$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft File: JVLURML17uUkxsAbqk-d8rrsoqo.mft (raw, json) Hash identifier: F5c16ubyBGMsUPWLd/NcPbzLyXBzXheBcQ93P3LLyfg= Subject key identifier: C5:9C:70:6F:22:07:2A:B2:34:1C:2C:EC:A0:22:91:81:7F:9B:39:71 Authority key identifier: 25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA Certificate issuer: /CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft Manifest number: 0588 Signing time: Fri 28 Mar 2025 23:33:52 +0000 Manifest this update: Fri 28 Mar 2025 23:33:52 +0000 Manifest next update: Fri 04 Apr 2025 23:33:52 +0000 Files and hashes: 1: JVLURML17uUkxsAbqk-d8rrsoqo.crl (hash: 0+V92AaIrapfl2zhXD48S22q75xStXynlardFrNn2do=) 2: C4563C423ABB11ECA7767769C4F9AE02.roa (hash: 2/t4OED7jc6lYgcGwNs8Je0YJuMc/iNU0iFP+wDlgWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4BF Validity Not Before: Mar 28 23:33:52 2025 GMT Not After : Apr 4 23:33:52 2025 GMT Subject: CN=67e731e0-0aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:95:aa:31:7d:81:e0:99:c6:5e:da:36:a6: 84:e4:d7:46:98:21:51:f8:51:e0:36:15:26:ce:38: a1:77:75:d3:6b:6b:d1:83:c7:83:f8:88:28:21:3f: 6a:ec:78:4f:05:f9:fe:ab:ad:e0:fe:f7:e7:d0:5f: ce:72:97:15:e3:6a:62:0f:1d:52:ac:94:a7:5f:08: 8e:78:c4:29:17:5b:df:16:e9:06:d5:9f:14:6d:d9: fd:86:41:2b:17:ba:f1:6b:af:c8:89:7f:3b:bb:4d: 75:0a:cf:d0:cf:a6:68:ce:f5:d0:e9:19:fd:4f:8a: 10:59:b4:e0:b6:d1:ff:d3:71:07:c2:59:4b:fa:81: af:fb:2c:e2:a4:e7:59:93:ac:16:12:88:ff:37:e2: 04:65:f9:e2:c4:40:ea:6b:74:ae:23:b3:de:f0:ca: 7d:75:7e:ec:f0:71:ef:a3:e3:ed:c5:bb:d9:78:2b: 50:71:88:ee:4d:89:0c:f7:bc:46:12:b3:24:40:a8: f4:d6:a3:dc:31:78:62:4d:3a:61:d1:60:40:15:4c: 8c:64:a9:db:05:93:2d:71:06:c3:0d:34:3f:bf:b4: 25:53:49:44:b9:bb:23:07:43:32:b9:96:c5:48:64: 79:d8:d0:c0:3f:c9:11:af:e7:73:1a:15:08:cc:c7: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:70:6F:22:07:2A:B2:34:1C:2C:EC:A0:22:91:81:7F:9B:39:71 X509v3 Authority Key Identifier: keyid:25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2d:f2:85:7d:0e:17:8a:a5:12:30:ac:e2:e2:2b:7a:ce:10: a1:57:26:d8:46:bb:94:62:ba:e0:be:a2:86:82:8b:b2:bf:b4: 74:d4:6d:d4:21:ab:0f:37:b1:ea:16:d7:50:1e:d7:c4:4c:b8: 14:37:a9:54:fb:6e:6d:72:33:4f:67:3a:85:e9:f9:1d:04:74: be:7e:ea:c9:34:5b:d6:37:37:75:54:78:3c:8f:11:58:7f:6a: ec:5a:6d:2d:a6:e2:15:33:78:ac:16:53:50:fc:80:60:40:a0: 8c:cd:00:f8:38:aa:34:ae:25:f0:39:89:d5:5a:25:51:2a:b5: 64:77:09:ce:c0:70:e7:23:c0:b9:8e:b0:fe:4d:28:c1:e3:d5: 8b:c7:b0:dc:4f:07:89:cb:10:0b:51:30:e0:7e:2e:dd:5a:e5: 70:d0:04:da:7b:f2:0d:89:14:07:9a:2a:93:fc:80:09:17:e0: f9:1f:ae:69:26:8b:e3:cb:93:55:73:53:8d:f4:29:20:96:49: 21:7f:c5:ba:cd:39:26:d4:c0:5e:61:74:c3:bc:41:4e:71:16: ad:e5:3d:f3:9c:cf:c1:f9:9d:53:18:73:ae:31:23:0c:55:4f: e8:a1:a7:59:ea:d4:00:ff:36:cc:1e:ca:1f:0c:18:12:a7:95: 0e:02:12:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0QkYxMTAvBgNVBAUTKDI1NTJENDQ0QzJGNUVFRTUyNEM2QzAxQkFBNEY5REYy QkFFQ0EyQUEwHhcNMjUwMzI4MjMzMzUyWhcNMjUwNDA0MjMzMzUyWjAYMRYwFAYD VQQDEw02N2U3MzFlMC0wYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPWVqjF9geCZxl7aNqaE5NdGmCFR+FHgNhUmzjihd3XTa2vRg8eD+IgoIT9q 7HhPBfn+q63g/vfn0F/OcpcV42piDx1SrJSnXwiOeMQpF1vfFukG1Z8Ubdn9hkEr F7rxa6/IiX87u011Cs/Qz6ZozvXQ6Rn9T4oQWbTgttH/03EHwllL+oGv+yzipOdZ k6wWEoj/N+IEZfnixEDqa3SuI7Pe8Mp9dX7s8HHvo+PtxbvZeCtQcYjuTYkM97xG ErMkQKj01qPcMXhiTTph0WBAFUyMZKnbBZMtcQbDDTQ/v7QlU0lEubsjB0MyuZbF SGR52NDAP8kRr+dzGhUIzMdVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWccG8i ByqyNBws7KAikYF/mzlxMB8GA1UdIwQYMBaAFCVS1ETC9e7lJMbAG6pPnfK67KKq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRCRi8zOUM0MjI0MkNG N0MxMUVCODFBMUFFMTlDNEY5QUUwMi9KVkxVUk1MMTd1VWt4c0FicWstZDhycnNv cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWTFVSTUwxN3VVa3hzQWJxay1kOHJyc29xby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRCRi8zOUM0MjI0MkNGN0MxMUVCODFBMUFFMTlDNEY5QUUwMi9KVkxVUk1MMTd1 VWt4c0FicWstZDhycnNvcW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsLfKFfQ4XiqUSMKzi4it6zhChVybYRruUYrrgvqKGgouyv7R01G3U IasPN7HqFtdQHtfETLgUN6lU+25tcjNPZzqF6fkdBHS+furJNFvWNzd1VHg8jxFY f2rsWm0tpuIVM3isFlNQ/IBgQKCMzQD4OKo0riXwOYnVWiVRKrVkdwnOwHDnI8C5 jrD+TSjB49WLx7DcTweJyxALUTDgfi7dWuVw0ATae/INiRQHmiqT/IAJF+D5H65p Jovjy5NVc1ON9Ckglkkhf8W6zTkm1MBeYXTDvEFOcRat5T3znM/B+Z1TGHOuMSMM VU/ooadZ6tQA/zbMHsofDBgSp5UOAhIP -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:29 2025 by rpki-client