$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft File: jyvUwSY28AWbQI0HFq8yyPVAaaU.mft (raw, json) Hash identifier: w4SESeg348lKe9yI2KYRnqkRsgp1ZaR6r7JPeIQfbRg= Subject key identifier: 43:D4:29:81:B1:AA:06:06:25:42:3E:75:82:09:D2:0D:2B:8E:29:EB Authority key identifier: 8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 Certificate issuer: /CN=A9120AC1/serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft Manifest number: 04B2 Signing time: Sat 31 May 2025 00:06:55 +0000 Manifest this update: Sat 31 May 2025 00:06:55 +0000 Manifest next update: Sat 07 Jun 2025 00:06:55 +0000 Files and hashes: 1: jyvUwSY28AWbQI0HFq8yyPVAaaU.crl (hash: 0LRVVR2tF9iZzCn2lBV15vA64pOgJzCBMEkPNLGtmzw=) 2: 17A5A8400EC811F088512D41C4F9AE02.roa (hash: tVHP7vE09ih639kPT+zHjlRDQm6GDfHkbd/XlPHcK/0=) 3: EDB1F68E3C8811EC889B9D78C4F9AE02.roa (hash: 8OgnHoASF/UsFAo8WcuH4tg18eHyDNchCEmDTI3RcYo=) 4: 8BE9B1A03C8B11EC8947D982C4F9AE02.roa (hash: Egnw+r9qbejML3EvsCqcWRH67VrUmMQV/ILZahM9IPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=8F2BD4C12636F0059B408D0716AF32C8F54069A5 Validity Not Before: May 31 00:06:55 2025 GMT Not After : Jun 7 00:06:55 2025 GMT Subject: CN=683a481f-9714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:6f:f4:ca:10:f1:79:ea:3a:c7:64:a5:bc: 7a:45:ef:bf:72:b3:0a:ed:db:67:95:51:05:6c:2c: a1:a0:e0:13:ff:e2:58:10:d1:92:ee:5f:6b:0e:38: df:fe:4a:bf:3d:ae:c6:a7:c8:fd:6c:9e:3e:38:3a: e9:31:1b:65:d5:e1:bc:2a:07:c5:a6:04:c6:65:e0: da:38:bb:71:16:38:35:f0:12:0e:a9:58:91:91:96: 57:76:bf:26:0f:5b:ec:50:b6:f1:f3:8e:da:01:ac: 36:da:2c:7f:49:e4:fe:fc:45:a8:16:d2:e3:dd:d8: 1e:19:70:aa:7a:13:5d:40:25:02:72:a2:c3:89:af: 66:23:e5:ed:56:88:db:a7:45:1f:78:3e:73:6e:d0: 0b:26:19:37:44:5d:c0:76:a4:b9:24:a7:3e:e8:1d: ca:af:03:4f:bd:d4:86:ee:14:3d:06:aa:06:a4:d8: f2:ea:c6:90:5e:64:a4:46:b3:66:3a:c5:e8:53:53: ed:a8:a9:70:61:a8:0d:88:e6:bc:3b:34:6c:fa:80: cb:f1:2c:94:98:c0:15:89:54:d3:95:fd:30:f9:c0: e5:bf:af:7c:8d:92:7f:0a:a1:82:6b:76:a9:e6:25: 9f:c4:61:7d:13:85:6d:61:57:55:9b:92:a6:a0:6e: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D4:29:81:B1:AA:06:06:25:42:3E:75:82:09:D2:0D:2B:8E:29:EB X509v3 Authority Key Identifier: keyid:8F:2B:D4:C1:26:36:F0:05:9B:40:8D:07:16:AF:32:C8:F5:40:69:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvUwSY28AWbQI0HFq8yyPVAaaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/48017D38309711ECB285A64BC4F9AE02/jyvUwSY28AWbQI0HFq8yyPVAaaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4d:cd:bb:f7:db:e7:91:ac:45:73:e1:c0:23:89:40:5a:d8: 88:46:a6:fe:89:b2:fb:b2:17:98:31:83:34:0f:48:6d:83:54: c5:0b:9c:04:de:43:ab:59:27:70:b9:6c:c6:0d:26:19:65:8a: 2f:b1:7c:07:3f:9a:64:9d:b5:b1:c9:46:9e:e9:83:f9:0b:63: df:ea:27:b8:df:8a:8f:00:36:66:11:b6:ee:49:a1:74:26:56: c1:f8:ec:cf:04:30:21:49:e6:35:3a:94:ed:6d:d9:cd:fc:c8: 48:42:e5:4b:8c:d0:16:f8:12:e3:7e:cc:8d:13:35:48:a4:88: 2c:06:13:9b:b7:e4:1c:17:09:d5:93:a0:7a:60:09:09:e2:98: ae:8c:e1:8b:09:eb:5e:70:8d:4c:74:79:6a:94:b2:96:24:bc: 29:b4:d3:8e:74:06:0e:4d:58:67:1f:03:38:c6:62:34:6f:c5: 78:ec:c0:f4:23:0e:70:b6:df:bf:2d:0a:01:07:16:d7:4e:aa: 34:c1:e0:f9:c1:c7:10:2b:93:00:c4:65:e9:4d:b9:e2:11:41: 14:f4:9d:f3:d4:d7:65:36:61:86:9b:8c:69:84:bb:ce:8d:48: c3:19:87:11:2d:cb:85:ca:94:a6:73:26:15:d6:ba:92:c0:4a: 8f:e1:3e:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDhGMkJENEMxMjYzNkYwMDU5QjQwOEQwNzE2QUYzMkM4 RjU0MDY5QTUwHhcNMjUwNTMxMDAwNjU1WhcNMjUwNjA3MDAwNjU1WjAYMRYwFAYD VQQDEw02ODNhNDgxZi05NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLdv9MoQ8XnqOsdkpbx6Re+/crMK7dtnlVEFbCyhoOAT/+JYENGS7l9rDjjf /kq/Pa7Gp8j9bJ4+ODrpMRtl1eG8KgfFpgTGZeDaOLtxFjg18BIOqViRkZZXdr8m D1vsULbx847aAaw22ix/SeT+/EWoFtLj3dgeGXCqehNdQCUCcqLDia9mI+XtVojb p0UfeD5zbtALJhk3RF3AdqS5JKc+6B3KrwNPvdSG7hQ9BqoGpNjy6saQXmSkRrNm OsXoU1PtqKlwYagNiOa8OzRs+oDL8SyUmMAViVTTlf0w+cDlv698jZJ/CqGCa3ap 5iWfxGF9E4VtYVdVm5KmoG7FTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPUKYGx qgYGJUI+dYIJ0g0rjinrMB8GA1UdIwQYMBaAFI8r1MEmNvAFm0CNBxavMsj1QGml MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS80ODAxN0QzODMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhBV2JRSTBIRnE4eXlQVkFh YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dlV3U1kyOEFXYlFJMEhGcTh5eVBWQWFhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS80ODAxN0QzODMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9qeXZVd1NZMjhB V2JRSTBIRnE4eXlQVkFhYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCITc2799vnkaxFc+HAI4lAWtiIRqb+ibL7sheYMYM0D0htg1TFC5wE 3kOrWSdwuWzGDSYZZYovsXwHP5pknbWxyUae6YP5C2Pf6ie434qPADZmEbbuSaF0 JlbB+OzPBDAhSeY1OpTtbdnN/MhIQuVLjNAW+BLjfsyNEzVIpIgsBhObt+QcFwnV k6B6YAkJ4piujOGLCetecI1MdHlqlLKWJLwptNOOdAYOTVhnHwM4xmI0b8V47MD0 Iw5wtt+/LQoBBxbXTqo0weD5wccQK5MAxGXpTbniEUEU9J3z1NdlNmGGm4xphLvO jUjDGYcRLcuFypSmcyYV1rqSwEqP4T7B -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client