$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: XsnGNZhjBN9UwI5uWfjngTNcVU/lPYCJFBrni8C3z20= Subject key identifier: D8:98:67:D5:E5:D0:B9:4F:75:7C:73:64:97:58:74:B5:4A:3E:72:A5 Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0A38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0A2E Signing time: Wed 02 Apr 2025 19:48:38 +0000 Manifest this update: Wed 02 Apr 2025 19:48:37 +0000 Manifest next update: Wed 09 Apr 2025 19:48:37 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: +VLpu5TFxmCvFsXVWbCPAlKxIdSvcTgHgvPnfGebqZA=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: ISGTVPaDSy80xCA34yyD1yreZg8c/egSeWgOcnZdCwU=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: Wyd164MPhU473t/AoUISBoO4Aw8E8UOj0zKD275MPkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2616 (0xa38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3 Validity Not Before: Apr 2 19:48:37 2025 GMT Not After : Apr 9 19:48:37 2025 GMT Subject: CN=67ed9495-3e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:24:ef:7e:6c:76:4a:42:50:4b:74:b2:46: f0:f9:84:84:71:cd:9e:b2:fd:fa:2b:82:fa:ba:33: e1:54:d3:dd:43:8f:f8:5e:a1:9b:2d:7f:6f:ed:9d: 96:da:e4:ac:a4:8f:75:af:61:af:d3:e7:e2:a6:34: 74:e1:92:e4:de:91:0e:03:8c:80:97:0c:96:9d:dc: 4b:2c:34:c9:15:fa:02:91:2e:db:1a:52:54:06:cd: 02:f8:c4:5b:02:6c:96:a3:1e:50:59:dd:87:0a:1b: fe:5e:3f:64:98:45:d7:9d:aa:10:22:92:4e:eb:20: d1:fb:95:36:80:b7:2d:f4:44:37:2e:83:b5:23:c0: e7:95:47:3a:09:99:0f:a5:d9:de:b6:11:df:65:f2: f8:5b:8b:22:c3:a8:83:8d:a5:2f:74:5e:1c:b6:01: 16:43:11:88:ff:99:1c:d1:55:ef:86:c8:86:f0:37: f5:bb:40:2b:2c:ed:2d:bf:d3:5f:74:be:fc:0f:a8: 0a:e7:30:d9:37:6a:24:31:19:7e:f6:58:66:87:5f: 90:60:72:88:af:83:0a:99:ff:c0:13:58:0b:0a:64: 10:d9:4a:4f:77:de:c1:6c:b8:92:8d:9b:10:63:7c: 92:4a:4c:1a:ef:da:fc:6f:3c:61:1d:31:26:36:b2: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:67:D5:E5:D0:B9:4F:75:7C:73:64:97:58:74:B5:4A:3E:72:A5 X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:5d:c5:05:2a:3d:cc:82:48:8c:81:e0:f2:77:37:ee:3b: dd:36:5b:6a:36:07:19:61:e6:1c:8a:18:07:48:a3:a7:5c:4c: 19:39:d3:59:44:3e:2d:cc:08:5b:b3:13:40:1d:1b:b5:6c:39: 28:17:99:03:b2:af:d3:ee:03:7b:51:3b:82:3a:f6:62:e5:de: f9:81:23:72:44:6e:13:07:e0:8a:7f:34:f2:5f:ce:43:6b:41: 2e:6e:c7:1a:85:ab:cd:59:11:52:5b:b4:2b:4c:6e:9e:5b:93: 32:92:75:2c:c2:82:02:4a:80:80:c1:21:66:4f:6c:58:ef:d5: 40:a0:26:e9:f4:b3:7a:b0:6f:8f:9c:26:83:f4:6c:84:33:53: 06:4d:62:95:88:bc:c9:7a:86:b3:b7:90:2b:ac:e0:82:2e:c1: 79:02:7c:57:6e:e2:06:25:fe:7b:ad:37:f2:f9:15:43:c4:8b: ea:e2:e1:2b:05:a2:69:85:65:e2:59:a1:4a:4a:2d:98:41:7b: e7:ee:be:18:31:14:75:a0:c4:15:04:e3:5f:1b:2f:81:29:48: 83:c0:aa:18:b4:7b:28:0f:59:2f:b6:21:12:17:77:9b:bf:4c: 33:77:92:93:6c:d0:9c:57:04:2f:31:da:99:9b:7f:28:3c:0f: 48:2c:a6:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjUwNDAyMTk0ODM3WhcNMjUwNDA5MTk0ODM3WjAYMRYwFAYD VQQDEw02N2VkOTQ5NS0zZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOgk735sdkpCUEt0skbw+YSEcc2esv36K4L6ujPhVNPdQ4/4XqGbLX9v7Z2W 2uSspI91r2Gv0+fipjR04ZLk3pEOA4yAlwyWndxLLDTJFfoCkS7bGlJUBs0C+MRb AmyWox5QWd2HChv+Xj9kmEXXnaoQIpJO6yDR+5U2gLct9EQ3LoO1I8DnlUc6CZkP pdnethHfZfL4W4siw6iDjaUvdF4ctgEWQxGI/5kc0VXvhsiG8Df1u0ArLO0tv9Nf dL78D6gK5zDZN2okMRl+9lhmh1+QYHKIr4MKmf/AE1gLCmQQ2UpPd97BbLiSjZsQ Y3ySSkwa79r8bzxhHTEmNrJevwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiYZ9Xl 0LlPdXxzZJdYdLVKPnKlMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh5F3FBSo9zIJIjIHg8nc37jvdNltqNgcZYeYcihgHSKOnXEwZOdNZ RD4tzAhbsxNAHRu1bDkoF5kDsq/T7gN7UTuCOvZi5d75gSNyRG4TB+CKfzTyX85D a0EubscahavNWRFSW7QrTG6eW5MyknUswoICSoCAwSFmT2xY79VAoCbp9LN6sG+P nCaD9GyEM1MGTWKViLzJeoazt5ArrOCCLsF5AnxXbuIGJf57rTfy+RVDxIvq4uEr BaJphWXiWaFKSi2YQXvn7r4YMRR1oMQVBONfGy+BKUiDwKoYtHsoD1kvtiESF3eb v0wzd5KTbNCcVwQvMdqZm38oPA9ILKYJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:28 2025 by rpki-client