$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft File: je6uhW6V886s4RLAoeqXukWlekQ.mft (raw, json) Hash identifier: AXkUK0r48A5wPWFCN5dWgscKWnM4UyjAkHI/e29nGKo= Subject key identifier: 8F:A7:0C:E8:A6:9A:BD:6F:B6:C7:47:8B:2F:EA:BA:D9:F5:62:71:4B Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44 Certificate serial: 05F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft Manifest number: 05F2 Signing time: Fri 28 Mar 2025 23:13:06 +0000 Manifest this update: Fri 28 Mar 2025 23:13:05 +0000 Manifest next update: Fri 04 Apr 2025 23:13:05 +0000 Files and hashes: 1: je6uhW6V886s4RLAoeqXukWlekQ.crl (hash: pVBOzhalXWa73lLlJyWi4GjCjqUVSy5bVJc6g179wK4=) 2: A26500A2A27F11EBBE87837FC4F9AE02.roa (hash: o6IdzF2JW4pdJz3buu3YPOk5TMt4Nbg8S9u/EOJTdU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C39D1 Validity Not Before: Mar 28 23:13:05 2025 GMT Not After : Apr 4 23:13:05 2025 GMT Subject: CN=67e72d02-599d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f5:65:c4:51:0a:64:95:c0:82:c6:f8:a8:ed: e8:36:78:cd:34:2d:53:83:c1:7b:6a:9a:7b:20:3d: c5:4b:c8:7d:27:a0:8f:f4:a7:21:db:2a:c1:fb:dd: 6e:12:6a:2e:78:89:07:0f:81:68:a5:94:ca:21:66: c9:02:71:4e:fa:82:55:bc:53:61:25:65:f2:c6:6e: 03:45:8a:1f:77:52:c1:63:75:61:d6:61:97:aa:7c: ff:d3:1a:b8:82:e2:ef:88:70:17:1b:09:16:9a:3e: 2d:4e:e7:ec:6b:4b:7d:e2:7b:04:d8:4a:e7:06:36: 75:c3:da:c9:17:4e:9c:26:cb:e7:bb:b3:43:fb:f9: 3c:c1:02:3e:a3:0b:fd:ea:e4:b2:0d:31:e0:02:0e: fa:39:37:4a:72:95:58:94:41:7d:97:5b:ee:cb:83: a7:ad:c6:ec:32:67:0f:5d:3b:de:d2:4b:0f:ec:74: 64:ab:e5:f9:45:b3:c4:9c:90:3f:2f:48:11:be:79: a9:49:af:c2:d0:97:0d:13:36:9c:80:19:08:92:74: 38:2f:f0:80:2f:63:2b:1c:4f:11:77:9e:44:d6:4e: 54:25:a0:12:8e:83:c1:05:eb:ed:74:d7:68:ba:52: cd:0b:a2:5e:73:79:59:57:69:43:0f:a0:1e:f4:97: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A7:0C:E8:A6:9A:BD:6F:B6:C7:47:8B:2F:EA:BA:D9:F5:62:71:4B X509v3 Authority Key Identifier: keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:04:fe:ca:90:b3:97:e7:95:61:e4:06:49:80:9a:2b:32:bd: 8a:bd:d3:47:a1:96:cf:5e:6d:70:a2:cf:bd:64:e0:e3:9e:91: 90:3c:2d:a2:ba:22:76:41:0a:2c:40:17:62:cc:f4:3d:31:39: 04:8a:b6:bd:16:1c:f9:22:c0:35:6a:e3:6f:01:8f:25:f8:f8: 28:db:a7:a5:2c:75:40:26:3b:97:58:c9:66:dd:73:32:3c:4a: e5:4a:06:5d:e8:6a:64:ba:2f:3f:c3:28:df:2a:1b:8d:39:56: 0f:ff:2b:aa:bc:eb:72:22:45:43:e6:10:b1:50:ac:e8:8d:fa: 82:57:c9:1a:82:34:69:c2:c5:65:7b:a7:6f:57:c2:af:23:cc: f5:db:fe:dd:56:e1:a7:c6:a3:9d:64:6c:8c:d2:2a:e3:34:9c: 43:79:a1:2b:e0:12:93:3c:15:6d:29:9f:f1:ad:5e:13:76:8e: 26:d3:4f:fc:7b:36:e2:bc:7f:cd:e3:f6:a8:1d:8a:d3:6e:c3: 2b:7a:03:48:8a:d9:d2:95:15:1b:da:16:2f:f7:70:dd:b4:88: a2:00:24:29:f7:5e:53:45:e2:c9:0d:dc:45:83:ef:34:5f:31: a3:a7:2a:57:27:74:f1:2e:6f:8d:b2:b8:e2:e2:9a:4b:91:86: 38:49:46:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB NDVBNTdBNDQwHhcNMjUwMzI4MjMxMzA1WhcNMjUwNDA0MjMxMzA1WjAYMRYwFAYD VQQDEw02N2U3MmQwMi01OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vVlxFEKZJXAgsb4qO3oNnjNNC1Tg8F7app7ID3FS8h9J6CP9Kch2yrB+91u EmoueIkHD4FopZTKIWbJAnFO+oJVvFNhJWXyxm4DRYofd1LBY3Vh1mGXqnz/0xq4 guLviHAXGwkWmj4tTufsa0t94nsE2ErnBjZ1w9rJF06cJsvnu7ND+/k8wQI+owv9 6uSyDTHgAg76OTdKcpVYlEF9l1vuy4OnrcbsMmcPXTve0ksP7HRkq+X5RbPEnJA/ L0gRvnmpSa/C0JcNEzacgBkIknQ4L/CAL2MrHE8Rd55E1k5UJaASjoPBBevtdNdo ulLNC6Jec3lZV2lDD6Ae9JeLcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+nDOim mr1vtsdHiy/qutn1YnFLMB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzlEMS8wODhDMUI0OEEyN0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4 NnM0UkxBb2VxWHVrV2xla1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMBP7KkLOX55Vh5AZJgJorMr2KvdNHoZbPXm1wos+9ZODjnpGQPC2i uiJ2QQosQBdizPQ9MTkEira9Fhz5IsA1auNvAY8l+Pgo26elLHVAJjuXWMlm3XMy PErlSgZd6Gpkui8/wyjfKhuNOVYP/yuqvOtyIkVD5hCxUKzojfqCV8kagjRpwsVl e6dvV8KvI8z12/7dVuGnxqOdZGyM0irjNJxDeaEr4BKTPBVtKZ/xrV4Tdo4m00/8 ezbivH/N4/aoHYrTbsMregNIitnSlRUb2hYv93DdtIiiACQp915TReLJDdxFg+80 XzGjpypXJ3TxLm+Nsrji4ppLkYY4SUaZ -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:44 2025 by rpki-client