$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: QuoVsuL3rU4F781iF8JsXbI0X666Z289qyr7RG5GO2Q= Subject key identifier: D0:56:CE:69:48:05:52:3E:41:38:39:47:AE:B5:C6:70:4E:18:56:DE Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1BF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1BE1 Signing time: Tue 08 Apr 2025 16:13:59 +0000 Manifest this update: Tue 08 Apr 2025 16:13:58 +0000 Manifest next update: Tue 15 Apr 2025 16:13:58 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: r0OzYI1+CsoRC9RXnwKrw/7zXNZzUmvelLNBhtcn0SM=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7161 (0x1bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C Validity Not Before: Apr 8 16:13:58 2025 GMT Not After : Apr 15 16:13:58 2025 GMT Subject: CN=67f54b47-79db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:b2:b7:0f:7d:ba:bc:d8:77:a6:39:06:d5: 84:69:17:15:ec:f6:0a:f4:18:f6:67:53:71:58:1a: 1a:76:69:fb:c7:9b:c7:3a:df:74:1e:77:5d:7d:34: 6d:c0:3c:c2:b2:ad:19:34:dc:d4:de:63:e2:63:56: f6:ee:f2:97:f5:a6:fc:72:db:c2:a8:19:1c:0b:27: fa:e9:7e:de:24:d5:c7:ff:59:4a:a0:5b:46:e9:d2: 3b:3f:8c:1c:c2:bc:2a:2e:dd:c3:98:26:72:48:cc: 93:e6:c3:14:22:f1:55:da:5b:9b:03:d0:7e:d4:c9: 1c:18:44:b6:2a:ce:96:ca:55:42:76:bb:89:55:8a: 4b:46:7b:46:dc:28:46:aa:75:ac:fa:8c:2c:85:93: 5b:fb:ab:03:df:be:ed:59:f8:98:d2:45:42:98:9c: ba:82:d8:ab:3e:de:0b:9b:b8:cc:32:48:56:a4:77: c1:c1:e2:d3:07:a2:f7:11:1f:37:70:36:f7:db:a5: c8:f2:68:f5:56:3f:a0:4e:88:0e:43:c1:66:65:a4: f9:15:23:69:2a:12:92:b0:72:a2:c4:e0:10:f4:f2: f8:31:d6:34:71:f5:31:30:43:bb:a9:d4:c0:9e:a4: 8e:5f:c3:c0:64:66:ee:93:76:ce:0a:24:aa:d1:f6: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:56:CE:69:48:05:52:3E:41:38:39:47:AE:B5:C6:70:4E:18:56:DE X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e7:48:a3:43:f7:b7:13:d6:2f:38:4c:e4:69:df:e4:b7:be: 96:3b:e9:d8:aa:21:45:01:e6:b8:57:de:10:2e:31:4f:d1:32: b9:19:29:b5:13:cc:b2:47:bf:cd:6b:ee:8d:39:fe:3c:48:90: b0:f1:34:95:91:21:74:4e:d1:f9:26:f5:71:f7:83:9e:5a:17: b9:5b:cb:34:7b:c5:9c:3f:15:16:b9:b2:da:a2:1d:8c:fe:ca: 4e:01:57:52:a7:2d:d5:07:77:18:52:65:6d:90:92:46:2e:ea: c1:e9:58:d8:0f:a9:f9:c2:9c:6e:a5:d2:5e:36:e0:f4:22:39: b6:c1:c4:09:bb:f3:1a:e4:19:f4:bb:91:99:a3:9c:66:8a:d5: d4:c2:f8:77:b8:f9:63:52:df:dd:b9:18:f7:bd:d5:4b:9a:8d: 10:9f:a6:06:a0:0e:13:05:e3:1a:9b:64:f8:dc:51:ba:0e:f8: ff:18:fc:c0:5b:b9:96:6b:92:6a:fd:38:58:06:8e:45:e0:3b: c2:a7:f0:97:4f:ff:85:44:e0:23:5a:54:0d:61:4b:e3:82:fe: eb:3f:7c:47:14:36:f0:91:0f:de:01:12:6c:e6:03:8e:a2:f8: 0f:09:d3:b6:07:5f:fe:0e:13:1d:5f:f8:18:87:f2:63:0e:e4: cd:ac:ee:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwNDA4MTYxMzU4WhcNMjUwNDE1MTYxMzU4WjAYMRYwFAYD VQQDEw02N2Y1NGI0Ny03OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuByytw99urzYd6Y5BtWEaRcV7PYK9Bj2Z1NxWBoadmn7x5vHOt90HnddfTRt wDzCsq0ZNNzU3mPiY1b27vKX9ab8ctvCqBkcCyf66X7eJNXH/1lKoFtG6dI7P4wc wrwqLt3DmCZySMyT5sMUIvFV2lubA9B+1MkcGES2Ks6WylVCdruJVYpLRntG3ChG qnWs+owshZNb+6sD377tWfiY0kVCmJy6gtirPt4Lm7jMMkhWpHfBweLTB6L3ER83 cDb326XI8mj1Vj+gTogOQ8FmZaT5FSNpKhKSsHKixOAQ9PL4MdY0cfUxMEO7qdTA nqSOX8PAZGbuk3bOCiSq0fZbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBWzmlI BVI+QTg5R661xnBOGFbeMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv50ijQ/e3E9YvOEzkad/kt76WO+nYqiFFAea4V94QLjFP0TK5GSm1 E8yyR7/Na+6NOf48SJCw8TSVkSF0TtH5JvVx94OeWhe5W8s0e8WcPxUWubLaoh2M /spOAVdSpy3VB3cYUmVtkJJGLurB6VjYD6n5wpxupdJeNuD0Ijm2wcQJu/Ma5Bn0 u5GZo5xmitXUwvh3uPljUt/duRj3vdVLmo0Qn6YGoA4TBeMam2T43FG6Dvj/GPzA W7mWa5Jq/ThYBo5F4DvCp/CXT/+FROAjWlQNYUvjgv7rP3xHFDbwkQ/eARJs5gOO ovgPCdO2B1/+DhMdX/gYh/JjDuTNrO6T -----END CERTIFICATE-----Generated at Wed Apr 9 07:24:33 2025 by rpki-client