$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: 3JG7yfGFsQOW63QG8Iw4zMB+2Y7GZPQOwq7vnNBlnyg= Subject key identifier: F2:97:FF:34:88:68:F3:26:DC:86:92:5E:2E:81:7D:3B:2A:7C:09:58 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 01C1 Signing time: Fri 11 Apr 2025 02:18:42 +0000 Manifest this update: Fri 11 Apr 2025 02:18:42 +0000 Manifest next update: Fri 18 Apr 2025 02:18:42 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: K88JnviB5/R4vtSBCF2K1a2t/1gtIWkAsXvi4K9KExE=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Apr 11 02:18:42 2025 GMT Not After : Apr 18 02:18:42 2025 GMT Subject: CN=67f87c02-1835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:71:f5:7d:bb:c2:8f:e9:40:f5:8a:08:07: 37:5a:0d:6d:7b:43:c2:a1:21:91:0d:b4:67:44:3a: a8:b0:38:74:3f:e9:2c:01:14:5c:97:c3:88:a0:ed: a1:fd:d0:84:ad:3f:42:f9:cc:2a:9b:e8:2b:c4:79: b2:1b:96:76:f0:15:3b:95:d2:48:32:ca:0b:43:b3: 2f:8a:a5:dd:12:8a:03:e2:90:c7:84:09:87:75:ec: b6:b3:c1:e5:51:ee:e8:74:1b:c9:9b:5b:37:a1:22: 47:d4:98:db:68:4f:9d:ed:20:12:23:34:0a:97:48: d0:c1:b9:bd:0b:28:dc:4f:52:15:5a:c3:05:fb:57: 12:eb:f4:ca:8c:c2:f0:5e:0a:fe:75:d9:5a:33:b8: 5c:f6:ab:7b:22:64:10:af:76:13:ec:08:0e:fb:69: 80:b9:78:76:51:6d:f2:4b:01:ff:8a:c4:a3:72:f0: 66:4b:29:53:7d:28:b4:52:42:bc:91:18:54:42:b7: 7b:2e:03:80:b8:33:75:31:23:0c:31:97:b8:7c:ba: ce:44:69:51:18:50:73:a8:18:ca:bf:b6:46:f0:bd: 1d:9d:75:92:bb:dd:8a:d5:9d:e1:58:12:73:6a:a1: 1d:02:1f:38:5e:e5:fa:5a:ce:0b:e4:cb:8f:63:d8: 7e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:97:FF:34:88:68:F3:26:DC:86:92:5E:2E:81:7D:3B:2A:7C:09:58 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8f:0e:2d:e0:90:32:9a:fd:b8:88:68:67:2e:96:d8:69:2b: 33:3b:75:a0:23:6f:5a:5c:29:d6:44:d5:ff:1b:56:4c:fb:cb: 59:12:ed:98:2a:b5:7a:b4:ad:57:93:ad:15:dd:8a:f2:9e:b3: d1:6d:4d:d0:b3:be:fa:d8:13:48:5a:18:62:f4:61:f4:24:13: ae:10:7b:d0:e9:18:c5:8e:82:fd:b5:6c:4e:0c:71:91:d0:aa: 7b:c4:06:9f:98:d1:d7:45:e4:68:f0:76:92:a6:79:3f:30:62: c0:63:2b:9a:44:01:51:9e:8c:e9:19:01:54:5b:0d:ff:5e:97: e7:8c:42:fd:6a:8e:c1:5d:65:8f:3a:b9:a1:14:2a:dc:0b:aa: 3d:90:ba:d7:3f:e2:2b:43:a4:36:46:3a:f8:98:b2:29:16:5f: cf:a6:f3:e6:9c:2f:ab:be:42:63:c3:f5:10:94:74:c8:5c:c7: dd:5a:42:5e:8e:79:66:6c:4b:d6:57:f2:99:ef:a2:2b:b5:73: 9d:b2:e9:73:f6:f7:3c:de:d4:f6:e0:49:49:5a:08:b3:b9:4c: 52:99:a6:ed:a6:07:00:23:2b:13:6f:66:be:d0:42:93:60:7e: 41:d6:a3:c1:5e:23:72:24:96:a3:a5:47:db:f0:f5:f7:e9:ab: 28:76:2a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUwNDExMDIxODQyWhcNMjUwNDE4MDIxODQyWjAYMRYwFAYD VQQDEw02N2Y4N2MwMi0xODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bxx9X27wo/pQPWKCAc3Wg1te0PCoSGRDbRnRDqosDh0P+ksARRcl8OIoO2h /dCErT9C+cwqm+grxHmyG5Z28BU7ldJIMsoLQ7MviqXdEooD4pDHhAmHdey2s8Hl Ue7odBvJm1s3oSJH1JjbaE+d7SASIzQKl0jQwbm9CyjcT1IVWsMF+1cS6/TKjMLw Xgr+ddlaM7hc9qt7ImQQr3YT7AgO+2mAuXh2UW3ySwH/isSjcvBmSylTfSi0UkK8 kRhUQrd7LgOAuDN1MSMMMZe4fLrORGlRGFBzqBjKv7ZG8L0dnXWSu92K1Z3hWBJz aqEdAh84XuX6Ws4L5MuPY9h+JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKX/zSI aPMm3IaSXi6BfTsqfAlYMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATjw4t4JAymv24iGhnLpbYaSszO3WgI29aXCnWRNX/G1ZM+8tZEu2Y KrV6tK1Xk60V3YrynrPRbU3Qs7762BNIWhhi9GH0JBOuEHvQ6RjFjoL9tWxODHGR 0Kp7xAafmNHXReRo8HaSpnk/MGLAYyuaRAFRnozpGQFUWw3/XpfnjEL9ao7BXWWP OrmhFCrcC6o9kLrXP+IrQ6Q2Rjr4mLIpFl/PpvPmnC+rvkJjw/UQlHTIXMfdWkJe jnlmbEvWV/KZ76IrtXOdsulz9vc83tT24ElJWgizuUxSmabtpgcAIysTb2a+0EKT YH5B1qPBXiNyJJajpUfb8PX36asodirM -----END CERTIFICATE-----Generated at Sun Apr 13 02:37:16 2025 by rpki-client