:21:2c:20:49:53: 6c:18:0a:1f:26:f0:a7:57:57:18:11:0e:03:c1:cf: fb:a6:8c:5b:df:a6:e4:e1:bd:1c:25:2e:03:f6:4a: e0:e8:4f:84:4e:f9:8c:63:ce:d9:cc:1d:d8:d5:74: d9:3b:e1:b4:d5:c6:12:c1:45:67:28:c5:e1:a1:a2: 13:89:b4:14:e2:6b:db:17:3b:2d:0c:73:24:dd:1b: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:44:FA:15:C4:6A:E9:AA:8D:F3:E8:F9:C2:43:E5:F8:C3:9E:69 X509v3 Authority Key Identifier: keyid:25:78:CB:CA:FC:A2:6B:17:20:57:E3:7A:B7:7A:61:C8:10:32:22:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXjLyvyiaxcgV-N6t3phyBAyIi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137AD6/A2CE6BD8C77611ECB73AD566C4F9AE02/JXjLyvyiaxcgV-N6t3phyBAyIi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ab:2b:d2:aa:73:61:81:a7:b3:12:39:25:46:f1:90:95:04: d7:3b:87:07:94:06:6f:56:87:42:00:0b:b1:31:cc:18:b4:f2: cc:b7:d8:7d:dc:e7:ef:e9:92:e0:c8:a7:41:a9:92:ed:d0:6a: 2e:6a:6f:79:2e:3a:90:cc:00:81:8d:b4:77:99:b5:fc:f8:e4: 2b:7a:0d:7a:b2:5e:71:e6:81:dd:46:c7:a6:a7:6c:a9:e1:35: 83:97:11:6b:05:c9:fa:b5:9a:01:aa:a3:b2:4f:1a:24:ec:63: 7f:b1:22:8a:e2:09:98:7d:fa:16:c2:30:f1:9d:b9:78:bb:99: 90:b9:14:15:47:fc:7d:4a:3d:62:f1:6a:5b:8d:83:b8:39:bc: 27:cc:ac:39:b6:3c:fe:2e:c4:8a:3a:8e:41:6b:45:b6:57:16: d5:e3:3a:d2:3b:8b:11:86:94:2a:ce:6b:f0:d1:bd:fa:9f:5f: be:7a:90:6c:f6:4a:98:64:37:30:d2:e7:34:72:13:74:b7:08: 30:64:5f:1c:43:27:02:f4:98:71:ca:eb:0b:de:4c:9f:77:aa: f9:7c:4e:04:c3:c1:64:aa:2d:8b:80:a7:4c:3a:61:8b:d1:4d: 3d:f0:9e:37:2c:1f:e5:ef:ca:7b:ec:48:ee:7c:9e:12:84:7c: 3f:9c:4d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBRDYxMTAvBgNVBAUTKDI1NzhDQkNBRkNBMjZCMTcyMDU3RTM3QUI3N0E2MUM4 MTAzMjIyMkQwHhcNMjUwNDE3MDA1MTE0WhcNMjUwNDI0MDA1MTE0WjAYMRYwFAYD VQQDEw02ODAwNTA4Mi04MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFXgckVt65XKuHPQ+fCTyl+IuWEuiP8lWp0y5GCC2bhmw7b15FuK5GYMIzDS Loc7PXAGBItR10e9BOiJooVmAPcMFqDQnAEcbP8Xn9RKZf1pjNpSbrcsRPXzoK7q LbJgPMQV/ChiB8g6W2PYWUmGlCADX/SIbU+tfnExp5mL6bNuLKP5H53LngP9IvwU 2RUlWyMz8h/pbC6gixlkvBhfSM95ZAtXFpToL46pxv2kISwgSVNsGAofJvCnV1cY EQ4Dwc/7poxb36bk4b0cJS4D9krg6E+ETvmMY87ZzB3Y1XTZO+G01cYSwUVnKMXh oaITibQU4mvbFzstDHMk3Ru4QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT0RPoV xGrpqo3z6PnCQ+X4w55pMB8GA1UdIwQYMBaAFCV4y8r8omsXIFfjerd6YcgQMiIt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FENi9BMkNFNkJEOEM3 NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4Y2dWLU42dDNwaHlCQXlJ aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYakx5dnlpYXhjZ1YtTjZ0M3BoeUJBeUlpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FENi9BMkNFNkJEOEM3NzYxMUVDQjczQUQ1NjZDNEY5QUUwMi9KWGpMeXZ5aWF4 Y2dWLU42dDNwaHlCQXlJaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEqyvSqnNhgaezEjklRvGQlQTXO4cHlAZvVodCAAuxMcwYtPLMt9h9 3Ofv6ZLgyKdBqZLt0Gouam95LjqQzACBjbR3mbX8+OQreg16sl5x5oHdRsemp2yp 4TWDlxFrBcn6tZoBqqOyTxok7GN/sSKK4gmYffoWwjDxnbl4u5mQuRQVR/x9Sj1i 8WpbjYO4ObwnzKw5tjz+LsSKOo5Ba0W2VxbV4zrSO4sRhpQqzmvw0b36n1++epBs 9kqYZDcw0uc0chN0twgwZF8cQycC9JhxyusL3kyfd6r5fE4Ew8Fkqi2LgKdMOmGL 0U098J43LB/l78p77EjufJ4ShHw/nE1R -----END CERTIFICATE-----Generated at Thu Apr 17 22:38:28 2025 by rpki-client