$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft File: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json) Hash identifier: ntHjIO85k3Q+xpeiEpwhyN0ycAOuvfPQWZOLszPXb0A= Subject key identifier: E0:09:0F:4B:D2:04:61:12:D2:7F:3E:10:02:33:A6:D0:FF:DA:76:0C Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F Certificate issuer: /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft Manifest number: 02FF Signing time: Sat 29 Mar 2025 01:31:30 +0000 Manifest this update: Sat 29 Mar 2025 01:31:30 +0000 Manifest next update: Sat 05 Apr 2025 01:31:30 +0000 Files and hashes: 1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: GzD2ksWLl0cWnihgD4uZLi0GfjvRghAf+pEYWi/4FLY=) 2: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (hash: YtkawvfO7yeuU6y5W4AKOD+xrJidxM5yq8UxdQskunc=) 3: 0E3C1B3E7F9B11EFB3A18650C4F9AE02.roa (hash: NTWtz3XRI466vgMgJNYPHPV7KaEaKes8YjQ4ENseuEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918223E Validity Not Before: Mar 29 01:31:30 2025 GMT Not After : Apr 5 01:31:30 2025 GMT Subject: CN=67e74d72-3bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:07:04:ef:1a:fc:85:87:66:85:e3:f8:5b: fb:f7:9e:4b:34:9c:66:14:43:24:fe:50:a9:5f:74: a7:b8:53:2d:e7:cc:97:4a:17:ab:68:99:f8:d1:9f: d6:24:09:b8:9b:9f:af:07:18:9d:fa:60:97:a7:15: f7:e5:1f:48:ee:20:6e:a8:ab:83:a5:3b:91:bc:af: cd:f0:09:35:95:3a:16:64:10:6f:0e:33:f0:59:37: fd:c0:86:e4:74:2f:77:6a:36:75:9b:1e:2a:c5:5d: 6d:b9:62:4b:21:24:58:7f:c9:ea:e1:06:61:d7:bc: d0:f7:25:f5:88:f6:0c:d6:ce:b8:9d:5c:de:26:1e: c4:92:9a:4e:31:4f:ee:06:b1:4d:85:0e:e5:f8:19: 11:2a:ac:6b:f4:b1:43:7f:e3:be:5a:6f:1e:06:58: 12:ae:a5:d4:6a:67:2b:cc:3b:5c:ca:75:63:38:bb: 60:44:5c:07:6c:ac:0e:98:02:90:c0:76:20:4a:d4: b0:48:09:49:28:76:59:c4:26:25:82:bb:bd:b7:df: da:06:1f:73:73:99:a1:10:6e:76:1d:57:e4:53:6c: 14:df:d3:0c:dd:dd:3c:af:16:f4:ef:76:42:73:22: 2a:f0:9c:62:b5:9c:5c:28:9b:c5:ba:20:03:e1:4e: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:09:0F:4B:D2:04:61:12:D2:7F:3E:10:02:33:A6:D0:FF:DA:76:0C X509v3 Authority Key Identifier: keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:00:fc:27:c6:e4:17:98:e0:cf:a7:92:3f:83:f7:9f:4a:de: 95:97:aa:41:db:60:df:9e:42:93:44:c5:6a:a6:2a:cc:79:e0: 24:8c:89:4d:73:dd:63:c3:35:ee:80:b6:5b:6e:1b:62:56:03: 37:0f:d5:a3:1a:0a:7a:43:2f:72:2b:61:65:3a:3d:3f:b1:da: 49:da:98:5d:91:94:9f:9d:ca:72:9b:b0:44:4a:3d:4b:5a:20: 50:c2:66:8b:38:99:c5:89:d9:94:c4:e8:e7:73:fb:84:78:90: f7:22:a0:05:b0:1b:ed:89:41:99:c8:3b:cd:9a:72:29:70:6c: e5:53:a1:44:31:28:74:c4:2e:dc:ac:b0:1a:92:70:d1:04:f5: 62:5d:67:36:9d:da:88:aa:ee:b1:34:9c:c6:0d:b5:c3:48:66: c9:4f:5e:ca:71:e8:4b:89:fa:75:0f:92:7c:72:01:84:cb:bc: b3:e0:a0:bc:fe:01:2d:27:3f:73:79:82:49:3e:25:8b:e9:f7: d2:55:5a:15:7e:8c:22:fb:18:0e:06:f9:33:23:ca:bf:7e:02: 59:4a:07:15:70:9b:b7:6d:60:ad:9b:e5:16:a3:57:57:62:48: 31:93:16:1f:31:a4:67:3a:44:5c:c2:70:84:ad:a9:30:45:5f: bc:2b:1c:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy NzM2MjM1OUYwHhcNMjUwMzI5MDEzMTMwWhcNMjUwNDA1MDEzMTMwWjAYMRYwFAYD VQQDEw02N2U3NGQ3Mi0zYmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA4HBO8a/IWHZoXj+Fv7955LNJxmFEMk/lCpX3SnuFMt58yXSheraJn40Z/W JAm4m5+vBxid+mCXpxX35R9I7iBuqKuDpTuRvK/N8Ak1lToWZBBvDjPwWTf9wIbk dC93ajZ1mx4qxV1tuWJLISRYf8nq4QZh17zQ9yX1iPYM1s64nVzeJh7EkppOMU/u BrFNhQ7l+BkRKqxr9LFDf+O+Wm8eBlgSrqXUamcrzDtcynVjOLtgRFwHbKwOmAKQ wHYgStSwSAlJKHZZxCYlgru9t9/aBh9zc5mhEG52HVfkU2wU39MM3d08rxb073ZC cyIq8JxitZxcKJvFuiAD4U6hvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAJD0vS BGES0n8+EAIzptD/2nYMMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjIzRS81RjZCM0E1RUNEMDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09l Umg3TzJSQUFqSmduTmlOWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaAPwnxuQXmODPp5I/g/efSt6Vl6pB22DfnkKTRMVqpirMeeAkjIlN c91jwzXugLZbbhtiVgM3D9WjGgp6Qy9yK2FlOj0/sdpJ2phdkZSfncpym7BESj1L WiBQwmaLOJnFidmUxOjnc/uEeJD3IqAFsBvtiUGZyDvNmnIpcGzlU6FEMSh0xC7c rLAaknDRBPViXWc2ndqIqu6xNJzGDbXDSGbJT17KcehLifp1D5J8cgGEy7yz4KC8 /gEtJz9zeYJJPiWL6ffSVVoVfowi+xgOBvkzI8q/fgJZSgcVcJu3bWCtm+UWo1dX YkgxkxYfMaRnOkRcwnCErakwRV+8Kxy0 -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:48 2025 by rpki-client