$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: ZU2nbNlQsT4UUsS8vGWib/iXyCowt0n5BxzQSns/RCY= Subject key identifier: 8E:5D:E5:E5:1A:EA:E8:0B:52:AC:AE:7F:E8:74:06:42:29:33:74:A8 Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 1D Signing time: Sat 29 Mar 2025 07:12:59 +0000 Manifest this update: Sat 29 Mar 2025 07:12:59 +0000 Manifest next update: Sat 05 Apr 2025 07:12:59 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: gtBxXF4nDKY6UGzDa4GF8cM7lUWd4nWOlVYXbJUH/0g=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512 Validity Not Before: Mar 29 07:12:59 2025 GMT Not After : Apr 5 07:12:59 2025 GMT Subject: CN=67e79d7b-0da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:a9:8c:68:1c:62:a0:5d:70:3c:59:71:8e: a4:a5:8e:20:1b:ee:a4:96:d7:fc:39:a7:5f:e1:00: 07:db:8d:76:3a:2c:2c:65:ba:3f:7a:6b:50:41:1e: 48:05:c5:79:66:ff:e9:d9:47:05:d5:43:3b:be:f3: ef:19:68:b2:41:c9:b7:e2:c6:15:94:91:5f:a5:fe: 1a:3d:56:8b:c1:46:fd:d0:5e:ff:76:31:69:03:24: 56:2d:02:28:52:e5:b9:ec:25:75:18:28:bf:d0:42: ec:33:cc:35:2e:34:40:8e:a2:75:56:89:f2:09:b9: 96:43:a5:96:ab:4e:e2:a9:85:fe:09:21:8f:a5:71: 49:2a:f3:d8:5a:48:fe:95:21:dd:a2:41:11:84:64: 1f:14:1a:1c:a5:1e:5c:0f:34:c2:80:3b:73:f1:5a: f1:53:f2:8b:80:99:f0:ae:28:e1:23:f9:b3:2d:d1: ce:1f:0f:f8:60:2b:c5:8b:65:fb:3d:58:e0:64:88: 6e:eb:07:9f:6e:4e:ea:16:50:89:58:e0:1d:ca:39: 7b:41:d7:cd:fa:d3:42:93:d3:b3:40:bb:b1:0b:0f: d5:b7:38:0a:0d:84:7c:51:86:eb:d4:31:a2:b1:99: 37:17:5e:32:0b:97:06:6c:a4:7d:4c:54:e2:8d:6e: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:E5:E5:1A:EA:E8:0B:52:AC:AE:7F:E8:74:06:42:29:33:74:A8 X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8a:bc:63:54:51:df:d9:96:1d:7c:15:22:38:6b:35:ec:47: dd:9c:f4:41:a0:a8:0f:da:b1:99:83:4b:d7:3a:11:c3:bf:95: cc:96:62:3e:ee:9f:05:a5:d3:e7:d1:ab:f2:e3:d2:36:f6:58: d7:7d:5a:c4:f1:f3:43:78:e9:1a:5c:f3:06:d7:41:5f:31:8b: 0e:0d:7f:11:28:7a:63:08:fa:4d:07:44:b5:26:69:de:50:f4: 32:d4:89:c9:4a:ed:20:6b:1f:83:98:9f:82:5c:74:ba:8b:bd: 3b:a6:29:84:bb:95:8e:90:f3:5b:7e:9b:16:09:40:a5:52:fa: 18:27:b1:ce:39:4d:0c:fb:ac:1f:f4:92:7d:3e:a7:8f:8b:44: a4:62:21:2f:6d:b1:9e:eb:26:92:cb:4f:1b:99:57:47:72:8b: b6:dd:d3:63:b4:c6:ca:58:16:a9:d9:cb:c2:21:77:9f:79:fc: f7:38:c8:8b:b8:73:2d:0d:79:99:b5:a7:87:9e:6c:e9:45:77: f7:bd:0d:43:6c:e7:77:e3:36:17:d9:ec:e6:d3:c1:cd:bf:fc: 9a:87:f8:56:03:56:74:ef:2d:1e:5c:17:fe:e7:11:f3:6d:1f: 11:54:cd:a1:96:db:36:64:7a:4c:db:f5:19:e9:c2:14:d5:13: fa:c3:88:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTAzMjkwNzEyNTlaFw0yNTA0MDUwNzEyNTlaMBgxFjAUBgNV BAMTDTY3ZTc5ZDdiLTBkYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiD6mMaBxioF1wPFlxjqSljiAb7qSW1/w5p1/hAAfbjXY6LCxluj96a1BBHkgF xXlm/+nZRwXVQzu+8+8ZaLJBybfixhWUkV+l/ho9VovBRv3QXv92MWkDJFYtAihS 5bnsJXUYKL/QQuwzzDUuNECOonVWifIJuZZDpZarTuKphf4JIY+lcUkq89haSP6V Id2iQRGEZB8UGhylHlwPNMKAO3PxWvFT8ouAmfCuKOEj+bMt0c4fD/hgK8WLZfs9 WOBkiG7rB59uTuoWUIlY4B3KOXtB183600KT07NAu7ELD9W3OAoNhHxRhuvUMaKx mTcXXjILlwZspH1MVOKNbjlDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjl3l5Rrq 6AtSrK5/6HQGQikzdKgwHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALiKvGNUUd/Zlh18FSI4azXsR92c9EGgqA/asZmDS9c6EcO/lcyWYj7u nwWl0+fRq/Lj0jb2WNd9WsTx80N46Rpc8wbXQV8xiw4NfxEoemMI+k0HRLUmad5Q 9DLUiclK7SBrH4OYn4JcdLqLvTumKYS7lY6Q81t+mxYJQKVS+hgnsc45TQz7rB/0 kn0+p4+LRKRiIS9tsZ7rJpLLTxuZV0dyi7bd02O0xspYFqnZy8Ihd595/Pc4yIu4 cy0NeZm1p4eebOlFd/e9DUNs53fjNhfZ7ObTwc2//JqH+FYDVnTvLR5cF/7nEfNt HxFUzaGW2zZkekzb9RnpwhTVE/rDiFc= -----END CERTIFICATE-----Generated at Fri Apr 4 18:17:08 2025 by rpki-client