$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft File: jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json) Hash identifier: QPPnaXyaHNAwYuAmdFz37SMoAu4vmS1obH615XtQNN4= Subject key identifier: 94:39:E8:D2:1D:4E:9C:6E:53:01:EC:84:05:B2:2A:94:17:54:D2:E5 Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft Manifest number: 0489 Signing time: Thu 08 May 2025 23:51:07 +0000 Manifest this update: Thu 08 May 2025 23:51:07 +0000 Manifest next update: Thu 15 May 2025 23:51:07 +0000 Files and hashes: 1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: wVf2SRm1+Cd+0H7qtLqNSJl3SFZ6TOmMOyFBG4aozpI=) 2: 4AB7A910321C11EF9E87D582C4F9AE02.roa (hash: IWsNQTcMNZCIYRCXuETJFZmlLwkTa3oCDru3o4pBSFg=) 3: 46493600A91511ED9E2AC948C4F9AE02.roa (hash: Cvm3jGgtG/IO+qWj8hVQiUBhVroPBRD0seW7V/cVRpo=) 4: 45835FFCA91511ED9E2AC948C4F9AE02.roa (hash: ec1O1GTZ4dz+0/pZQ1zL6I07kP1Ns22R8lDvYSkImuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C40D, serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE Validity Not Before: May 8 23:51:07 2025 GMT Not After : May 15 23:51:07 2025 GMT Subject: CN=681d436b-f3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:55:99:4e:46:de:1b:8b:37:a0:50:bf:d3: 0e:5b:28:44:a2:ca:ca:6b:86:5d:f4:44:3b:14:0d: f7:f5:91:d3:9f:d2:71:8d:e4:96:c4:6c:56:de:92: 5c:9a:1f:61:f2:de:76:f5:e8:1f:ed:24:7f:b9:79: 01:f0:00:66:6e:62:1e:e5:6e:5e:de:3e:52:07:66: 69:1a:18:34:54:4d:07:fd:c6:7f:af:e2:87:c0:3c: 11:e0:0b:d9:60:1c:bb:64:97:14:e4:f5:02:af:d6: 0e:f5:d9:51:82:08:be:a7:67:62:67:76:05:42:1a: 6b:71:94:ed:e0:9a:7f:6f:5b:96:f1:80:c4:ec:9d: 93:ca:2f:da:fb:f0:03:eb:d4:be:21:6a:4f:84:87: c7:2e:f8:ee:cc:f9:f0:ac:be:17:bf:2d:5f:60:79: 36:05:f4:f2:ac:e3:2a:70:e9:52:f1:bd:d4:4c:53: eb:24:13:ca:a4:39:08:ac:ac:15:6a:ad:17:26:cb: 04:ca:25:6a:37:eb:60:4e:15:93:5c:ad:f1:dc:4f: c8:b8:f9:2c:d2:49:55:63:6d:72:ad:a8:0b:d2:1c: 40:3e:91:2d:6a:a7:4a:d5:12:7f:3f:79:d1:c9:b5: 3c:f8:7d:bc:95:ef:86:e4:2d:4d:d9:b9:d4:5e:46: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:39:E8:D2:1D:4E:9C:6E:53:01:EC:84:05:B2:2A:94:17:54:D2:E5 X509v3 Authority Key Identifier: keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:df:25:4a:84:35:ea:c0:2b:fa:e8:66:62:f3:7e:51:93:70: 78:a4:55:64:77:a6:65:8f:b5:25:0a:32:86:5b:76:4a:fc:d8: c9:b4:b4:63:9d:8c:0a:5e:c5:cf:fa:3c:e6:d6:06:9c:08:41: fa:f1:93:e9:49:9d:aa:77:cb:82:b7:c7:9c:2d:c5:8d:2b:80: 7d:2f:26:1b:35:be:65:0c:20:81:2d:56:32:6a:7c:da:4c:69: b5:9f:10:61:93:ce:f4:03:f6:7d:7a:e3:80:66:42:94:0f:90: 6c:7e:11:1b:56:71:d5:9b:a7:23:bd:c7:a8:14:c2:b8:e5:81: 11:e1:ee:fe:6d:b0:46:ec:60:29:b0:19:b6:f0:70:cc:87:d9: 87:56:72:92:1d:5a:a5:c0:3b:dd:3b:6b:76:af:d9:a5:63:f2: d3:4d:11:36:fd:e2:c1:60:17:c5:2a:7e:93:59:b2:23:91:f5: 02:01:5e:fa:d0:91:2b:19:2f:cb:19:19:2c:45:9a:1b:41:c7: e6:d1:a6:e3:6d:88:0a:68:78:5c:47:53:9d:05:8c:43:c9:77: f8:b2:a0:3d:41:6b:fc:88:70:20:82:52:a3:db:b0:6e:d3:38: 22:9f:6b:8b:1a:f8:e2:24:88:54:cd:d6:f4:c0:57:13:05:d8: bf:41:57:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx OUJCQzFDRUUwHhcNMjUwNTA4MjM1MTA3WhcNMjUwNTE1MjM1MTA3WjAYMRYwFAYD VQQDEw02ODFkNDM2Yi1mM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNJVmU5G3huLN6BQv9MOWyhEosrKa4Zd9EQ7FA339ZHTn9JxjeSWxGxW3pJc mh9h8t529egf7SR/uXkB8ABmbmIe5W5e3j5SB2ZpGhg0VE0H/cZ/r+KHwDwR4AvZ YBy7ZJcU5PUCr9YO9dlRggi+p2diZ3YFQhprcZTt4Jp/b1uW8YDE7J2Tyi/a+/AD 69S+IWpPhIfHLvjuzPnwrL4Xvy1fYHk2BfTyrOMqcOlS8b3UTFPrJBPKpDkIrKwV aq0XJssEyiVqN+tgThWTXK3x3E/IuPks0klVY21yragL0hxAPpEtaqdK1RJ/P3nR ybU8+H28le+G5C1N2bnUXkZYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQ56NId TpxuUwHshAWyKpQXVNLlMB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQwRC81MEY3NzVBNjNCQ0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZl bXB1aHZETldaS1VadThITzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj3yVKhDXqwCv66GZi835Rk3B4pFVkd6Zlj7UlCjKGW3ZK/NjJtLRj nYwKXsXP+jzm1gacCEH68ZPpSZ2qd8uCt8ecLcWNK4B9LyYbNb5lDCCBLVYyanza TGm1nxBhk870A/Z9euOAZkKUD5BsfhEbVnHVm6cjvceoFMK45YER4e7+bbBG7GAp sBm28HDMh9mHVnKSHVqlwDvdO2t2r9mlY/LTTRE2/eLBYBfFKn6TWbIjkfUCAV76 0JErGS/LGRksRZobQcfm0abjbYgKaHhcR1OdBYxDyXf4sqA9QWv8iHAgglKj27Bu 0zgin2uLGvjiJIhUzdb0wFcTBdi/QVeM -----END CERTIFICATE-----Generated at Fri May 9 12:35:03 2025 by rpki-client