$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: KUTVHRTPifCnO334sbD+mLw3Xokm3z/5u12TD7WcuVY= Subject key identifier: FC:F3:13:23:9B:D2:3B:AA:27:0F:89:42:34:77:5B:86:D8:C3:93:73 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A11 Signing time: Thu 08 May 2025 19:46:40 +0000 Manifest this update: Thu 08 May 2025 19:46:39 +0000 Manifest next update: Thu 15 May 2025 19:46:39 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: GlX2GRvHpSXxWpLQWjYDrrdq1lhji7qTK3f8K1kk8Go=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: m/p8bbAHJM24HdYiY9DoNYUeIyo2VNJNxbaHYIEgDWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2590 (0xa1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Validity Not Before: May 8 19:46:39 2025 GMT Not After : May 15 19:46:39 2025 GMT Subject: CN=681d0a1f-766d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:b4:6f:6f:18:17:e9:bc:f8:4f:40:73:30: 32:ca:9e:cb:4b:47:ef:7d:cb:91:6b:00:28:54:08: 80:dd:77:cf:93:12:5b:ba:4d:f0:07:bd:bb:87:51: ed:86:3a:3f:3c:6d:04:85:d0:a4:e2:b7:7d:8b:c5: f6:b5:35:23:4f:40:d9:83:81:5f:3f:76:22:ab:48: 40:17:0b:96:f2:17:6c:3d:31:57:42:8e:e0:7c:78: 88:4b:fe:f6:0b:9f:22:f5:55:9b:3a:90:c2:ab:66: 93:a2:bb:d7:a6:51:db:ad:4b:e6:a7:35:76:c5:1d: a8:08:9e:28:4c:03:b2:e3:62:76:89:03:50:2a:18: 7a:20:2a:3d:f9:93:45:67:31:1a:f3:a0:46:c3:2b: 9e:7f:8e:24:46:70:c8:17:96:a6:02:bd:bb:0a:06: 9d:ef:6c:73:e5:83:57:f8:e5:3c:1b:9d:af:ab:28: b2:7f:42:b3:38:ce:7b:b2:87:bf:c0:99:ee:4b:bf: d4:e5:8d:02:44:1a:73:cc:65:4d:45:05:94:a8:5f: c5:36:da:7a:d4:a5:27:cf:6d:b0:6a:56:b2:a2:9e: 18:8c:28:6d:9b:5e:03:99:48:6a:63:a8:99:13:bd: f3:3e:80:69:a1:db:2a:f0:c3:1a:88:12:85:d1:84: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F3:13:23:9B:D2:3B:AA:27:0F:89:42:34:77:5B:86:D8:C3:93:73 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4e:48:24:ef:f7:f8:2c:62:89:f5:19:d6:43:ed:83:f6:63: 1d:af:03:6e:b4:00:1f:b0:cf:9a:fa:38:94:26:ff:09:52:ec: a1:d8:95:37:ef:ed:f9:0e:3c:e6:9a:5e:9b:7e:cd:cf:19:53: 52:43:00:fb:07:0d:13:24:cf:a3:11:4b:c7:0d:55:c3:b5:a4: 4c:dc:50:64:9a:cc:d1:93:67:83:b1:ef:30:bc:e3:c7:2e:f2: ad:2c:fa:3d:e5:fb:4b:73:be:6e:db:90:8b:15:82:89:f8:ae: 4f:ba:d6:4f:23:74:22:a0:fe:bb:3c:eb:1a:1d:21:c2:13:25: 1e:ad:16:4b:54:f0:b9:7c:4d:83:5d:ba:72:cf:f4:fa:ef:c7: 24:4a:4c:52:06:e4:6c:d2:f6:29:38:ae:10:cc:0a:77:1f:ee: e7:8d:2c:b8:80:eb:f7:22:91:e8:23:78:3b:c0:a5:34:b2:67: 14:5c:15:6d:d6:b2:20:46:3d:74:8f:8a:e4:48:ed:4c:b3:2d: 3f:94:4f:4c:20:8c:09:8d:18:dc:d6:17:1d:20:c4:48:22:a2: 7b:e6:68:b7:bc:9c:b8:84:fe:3a:4b:c2:78:f2:63:6d:25:65: 90:39:ce:45:6b:d2:54:fa:0a:db:e9:7d:1d:73:c6:51:b1:e1: b6:cc:07:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwNTA4MTk0NjM5WhcNMjUwNTE1MTk0NjM5WjAYMRYwFAYD VQQDEw02ODFkMGExZi03NjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6C0b28YF+m8+E9AczAyyp7LS0fvfcuRawAoVAiA3XfPkxJbuk3wB727h1Ht hjo/PG0EhdCk4rd9i8X2tTUjT0DZg4FfP3Yiq0hAFwuW8hdsPTFXQo7gfHiIS/72 C58i9VWbOpDCq2aTorvXplHbrUvmpzV2xR2oCJ4oTAOy42J2iQNQKhh6ICo9+ZNF ZzEa86BGwyuef44kRnDIF5amAr27Cgad72xz5YNX+OU8G52vqyiyf0KzOM57soe/ wJnuS7/U5Y0CRBpzzGVNRQWUqF/FNtp61KUnz22walayop4YjChtm14DmUhqY6iZ E73zPoBpodsq8MMaiBKF0YRPJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzzEyOb 0juqJw+JQjR3W4bYw5NzMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Tkgk7/f4LGKJ9RnWQ+2D9mMdrwNutAAfsM+a+jiUJv8JUuyh2JU3 7+35Djzmml6bfs3PGVNSQwD7Bw0TJM+jEUvHDVXDtaRM3FBkmszRk2eDse8wvOPH LvKtLPo95ftLc75u25CLFYKJ+K5PutZPI3QioP67POsaHSHCEyUerRZLVPC5fE2D Xbpyz/T678ckSkxSBuRs0vYpOK4QzAp3H+7njSy4gOv3IpHoI3g7wKU0smcUXBVt 1rIgRj10j4rkSO1Msy0/lE9MIIwJjRjc1hcdIMRIIqJ75mi3vJy4hP46S8J48mNt JWWQOc5Fa9JU+grb6X0dc8ZRseG2zAft -----END CERTIFICATE-----Generated at Sat May 10 10:16:43 2025 by rpki-client