$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft File: JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft (raw, json) Hash identifier: 0A4U6+Nk2tGD7D5uxs3hR3FTlUj4ZccyYQyf0Rhu2ws= Subject key identifier: A8:72:8F:6E:E6:F8:70:F2:AE:29:B2:7C:04:81:8A:D8:4A:2B:D3:CD Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0DC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft Manifest number: 0DA2 Signing time: Fri 04 Apr 2025 17:47:36 +0000 Manifest this update: Fri 04 Apr 2025 17:47:35 +0000 Manifest next update: Fri 11 Apr 2025 17:47:35 +0000 Files and hashes: 1: JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl (hash: 5pW56cdrXseq4O3cFxhzIr/hb9gHrldkCizwnUd+tUQ=) 2: 41088D5C7CF011EFA2B7A53EC4F9AE02.roa (hash: 3gPJefn/nBhcOq5ryC0Mdn5OAkNCGxGOdgp1NnnSRSA=) 3: FDAC7EBA26D811EE86689D0EC4F9AE02.roa (hash: MeekIL6so4gjZtd7naeHv/pTHtXC6CO9tqXsAjmLWMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3524 (0xdc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19 Validity Not Before: Apr 4 17:47:35 2025 GMT Not After : Apr 11 17:47:35 2025 GMT Subject: CN=67f01b38-7081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:d1:10:ee:40:e2:21:11:da:97:61:96:f1: bb:00:88:50:1f:c5:fc:d0:28:43:fd:e1:f2:ee:7d: 15:0b:39:5c:b2:84:77:81:48:f6:80:92:01:de:0e: a4:43:2e:a5:a6:06:c4:4a:a1:9c:32:ba:84:b2:34: 3e:71:df:56:00:f3:54:41:f5:f2:31:df:9d:e6:41: 75:19:92:ef:78:7b:58:7a:4f:7d:1a:56:bd:c3:b4: 0a:22:1d:13:c9:5e:bf:12:6e:b1:67:4e:87:2c:48: 8e:38:f4:ea:57:42:93:e5:ce:de:4f:18:cd:3b:db: 38:e8:47:02:22:08:84:7d:51:88:d3:93:88:91:43: 5f:eb:a4:db:26:ad:12:6b:a5:9c:b0:a2:c5:88:96: 99:66:c0:2a:ae:e7:aa:2b:74:a1:06:be:7d:b5:70: e4:94:46:ff:61:5c:25:98:d4:88:06:18:c6:9c:63: 97:80:b7:67:1c:ec:cc:fc:45:44:a3:b3:b7:cf:d8: 85:f9:7f:fe:0d:10:55:a1:06:61:50:43:e9:a4:21: 8d:a5:4a:cd:98:53:c8:53:65:ca:f4:4b:63:4e:7c: e3:96:dd:54:68:e7:e9:30:9f:36:8d:89:dc:30:42: 77:46:11:6b:83:0c:c0:35:d7:e3:63:fe:c2:70:ca: 6c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:8F:6E:E6:F8:70:F2:AE:29:B2:7C:04:81:8A:D8:4A:2B:D3:CD X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:39:af:21:54:6f:f7:fa:c5:42:8b:51:dc:cf:1e:c2:ef:7c: fa:60:23:59:08:96:8d:11:85:b9:c4:da:ea:38:3d:8f:4c:ec: 68:be:1d:f5:01:f1:a8:98:83:f0:bf:e9:67:6c:37:6a:41:72: ce:e0:10:5f:7c:97:fd:b6:e3:3d:8c:fa:4c:4d:92:0e:2d:4d: f7:e4:d4:a7:9f:35:d4:10:a1:93:80:c8:01:07:d2:52:15:8b: c1:16:0a:06:11:cb:fa:e7:0b:a9:17:7f:4e:07:d6:85:d4:39: 40:dd:c3:86:6f:f9:13:ba:e4:02:3d:c1:4f:d9:8d:ed:42:2b: ef:cb:19:b5:c5:ea:1e:64:f1:48:b7:7d:de:7c:cc:fc:4a:37: 5e:41:37:e3:25:00:15:bf:6f:04:55:18:b4:f5:2f:05:97:e8: 15:d8:e1:31:b3:fd:48:c1:d9:7e:d9:0b:45:91:c8:bb:c1:f9: ec:78:0b:92:97:d0:bf:81:aa:73:ac:9f:c4:4f:52:8e:95:83: 84:8c:55:46:7b:88:9b:84:9f:92:5a:2c:9c:4b:e5:54:d6:85: aa:bc:2e:3b:22:06:13:bb:0e:bb:fe:f4:8b:3f:94:bd:18:52: c0:19:a5:a7:b7:49:52:16:42:e3:74:da:ec:a0:de:d9:cc:26: ec:19:63:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUwNDA0MTc0NzM1WhcNMjUwNDExMTc0NzM1WjAYMRYwFAYD VQQDEw02N2YwMWIzOC03MDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06fREO5A4iER2pdhlvG7AIhQH8X80ChD/eHy7n0VCzlcsoR3gUj2gJIB3g6k Qy6lpgbESqGcMrqEsjQ+cd9WAPNUQfXyMd+d5kF1GZLveHtYek99Gla9w7QKIh0T yV6/Em6xZ06HLEiOOPTqV0KT5c7eTxjNO9s46EcCIgiEfVGI05OIkUNf66TbJq0S a6WcsKLFiJaZZsAqrueqK3ShBr59tXDklEb/YVwlmNSIBhjGnGOXgLdnHOzM/EVE o7O3z9iF+X/+DRBVoQZhUEPppCGNpUrNmFPIU2XK9EtjTnzjlt1UaOfpMJ82jYnc MEJ3RhFrgwzANdfjY/7CcMpsTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhyj27m +HDyrimyfASBithKK9PNMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUUxOS8zNTZGMkYzRUMxQTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVS R0xadTdhRDVCZmJVRGJCYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEOa8hVG/3+sVCi1Hczx7C73z6YCNZCJaNEYW5xNrqOD2PTOxovh31 AfGomIPwv+lnbDdqQXLO4BBffJf9tuM9jPpMTZIOLU335NSnnzXUEKGTgMgBB9JS FYvBFgoGEcv65wupF39OB9aF1DlA3cOGb/kTuuQCPcFP2Y3tQivvyxm1xeoeZPFI t33efMz8SjdeQTfjJQAVv28EVRi09S8Fl+gV2OExs/1Iwdl+2QtFkci7wfnseAuS l9C/gapzrJ/ET1KOlYOEjFVGe4ibhJ+SWiycS+VU1oWqvC47IgYTuw67/vSLP5S9 GFLAGaWnt0lSFkLjdNrsoN7ZzCbsGWMU -----END CERTIFICATE-----Generated at Fri Apr 4 21:54:05 2025 by rpki-client