$ rpki-client -vvf rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft File: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft (raw, json) Hash identifier: OagwA34efc0QU/2oG2Fx3uAUNTya/SCJzF7rv0w041o= Subject key identifier: 76:DE:37:47:6D:C4:94:FD:52:1E:D8:EB:C8:C5:E1:57:AC:0E:7C:E8 Authority key identifier: AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 Certificate issuer: /CN=A915EB0B/serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft Manifest number: 052B Signing time: Sat 10 May 2025 23:06:44 +0000 Manifest this update: Sat 10 May 2025 23:06:43 +0000 Manifest next update: Sat 17 May 2025 23:06:43 +0000 Files and hashes: 1: rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl (hash: bEWaqcU/X5P4Hd28IYWcDjddBzIa5ZDnbQddd4WUrYY=) 2: D7AD2B6AF90311EBBB71C076C4F9AE02.roa (hash: VL9J48E6mKHF8lb44rgcasmZ+ef6A3tiZtXM0iIEHSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EB0B, serialNumber=AE3FA65349551660DFF48C497E8378A630B98376 Validity Not Before: May 10 23:06:43 2025 GMT Not After : May 17 23:06:43 2025 GMT Subject: CN=681fdc03-2249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:09:3b:0f:ce:5d:0c:a0:f4:4b:8b:31:d5: 95:4c:84:a1:f7:b1:7e:82:df:69:bc:f2:c0:87:74: d1:fa:97:67:2b:87:34:99:36:71:94:b9:31:89:16: c4:67:9b:1d:ec:9d:e9:5e:ff:46:17:b3:af:5c:b9: 8d:64:26:c1:49:52:01:22:a7:11:a7:16:9d:c0:12: 08:48:5d:55:15:0c:5f:7f:79:d4:1f:d5:69:4a:37: 15:aa:9e:17:3f:63:5f:8c:6c:da:bc:84:63:a5:56: 35:3b:d6:82:c9:65:ff:28:6b:3a:bb:31:19:30:d8: 44:00:47:40:62:fe:51:1a:10:09:50:db:6d:0e:74: d7:2d:71:0c:d5:0f:40:b0:43:44:ba:50:ad:70:3f: f4:4b:62:b9:d5:54:12:c7:a8:c3:28:a4:35:f9:6c: ca:d6:8e:f9:c3:be:47:f2:a3:11:92:f5:73:fb:db: 28:e0:29:04:a4:0a:af:3f:28:9a:e0:30:7a:08:a3: 6c:79:9d:3f:c6:1d:82:67:1c:5f:32:93:5c:3c:48: 15:82:ef:58:34:a0:d2:8a:9b:c3:44:0d:9e:88:bc: 1d:0b:2e:ad:50:ae:8c:f7:df:d1:7e:93:20:9d:f5: 17:45:88:5c:eb:73:ea:44:7a:62:b5:97:7b:be:89: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DE:37:47:6D:C4:94:FD:52:1E:D8:EB:C8:C5:E1:57:AC:0E:7C:E8 X509v3 Authority Key Identifier: keyid:AE:3F:A6:53:49:55:16:60:DF:F4:8C:49:7E:83:78:A6:30:B9:83:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EB0B/3A4C4606F90011EBBA19D528C4F9AE02/rj-mU0lVFmDf9IxJfoN4pjC5g3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ca:e4:53:11:18:8b:06:5f:61:10:33:30:e8:27:27:79:69: 09:3e:ef:34:32:bc:7c:18:b0:e2:83:ae:3d:cd:c9:5e:7d:90: 22:8b:b2:0d:55:74:89:c0:61:24:7c:a8:db:52:83:2c:58:43: 78:de:c9:eb:2d:5a:e3:be:09:6a:b1:9f:13:fb:ca:92:5a:6e: 88:ed:bc:01:70:67:3a:a1:98:2a:b3:3b:73:7a:f6:a1:40:4f: a4:73:f9:ab:60:2c:7c:cf:8e:f6:00:b7:12:e2:2a:72:4e:ac: d5:a5:e6:4f:4f:a7:a8:78:09:f2:c3:85:9d:db:2d:16:d3:82: 67:6e:d9:f6:48:f2:10:95:01:57:3f:66:5c:f1:a6:09:20:5b: 58:03:4f:c3:ee:e8:b8:e5:66:76:42:24:8b:37:b7:0b:72:7d: 40:b6:39:26:91:37:e5:d0:c5:ec:fc:fb:04:f3:aa:0b:db:68: d5:ee:b5:f9:d7:f3:a5:86:da:55:90:8d:92:47:71:0e:95:d9: 8e:af:a7:b7:df:6f:a4:c0:f1:65:eb:27:3c:f3:07:67:2f:ed: 69:98:58:ba:56:6b:e2:3b:7d:69:29:70:03:ab:86:4d:36:98: 96:b5:d7:fc:de:71:79:de:99:d7:b6:9c:a8:e7:7d:4a:de:82: fb:6e:5e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCMEIxMTAvBgNVBAUTKEFFM0ZBNjUzNDk1NTE2NjBERkY0OEM0OTdFODM3OEE2 MzBCOTgzNzYwHhcNMjUwNTEwMjMwNjQzWhcNMjUwNTE3MjMwNjQzWjAYMRYwFAYD VQQDEw02ODFmZGMwMy0yMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSoJOw/OXQyg9EuLMdWVTISh97F+gt9pvPLAh3TR+pdnK4c0mTZxlLkxiRbE Z5sd7J3pXv9GF7OvXLmNZCbBSVIBIqcRpxadwBIISF1VFQxff3nUH9VpSjcVqp4X P2NfjGzavIRjpVY1O9aCyWX/KGs6uzEZMNhEAEdAYv5RGhAJUNttDnTXLXEM1Q9A sENEulCtcD/0S2K51VQSx6jDKKQ1+WzK1o75w75H8qMRkvVz+9so4CkEpAqvPyia 4DB6CKNseZ0/xh2CZxxfMpNcPEgVgu9YNKDSipvDRA2eiLwdCy6tUK6M99/RfpMg nfUXRYhc63PqRHpitZd7vokXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbeN0dt xJT9Uh7Y68jF4VesDnzoMB8GA1UdIwQYMBaAFK4/plNJVRZg3/SMSX6DeKYwuYN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUIwQi8zQTRDNDYwNkY5 MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZtRGY5SXhKZm9ONHBqQzVn M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JqLW1VMGxWRm1EZjlJeEpmb040cGpDNWczWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUIwQi8zQTRDNDYwNkY5MDAxMUVCQkExOUQ1MjhDNEY5QUUwMi9yai1tVTBsVkZt RGY5SXhKZm9ONHBqQzVnM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmyuRTERiLBl9hEDMw6CcneWkJPu80Mrx8GLDig649zclefZAii7IN VXSJwGEkfKjbUoMsWEN43snrLVrjvglqsZ8T+8qSWm6I7bwBcGc6oZgqsztzevah QE+kc/mrYCx8z472ALcS4ipyTqzVpeZPT6eoeAnyw4Wd2y0W04Jnbtn2SPIQlQFX P2Zc8aYJIFtYA0/D7ui45WZ2QiSLN7cLcn1AtjkmkTfl0MXs/PsE86oL22jV7rX5 1/OlhtpVkI2SR3EOldmOr6e332+kwPFl6yc88wdnL+1pmFi6VmviO31pKXADq4ZN NpiWtdf83nF53pnXtpyo531K3oL7bl5T -----END CERTIFICATE-----Generated at Mon May 12 12:39:14 2025 by rpki-client