$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: QQahK7tQnQyEpsQcfHhmIK2CvtLPRABYy0iFvcl/53s= Subject key identifier: 71:7C:9D:CC:98:9F:CC:44:32:F9:E9:BE:FE:9F:F4:31:81:43:C0:5E Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 04FE Signing time: Mon 12 May 2025 23:28:39 +0000 Manifest this update: Mon 12 May 2025 23:28:38 +0000 Manifest next update: Mon 19 May 2025 23:28:38 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: uF9tEXYJRFD3YJFftVoF/kOwYEDcd6VbKvt/ono513g=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Validity Not Before: May 12 23:28:38 2025 GMT Not After : May 19 23:28:38 2025 GMT Subject: CN=68228426-9166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:46:d2:06:08:7c:b4:64:b2:7e:2d:34:7b:9f: ed:21:54:11:bc:cf:34:0b:a3:b4:ac:81:87:bf:03: 1d:c2:96:26:72:7b:7e:75:50:17:4a:e7:60:ce:99: 2d:ad:28:bb:b0:75:a3:f2:a9:c6:21:00:cb:32:d2: 9d:88:51:22:b8:4d:2a:28:73:78:c3:16:a6:41:b1: 0a:83:bf:21:6e:e2:fd:19:09:b4:0f:10:5b:43:7b: 4d:81:16:ec:63:54:e9:21:8d:df:05:b6:20:28:37: c6:ba:70:93:da:40:cd:91:ef:9c:47:9e:00:88:91: 48:62:c4:45:a2:57:ec:14:56:ab:67:b5:17:14:82: cc:a9:9c:2a:9a:8d:5c:b9:bc:03:69:93:b4:f1:74: 99:99:86:b4:e5:73:39:35:b8:eb:3a:be:0b:01:bf: de:f2:1d:2b:37:14:12:bf:c3:9d:a7:9e:1e:97:b2: 6b:94:b5:64:74:d4:b0:7b:c6:81:19:91:c3:c8:69: 74:07:4d:a6:47:ca:20:1e:d9:74:3f:84:d1:ed:c4: 02:93:49:39:f8:4f:d5:a3:3b:cf:44:77:f8:9f:d6: 3e:0a:41:c0:86:ec:3a:0f:6d:a8:d3:69:2f:cc:e8: 56:ec:0f:72:40:e4:39:73:61:9e:14:ea:ff:d7:72: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7C:9D:CC:98:9F:CC:44:32:F9:E9:BE:FE:9F:F4:31:81:43:C0:5E X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:8d:b2:46:32:1a:af:87:e5:fc:1e:88:c5:36:e9:08:60:0d: e3:da:a1:85:77:a7:5c:7d:31:5c:00:e1:25:de:2c:9e:4a:73: b8:97:fb:5a:3e:a0:13:28:a2:3a:0b:8a:71:59:85:42:f7:f2: 85:74:47:f4:8e:ee:1a:02:98:35:53:ee:b3:5e:b1:a2:67:ce: 4a:65:86:d4:75:43:07:94:e0:6f:04:ec:08:4f:64:9c:b7:66: 43:0f:e3:38:2e:ca:e5:41:8a:e9:c1:9e:3a:fb:34:d6:11:29: 3c:60:d4:09:19:ff:0d:64:4f:59:8d:44:44:d0:02:6d:99:8d: 4c:9e:64:3e:61:bf:d9:b5:3e:75:f1:62:3c:0d:f9:ba:63:e0: 5e:84:8c:1a:e7:8c:97:6f:78:a1:27:af:37:54:76:6e:ab:8f: ec:ac:c3:af:5f:d0:2e:92:10:29:47:33:24:3f:91:67:fe:ef: d1:50:c6:24:0e:2a:5b:0d:b0:67:96:0a:cc:f4:dd:ec:d7:7f: 5e:44:ff:16:ca:19:7e:f8:8a:23:31:fe:1b:f9:4c:8a:6e:dc: 3e:04:e6:eb:15:ec:be:16:fb:aa:f3:bd:9a:d9:3c:e0:ef:34: 6b:87:40:3b:9a:5c:f6:a6:bd:18:67:82:27:21:a5:e4:52:66: dd:6a:03:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjUwNTEyMjMyODM4WhcNMjUwNTE5MjMyODM4WjAYMRYwFAYD VQQDEw02ODIyODQyNi05MTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kbSBgh8tGSyfi00e5/tIVQRvM80C6O0rIGHvwMdwpYmcnt+dVAXSudgzpkt rSi7sHWj8qnGIQDLMtKdiFEiuE0qKHN4wxamQbEKg78hbuL9GQm0DxBbQ3tNgRbs Y1TpIY3fBbYgKDfGunCT2kDNke+cR54AiJFIYsRFolfsFFarZ7UXFILMqZwqmo1c ubwDaZO08XSZmYa05XM5NbjrOr4LAb/e8h0rNxQSv8Odp54el7JrlLVkdNSwe8aB GZHDyGl0B02mR8ogHtl0P4TR7cQCk0k5+E/VozvPRHf4n9Y+CkHAhuw6D22o02kv zOhW7A9yQOQ5c2GeFOr/13IbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF8ncyY n8xEMvnpvv6f9DGBQ8BeMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDjjbJGMhqvh+X8HojFNukIYA3j2qGFd6dcfTFcAOEl3iyeSnO4l/ta PqATKKI6C4pxWYVC9/KFdEf0ju4aApg1U+6zXrGiZ85KZYbUdUMHlOBvBOwIT2Sc t2ZDD+M4LsrlQYrpwZ46+zTWESk8YNQJGf8NZE9ZjURE0AJtmY1MnmQ+Yb/ZtT51 8WI8Dfm6Y+BehIwa54yXb3ihJ683VHZuq4/srMOvX9AukhApRzMkP5Fn/u/RUMYk DipbDbBnlgrM9N3s139eRP8Wyhl++IojMf4b+UyKbtw+BObrFey+Fvuq872a2Tzg 7zRrh0A7mlz2pr0YZ4InIaXkUmbdagNS -----END CERTIFICATE-----Generated at Wed May 14 11:53:32 2025 by rpki-client