$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: vNI67l+vqGUzY6URTt72Tw5zlCUYcjwXa+JMex0GQaE= Subject key identifier: 55:A2:71:5F:C2:90:DC:21:60:17:EA:2E:93:3F:04:C8:78:75:B5:ED Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 15EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 15E4 Signing time: Fri 04 Apr 2025 16:51:45 +0000 Manifest this update: Fri 04 Apr 2025 16:51:44 +0000 Manifest next update: Fri 11 Apr 2025 16:51:44 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: 9Vgs8jfcm1+ZFHKT6hRLBH30DK3cfPXitP1RmU1lOQM=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5614 (0x15ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3 Validity Not Before: Apr 4 16:51:44 2025 GMT Not After : Apr 11 16:51:44 2025 GMT Subject: CN=67f00e20-f0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:9b:a6:ff:ed:e2:9b:d0:b2:20:12:20:6c: 6a:a3:06:76:fb:bc:09:fe:b3:e2:66:50:c9:8c:31: 04:69:f6:ac:21:79:b4:89:1c:6a:2a:b5:f3:3f:28: bf:e5:fd:9e:05:39:85:18:24:58:82:a0:a8:8a:4f: e1:b8:32:3f:39:c6:b5:d9:a9:e1:ce:04:dc:2f:91: e3:29:dc:d9:ba:fc:75:f0:d1:1d:df:76:1b:3c:6c: 11:76:02:b1:ae:1b:c5:9f:7d:6c:a9:2b:c8:4c:33: d2:77:05:7b:e6:2f:e2:59:a8:57:0e:b2:8a:10:a2: 19:3c:7c:ae:97:26:9a:bb:c0:81:77:6b:c3:36:81: bc:00:c9:a1:ab:df:3d:bd:eb:3a:dd:7e:0f:7b:b2: 39:3c:0a:41:a5:92:af:ee:32:75:84:c1:24:ec:64: ab:92:2b:54:e8:f2:7e:24:c8:0b:fa:e4:21:66:01: e1:40:5c:58:ec:ee:82:25:58:dd:de:84:49:02:3e: e8:d6:16:27:ea:43:44:df:d2:3c:3e:16:a2:84:96: a5:8d:da:53:34:97:b1:72:02:fd:63:e0:2d:77:8d: 2e:44:01:d5:34:82:b1:04:60:b1:46:e0:5b:41:ff: 4a:de:be:c7:86:e4:41:38:fa:67:97:8b:d7:54:c4: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:71:5F:C2:90:DC:21:60:17:EA:2E:93:3F:04:C8:78:75:B5:ED X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:0b:9d:cf:9f:20:20:92:25:41:03:87:86:89:93:c8:a9:ed: c1:32:5f:eb:78:2a:d9:6c:c2:5d:75:da:a5:f7:53:30:c4:5a: f3:18:fe:ff:5c:f5:db:dd:da:78:9f:80:26:71:db:83:98:bf: 3f:76:90:69:af:eb:b7:c4:2d:b9:7b:a4:f3:35:b6:3e:25:d8: d1:48:de:71:54:0e:bb:12:11:a3:4f:ac:bf:c3:bc:73:10:fc: fc:a8:b8:81:0c:15:04:11:29:21:b6:97:6e:42:37:5f:9a:00: 9d:10:f3:bc:3e:55:9d:49:89:78:df:39:f9:ec:41:c3:a1:df: 59:cf:ac:f1:eb:7d:bc:7a:9c:ae:6d:96:83:0e:4d:e8:b9:16: 06:29:ac:89:6d:21:87:ba:b5:18:bf:4f:52:cb:27:ce:2d:f9: 43:a5:af:83:4c:15:ce:1e:72:33:b3:67:66:74:26:4a:02:cb: 4d:4a:4b:6b:74:3b:34:e2:71:3e:2c:67:4b:99:45:e0:80:6a: e6:07:34:b7:aa:85:5e:de:53:c7:a2:6c:54:2e:26:8f:33:a3: c9:b7:08:c6:00:8c:49:49:c9:61:8e:78:7b:39:c4:10:11:9f: 10:1d:c7:4c:80:1d:37:b2:22:1b:a5:56:f4:a8:97:47:dd:c7: c3:9c:a9:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwNDA0MTY1MTQ0WhcNMjUwNDExMTY1MTQ0WjAYMRYwFAYD VQQDEw02N2YwMGUyMC1mMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e6bpv/t4pvQsiASIGxqowZ2+7wJ/rPiZlDJjDEEafasIXm0iRxqKrXzPyi/ 5f2eBTmFGCRYgqCoik/huDI/Oca12anhzgTcL5HjKdzZuvx18NEd33YbPGwRdgKx rhvFn31sqSvITDPSdwV75i/iWahXDrKKEKIZPHyulyaau8CBd2vDNoG8AMmhq989 ves63X4Pe7I5PApBpZKv7jJ1hMEk7GSrkitU6PJ+JMgL+uQhZgHhQFxY7O6CJVjd 3oRJAj7o1hYn6kNE39I8PhaihJaljdpTNJexcgL9Y+Atd40uRAHVNIKxBGCxRuBb Qf9K3r7HhuRBOPpnl4vXVMQcPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWicV/C kNwhYBfqLpM/BMh4dbXtMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOC53PnyAgkiVBA4eGiZPIqe3BMl/reCrZbMJdddql91MwxFrzGP7/ XPXb3dp4n4AmcduDmL8/dpBpr+u3xC25e6TzNbY+JdjRSN5xVA67EhGjT6y/w7xz EPz8qLiBDBUEESkhtpduQjdfmgCdEPO8PlWdSYl43zn57EHDod9Zz6zx6328epyu bZaDDk3ouRYGKayJbSGHurUYv09SyyfOLflDpa+DTBXOHnIzs2dmdCZKAstNSktr dDs04nE+LGdLmUXggGrmBzS3qoVe3lPHomxULiaPM6PJtwjGAIxJSclhjnh7OcQQ EZ8QHcdMgB03siIbpVb0qJdH3cfDnKm4 -----END CERTIFICATE-----Generated at Sat Apr 5 05:38:12 2025 by rpki-client