$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft File: JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft (raw, json) Hash identifier: Cio6Bq+rKO9S73lvPeYL5pGAZHAa7G+kSedQHD74O9w= Subject key identifier: 39:E3:2C:B7:D8:29:76:72:9E:C7:97:BA:94:F1:B8:FB:9F:42:22:E4 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 24F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft Manifest number: 24DD Signing time: Fri 30 May 2025 15:55:49 +0000 Manifest this update: Fri 30 May 2025 15:55:48 +0000 Manifest next update: Fri 06 Jun 2025 15:55:48 +0000 Files and hashes: 1: JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl (hash: qfJFNnvYY2QMbxx3wQxwrYe8sPpgvK/YZ3NLOQqOwbY=) 2: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (hash: UuPwuIeTjohMOX9eFmpeIez6sJHzI9RwlcD5tmgLAN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9458 (0x24f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: May 30 15:55:48 2025 GMT Not After : Jun 6 15:55:48 2025 GMT Subject: CN=6839d504-c7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:ff:73:ec:d7:27:dc:53:7a:73:b1:49:f8: 83:f9:2b:7c:b7:fa:d4:b3:90:9e:f6:a4:3c:e4:cd: 79:dc:99:71:8d:a3:f9:03:15:92:b9:56:96:db:ab: c5:0e:78:63:56:3a:bc:33:63:a6:5e:4b:1c:a2:48: 5a:e4:b6:a6:0f:63:5b:4c:15:16:49:2d:c6:75:6e: d9:00:9e:d2:c4:2c:45:ad:1e:dd:8d:ad:bb:2c:be: 2c:3b:cd:cc:41:49:5b:a4:fa:99:03:b9:83:4d:17: b7:dd:bc:8c:5d:22:7e:bf:58:f9:1a:c6:f4:db:89: 06:46:83:3e:ff:b2:e0:b6:5f:46:a1:a9:e6:a6:9e: fc:ff:2f:fa:f8:22:6e:90:e6:91:d7:85:b7:ce:5b: 9e:a6:73:d9:9c:eb:f1:97:07:77:67:a5:cc:81:be: 61:83:82:1c:23:b9:a8:63:fe:e0:da:7f:3b:62:c3: 66:b4:79:0a:17:cc:6a:15:43:3a:b5:3d:4a:f5:04: 0f:f1:1c:82:65:5f:17:3e:1e:60:fd:48:cf:1d:d0: c9:11:34:85:87:78:39:37:5e:42:79:24:9b:7f:9e: 70:9a:26:96:53:87:10:8d:8c:f8:67:29:b0:f3:54: 9c:3e:35:f9:b6:22:74:17:cc:17:bf:5f:a8:b7:8c: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E3:2C:B7:D8:29:76:72:9E:C7:97:BA:94:F1:B8:FB:9F:42:22:E4 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cc:5e:d9:f1:5f:c7:70:8b:2c:07:c0:b9:07:b4:92:7c:62: 2f:43:35:1f:14:a1:e6:bb:1f:9c:b3:24:dc:ee:fe:3f:f6:4f: c4:b2:39:43:01:96:fb:91:16:98:68:ca:8a:4c:36:d4:13:9e: ce:62:47:81:a4:ef:8b:c8:1c:5e:84:db:88:d2:e5:e4:0c:b1: 2c:1d:62:af:a5:b1:1d:d7:35:77:20:25:a7:9c:0a:d9:e9:81: a4:38:6f:5c:9d:95:62:84:8b:9f:3e:9d:27:b8:50:11:44:1f: d7:75:53:8b:df:c9:a1:d7:07:9e:bf:a5:36:5e:dc:53:7a:63: 54:92:48:22:c7:31:6d:bb:e2:eb:af:05:24:6e:f8:eb:0f:48: 8d:f7:8e:4e:f5:ca:46:47:84:91:b8:ad:24:5f:73:5b:12:0d: 5d:57:7a:48:9a:22:75:d4:3f:fd:ee:e8:4e:3e:d7:1f:f7:e8: e1:b8:9c:43:86:b0:bf:ea:13:cd:bf:22:33:f9:17:05:38:d0: 7c:1a:09:57:63:8a:85:3a:b2:45:08:0c:c3:dd:7f:d0:0e:55: 63:00:d7:e7:9b:87:d1:b0:2b:9f:f1:03:64:d8:60:a9:e6:8a: ec:c1:b1:75:be:89:fa:f3:17:84:58:f2:d8:d9:44:ac:cf:bc: 97:5f:df:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjUwNTMwMTU1NTQ4WhcNMjUwNjA2MTU1NTQ4WjAYMRYwFAYD VQQDEw02ODM5ZDUwNC1jN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgP/c+zXJ9xTenOxSfiD+St8t/rUs5Ce9qQ85M153JlxjaP5AxWSuVaW26vF DnhjVjq8M2OmXkscokha5LamD2NbTBUWSS3GdW7ZAJ7SxCxFrR7dja27LL4sO83M QUlbpPqZA7mDTRe33byMXSJ+v1j5Gsb024kGRoM+/7Lgtl9Goanmpp78/y/6+CJu kOaR14W3zluepnPZnOvxlwd3Z6XMgb5hg4IcI7moY/7g2n87YsNmtHkKF8xqFUM6 tT1K9QQP8RyCZV8XPh5g/UjPHdDJETSFh3g5N15CeSSbf55wmiaWU4cQjYz4Zymw 81ScPjX5tiJ0F8wXv1+ot4xyAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnjLLfY KXZynseXupTxuPufQiLkMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUEwRi8yMjc3NDI1MjM1QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9V VkhJRHZRVVdqTU5rblZaTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGzF7Z8V/HcIssB8C5B7SSfGIvQzUfFKHmux+csyTc7v4/9k/EsjlD AZb7kRaYaMqKTDbUE57OYkeBpO+LyBxehNuI0uXkDLEsHWKvpbEd1zV3ICWnnArZ 6YGkOG9cnZVihIufPp0nuFARRB/XdVOL38mh1weev6U2XtxTemNUkkgixzFtu+Lr rwUkbvjrD0iN945O9cpGR4SRuK0kX3NbEg1dV3pImiJ11D/97uhOPtcf9+jhuJxD hrC/6hPNvyIz+RcFONB8GglXY4qFOrJFCAzD3X/QDlVjANfnm4fRsCuf8QNk2GCp 5orswbF1von68xeEWPLY2USsz7yXX9+s -----END CERTIFICATE-----Generated at Sat May 31 17:02:16 2025 by rpki-client