$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft File: JSnIA8s451HjaWq3li2CMUX81lk.mft (raw, json) Hash identifier: xSeMjYAN5FTHxObl3jKHYNkfngV5gPlXSauBLPt33bY= Subject key identifier: 2A:5E:FE:75:8C:2E:4F:18:8C:22:3E:43:18:42:46:FA:DB:CF:E8:D1 Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 12AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft Manifest number: 12A2 Signing time: Fri 04 Apr 2025 17:09:45 +0000 Manifest this update: Fri 04 Apr 2025 17:09:44 +0000 Manifest next update: Fri 11 Apr 2025 17:09:44 +0000 Files and hashes: 1: JSnIA8s451HjaWq3li2CMUX81lk.crl (hash: n67YKvhy71zaIzTwaTw7slYkLdTRQJEn2q6CUFuqLgk=) 2: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (hash: KCnIrYwfu7lFXb4I5Fn3ggrFhAeTiDDSoEEewMbwbp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4783 (0x12af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4 Validity Not Before: Apr 4 17:09:44 2025 GMT Not After : Apr 11 17:09:44 2025 GMT Subject: CN=67f01258-924b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:1e:0c:f6:24:6b:2c:5c:b1:49:2a:4e:a1: d8:35:a4:77:2c:de:2e:0a:a3:9b:77:4b:2d:1f:d6: 11:34:9c:51:21:71:cf:4d:48:f4:38:36:68:87:2a: ae:b7:83:6c:82:52:dd:0a:7a:46:62:83:14:24:56: 17:2d:db:34:e4:cd:b8:97:f0:26:99:f6:1d:f4:50: ac:37:d8:5c:97:00:92:9f:1d:8a:2f:b4:58:5e:99: e4:65:67:4c:db:ea:c6:18:b4:95:55:8d:5c:3f:1f: ba:2a:e1:d9:84:94:c9:2d:cd:8e:20:77:8c:25:8d: a0:4e:c9:ea:f4:00:f3:c9:bb:8f:c6:39:16:9b:61: 48:bb:8e:f2:86:d7:fa:bc:2b:3b:89:bd:65:df:12: d7:10:a8:41:3a:5d:7c:20:06:aa:0f:58:f5:36:26: 60:51:63:a4:ce:01:ce:7f:bd:e8:c1:df:cb:1b:7f: 86:ee:61:9b:1b:4e:ef:f3:87:79:3f:66:4e:2c:2f: cd:89:82:78:b9:5d:f6:15:b7:9c:b5:e6:b0:db:5d: 3b:55:97:8d:91:89:fd:d1:09:9a:36:da:c9:fa:16: 96:26:cc:8c:c8:71:ce:81:39:dc:c8:67:20:6c:d9: 26:86:8a:fa:52:a5:e1:78:64:f6:f2:1a:89:4a:8c: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5E:FE:75:8C:2E:4F:18:8C:22:3E:43:18:42:46:FA:DB:CF:E8:D1 X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:32:b1:d8:cd:64:2c:6c:6e:70:7e:03:ae:53:50:36:ad:c2: 57:c5:24:be:93:eb:c7:22:30:65:a1:a2:9e:f5:0b:7b:cd:ac: 32:84:1c:53:48:18:0e:db:c1:1e:39:39:ce:cd:f1:57:9e:60: 2d:71:02:51:b2:65:ae:c8:0e:ad:90:27:86:ee:59:73:fa:c2: 3c:cc:a5:9b:51:87:0d:e0:31:ab:3a:8d:bd:25:f6:ab:ce:b8: d0:8d:9c:c7:46:37:36:92:16:72:ee:dc:fb:c4:74:f2:77:69: 85:97:92:e2:3a:f0:fa:d2:6e:05:b2:85:4c:86:3f:80:b8:a5: f4:9d:dc:a4:02:6a:da:b5:6f:98:12:00:c7:ca:cd:98:c6:4a: ba:1f:9d:9e:8f:9f:f7:44:78:f0:54:df:2d:30:85:bd:a0:c7: d9:95:b2:0e:8e:6e:e8:15:69:72:5e:ba:c4:40:a9:ac:b9:fa: a0:48:d8:af:5e:dc:e3:83:98:5c:35:94:ec:3e:51:81:a7:8c: 36:7b:9b:23:44:84:84:6f:f3:33:d7:78:d7:1c:77:57:76:69: 74:04:bb:bf:cf:a6:1d:86:04:70:66:5a:b4:53:90:47:9c:af: c8:eb:9b:00:34:f3:3b:9a:4b:b0:23:67:59:ae:05:1a:bd:77: 65:82:d8:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwNDA0MTcwOTQ0WhcNMjUwNDExMTcwOTQ0WjAYMRYwFAYD VQQDEw02N2YwMTI1OC05MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+EeDPYkayxcsUkqTqHYNaR3LN4uCqObd0stH9YRNJxRIXHPTUj0ODZohyqu t4NsglLdCnpGYoMUJFYXLds05M24l/AmmfYd9FCsN9hclwCSnx2KL7RYXpnkZWdM 2+rGGLSVVY1cPx+6KuHZhJTJLc2OIHeMJY2gTsnq9ADzybuPxjkWm2FIu47yhtf6 vCs7ib1l3xLXEKhBOl18IAaqD1j1NiZgUWOkzgHOf73owd/LG3+G7mGbG07v84d5 P2ZOLC/NiYJ4uV32Fbecteaw2107VZeNkYn90QmaNtrJ+haWJsyMyHHOgTncyGcg bNkmhor6UqXheGT28hqJSoy+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpe/nWM Lk8YjCI+QxhCRvrbz+jRMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkNFNC8wOEVEMTc4OEJGQzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUx SGphV3EzbGkyQ01VWDgxbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7MrHYzWQsbG5wfgOuU1A2rcJXxSS+k+vHIjBloaKe9Qt7zawyhBxT SBgO28EeOTnOzfFXnmAtcQJRsmWuyA6tkCeG7llz+sI8zKWbUYcN4DGrOo29Jfar zrjQjZzHRjc2khZy7tz7xHTyd2mFl5LiOvD60m4FsoVMhj+AuKX0ndykAmratW+Y EgDHys2Yxkq6H52ej5/3RHjwVN8tMIW9oMfZlbIOjm7oFWlyXrrEQKmsufqgSNiv Xtzjg5hcNZTsPlGBp4w2e5sjRISEb/Mz13jXHHdXdml0BLu/z6YdhgRwZlq0U5BH nK/I65sANPM7mkuwI2dZrgUavXdlgthO -----END CERTIFICATE-----Generated at Sun Apr 6 02:05:58 2025 by rpki-client