$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: SovH7sITmVEerdUTjO6FAKGOkyuY2iRAxTXc87U4/7U= Subject key identifier: 3F:46:53:FE:9F:DB:79:68:68:42:29:4F:28:B1:AE:E6:9E:A6:FB:FF Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 04F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 04ED Signing time: Mon 12 May 2025 23:31:56 +0000 Manifest this update: Mon 12 May 2025 23:31:55 +0000 Manifest next update: Mon 19 May 2025 23:31:55 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: eEHLzWBI9gw9JN9lUI+/eC3TSRaC0zHJQcapyV0EFAQ=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: May 12 23:31:55 2025 GMT Not After : May 19 23:31:55 2025 GMT Subject: CN=682284eb-9ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:4f:8b:a6:f9:c3:5b:58:7d:7e:1f:c3:48: 62:11:ef:a6:3e:29:da:67:2f:49:9e:cd:05:e5:97: 51:95:c0:9d:fb:44:ed:7d:87:0c:32:1e:0b:ef:60: dc:fb:2f:53:ba:3a:02:5f:c4:3b:99:da:15:67:49: fd:07:10:83:1a:d3:ac:87:25:d9:bf:23:f4:60:93: 33:a7:3a:6e:21:17:1e:2e:68:37:29:c2:15:f5:1b: 2a:50:53:db:99:c8:3e:39:05:53:74:93:4d:ae:0a: dd:9e:d7:2d:b7:55:62:f4:91:30:5f:f4:49:44:80: 78:c1:df:7a:49:fa:b8:87:f5:64:42:4c:c6:9a:3c: 6e:2b:5f:99:05:cf:50:84:71:d7:e4:ee:b2:9f:aa: 24:5a:b3:69:e9:60:cc:ad:63:78:9c:d2:66:10:c2: e1:53:ff:b0:2c:fa:f1:bb:d0:f2:01:74:c9:93:11: c4:aa:e0:4c:7d:1e:34:b2:61:ec:6c:67:2d:7b:4b: 7b:9a:2a:77:a1:04:3b:b4:50:ee:ed:d5:5f:3c:71: b4:08:15:c0:60:78:d2:ef:eb:78:59:96:39:8a:3e: 08:56:87:a9:90:52:ac:fc:e1:a9:95:4b:19:d8:fd: d2:a7:1f:dc:ed:e3:8f:03:bb:e9:67:ba:bf:db:23: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:53:FE:9F:DB:79:68:68:42:29:4F:28:B1:AE:E6:9E:A6:FB:FF X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a4:11:b7:9d:2f:9d:53:58:8a:74:33:58:a8:d8:34:f0:95: 3f:0f:c3:35:3c:50:36:2a:0b:8b:e0:60:61:81:50:28:53:24: 9f:64:a8:5c:de:42:df:5f:ce:5e:24:14:e2:e2:aa:88:fb:5d: ec:3f:09:2f:41:69:49:bb:8b:a8:49:41:f7:84:60:91:66:56: 69:29:b4:66:7d:30:a8:e2:0c:38:63:8e:dc:a8:86:e6:60:50: 57:02:d8:fb:7d:e3:69:42:ee:5d:52:5e:49:43:4d:5d:75:81: 3b:ce:f8:be:6d:3d:af:c4:ed:ad:f9:e0:83:33:61:e7:bd:16: a7:87:0f:2c:f7:f0:60:03:a7:a8:84:46:94:8a:95:17:92:83: fe:d3:11:b8:1f:67:f3:31:2f:99:a7:ff:a1:c9:8d:72:8c:00: 34:dd:a7:ba:45:c4:60:d4:13:71:39:13:78:41:96:fe:91:d1: 52:50:62:15:05:5a:2c:0f:c1:9a:45:70:b9:3d:a5:46:3a:ce: 90:37:0e:43:54:e3:80:0b:81:e8:48:dd:98:06:f8:81:b2:fa: 26:6a:06:69:e1:b0:5c:f9:26:a5:03:89:3c:ad:c3:09:b1:24: 7f:c0:2c:6b:c6:3e:e7:d9:f4:21:1d:9e:b0:de:49:c0:52:33: 17:61:0c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUwNTEyMjMzMTU1WhcNMjUwNTE5MjMzMTU1WjAYMRYwFAYD VQQDEw02ODIyODRlYi05ZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4BPi6b5w1tYfX4fw0hiEe+mPinaZy9Jns0F5ZdRlcCd+0TtfYcMMh4L72Dc +y9TujoCX8Q7mdoVZ0n9BxCDGtOshyXZvyP0YJMzpzpuIRceLmg3KcIV9RsqUFPb mcg+OQVTdJNNrgrdntctt1Vi9JEwX/RJRIB4wd96Sfq4h/VkQkzGmjxuK1+ZBc9Q hHHX5O6yn6okWrNp6WDMrWN4nNJmEMLhU/+wLPrxu9DyAXTJkxHEquBMfR40smHs bGcte0t7mip3oQQ7tFDu7dVfPHG0CBXAYHjS7+t4WZY5ij4IVoepkFKs/OGplUsZ 2P3Spx/c7eOPA7vpZ7q/2yP6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9GU/6f 23loaEIpTyixruaepvv/MB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5pBG3nS+dU1iKdDNYqNg08JU/D8M1PFA2KguL4GBhgVAoUySfZKhc 3kLfX85eJBTi4qqI+13sPwkvQWlJu4uoSUH3hGCRZlZpKbRmfTCo4gw4Y47cqIbm YFBXAtj7feNpQu5dUl5JQ01ddYE7zvi+bT2vxO2t+eCDM2HnvRanhw8s9/BgA6eo hEaUipUXkoP+0xG4H2fzMS+Zp/+hyY1yjAA03ae6RcRg1BNxORN4QZb+kdFSUGIV BVosD8GaRXC5PaVGOs6QNw5DVOOAC4HoSN2YBviBsvomagZp4bBc+SalA4k8rcMJ sSR/wCxrxj7n2fQhHZ6w3knAUjMXYQwK -----END CERTIFICATE-----Generated at Thu May 15 00:24:37 2025 by rpki-client