$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: BHWMZdjzNoyGGvx4tdz7t4Pw5iaUpWgcYZRNz8Vuhko= Subject key identifier: 00:70:42:CD:49:46:85:76:9F:E0:F3:65:91:F5:D7:BA:43:FC:21:FB Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 01A2 Signing time: Thu 03 Apr 2025 02:39:42 +0000 Manifest this update: Thu 03 Apr 2025 02:39:41 +0000 Manifest next update: Thu 10 Apr 2025 02:39:41 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: 3wrccmMewuwnwXLat7sAj3I+tZKFtAfUQQe51EB/ElI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C Validity Not Before: Apr 3 02:39:41 2025 GMT Not After : Apr 10 02:39:41 2025 GMT Subject: CN=67edf4ee-1599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2e:df:15:45:f4:c2:05:f5:4a:17:fb:af:a7: e6:b4:1e:3c:e6:24:83:f8:6f:22:8b:19:a8:10:eb: 8c:00:8c:ba:f4:25:60:c3:fc:2a:93:81:d6:5e:5e: 80:94:c2:66:99:63:5f:05:f4:a7:8b:d3:0f:32:6e: 2a:a6:91:23:1f:6b:7f:d0:e2:fd:76:8b:21:f1:1a: 65:a0:45:69:09:eb:af:a7:9f:4c:66:fb:2b:4d:09: 6c:32:2d:0c:9a:00:49:15:d0:1d:a6:80:2b:9a:d4: 66:7e:ec:37:4c:9e:a2:eb:4d:80:99:0f:cf:61:7c: a0:c7:49:20:d1:ef:13:c9:42:59:49:c0:61:d9:6b: 08:d1:4e:35:45:40:fb:95:5f:2f:12:45:dc:16:2a: e7:ad:0f:a0:38:62:34:b0:98:50:ef:be:55:20:af: 6a:32:07:0f:fc:9e:04:b0:07:b9:a1:61:c4:58:32: aa:d6:02:8d:cf:53:4e:d4:b2:ba:82:95:c0:f2:cd: fa:c9:ee:fb:03:04:3b:31:7d:88:89:b7:32:3e:34: c7:b7:49:06:ce:31:5d:e7:f9:af:6b:cc:7c:4c:1d: a7:6d:5c:31:4e:83:6c:aa:53:44:1e:2b:ca:7e:e8: 0a:ab:17:b4:b5:50:ab:3a:63:f6:6c:c9:cd:89:a6: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:70:42:CD:49:46:85:76:9F:E0:F3:65:91:F5:D7:BA:43:FC:21:FB X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0b:0d:55:f5:66:81:3d:c4:61:4a:0b:82:ba:84:51:c6:42: 63:78:50:aa:16:4f:70:c2:bb:e1:c6:b1:c4:57:ff:7d:f5:25: fd:9b:27:3a:ab:ad:99:21:75:73:10:d0:06:86:a6:13:ce:6e: 32:22:18:45:a9:1a:83:57:d1:b0:b2:d4:0f:54:e8:12:2c:f7: ec:41:a5:6a:17:28:13:4f:6d:78:8d:c5:3c:fe:c0:1d:9d:7a: 9b:63:7d:ac:bd:a6:2e:a4:1e:ae:eb:c3:28:ea:bb:1a:9a:66: 21:18:a6:e7:26:27:39:a4:ff:ea:19:11:9d:04:38:98:0e:f9: 07:59:71:98:33:d2:bd:4e:aa:8e:cb:1d:ea:48:d2:d7:3d:32: 97:f5:cb:f9:c9:80:ac:62:69:76:ec:7c:dd:c6:45:b6:22:4e: de:5d:0e:9d:5d:e6:a1:41:25:56:6d:1d:c8:4f:9e:e5:4f:4d: 3c:2c:9a:02:8c:ea:ea:c7:cd:40:c2:6d:c3:b9:1f:ef:e6:04: 92:d1:11:d1:20:8c:0f:6c:0c:54:b3:19:5f:e5:cc:20:45:2a: b6:7d:43:70:4f:b7:30:5a:43:21:91:25:ce:56:76:d0:69:c4: 1c:64:57:d3:4a:79:f0:6d:e4:e5:9e:67:f9:a8:18:d7:8a:06: ad:54:d2:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUwNDAzMDIzOTQxWhcNMjUwNDEwMDIzOTQxWjAYMRYwFAYD VQQDEw02N2VkZjRlZS0xNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy7fFUX0wgX1Shf7r6fmtB485iSD+G8iixmoEOuMAIy69CVgw/wqk4HWXl6A lMJmmWNfBfSni9MPMm4qppEjH2t/0OL9dosh8RploEVpCeuvp59MZvsrTQlsMi0M mgBJFdAdpoArmtRmfuw3TJ6i602AmQ/PYXygx0kg0e8TyUJZScBh2WsI0U41RUD7 lV8vEkXcFirnrQ+gOGI0sJhQ775VIK9qMgcP/J4EsAe5oWHEWDKq1gKNz1NO1LK6 gpXA8s36ye77AwQ7MX2IibcyPjTHt0kGzjFd5/mva8x8TB2nbVwxToNsqlNEHivK fugKqxe0tVCrOmP2bMnNiab/iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABwQs1J RoV2n+DzZZH117pD/CH7MB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOCw1V9WaBPcRhSguCuoRRxkJjeFCqFk9wwrvhxrHEV/999SX9myc6 q62ZIXVzENAGhqYTzm4yIhhFqRqDV9GwstQPVOgSLPfsQaVqFygTT214jcU8/sAd nXqbY32svaYupB6u68Mo6rsammYhGKbnJic5pP/qGRGdBDiYDvkHWXGYM9K9TqqO yx3qSNLXPTKX9cv5yYCsYml27HzdxkW2Ik7eXQ6dXeahQSVWbR3IT57lT008LJoC jOrqx81Awm3DuR/v5gSS0RHRIIwPbAxUsxlf5cwgRSq2fUNwT7cwWkMhkSXOVnbQ acQcZFfTSnnwbeTlnmf5qBjXigatVNJm -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:45 2025 by rpki-client