$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft File: J4qsn8YiO7A3FX6zn5bbvajm0lY.mft (raw, json) Hash identifier: dePIl6NjYzaeVVV6lNdviLcnM97tOqj6WYvD8RfhP20= Subject key identifier: FB:B3:C8:B6:28:97:4A:5F:48:73:4A:19:6B:E4:ED:DC:BA:88:52:4E Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft Manifest number: 05DD Signing time: Tue 22 Apr 2025 18:56:15 +0000 Manifest this update: Tue 22 Apr 2025 18:56:15 +0000 Manifest next update: Tue 29 Apr 2025 18:56:15 +0000 Files and hashes: 1: J4qsn8YiO7A3FX6zn5bbvajm0lY.crl (hash: cZqAlQqQwzy2HwPVWVJnOuz/OpQnCdT3mCL/wvX7yug=) 2: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (hash: w1O1ZsevC2HzFSEj/1IPY4lUEna5oDbCvbrv+EoKv3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 18:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: Apr 22 18:56:15 2025 GMT Not After : Apr 29 18:56:15 2025 GMT Subject: CN=6807e64f-6a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:0b:a8:52:c0:32:b7:ce:ed:8d:78:51:5e: 59:5f:1f:67:4a:60:bf:5b:1c:28:46:0a:fb:47:41: 5a:b3:9c:5f:d1:16:05:9a:40:17:66:6b:0a:e6:5e: a2:c6:12:e8:33:df:85:d9:a2:ff:e0:42:92:79:4d: 7a:25:f3:03:25:ef:c4:fc:8c:c8:5d:73:81:94:c8: aa:ba:9e:04:a5:ac:84:c3:81:f5:9d:66:3f:d8:68: e9:11:00:41:c9:a2:f3:5d:65:ae:7f:7a:d3:df:dc: 49:e8:2e:f2:96:e7:1f:f7:02:c7:d7:75:30:e9:5c: eb:33:e5:62:b2:45:e2:7a:24:d5:6f:fc:31:6e:c1: 3b:5f:9d:99:10:2c:46:6a:94:2e:dd:6c:b4:86:69: ce:98:94:80:49:d8:ec:8e:08:f9:1a:86:64:5e:65: ca:5e:64:ff:cf:ba:e8:1b:74:e0:e4:79:8c:8a:04: 17:e8:4e:4a:5d:41:7a:39:6c:80:94:58:b1:00:ab: ad:1f:e4:72:ed:86:1f:91:81:f8:7e:db:49:b9:6f: bd:40:91:43:42:62:6f:fc:c1:48:6e:0b:95:a7:8e: a5:eb:23:eb:87:ff:11:bf:3e:ca:a1:13:7f:cf:c0: 29:93:d7:42:0d:f0:d4:7a:cc:05:02:47:5f:56:7e: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B3:C8:B6:28:97:4A:5F:48:73:4A:19:6B:E4:ED:DC:BA:88:52:4E X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c6:b0:6f:4b:8c:78:98:de:36:23:c9:db:88:7b:1e:ec:2d: 31:c8:99:d1:e6:29:91:fe:b2:8c:57:07:1d:77:91:b4:83:ae: 19:4c:47:94:ea:e7:01:e2:76:2e:fe:45:93:c8:92:0f:bb:29: de:dc:91:83:35:af:1b:62:0a:31:e5:94:50:95:e5:68:b0:72: 93:d0:55:e7:46:3f:17:72:57:0d:41:b4:32:8a:1f:21:a3:9a: e4:0c:d2:67:2a:47:ea:22:e7:45:87:95:0c:2b:a6:31:eb:16: ae:30:98:49:7a:6c:00:77:98:d6:0c:49:9e:e1:4f:74:89:10: e1:8b:0f:e0:99:47:cd:bc:1c:b1:78:af:94:1f:a3:0e:2d:9a: a7:8b:b8:6a:2e:06:fe:c0:62:be:73:90:67:27:93:e3:8f:db: af:5e:71:36:3d:a5:21:f2:9d:c3:8a:65:71:8a:88:eb:97:98: 81:73:71:b0:51:0d:75:16:42:3b:2b:28:7c:1c:1b:fa:ce:2f: 8b:0a:88:df:57:97:67:ea:f7:b4:40:81:1f:5f:4f:4c:14:ff: c2:da:29:a6:26:0b:9d:66:d0:c9:3f:cd:a6:cd:7d:e6:cd:ee: 77:5d:1c:fe:5d:c7:54:2b:3f:c4:5b:3d:08:14:ee:d2:d4:ed: d6:6c:71:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjUwNDIyMTg1NjE1WhcNMjUwNDI5MTg1NjE1WjAYMRYwFAYD VQQDEw02ODA3ZTY0Zi02YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjMLqFLAMrfO7Y14UV5ZXx9nSmC/WxwoRgr7R0Fas5xf0RYFmkAXZmsK5l6i xhLoM9+F2aL/4EKSeU16JfMDJe/E/IzIXXOBlMiqup4EpayEw4H1nWY/2GjpEQBB yaLzXWWuf3rT39xJ6C7ylucf9wLH13Uw6VzrM+ViskXieiTVb/wxbsE7X52ZECxG apQu3Wy0hmnOmJSASdjsjgj5GoZkXmXKXmT/z7roG3Tg5HmMigQX6E5KXUF6OWyA lFixAKutH+Ry7YYfkYH4fttJuW+9QJFDQmJv/MFIbguVp46l6yPrh/8Rvz7KoRN/ z8Apk9dCDfDUeswFAkdfVn4v8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuzyLYo l0pfSHNKGWvk7dy6iFJOMB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkMwNS84MzU1OUM3Q0IyMTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83 QTNGWDZ6bjViYnZham0wbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzxrBvS4x4mN42I8nbiHse7C0xyJnR5imR/rKMVwcdd5G0g64ZTEeU 6ucB4nYu/kWTyJIPuyne3JGDNa8bYgox5ZRQleVosHKT0FXnRj8XclcNQbQyih8h o5rkDNJnKkfqIudFh5UMK6Yx6xauMJhJemwAd5jWDEme4U90iRDhiw/gmUfNvByx eK+UH6MOLZqni7hqLgb+wGK+c5BnJ5Pjj9uvXnE2PaUh8p3DimVxiojrl5iBc3Gw UQ11FkI7Kyh8HBv6zi+LCojfV5dn6ve0QIEfX09MFP/C2immJgudZtDJP82mzX3m ze53XRz+XcdUKz/EWz0IFO7S1O3WbHER -----END CERTIFICATE-----Generated at Wed Apr 23 10:50:49 2025 by rpki-client