$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: Ofhtdt45N++iZEiLQqbd4cdJ1VIWj3p3CZuLPuOp3mk= Subject key identifier: 25:BB:01:EB:BC:E1:46:55:C5:D2:EA:6D:D1:AD:0B:0D:E5:6A:46:94 Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0A54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0A4A Signing time: Fri 30 May 2025 19:53:36 +0000 Manifest this update: Fri 30 May 2025 19:53:35 +0000 Manifest next update: Fri 06 Jun 2025 19:53:35 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: PcVlWGtgVPmTOJVhsB+mjAPZJ1I4vxpbzkO1I+GMADM=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: ISGTVPaDSy80xCA34yyD1yreZg8c/egSeWgOcnZdCwU=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: Wyd164MPhU473t/AoUISBoO4Aw8E8UOj0zKD275MPkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2644 (0xa54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: May 30 19:53:35 2025 GMT Not After : Jun 6 19:53:35 2025 GMT Subject: CN=683a0cbf-a463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:09:6e:48:e4:e9:4a:e7:17:d2:5e:37:db:b5: bf:37:d5:97:10:31:ef:97:8e:b0:fc:3d:a6:b9:f6: d6:79:63:a4:12:a5:d8:96:ce:9e:f7:26:d4:50:b4: 4d:a8:cf:ac:cb:98:ef:35:3a:a4:e7:63:1f:da:89: 80:fc:7f:5d:5d:d4:f3:28:5a:c0:fd:c5:61:cd:d3: 87:e7:70:25:c6:80:0d:6d:f8:2f:15:48:ee:1d:d6: ff:fa:0d:91:3e:f8:b9:99:97:62:bb:92:3d:51:f7: 12:9f:91:48:66:97:1b:b4:8a:ce:52:39:58:41:c7: cd:07:c3:85:a3:47:84:3a:a2:9b:97:20:ba:ff:5c: c5:db:0e:45:63:08:b8:e2:5d:ed:f7:0b:9d:6c:6e: 83:50:de:be:3b:c8:59:fb:fc:5d:3b:bd:15:0a:d2: 98:78:58:a7:be:0a:55:fe:b4:f5:46:01:7e:5e:69: 31:5b:53:f2:7f:aa:71:71:19:c7:01:eb:27:d2:41: d0:2a:d2:f7:d2:fa:9c:42:f8:71:52:7a:81:62:02: 2a:43:f3:5f:9f:c8:7a:8c:27:77:03:e2:fd:70:ad: e9:d8:f4:b6:93:0c:c8:80:2e:68:5b:be:37:c2:c8: c8:33:60:7c:b1:06:6a:d7:87:92:98:d1:39:34:fd: 72:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BB:01:EB:BC:E1:46:55:C5:D2:EA:6D:D1:AD:0B:0D:E5:6A:46:94 X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:95:c6:c7:70:60:2a:d6:50:7d:e2:13:8e:8f:d9:7e:77:36: e5:d2:1b:53:12:5d:c4:47:3b:80:fa:af:22:c3:be:41:0d:5a: b7:41:5a:02:22:3b:a3:95:39:1d:f5:b3:18:43:81:42:79:4b: 0a:e3:23:a3:06:99:23:aa:93:46:ba:f2:15:4b:4f:00:5f:7b: 6f:b6:e2:a2:98:49:ae:cf:2b:84:da:42:4b:db:b6:8c:1c:76: 59:28:c8:c1:47:a0:2e:32:2b:64:60:db:5d:0f:63:56:4d:34: 24:f1:0b:f7:b4:df:08:08:60:f1:34:2b:50:5c:9f:10:a0:c3: d0:66:07:d5:61:9f:54:f0:0f:b1:f2:d8:64:ab:2e:bc:e8:9f: cc:d8:71:a3:7f:a5:af:97:44:ea:65:21:a7:1f:82:32:c9:65: 1f:80:97:d0:10:72:3b:48:9a:48:fb:ec:2d:17:56:9e:79:4e: b7:42:aa:53:c9:97:42:b6:c3:cc:0e:6c:9a:13:d4:a5:01:5a: 28:af:1e:bf:a2:1b:ad:57:4f:0d:8f:cb:0c:7d:7f:07:fd:36: 25:65:6f:76:c1:18:9f:23:d0:37:0d:35:62:33:9b:ed:bb:2d: ab:f7:28:62:e8:c3:a8:29:bf:bd:71:1d:ab:f2:0d:03:71:51: 01:93:b2:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjUwNTMwMTk1MzM1WhcNMjUwNjA2MTk1MzM1WjAYMRYwFAYD VQQDEw02ODNhMGNiZi1hNDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gluSOTpSucX0l4327W/N9WXEDHvl46w/D2mufbWeWOkEqXYls6e9ybUULRN qM+sy5jvNTqk52Mf2omA/H9dXdTzKFrA/cVhzdOH53AlxoANbfgvFUjuHdb/+g2R Pvi5mZdiu5I9UfcSn5FIZpcbtIrOUjlYQcfNB8OFo0eEOqKblyC6/1zF2w5FYwi4 4l3t9wudbG6DUN6+O8hZ+/xdO70VCtKYeFinvgpV/rT1RgF+XmkxW1Pyf6pxcRnH Aesn0kHQKtL30vqcQvhxUnqBYgIqQ/Nfn8h6jCd3A+L9cK3p2PS2kwzIgC5oW743 wsjIM2B8sQZq14eSmNE5NP1y9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCW7Aeu8 4UZVxdLqbdGtCw3lakaUMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtlcbHcGAq1lB94hOOj9l+dzbl0htTEl3ERzuA+q8iw75BDVq3QVoC IjujlTkd9bMYQ4FCeUsK4yOjBpkjqpNGuvIVS08AX3tvtuKimEmuzyuE2kJL27aM HHZZKMjBR6AuMitkYNtdD2NWTTQk8Qv3tN8ICGDxNCtQXJ8QoMPQZgfVYZ9U8A+x 8thkqy686J/M2HGjf6Wvl0TqZSGnH4IyyWUfgJfQEHI7SJpI++wtF1aeeU63QqpT yZdCtsPMDmyaE9SlAVoorx6/ohutV08Nj8sMfX8H/TYlZW92wRifI9A3DTViM5vt uy2r9yhi6MOoKb+9cR2r8g0DcVEBk7K2 -----END CERTIFICATE-----Generated at Sat May 31 17:01:20 2025 by rpki-client