$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft File: j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft (raw, json) Hash identifier: Ts0Dh29rlAAUAHHckkCLdKqnY4hgL9wRoXvMLUiTvbA= Subject key identifier: 7C:BF:C5:EB:5F:51:7F:34:66:BB:28:B5:5E:86:AE:D6:44:DA:15:26 Authority key identifier: 8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 Certificate issuer: /CN=A91C0989/serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft Manifest number: 012A Signing time: Tue 15 Apr 2025 03:28:55 +0000 Manifest this update: Tue 15 Apr 2025 03:28:54 +0000 Manifest next update: Tue 22 Apr 2025 03:28:54 +0000 Files and hashes: 1: j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl (hash: i32mib4BnEf2ibT8Z5WBs0j/XZKhxLozeLtid2Dd36o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0989, serialNumber=8FEB3EBB834DBEE6B1D8B16639C03BA7D39167F0 Validity Not Before: Apr 15 03:28:54 2025 GMT Not After : Apr 22 03:28:54 2025 GMT Subject: CN=67fdd276-acf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:86:b4:9e:26:9d:58:79:22:79:fe:81:d1:0c: 40:4f:89:fe:47:85:05:43:f4:fb:ac:22:d9:cf:9e: bd:7a:25:84:a5:f3:52:35:bd:4b:1b:6d:b3:7c:e9: 0d:db:bb:53:e3:19:6f:34:6e:75:b6:10:27:83:9b: b0:2b:9a:b4:17:7c:70:f7:3a:df:30:cc:5b:f6:6d: 0f:52:ed:a8:04:a7:0a:62:45:39:15:19:14:af:91: fd:fa:c3:67:b0:1e:86:4f:1f:f0:68:68:c9:86:a7: 3c:50:a0:62:32:f1:66:62:e6:e9:a9:f1:06:3c:ae: 06:d4:9b:ec:cb:a5:88:62:61:c7:2c:84:cd:22:c7: c0:2e:7d:5d:91:b0:0a:d9:6d:10:58:53:8c:0d:ca: f6:08:d4:7d:c9:54:c2:e5:be:83:83:92:8e:63:b9: 76:86:6a:ab:2b:02:38:23:01:e9:64:be:65:c3:cb: 0d:ab:c5:86:01:c9:b5:12:44:68:4a:cf:05:52:63: f9:3c:29:0c:a0:23:45:8d:87:a0:b0:5c:aa:e6:10: 41:bd:a7:2a:be:7c:10:aa:6b:7e:64:c4:14:ed:6f: c8:c8:f4:f8:49:9b:0f:b9:df:ae:f7:b8:90:25:ce: 96:51:64:71:99:b0:09:ae:43:48:34:4b:01:34:f0: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BF:C5:EB:5F:51:7F:34:66:BB:28:B5:5E:86:AE:D6:44:DA:15:26 X509v3 Authority Key Identifier: keyid:8F:EB:3E:BB:83:4D:BE:E6:B1:D8:B1:66:39:C0:3B:A7:D3:91:67:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-s-u4NNvuax2LFmOcA7p9ORZ_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0989/2BAD0C8050E611EE98F8382BC4F9AE02/j-s-u4NNvuax2LFmOcA7p9ORZ_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7d:1f:5f:40:9a:7b:dc:43:97:66:95:35:d3:f6:c0:00:c7: 36:7d:13:ec:11:15:f1:fb:f0:8a:14:a1:15:b5:66:c3:bd:1e: fe:9d:e7:e1:26:64:3b:b4:ce:a3:46:32:fd:2f:9f:53:c0:e3: a4:0a:3a:f2:e5:5b:be:a2:ee:8f:66:40:10:b8:7c:2d:3d:5a: 02:b2:96:8b:b3:87:bc:01:8e:24:e0:69:9b:73:a8:e1:5c:45: 47:c5:c4:fe:43:18:62:de:b8:67:c3:fe:23:ff:13:53:44:7d: d7:d8:2b:8f:8a:ed:20:73:09:6c:bb:eb:72:0f:cd:b4:7e:25: 07:4b:6d:21:d1:db:07:89:bb:88:94:63:0d:75:d4:89:13:90: 2a:68:66:db:d6:33:e1:fc:fb:1b:92:16:26:23:ca:87:64:31: 6c:45:5d:28:08:55:63:54:59:8f:7f:1b:42:c7:54:32:4f:88: ba:81:ca:5c:14:02:ed:23:32:ba:68:ca:89:8c:20:50:da:6b: 89:f6:e6:e8:c8:0b:90:3a:5d:fb:5d:09:fa:84:ca:88:32:f3: 1d:6f:fc:3b:e4:1f:22:7c:f6:62:70:09:b3:64:a7:86:14:bf: 7f:25:f1:39:47:8a:eb:d0:ed:8e:c1:58:9f:ec:c8:c3:ce:f0: 72:7a:b6:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5ODkxMTAvBgNVBAUTKDhGRUIzRUJCODM0REJFRTZCMUQ4QjE2NjM5QzAzQkE3 RDM5MTY3RjAwHhcNMjUwNDE1MDMyODU0WhcNMjUwNDIyMDMyODU0WjAYMRYwFAYD VQQDEw02N2ZkZDI3Ni1hY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Ia0niadWHkief6B0QxAT4n+R4UFQ/T7rCLZz569eiWEpfNSNb1LG22zfOkN 27tT4xlvNG51thAng5uwK5q0F3xw9zrfMMxb9m0PUu2oBKcKYkU5FRkUr5H9+sNn sB6GTx/waGjJhqc8UKBiMvFmYubpqfEGPK4G1Jvsy6WIYmHHLITNIsfALn1dkbAK 2W0QWFOMDcr2CNR9yVTC5b6Dg5KOY7l2hmqrKwI4IwHpZL5lw8sNq8WGAcm1EkRo Ss8FUmP5PCkMoCNFjYegsFyq5hBBvacqvnwQqmt+ZMQU7W/IyPT4SZsPud+u97iQ Jc6WUWRxmbAJrkNINEsBNPC0QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy/xetf UX80ZrsotV6GrtZE2hUmMB8GA1UdIwQYMBaAFI/rPruDTb7msdixZjnAO6fTkWfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDk4OS8yQkFEMEM4MDUw RTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1YXgyTEZtT2NBN3A5T1Ja X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otcy11NE5OdnVheDJMRm1PY0E3cDlPUlpfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDk4OS8yQkFEMEM4MDUwRTYxMUVFOThGODM4MkJDNEY5QUUwMi9qLXMtdTROTnZ1 YXgyTEZtT2NBN3A5T1JaX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKfR9fQJp73EOXZpU10/bAAMc2fRPsERXx+/CKFKEVtWbDvR7+nefh JmQ7tM6jRjL9L59TwOOkCjry5Vu+ou6PZkAQuHwtPVoCspaLs4e8AY4k4Gmbc6jh XEVHxcT+Qxhi3rhnw/4j/xNTRH3X2CuPiu0gcwlsu+tyD820fiUHS20h0dsHibuI lGMNddSJE5AqaGbb1jPh/PsbkhYmI8qHZDFsRV0oCFVjVFmPfxtCx1QyT4i6gcpc FALtIzK6aMqJjCBQ2muJ9uboyAuQOl37XQn6hMqIMvMdb/w75B8ifPZicAmzZKeG FL9/JfE5R4rr0O2OwVif7MjDzvByerYr -----END CERTIFICATE-----Generated at Thu Apr 17 03:53:45 2025 by rpki-client