$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft File: RJUXO9LCk43jBnfP3ec80xuKJnY.mft (raw, json) Hash identifier: XFPFDdgb82snUO+6GHpDzBu5IJWmZ2OgtYG9lHGG4fU= Subject key identifier: 3E:A4:BE:3C:B7:AF:70:05:F9:A1:BB:B6:74:5C:39:67:81:3B:CD:32 Authority key identifier: 44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76 Certificate issuer: /CN=A91A5098/serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft Manifest number: 38 Signing time: Sun 20 Apr 2025 16:05:44 +0000 Manifest this update: Sun 20 Apr 2025 16:05:44 +0000 Manifest next update: Sun 27 Apr 2025 16:05:44 +0000 Files and hashes: 1: RJUXO9LCk43jBnfP3ec80xuKJnY.crl (hash: bS2jOHbB56ZvNZkMngTcol3NrlkJQGziw4Jy2Vw22/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=4495173BD2C2938DE30677CFDDE73CD31B8A2676 Validity Not Before: Apr 20 16:05:44 2025 GMT Not After : Apr 27 16:05:44 2025 GMT Subject: CN=68051b58-958f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:cb:df:39:a5:28:c2:05:b2:df:29:21:63: e6:fe:19:58:a3:de:64:69:68:2b:4c:4e:8d:6b:6a: c5:08:b0:33:ca:1a:cd:e0:91:9f:0b:f4:d9:e5:7b: 21:b3:67:a3:53:db:af:f4:3c:45:70:1e:a5:10:9f: 2c:f9:d7:d6:d3:f8:4d:a2:1f:f7:8f:fa:87:b6:f5: ad:30:1b:30:17:22:a7:2c:ee:c4:0e:b1:2f:97:ce: a2:e9:89:64:0f:03:80:b8:d4:c3:ca:b2:a8:92:42: 69:7f:23:e5:a7:c6:0d:db:95:9a:14:a7:f4:cd:92: 58:ba:0e:0b:bc:84:17:63:7b:be:f5:2c:5d:26:53: 51:4d:e8:17:1a:fb:12:d7:8d:ed:78:32:a4:bb:c8: b7:28:65:db:34:cf:93:2e:b1:9f:4c:2b:90:c0:b3: fe:c2:56:89:ab:2b:1c:7f:18:c6:1d:08:57:cf:1e: 07:76:38:84:0b:41:63:75:9f:78:cc:9e:1c:2c:a6: f3:b9:ef:0c:21:7a:7a:8a:8b:4a:58:a9:f1:d7:75: b7:16:10:e7:02:e9:a2:4b:ac:d5:cc:05:c3:4c:8c: d1:83:f9:ea:7e:35:0b:70:c3:93:36:c1:03:8c:1c: 5b:5a:d7:eb:94:55:ec:4e:b9:73:eb:81:44:46:fd: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:BE:3C:B7:AF:70:05:F9:A1:BB:B6:74:5C:39:67:81:3B:CD:32 X509v3 Authority Key Identifier: keyid:44:95:17:3B:D2:C2:93:8D:E3:06:77:CF:DD:E7:3C:D3:1B:8A:26:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RJUXO9LCk43jBnfP3ec80xuKJnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/220B1728CBC211EFA3246573C4F9AE02/RJUXO9LCk43jBnfP3ec80xuKJnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:dc:aa:b5:c2:cc:63:cb:bc:d1:8c:8b:51:52:e2:3e:8f:b6: f5:f3:30:86:b5:7d:7e:13:6f:5f:b9:32:db:e6:8c:a5:8c:dd: ec:43:17:1a:27:ab:a9:80:23:a1:8f:3f:04:f4:84:42:b9:cd: 9c:21:f9:26:00:fa:ff:39:d7:e0:38:a0:e9:06:59:22:1f:22: 65:eb:5f:fa:59:b2:5b:48:9a:5f:05:15:76:48:d7:26:6b:5c: 2c:a8:2e:25:bc:f6:7a:87:69:fc:a7:e7:44:5f:d5:62:56:fd: 84:d9:c6:a4:42:2c:91:65:87:62:8c:ca:d2:91:ea:5b:0a:97: 91:53:11:f1:f8:d9:3e:34:aa:a9:83:95:97:7b:02:78:ef:00: f9:aa:ec:18:f5:40:96:09:75:18:b0:b1:af:e1:5e:c2:49:ea: 52:3d:b4:c0:8f:e1:6b:91:f3:a2:eb:d8:0e:17:70:9a:e8:e0: 83:78:52:41:d5:ae:ee:6e:7c:4b:32:48:49:01:d6:f6:6e:94: e9:4e:d1:79:81:3d:fb:ea:f0:b6:bb:e9:27:61:f1:e8:bc:2f: ca:6f:a5:25:24:95:a7:59:fa:1b:05:b9:78:2b:79:74:b8:00: ec:24:3d:a3:15:ab:62:4b:f7:91:d8:09:8a:95:74:a4:a1:7b: 42:5f:9c:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTA5ODExMC8GA1UEBRMoNDQ5NTE3M0JEMkMyOTM4REUzMDY3N0NGRERFNzNDRDMx QjhBMjY3NjAeFw0yNTA0MjAxNjA1NDRaFw0yNTA0MjcxNjA1NDRaMBgxFjAUBgNV BAMTDTY4MDUxYjU4LTk1OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxm8vfOaUowgWy3ykhY+b+GVij3mRpaCtMTo1rasUIsDPKGs3gkZ8L9NnleyGz Z6NT26/0PEVwHqUQnyz519bT+E2iH/eP+oe29a0wGzAXIqcs7sQOsS+XzqLpiWQP A4C41MPKsqiSQml/I+Wnxg3blZoUp/TNkli6Dgu8hBdje771LF0mU1FN6Bca+xLX je14MqS7yLcoZds0z5MusZ9MK5DAs/7CVomrKxx/GMYdCFfPHgd2OIQLQWN1n3jM nhwspvO57wwhenqKi0pYqfHXdbcWEOcC6aJLrNXMBcNMjNGD+ep+NQtww5M2wQOM HFta1+uUVexOuXPrgURG/RKhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPqS+PLev cAX5obu2dFw5Z4E7zTIwHwYDVR0jBBgwFoAURJUXO9LCk43jBnfP3ec80xuKJnYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1MDk4LzIyMEIxNzI4Q0JD MjExRUZBMzI0NjU3M0M0RjlBRTAyL1JKVVhPOUxDazQzakJuZlAzZWM4MHh1S0pu WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkpVWE85TENrNDNqQm5mUDNlYzgweHVLSm5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 MDk4LzIyMEIxNzI4Q0JDMjExRUZBMzI0NjU3M0M0RjlBRTAyL1JKVVhPOUxDazQz akJuZlAzZWM4MHh1S0puWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHcqrXCzGPLvNGMi1FS4j6PtvXzMIa1fX4Tb1+5MtvmjKWM3exDFxon q6mAI6GPPwT0hEK5zZwh+SYA+v851+A4oOkGWSIfImXrX/pZsltIml8FFXZI1yZr XCyoLiW89nqHafyn50Rf1WJW/YTZxqRCLJFlh2KMytKR6lsKl5FTEfH42T40qqmD lZd7AnjvAPmq7Bj1QJYJdRiwsa/hXsJJ6lI9tMCP4WuR86Lr2A4XcJro4IN4UkHV ru5ufEsySEkB1vZulOlO0XmBPfvq8La76Sdh8ei8L8pvpSUkladZ+hsFuXgreXS4 AOwkPaMVq2JL95HYCYqVdKShe0JfnP0= -----END CERTIFICATE-----Generated at Tue Apr 22 02:09:37 2025 by rpki-client