$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: GQwCuH50ZxkVA1mIAOk5Iqtta1+WeLRyRwzetgoDGMA= Subject key identifier: B8:E4:91:7D:F3:FE:36:BC:30:C7:FB:A6:C4:BE:3C:EF:A3:9B:4D:CE Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 01D1 Signing time: Sat 29 Mar 2025 02:24:03 +0000 Manifest this update: Sat 29 Mar 2025 02:24:02 +0000 Manifest next update: Sat 05 Apr 2025 02:24:02 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: u+SuLkwHI8Jw/NXK+Hm3g0V07xQO6j+fJvNKcElhtNA=) 2: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: HSOz9KJtzn5XtZJbkSZurU8JjbVu9jhgYH7lEouZYZw=) 3: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: Qcs39Vrzh4Mv2HdysBKYGDoDMMoidhqC9JSfa2ecdPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2 Validity Not Before: Mar 29 02:24:02 2025 GMT Not After : Apr 5 02:24:02 2025 GMT Subject: CN=67e759c2-66d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:f2:40:a4:a4:cc:ac:8a:27:a5:ac:b3:a5:a7: 48:8c:8c:26:70:e6:7c:d5:3d:92:3d:2c:12:45:6f: 0f:3a:ed:26:a6:d6:4f:58:c3:cc:ae:fa:26:b9:5c: d8:2a:88:e7:47:b7:dd:d7:42:f4:89:d5:de:5c:9f: 19:aa:e3:d9:67:47:14:2a:18:f6:a6:d8:72:47:e7: 66:0d:5f:5b:63:92:d6:1a:8d:58:19:01:98:5c:03: c7:0b:c9:6f:17:fb:e2:96:b4:84:8a:86:8b:eb:1d: 29:e3:78:cf:99:ef:e5:d8:72:0f:fc:91:fb:28:89: a2:32:0d:89:1a:89:75:26:8e:af:22:25:ce:1f:f0: 3e:91:e0:ba:ce:88:6f:10:ff:7c:8a:0d:51:ca:03: 9b:4f:3a:8a:b4:2f:fa:fa:52:e5:03:ab:b5:26:e2: 0b:7b:e8:ae:01:70:98:c7:ee:fa:10:25:f6:48:4d: da:9d:b9:dc:41:17:68:a3:d1:d4:ce:f0:21:83:2b: 7f:39:0b:28:13:ab:c5:12:b7:74:c6:39:a7:fb:7f: 27:2f:5c:86:a4:fe:60:7e:18:dd:a7:56:cf:4e:9d: 02:d0:e8:17:6f:06:2f:0b:29:c5:4b:81:6d:23:2b: aa:c4:10:8b:3a:6d:ad:25:a4:8a:9a:86:b5:0a:dd: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E4:91:7D:F3:FE:36:BC:30:C7:FB:A6:C4:BE:3C:EF:A3:9B:4D:CE X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:8f:09:99:55:bc:83:26:d7:e4:ff:63:e3:6a:c2:d2:a7:90: 2d:36:52:02:9c:6c:d5:74:e8:22:ac:23:c7:67:03:41:f3:25: 2a:70:85:48:7b:b0:c4:68:d9:1d:81:b0:7b:53:12:07:a9:99: 00:b2:ae:d6:bd:ae:70:27:87:0c:22:e7:c3:1e:11:10:21:e7: e6:e9:4c:56:a0:08:28:dc:42:cb:cf:fb:61:51:79:d5:0c:cc: c2:53:42:80:8b:04:8f:81:c0:33:e2:13:21:10:da:4e:8c:9e: 95:e3:b6:eb:42:e5:bf:46:12:d4:3f:76:8d:47:f8:5e:fb:65: 1c:13:ba:5e:09:3f:85:01:dc:0c:f3:96:96:23:b0:c3:ed:9b: 73:35:1b:61:c8:34:cb:1a:c7:53:ac:b3:33:2d:f0:e2:91:7a: bb:b7:27:d0:16:03:16:e0:cf:34:14:fb:bb:66:9d:6c:7f:f8: 0a:9f:27:80:dc:1c:f8:6b:78:57:6c:df:a4:3a:2c:fc:1e:8f: 2a:5c:3f:f3:02:34:cb:d0:51:4c:1f:e9:31:5e:03:d8:97:57: 7a:0e:33:65:45:e4:62:5b:de:9d:cd:cc:9c:9c:70:2c:84:43: 68:36:c9:30:c3:67:af:f3:37:b9:1a:8c:9c:e7:77:f3:1c:d5: e1:ac:57:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjUwMzI5MDIyNDAyWhcNMjUwNDA1MDIyNDAyWjAYMRYwFAYD VQQDEw02N2U3NTljMi02NmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+/JApKTMrIonpayzpadIjIwmcOZ81T2SPSwSRW8POu0mptZPWMPMrvomuVzY KojnR7fd10L0idXeXJ8ZquPZZ0cUKhj2pthyR+dmDV9bY5LWGo1YGQGYXAPHC8lv F/vilrSEioaL6x0p43jPme/l2HIP/JH7KImiMg2JGol1Jo6vIiXOH/A+keC6zohv EP98ig1RygObTzqKtC/6+lLlA6u1JuILe+iuAXCYx+76ECX2SE3anbncQRdoo9HU zvAhgyt/OQsoE6vFErd0xjmn+38nL1yGpP5gfhjdp1bPTp0C0OgXbwYvCynFS4Ft IyuqxBCLOm2tJaSKmoa1Ct2HnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjkkX3z /ja8MMf7psS+PO+jm03OMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1jwmZVbyDJtfk/2PjasLSp5AtNlICnGzVdOgirCPHZwNB8yUqcIVI e7DEaNkdgbB7UxIHqZkAsq7Wva5wJ4cMIufDHhEQIefm6UxWoAgo3ELLz/thUXnV DMzCU0KAiwSPgcAz4hMhENpOjJ6V47brQuW/RhLUP3aNR/he+2UcE7peCT+FAdwM 85aWI7DD7ZtzNRthyDTLGsdTrLMzLfDikXq7tyfQFgMW4M80FPu7Zp1sf/gKnyeA 3Bz4a3hXbN+kOiz8Ho8qXD/zAjTL0FFMH+kxXgPYl1d6DjNlReRiW96dzcycnHAs hENoNskww2ev8ze5Goyc53fzHNXhrFfR -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:04 2025 by rpki-client