$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: WkaM1j4b18uiYgO2XA4p4bOiOcsF9sIsS8DOf0NkgXg= Subject key identifier: A2:97:53:C7:B7:9B:08:F9:4D:8F:93:D8:B7:2B:58:D1:EC:C2:31:0A Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 04EB Signing time: Fri 04 Apr 2025 23:50:40 +0000 Manifest this update: Fri 04 Apr 2025 23:50:40 +0000 Manifest next update: Fri 11 Apr 2025 23:50:40 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: NEPL2NmmBZtQ6DPEgPRU0/9fe2phnCXyo1+uHdn9m/A=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133 Validity Not Before: Apr 4 23:50:40 2025 GMT Not After : Apr 11 23:50:40 2025 GMT Subject: CN=67f07050-10d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:71:e1:a6:04:79:71:45:36:92:d0:cc:af: 19:99:4c:26:29:11:c2:2b:08:c7:cb:0c:03:77:16: 85:fb:f9:ed:a3:bf:50:e6:08:42:8b:f3:fd:3b:60: 72:2a:8e:da:63:41:99:d3:8c:1a:0b:5e:15:4e:22: b7:d9:d8:2e:7b:f1:fa:8e:be:c9:02:0d:0b:5b:a6: 5e:a4:0c:f2:9f:33:49:99:c8:da:26:45:9e:a9:56: ad:62:4b:44:02:67:4b:db:ae:53:72:e6:d2:a0:d0: 95:b7:32:08:9d:21:c7:12:da:35:54:38:62:d7:0d: b5:cc:68:c4:34:4a:aa:d8:3f:42:60:08:ba:2f:dc: 3b:75:f9:c7:e9:18:0d:6b:88:c4:65:2f:f3:a6:01: 94:09:76:50:89:58:7c:14:b3:2e:c2:60:79:ec:b0: d5:a1:69:34:bb:66:48:99:da:e1:0e:4f:ee:07:74: 86:1f:8b:fd:b3:c7:aa:0f:6f:21:a8:83:40:07:66: cf:7a:ef:01:df:83:64:e4:4b:03:ec:36:a1:e0:2f: e6:1f:21:7b:32:d2:c6:fa:2a:22:0d:ad:0a:8c:4e: 62:a2:9c:24:5c:e6:3b:f3:d9:2e:03:1f:0a:0b:b8: 91:f9:2a:08:fe:03:ab:75:44:0c:c3:7c:34:53:54: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:53:C7:B7:9B:08:F9:4D:8F:93:D8:B7:2B:58:D1:EC:C2:31:0A X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1e:2f:6c:db:a0:0f:c7:77:48:74:3b:ab:19:3c:ff:d5:52: 42:1e:47:0b:66:01:72:96:ab:ac:30:50:64:16:3b:c6:32:f9: ea:c8:98:74:02:19:9a:c5:2e:95:65:6d:bc:ce:6f:4d:e5:cf: 6c:55:69:aa:bc:9e:ee:2d:d2:77:91:d6:fe:86:2c:82:2a:aa: 08:31:c9:e8:c5:36:4d:c9:90:1b:f9:65:58:07:29:39:f7:92: f1:fa:3f:82:e6:7b:97:29:58:46:a0:17:02:16:f0:3b:77:56: 39:2b:5a:dc:ae:50:1f:23:d6:fa:03:f2:df:71:df:a1:8e:90: c9:40:13:83:4d:a4:6a:07:6d:76:25:bc:88:4f:cc:94:96:02: a4:73:f3:93:f9:48:88:30:94:9a:4b:9d:1b:4d:c0:11:0d:b8: 33:c6:10:ec:0a:c5:12:c1:a7:ca:02:f8:68:ef:4d:ee:30:21: 72:e5:e8:dc:bf:cf:b6:83:2b:a8:61:07:bf:0a:cf:d8:61:43: 3f:b1:aa:bf:9a:32:75:90:ea:48:f4:78:15:ed:ec:ab:53:e1: cf:fc:01:4c:8c:32:a3:09:58:c1:74:24:d5:3d:29:40:82:ef: f9:d0:17:15:3f:da:b0:08:71:ca:3d:1e:9e:72:99:a8:be:7c: b0:56:66:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjUwNDA0MjM1MDQwWhcNMjUwNDExMjM1MDQwWjAYMRYwFAYD VQQDEw02N2YwNzA1MC0xMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuxx4aYEeXFFNpLQzK8ZmUwmKRHCKwjHywwDdxaF+/nto79Q5ghCi/P9O2By Ko7aY0GZ04waC14VTiK32dgue/H6jr7JAg0LW6ZepAzynzNJmcjaJkWeqVatYktE AmdL265TcubSoNCVtzIInSHHEto1VDhi1w21zGjENEqq2D9CYAi6L9w7dfnH6RgN a4jEZS/zpgGUCXZQiVh8FLMuwmB57LDVoWk0u2ZImdrhDk/uB3SGH4v9s8eqD28h qINAB2bPeu8B34Nk5EsD7Dah4C/mHyF7MtLG+ioiDa0KjE5iopwkXOY789kuAx8K C7iR+SoI/gOrdUQMw3w0U1QJNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKXU8e3 mwj5TY+T2LcrWNHswjEKMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALHi9s26APx3dIdDurGTz/1VJCHkcLZgFylqusMFBkFjvGMvnqyJh0 AhmaxS6VZW28zm9N5c9sVWmqvJ7uLdJ3kdb+hiyCKqoIMcnoxTZNyZAb+WVYByk5 95Lx+j+C5nuXKVhGoBcCFvA7d1Y5K1rcrlAfI9b6A/Lfcd+hjpDJQBODTaRqB212 JbyIT8yUlgKkc/OT+UiIMJSaS50bTcARDbgzxhDsCsUSwafKAvho703uMCFy5ejc v8+2gyuoYQe/Cs/YYUM/saq/mjJ1kOpI9HgV7eyrU+HP/AFMjDKjCVjBdCTVPSlA gu/50BcVP9qwCHHKPR6ecpmovnywVmYE -----END CERTIFICATE-----Generated at Sun Apr 6 22:02:31 2025 by rpki-client