$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: 7oiD7vhQUDWyzOXt+8FgQBHNWGVi52q0R0eL2BbpXoE= Subject key identifier: 4A:B0:97:A0:0E:22:45:DE:CA:DA:40:17:40:1E:96:10:AB:15:A4:08 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: BE Signing time: Fri 11 Apr 2025 05:07:14 +0000 Manifest this update: Fri 11 Apr 2025 05:07:13 +0000 Manifest next update: Fri 18 Apr 2025 05:07:13 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: oIJHUD1w1lNcgHfPNCwrapcfYYLTsyGmtZN4dJAEIYc=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: m2sARVY1bYsl1KWknE2ii32pPqsgNqR/nyrCyyQr3Rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Apr 11 05:07:13 2025 GMT Not After : Apr 18 05:07:13 2025 GMT Subject: CN=67f8a382-0cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:0f:1b:c4:f0:f4:ea:a6:48:a7:99:bf:2b: 34:43:75:98:81:cf:61:98:ed:0c:07:af:2e:50:d0: 6c:8f:c3:8a:7b:6a:3f:4d:4b:21:ae:f3:b3:71:65: 5b:22:4f:2d:4e:94:32:dd:7f:fa:d0:2b:e4:51:a5: 4f:9d:dd:37:6e:b2:0a:fe:f7:34:be:af:7b:ab:c5: ce:8c:5e:ed:04:8a:41:00:24:1c:1c:a0:61:89:12: 1a:4b:94:ff:61:ed:24:b6:2e:ec:94:7d:23:99:f4: 70:06:6a:06:d6:22:fd:ca:59:22:13:6c:d6:d5:8e: c7:17:5c:0c:35:b2:69:aa:4a:02:5f:2b:c5:df:8f: 19:8a:d1:92:b3:e1:e0:e0:a8:75:99:e7:f8:9a:de: f5:3f:73:f5:5e:a0:63:b7:d1:a3:ef:5e:fd:d0:0e: 6c:0c:b1:c7:a5:3b:67:1f:e6:0f:61:57:3a:1e:62: 92:f1:26:57:aa:b8:7c:de:6f:4c:77:66:bc:e6:b0: 3b:48:12:38:3e:6b:65:6c:70:25:23:f5:7b:c2:de: d5:69:4b:63:80:7c:d1:cd:65:26:2f:14:a2:0a:57: 13:78:67:69:79:0a:e5:af:ab:49:12:2b:14:6a:e2: 4e:82:41:53:65:29:92:dc:d1:3d:5c:8e:a1:94:bb: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:97:A0:0E:22:45:DE:CA:DA:40:17:40:1E:96:10:AB:15:A4:08 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:46:80:34:fe:19:86:98:af:da:17:9e:c1:36:4f:5d:b7:cb: 0d:ac:cd:70:d8:86:a6:67:c7:7e:30:a7:2c:04:ca:24:6d:80: a3:aa:46:a2:36:95:f3:6b:64:1a:8d:69:6a:56:b1:fc:e7:5d: 3a:d8:87:0d:5a:e3:30:7a:db:97:c7:df:91:c4:8b:4a:8b:a3: 4a:4d:a9:54:67:39:de:d9:03:f6:7c:85:d4:0d:57:22:18:01: 92:05:3c:8b:76:f5:38:2a:f3:0a:b5:dc:57:0e:07:45:e8:22: b7:15:cc:2c:17:0d:82:a7:70:03:cf:b4:90:99:ce:36:dd:a5: c0:ef:97:2c:10:c4:8d:f4:ef:f5:14:a1:06:ec:95:4c:52:8c: 27:e5:01:76:c6:8c:90:ac:eb:ae:ce:f4:7f:1a:66:0a:e2:78: c5:3c:38:47:f4:f2:a1:87:b0:bc:49:73:e7:a6:5e:70:2a:e3: 65:cd:85:18:03:ac:30:55:79:49:f7:23:d3:73:41:3f:93:39: 78:40:ec:29:62:a9:95:71:d9:4c:f5:97:b1:a9:b1:d0:2d:97: 18:fd:be:9d:d9:74:a6:17:5b:0a:c1:88:24:f7:c0:ba:f0:d2: 95:14:75:09:fe:6e:e2:a3:e0:9f:be:1e:79:10:ff:5d:bb:33: 56:cd:e6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwNDExMDUwNzEzWhcNMjUwNDE4MDUwNzEzWjAYMRYwFAYD VQQDEw02N2Y4YTM4Mi0wY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rYPG8Tw9OqmSKeZvys0Q3WYgc9hmO0MB68uUNBsj8OKe2o/TUshrvOzcWVb Ik8tTpQy3X/60CvkUaVPnd03brIK/vc0vq97q8XOjF7tBIpBACQcHKBhiRIaS5T/ Ye0kti7slH0jmfRwBmoG1iL9ylkiE2zW1Y7HF1wMNbJpqkoCXyvF348ZitGSs+Hg 4Kh1mef4mt71P3P1XqBjt9Gj71790A5sDLHHpTtnH+YPYVc6HmKS8SZXqrh83m9M d2a85rA7SBI4PmtlbHAlI/V7wt7VaUtjgHzRzWUmLxSiClcTeGdpeQrlr6tJEisU auJOgkFTZSmS3NE9XI6hlLtwZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqwl6AO IkXeytpAF0AelhCrFaQIMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgRoA0/hmGmK/aF57BNk9dt8sNrM1w2IamZ8d+MKcsBMokbYCjqkai NpXza2QajWlqVrH851062IcNWuMwetuXx9+RxItKi6NKTalUZzne2QP2fIXUDVci GAGSBTyLdvU4KvMKtdxXDgdF6CK3FcwsFw2Cp3ADz7SQmc423aXA75csEMSN9O/1 FKEG7JVMUown5QF2xoyQrOuuzvR/GmYK4njFPDhH9PKhh7C8SXPnpl5wKuNlzYUY A6wwVXlJ9yPTc0E/kzl4QOwpYqmVcdlM9ZexqbHQLZcY/b6d2XSmF1sKwYgk98C6 8NKVFHUJ/m7io+Cfvh55EP9duzNWzeYL -----END CERTIFICATE-----Generated at Sat Apr 12 19:05:00 2025 by rpki-client