$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: xxXIz5qCkvcZBJfNWqkVQul3yf0Q+oLy8MuHEnZjqqY= Subject key identifier: 27:2E:54:27:BE:85:46:DC:CB:D2:27:2C:65:7D:F1:EA:99:B9:8A:6F Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: F7 Signing time: Mon 05 May 2025 04:08:56 +0000 Manifest this update: Mon 05 May 2025 04:08:56 +0000 Manifest next update: Mon 12 May 2025 04:08:56 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: pOC1DNIODBiIVY0kaimA4A8BODiJzyfdXRtPZC3D5TA=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: May 5 04:08:56 2025 GMT Not After : May 12 04:08:56 2025 GMT Subject: CN=681839d8-2aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:b2:4e:1f:55:77:9c:7b:31:7f:41:53:a6: 9f:c4:33:34:df:8b:f2:37:60:87:43:94:90:1b:cc: c5:68:64:cd:cf:73:4f:2c:b7:cd:3f:01:9f:ef:36: 7c:bc:1c:dd:45:7a:a0:0a:c7:7b:15:42:3e:d9:c9: 7a:ed:5a:ac:20:68:ac:47:16:63:66:eb:ec:65:6e: 19:37:9f:5d:6b:02:0b:f5:d2:f9:21:73:12:3c:6d: 27:7c:c1:ba:d4:c8:9f:17:f9:bb:fe:ca:f8:fb:25: 13:a0:1e:62:4b:07:6f:63:02:8c:4b:ac:70:a5:79: 47:a3:06:5d:c7:d9:d4:58:6e:00:86:72:f1:16:87: b1:a5:8c:aa:b9:6a:b8:3b:61:72:b5:a7:7a:56:2c: 02:9a:e9:a3:d8:50:ad:f8:ae:e9:b2:0b:ea:02:5f: 0d:54:ab:da:f4:c0:86:0a:00:7d:c4:c9:e2:e7:09: 61:64:e2:a7:6e:8d:a1:c1:8e:47:0c:65:16:51:52: b7:a4:d8:ad:d9:c5:a1:24:f5:8f:fd:8a:a3:d5:ec: 0c:c4:61:29:c2:25:cd:ea:fd:1e:06:7e:a5:b0:7c: 3f:c6:48:10:5d:9c:aa:b5:2d:d7:07:14:7c:92:d0: f4:7e:e0:e6:b2:c5:23:95:7c:51:01:9b:3b:72:e3: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:54:27:BE:85:46:DC:CB:D2:27:2C:65:7D:F1:EA:99:B9:8A:6F X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c5:49:61:1b:5f:d9:9e:2b:37:a0:97:af:c7:51:5d:a1:c2: 1d:55:cc:20:cf:c6:6c:e4:38:17:da:23:14:8e:15:64:0c:9c: 92:08:31:05:45:69:83:c8:a4:cb:72:76:ce:e0:74:e1:5b:c6: da:05:29:bb:eb:da:43:88:1a:c3:de:52:c4:dd:64:cc:5f:a1: e0:17:6e:67:d8:70:98:68:22:22:46:45:8d:d8:73:bf:df:f9: dd:06:e8:a1:39:42:5d:33:c6:a8:c8:5f:2e:87:ff:57:87:7d: 05:01:89:7c:41:2c:a9:ae:d6:c8:d6:e2:90:4f:bb:e4:a9:dc: 93:d2:65:a1:02:c0:55:96:6f:94:da:b6:e2:e5:58:c8:9e:08: aa:11:35:e8:10:b2:cb:91:df:1a:72:21:3c:99:73:be:00:fd: 00:08:3a:be:80:a7:39:1c:2a:d9:c7:89:ef:eb:fe:e9:6f:47: e9:87:49:b0:4e:b6:1b:bc:36:21:97:a8:66:d0:2d:3b:29:0f: 99:57:40:29:96:7a:29:af:9a:60:e1:89:51:d5:30:93:a9:a2: ce:34:7b:e6:9d:79:17:e6:39:e9:29:64:dc:23:50:ad:8e:1d: ff:aa:2c:99:fc:87:3c:dc:a3:c6:9d:06:80:63:17:33:3b:18: 7c:dd:64:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwNTA1MDQwODU2WhcNMjUwNTEyMDQwODU2WjAYMRYwFAYD VQQDEw02ODE4MzlkOC0yYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34CyTh9Vd5x7MX9BU6afxDM034vyN2CHQ5SQG8zFaGTNz3NPLLfNPwGf7zZ8 vBzdRXqgCsd7FUI+2cl67VqsIGisRxZjZuvsZW4ZN59dawIL9dL5IXMSPG0nfMG6 1MifF/m7/sr4+yUToB5iSwdvYwKMS6xwpXlHowZdx9nUWG4AhnLxFoexpYyquWq4 O2Fytad6ViwCmumj2FCt+K7psgvqAl8NVKva9MCGCgB9xMni5wlhZOKnbo2hwY5H DGUWUVK3pNit2cWhJPWP/Yqj1ewMxGEpwiXN6v0eBn6lsHw/xkgQXZyqtS3XBxR8 ktD0fuDmssUjlXxRAZs7cuP5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcuVCe+ hUbcy9InLGV98eqZuYpvMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHxUlhG1/Znis3oJevx1FdocIdVcwgz8Zs5DgX2iMUjhVkDJySCDEF RWmDyKTLcnbO4HThW8baBSm769pDiBrD3lLE3WTMX6HgF25n2HCYaCIiRkWN2HO/ 3/ndBuihOUJdM8aoyF8uh/9Xh30FAYl8QSyprtbI1uKQT7vkqdyT0mWhAsBVlm+U 2rbi5VjIngiqETXoELLLkd8aciE8mXO+AP0ACDq+gKc5HCrZx4nv6/7pb0fph0mw TrYbvDYhl6hm0C07KQ+ZV0Aplnopr5pg4YlR1TCTqaLONHvmnXkX5jnpKWTcI1Ct jh3/qiyZ/Ic83KPGnQaAYxczOxh83WSN -----END CERTIFICATE-----Generated at Tue May 6 00:08:53 2025 by rpki-client