$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: DC8PTO2BJFFSnAAtJXZ8fK4kMg3ECaZntLzhIzgC4f4= Subject key identifier: C5:A8:2D:57:8C:70:78:7E:F5:41:15:1C:B8:9B:B7:21:02:4F:BB:F3 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: E9 Signing time: Thu 17 Apr 2025 04:15:40 +0000 Manifest this update: Thu 17 Apr 2025 04:15:39 +0000 Manifest next update: Thu 24 Apr 2025 04:15:39 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: xEnixvOBILh+BcwwLY5uFuHVj1CuJKGg4+YaOn5CNGs=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: Ehjuv5Uf0g7hk8vGihsJTixHlQEY1frs5IM1jFNhEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Apr 17 04:15:39 2025 GMT Not After : Apr 24 04:15:39 2025 GMT Subject: CN=6800806b-c363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:27:2e:db:62:6a:bd:35:8e:fb:d9:88:fc: b0:4b:7a:2a:9a:24:bf:58:fd:51:54:4e:06:3b:76: bd:5f:da:1f:62:44:90:2d:b2:0f:5a:4c:31:88:84: ea:9e:d6:6f:68:64:ec:9a:78:91:b4:69:b9:01:6e: bc:ea:77:63:9c:b7:56:41:27:fb:bb:79:7f:0c:10: 7b:64:72:b4:05:fe:5b:ea:b5:8f:eb:e1:fa:60:20: 3b:df:ca:93:0d:e1:24:5d:9c:7f:38:88:f7:27:31: 37:b6:87:c1:c0:57:2a:a3:e4:9a:2f:5c:b6:72:66: 59:17:41:ae:e3:5d:1b:02:9e:48:d1:a7:d8:54:44: 7e:a4:67:cb:a2:f9:cd:15:8f:6b:fc:98:f4:d5:21: 90:70:4d:c3:24:2a:1f:b7:49:34:c4:c2:ce:ab:b5: fe:d7:83:7b:4a:5b:24:80:2a:12:79:ae:62:49:b4: a9:5f:9e:a9:c6:f0:4c:e7:d1:44:ce:0b:1c:38:bd: 5b:8d:bd:5c:20:b8:46:66:65:ca:b2:d3:5b:e4:dc: a3:cd:f8:5a:14:08:84:08:55:b3:84:79:26:2a:6d: b0:3c:42:7d:bc:6c:5d:e8:b7:86:f6:2e:54:28:87: 6d:b9:63:b0:51:07:9a:3d:0f:fe:bf:3f:4e:2c:76: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A8:2D:57:8C:70:78:7E:F5:41:15:1C:B8:9B:B7:21:02:4F:BB:F3 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:c3:b7:59:c0:e7:c8:1d:30:66:5f:f5:a1:70:4e:e8:83: 9e:61:75:ac:9e:05:b9:e4:07:85:96:ea:52:4b:92:4c:91:9c: 7a:82:08:fa:5e:84:0a:93:b2:af:9e:33:dd:8e:5b:a9:77:ce: 5e:20:0d:56:5f:d0:12:fa:0f:62:70:aa:c1:7f:5b:c9:69:08: cf:26:b6:8e:35:d3:3d:c9:75:57:6d:4f:67:2e:c0:f3:b8:07: 69:3a:cb:75:3f:6a:8a:77:e9:f4:e7:8c:45:44:e5:83:8e:6a: 7b:61:6b:67:e3:32:ce:93:6b:08:f8:a0:db:d8:4c:68:d1:51: a1:1a:d3:6d:99:31:75:b3:b6:b0:27:4c:0b:f5:7a:b1:f7:6e: fe:86:d2:18:b5:0a:26:60:2f:21:da:a9:12:ba:b8:f3:81:cc: a0:21:f8:ca:73:f7:60:9a:a2:27:80:0f:a9:f9:41:3b:a2:85: 86:11:7b:77:7c:ec:82:2f:cc:09:37:34:25:59:2b:f1:f7:90: cd:6c:44:5f:6f:0d:28:22:56:7b:b3:c3:52:45:48:a8:58:7d: 70:2d:19:30:c7:c3:7f:f8:55:f9:ea:38:6d:87:10:9f:30:f7: 39:99:7b:a4:a4:56:95:8f:a6:7a:09:4b:77:69:f1:b5:09:ab: ca:be:fc:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNDE3MDQxNTM5WhcNMjUwNDI0MDQxNTM5WjAYMRYwFAYD VQQDEw02ODAwODA2Yi1jMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1EnLttiar01jvvZiPywS3oqmiS/WP1RVE4GO3a9X9ofYkSQLbIPWkwxiITq ntZvaGTsmniRtGm5AW686ndjnLdWQSf7u3l/DBB7ZHK0Bf5b6rWP6+H6YCA738qT DeEkXZx/OIj3JzE3tofBwFcqo+SaL1y2cmZZF0Gu410bAp5I0afYVER+pGfLovnN FY9r/Jj01SGQcE3DJCoft0k0xMLOq7X+14N7SlskgCoSea5iSbSpX56pxvBM59FE zgscOL1bjb1cILhGZmXKstNb5NyjzfhaFAiECFWzhHkmKm2wPEJ9vGxd6LeG9i5U KIdtuWOwUQeaPQ/+vz9OLHbGuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWoLVeM cHh+9UEVHLibtyECT7vzMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXysO3WcDnyB0wZl/1oXBO6IOeYXWsngW55AeFlupSS5JMkZx6ggj6 XoQKk7KvnjPdjlupd85eIA1WX9AS+g9icKrBf1vJaQjPJraONdM9yXVXbU9nLsDz uAdpOst1P2qKd+n054xFROWDjmp7YWtn4zLOk2sI+KDb2Exo0VGhGtNtmTF1s7aw J0wL9Xqx927+htIYtQomYC8h2qkSurjzgcygIfjKc/dgmqIngA+p+UE7ooWGEXt3 fOyCL8wJNzQlWSvx95DNbERfbw0oIlZ7s8NSRUioWH1wLRkwx8N/+FX56jhthxCf MPc5mXukpFaVj6Z6CUt3afG1CavKvvyZ -----END CERTIFICATE-----Generated at Fri Apr 18 18:10:34 2025 by rpki-client