$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft File: jyvv1VgTCCTgHroVr4ntXdyetho.mft (raw, json) Hash identifier: XAemBTeTarc2asiaNVtQsQLzux8yJH9v06LKWUsRY3w= Subject key identifier: B0:67:E6:3F:FB:DD:97:26:18:8D:0E:A5:2F:29:C1:AD:14:60:A4:1B Authority key identifier: 8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A Certificate issuer: /CN=A914BAE3/serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Certificate serial: 0A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft Manifest number: 0A41 Signing time: Sat 10 May 2025 19:27:55 +0000 Manifest this update: Sat 10 May 2025 19:27:55 +0000 Manifest next update: Sat 17 May 2025 19:27:55 +0000 Files and hashes: 1: jyvv1VgTCCTgHroVr4ntXdyetho.crl (hash: Wi+P3Vz4Ofe0eO8w5zQRpoU6MZPEDlyocjCdiiBujqY=) 2: 86F9BD94674311EA8AB4D96BC4F9AE02.roa (hash: ISGTVPaDSy80xCA34yyD1yreZg8c/egSeWgOcnZdCwU=) 3: 986F1F9AD64711ECA2924B5FC4F9AE02.roa (hash: Wyd164MPhU473t/AoUISBoO4Aw8E8UOj0zKD275MPkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAE3, serialNumber=8F2BEFD558130824E01EBA15AF89ED5DDC9EB61A Validity Not Before: May 10 19:27:55 2025 GMT Not After : May 17 19:27:55 2025 GMT Subject: CN=681fa8bb-1d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:b7:51:32:0d:4e:ba:73:c5:d5:21:55:20: 0c:80:d1:55:e4:40:47:52:c1:8a:01:63:3c:d7:50: 48:33:1b:0e:4b:b5:3a:8b:78:22:8f:a2:bf:f3:be: 28:d6:53:58:bc:3b:0b:3a:cd:02:bc:cf:e2:7f:82: 37:1d:86:3f:55:aa:de:48:c3:1b:c0:4e:61:49:32: df:38:fb:ad:b0:e5:f3:c9:ec:00:55:e3:2a:4f:c6: b4:2d:be:c0:72:53:01:09:1d:37:d2:5b:19:82:54: 20:08:34:90:2a:61:05:9c:ef:51:9a:58:bc:af:90: 55:b2:61:08:78:6b:28:92:bf:4d:d5:26:c7:8c:ab: 24:af:a1:30:3e:f5:35:e4:c4:77:54:75:80:57:dd: ab:17:37:2a:36:68:cd:50:3b:a1:4d:64:92:aa:61: 0e:5b:d8:b6:2e:09:90:38:af:c8:0c:27:cd:85:7c: c4:bf:af:21:aa:09:89:87:1d:03:a1:20:05:94:4e: 7a:77:d0:88:63:7f:5d:51:ba:31:32:44:e0:69:63: a0:08:16:56:19:50:98:b8:aa:fa:39:76:90:30:04: 17:bd:8e:e8:81:af:ac:82:9c:d3:ba:7f:94:77:c4: 79:08:4d:13:ac:44:a3:9a:31:9a:2f:86:50:fc:cc: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:67:E6:3F:FB:DD:97:26:18:8D:0E:A5:2F:29:C1:AD:14:60:A4:1B X509v3 Authority Key Identifier: keyid:8F:2B:EF:D5:58:13:08:24:E0:1E:BA:15:AF:89:ED:5D:DC:9E:B6:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyvv1VgTCCTgHroVr4ntXdyetho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAE3/2AEB073E674211EAB01EAC69C4F9AE02/jyvv1VgTCCTgHroVr4ntXdyetho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a6:7e:d2:b5:8e:6c:82:a8:06:b9:78:6c:a4:39:14:2d:a6: 2c:65:e0:8c:01:5f:6d:ec:56:60:e8:d0:54:0e:bf:ed:b4:5b: 49:1d:59:33:b9:cb:02:19:18:42:51:b0:7e:a9:7f:eb:07:42: 91:e3:6e:96:0e:1f:06:c4:aa:9c:3d:5b:97:f5:27:b3:94:a8: 50:69:00:ce:8f:27:c1:ce:49:6a:90:cc:63:57:30:96:31:3c: 1c:e4:c9:6b:24:e8:57:92:7e:0b:b7:3b:ad:5f:84:11:f2:d4: 63:3b:70:27:eb:08:c2:4f:03:78:01:67:bf:cd:f8:81:12:c1: e1:08:12:59:96:6b:34:eb:3a:83:d5:61:a0:97:72:9a:d5:0f: 9d:d9:d4:be:87:ca:bb:1d:39:e8:6f:7a:1d:df:47:60:65:40: 37:6b:23:97:47:8e:84:65:67:52:91:31:2b:60:a5:fd:49:0b: 56:a5:39:2f:6d:83:71:1f:7f:eb:e1:7f:3e:c7:43:91:72:30: ee:7e:5a:a7:0c:df:ea:90:3e:d5:19:0e:1b:7a:e4:06:1e:7e: 06:cd:bd:e3:91:6a:d6:4d:55:30:7b:2e:3f:44:75:39:cd:cc: 4e:6e:19:55:0b:1e:73:00:90:49:1b:26:a7:e8:c5:91:ce:7c: ac:2b:7d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJBRTMxMTAvBgNVBAUTKDhGMkJFRkQ1NTgxMzA4MjRFMDFFQkExNUFGODlFRDVE REM5RUI2MUEwHhcNMjUwNTEwMTkyNzU1WhcNMjUwNTE3MTkyNzU1WjAYMRYwFAYD VQQDEw02ODFmYThiYi0xZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4W3UTINTrpzxdUhVSAMgNFV5EBHUsGKAWM811BIMxsOS7U6i3gij6K/874o 1lNYvDsLOs0CvM/if4I3HYY/VareSMMbwE5hSTLfOPutsOXzyewAVeMqT8a0Lb7A clMBCR030lsZglQgCDSQKmEFnO9Rmli8r5BVsmEIeGsokr9N1SbHjKskr6EwPvU1 5MR3VHWAV92rFzcqNmjNUDuhTWSSqmEOW9i2LgmQOK/IDCfNhXzEv68hqgmJhx0D oSAFlE56d9CIY39dUboxMkTgaWOgCBZWGVCYuKr6OXaQMAQXvY7oga+sgpzTun+U d8R5CE0TrESjmjGaL4ZQ/MyF6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBn5j/7 3ZcmGI0OpS8pwa0UYKQbMB8GA1UdIwQYMBaAFI8r79VYEwgk4B66Fa+J7V3cnrYa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkFFMy8yQUVCMDczRTY3 NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVENDVGdIcm9WcjRudFhkeWV0 aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p5dnYxVmdUQ0NUZ0hyb1ZyNG50WGR5ZXRoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkFFMy8yQUVCMDczRTY3NDIxMUVBQjAxRUFDNjlDNEY5QUUwMi9qeXZ2MVZnVEND VGdIcm9WcjRudFhkeWV0aG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJpn7StY5sgqgGuXhspDkULaYsZeCMAV9t7FZg6NBUDr/ttFtJHVkz ucsCGRhCUbB+qX/rB0KR426WDh8GxKqcPVuX9SezlKhQaQDOjyfBzklqkMxjVzCW MTwc5MlrJOhXkn4LtzutX4QR8tRjO3An6wjCTwN4AWe/zfiBEsHhCBJZlms06zqD 1WGgl3Ka1Q+d2dS+h8q7HTnob3od30dgZUA3ayOXR46EZWdSkTErYKX9SQtWpTkv bYNxH3/r4X8+x0ORcjDuflqnDN/qkD7VGQ4beuQGHn4Gzb3jkWrWTVUwey4/RHU5 zcxObhlVCx5zAJBJGyan6MWRznysK33h -----END CERTIFICATE-----Generated at Mon May 12 19:58:17 2025 by rpki-client