$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: lPh74UsuQUGqR7M4K6nmWu1VUNaCTwnDozNJLA/3n04= Subject key identifier: 11:F3:2E:E0:86:20:49:40:DF:CD:F1:D1:2E:DA:E4:68:1C:31:8D:A4 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 7C Signing time: Thu 13 Mar 2025 04:45:00 +0000 Manifest this update: Thu 13 Mar 2025 04:44:59 +0000 Manifest next update: Thu 20 Mar 2025 04:44:59 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: b4o6WPPUVqicAaLu8Ow6nL9ekyTO75/kDnED0v/6LVE=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9 Validity Not Before: Mar 13 04:44:59 2025 GMT Not After : Mar 20 04:44:59 2025 GMT Subject: CN=67d262cb-b16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:b9:8f:c8:b7:ec:aa:c0:6d:e4:ef:0b:51: 5a:57:cf:8b:ac:7c:80:2e:1e:97:4f:2c:a0:4a:62: c9:e2:e7:b7:5c:74:92:61:07:9b:c1:f8:61:dd:3f: 0e:da:20:b8:58:8d:34:20:db:ed:7e:cc:7e:f6:19: bf:87:b3:c8:9d:a4:5a:8c:64:00:84:da:27:be:8b: cf:1d:e8:45:95:68:bc:95:be:4d:cd:67:83:77:42: 71:cf:55:cc:4e:64:4a:b3:6c:ab:4e:b8:66:32:59: a5:ef:e0:63:80:58:b3:0e:70:42:0f:4c:3c:ac:cc: 2c:44:db:e6:48:c4:22:b6:50:1e:c3:6d:a9:46:fe: 3b:15:df:a3:ab:9c:88:a9:ba:86:00:ae:b5:bf:82: ed:66:e8:7b:a5:4e:e7:ea:26:41:c8:6f:55:31:d6: 69:9d:c8:fe:e7:5f:ab:ca:99:d1:56:f5:80:e9:17: 8c:2f:3f:85:ec:18:be:d8:9b:3b:4a:32:eb:0e:6e: a1:fb:01:8b:ae:48:70:30:73:e3:4b:d9:fa:74:5d: f0:57:1f:ad:aa:6c:75:6f:8a:d9:68:0a:7b:1b:36: c6:19:9f:6e:20:76:eb:aa:4b:84:27:bd:91:c0:d7: 4a:5b:2c:11:95:0c:a9:a4:fe:1f:1c:6a:14:17:5b: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F3:2E:E0:86:20:49:40:DF:CD:F1:D1:2E:DA:E4:68:1C:31:8D:A4 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:52:62:4f:98:6f:a4:9f:b0:0e:0a:5f:7e:94:65:e5:67:f2: 78:4f:9b:a1:4f:a6:36:a1:97:b0:61:12:3e:62:e9:2f:9a:01: a8:7d:86:be:4a:f9:f3:9f:12:c6:c1:08:a6:e1:ef:ac:75:46: 49:f3:53:58:e9:c4:35:48:7d:21:98:0a:42:b2:44:72:3b:e7: 63:e7:c3:4e:a4:88:17:f1:92:af:13:78:3d:2d:27:b5:86:e3: 6a:ca:d7:5e:17:dc:58:41:6c:88:5d:45:c3:fe:ea:7a:51:8a: a7:d0:51:81:3a:dc:7b:61:b7:9b:01:98:d6:af:df:c1:26:2b: 3c:0b:98:0f:5f:aa:f8:8f:5b:b0:6c:98:73:64:e3:09:0c:4d: 86:9c:a7:65:a4:67:75:8d:b4:94:53:04:57:8b:c4:3a:d2:ab: 1b:47:e1:19:55:22:38:15:ed:e3:4a:e6:5e:59:01:3a:4b:c3: ed:6d:15:22:6f:93:27:0a:ec:9a:6c:1c:f2:be:9e:f6:eb:a9: b7:44:68:0a:7e:a1:7b:e0:34:f0:8c:0d:81:80:43:ee:37:6f: ae:8f:4f:07:2e:c7:28:88:6e:0d:04:b9:5c:38:e2:c5:5a:43: 02:8d:8e:aa:1b:bc:10:6a:d4:1f:00:10:21:93:fc:85:ca:20: 0a:32:a8:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkRBOTExMC8GA1UEBRMoMjQ5MjBDNURGOTg5RkNDRDk5MEIwOEE4RjA0NzlFQTRB RkIzNjE5ODAeFw0yNTAzMTMwNDQ0NTlaFw0yNTAzMjAwNDQ0NTlaMBgxFjAUBgNV BAMTDTY3ZDI2MmNiLWIxNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2QLmPyLfsqsBt5O8LUVpXz4usfIAuHpdPLKBKYsni57dcdJJhB5vB+GHdPw7a ILhYjTQg2+1+zH72Gb+Hs8idpFqMZACE2ie+i88d6EWVaLyVvk3NZ4N3QnHPVcxO ZEqzbKtOuGYyWaXv4GOAWLMOcEIPTDyszCxE2+ZIxCK2UB7DbalG/jsV36OrnIip uoYArrW/gu1m6HulTufqJkHIb1Ux1mmdyP7nX6vKmdFW9YDpF4wvP4XsGL7YmztK MusObqH7AYuuSHAwc+NL2fp0XfBXH62qbHVvitloCnsbNsYZn24gduuqS4QnvZHA 10pbLBGVDKmk/h8cahQXW77LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEfMu4IYg SUDfzfHRLtrkaBwxjaQwHwYDVR0jBBgwFoAUJJIMXfmJ/M2ZCwio8EeepK+zYZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCREE5LzJFMENCNTVFNDRC RDExRUZCNzNEQjc3QkM0RjlBRTAyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstella Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSkpJTVhmbUpfTTJaQ3dpbzhFZWVwSy16WVpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC REE5LzJFMENCNTVFNDRCRDExRUZCNzNEQjc3QkM0RjlBRTAyL0pKSU1YZm1KX00y WkN3aW84RWVlcEstellaZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpSYk+Yb6SfsA4KX36UZeVn8nhPm6FPpjahl7BhEj5i6S+aAah9hr5K +fOfEsbBCKbh76x1RknzU1jpxDVIfSGYCkKyRHI752Pnw06kiBfxkq8TeD0tJ7WG 42rK114X3FhBbIhdRcP+6npRiqfQUYE63Htht5sBmNav38EmKzwLmA9fqviPW7Bs mHNk4wkMTYacp2WkZ3WNtJRTBFeLxDrSqxtH4RlVIjgV7eNK5l5ZATpLw+1tFSJv kycK7JpsHPK+nvbrqbdEaAp+oXvgNPCMDYGAQ+43b66PTwcuxyiIbg0EuVw44sVa QwKNjqobvBBq1B8AECGT/IXKIAoyqD8= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:02 2025 by rpki-client