$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json) Hash identifier: bqARvV2RUXvaGokbIAl+8B0TIRXiAPidRjD1bGSBEME= Subject key identifier: AF:97:49:0E:1B:37:29:EE:43:27:24:9B:35:23:F8:1A:50:50:56:23 Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft Manifest number: 27 Signing time: Thu 03 Apr 2025 07:03:14 +0000 Manifest this update: Thu 03 Apr 2025 07:03:13 +0000 Manifest next update: Thu 10 Apr 2025 07:03:13 +0000 Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: h+SvYrnZ0jVlZ9jgz+3zIokJEeAnAuBXu4OB31vSYb8=) 2: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: uGejxwookglu2iCow+tcNdEybEx5MchvlLEGb/BsAIc=) 3: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: pXIC9lifhNka63uxRfDrQycVb+TaKUuZE602Ci63ILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913059E Validity Not Before: Apr 3 07:03:13 2025 GMT Not After : Apr 10 07:03:13 2025 GMT Subject: CN=67ee32b2-a6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:26:bd:31:eb:fc:35:38:72:69:2f:6d:c2: 6f:43:a2:6d:c6:82:2f:e3:7f:e3:75:77:2b:85:bc: d0:75:53:f7:25:80:ae:ca:83:53:13:d0:a9:23:c7: cf:08:ca:62:29:b4:f9:c6:e1:a0:8d:ff:70:75:4f: 0c:32:25:9e:1e:3c:4c:80:8b:19:7a:98:02:7a:ad: 33:23:bd:e2:89:a8:c5:44:4d:fb:73:ca:6d:b8:64: 8b:31:11:09:24:d9:89:1e:88:be:62:8e:bf:93:3e: 51:8b:0a:a9:8c:fb:30:88:c8:cd:ba:9d:9c:aa:6c: 5b:8c:1f:44:87:53:35:7b:16:6d:8a:cc:ba:1e:a1: b4:08:03:23:6a:55:3e:25:37:94:b4:2a:2f:d9:5c: d7:90:1c:48:4b:ac:c8:43:12:44:c5:1a:18:63:a4: 8a:cc:ce:0b:9b:1f:da:0d:67:6f:3b:6e:86:2a:7c: 51:ef:6f:f7:13:6b:e9:24:15:53:c2:33:13:12:04: 27:13:fd:8f:a3:14:da:5e:9a:7a:35:d2:8d:a9:2c: 6e:1e:bc:f1:91:60:93:0a:10:ed:ee:13:de:ae:b3: 7e:f0:6b:e9:0c:6e:dd:2d:75:c5:5c:f3:67:74:e2: 19:d1:c4:c2:b4:7b:f6:df:59:f0:cf:fe:c1:d5:95: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:49:0E:1B:37:29:EE:43:27:24:9B:35:23:F8:1A:50:50:56:23 X509v3 Authority Key Identifier: keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c5:70:ca:11:42:55:f0:d0:d0:18:f1:54:a1:53:57:9d:32: f2:28:88:10:64:91:9e:e4:d6:a8:ef:f0:91:75:e8:81:f3:36: ec:7e:a1:79:5e:31:c5:d7:d0:d0:be:4b:08:bb:21:c0:3f:e8: 51:65:d0:18:46:8a:e2:cd:09:0e:1e:eb:54:ed:9c:6a:c3:81: 45:85:47:33:52:cf:73:9d:c8:08:94:83:81:be:21:f7:33:82: 27:55:b5:f7:44:e3:7a:6f:68:26:f7:1e:b2:88:ce:86:8a:8a: fe:f9:7d:3e:2c:67:44:eb:c0:cb:50:53:bd:d9:5a:dd:9e:b9: 78:a0:42:b4:b5:48:db:40:e2:5b:e9:97:c4:f0:41:52:ad:72: 12:a3:4b:d2:09:e2:31:0a:79:e6:d7:3e:9e:2e:b4:4b:6d:b9: ba:9d:96:02:dc:b8:0d:0d:81:ba:be:6c:59:bd:fc:60:2f:92: 42:19:9f:a9:56:8d:a8:61:24:3c:4b:ed:f6:28:e2:dd:45:c5: 17:71:dc:5b:cc:69:45:a2:c0:c8:fd:b2:d2:7e:6f:b6:06:37: ae:9b:9d:10:49:a4:fb:f2:eb:d2:4d:4e:e9:2d:b7:e0:43:4f: 76:d2:e7:71:1b:54:d0:3b:dc:60:4c:2c:13:aa:2c:0d:6b:af: e0:db:91:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDU5RTExMC8GA1UEBRMoNzI1OERGRDU2RkE1QTQ4N0YwRDRBQ0M2OUNBREIxQkVB QzJGOTcwRTAeFw0yNTA0MDMwNzAzMTNaFw0yNTA0MTAwNzAzMTNaMBgxFjAUBgNV BAMTDTY3ZWUzMmIyLWE2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLiCa9Mev8NThyaS9twm9Dom3Ggi/jf+N1dyuFvNB1U/clgK7Kg1MT0Kkjx88I ymIptPnG4aCN/3B1TwwyJZ4ePEyAixl6mAJ6rTMjveKJqMVETftzym24ZIsxEQkk 2YkeiL5ijr+TPlGLCqmM+zCIyM26nZyqbFuMH0SHUzV7Fm2KzLoeobQIAyNqVT4l N5S0Ki/ZXNeQHEhLrMhDEkTFGhhjpIrMzgubH9oNZ287boYqfFHvb/cTa+kkFVPC MxMSBCcT/Y+jFNpemno10o2pLG4evPGRYJMKEO3uE96us37wa+kMbt0tdcVc82d0 4hnRxMK0e/bfWfDP/sHVlW2zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr5dJDhs3 Ke5DJySbNSP4GlBQViMwHwYDVR0jBBgwFoAUcljf1W+lpIfw1KzGnK2xvqwvlw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFLzU1NjY2QjU2RDlE MDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2xqZjFXLWxwSWZ3MUt6R25LMnh2cXd2bHc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NTlFLzU1NjY2QjU2RDlEMDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElm dzFLekduSzJ4dnF3dmx3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/FcMoRQlXw0NAY8VShU1edMvIoiBBkkZ7k1qjv8JF16IHzNux+oXle McXX0NC+Swi7IcA/6FFl0BhGiuLNCQ4e61TtnGrDgUWFRzNSz3OdyAiUg4G+Ifcz gidVtfdE43pvaCb3HrKIzoaKiv75fT4sZ0TrwMtQU73ZWt2euXigQrS1SNtA4lvp l8TwQVKtchKjS9IJ4jEKeebXPp4utEttubqdlgLcuA0Ngbq+bFm9/GAvkkIZn6lW jahhJDxL7fYo4t1FxRdx3FvMaUWiwMj9stJ+b7YGN66bnRBJpPvy69JNTuktt+BD T3bS53EbVNA73GBMLBOqLA1rr+Dbkfo= -----END CERTIFICATE-----Generated at Sat Apr 5 07:59:37 2025 by rpki-client