$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft File: J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json) Hash identifier: 1334CirEyCa4TR0q0WtU/7WmJNwIEbRcD4zdDeW/5Uo= Subject key identifier: 29:D1:66:F9:2C:B4:C7:56:DF:25:D7:E4:22:21:EE:4E:32:9C:83:DB Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Certificate serial: 1600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft Manifest number: 15F6 Signing time: Sat 10 May 2025 16:40:57 +0000 Manifest this update: Sat 10 May 2025 16:40:57 +0000 Manifest next update: Sat 17 May 2025 16:40:57 +0000 Files and hashes: 1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: +OAqJjGw43BBiyTd/PToyhDMs+szVYZ8aYvCkQezMso=) 2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: WcED1PrxQj41VcZbH/7zC6FIs8aGf9HCbcXArPjWnfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5632 (0x1600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94 Validity Not Before: May 10 16:40:57 2025 GMT Not After : May 17 16:40:57 2025 GMT Subject: CN=681f8199-3795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:70:c7:9c:1e:8d:41:2c:3d:ed:fd:92:ff: 32:3e:f0:b9:55:bd:d2:06:af:d8:0e:89:87:e5:58: 64:4b:c0:83:e1:7c:da:fe:f0:ef:6f:9a:1c:2a:e5: b8:0e:ce:54:81:17:fa:28:2a:b2:0d:fe:44:24:c6: 62:d8:6d:49:a1:fa:ce:08:c1:1e:24:15:c9:ef:2e: 59:fe:82:2d:69:d9:6f:77:c4:d2:97:99:bd:8b:6d: 77:5c:e5:d2:68:27:c7:2d:24:ef:67:e9:d1:17:ae: 7d:d8:c6:e7:ca:74:68:f6:16:60:c2:05:b5:6d:21: e4:2c:e7:9e:a7:d3:91:2a:c1:d1:73:0d:08:45:61: dd:c6:67:e9:4a:c5:3d:2c:f2:22:54:2d:8c:28:1f: 58:fe:75:a7:9c:b9:0d:91:ee:6b:9e:1a:c1:f1:e0: d6:4e:1b:9a:36:ec:e3:6b:e1:9a:f8:a1:78:67:6e: e6:4a:cb:9b:46:5b:42:e8:22:63:a0:76:ce:43:e5: 34:57:54:24:70:92:8d:6f:ac:7c:20:b3:dd:e4:e9: 5a:88:02:b7:4d:3a:7e:03:fd:38:f3:0d:7f:13:d3: 17:3d:5e:a7:49:b8:ab:8b:3d:5e:42:3b:94:22:75: d3:5a:b0:7c:29:d0:03:f6:da:f2:70:db:b6:01:6d: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D1:66:F9:2C:B4:C7:56:DF:25:D7:E4:22:21:EE:4E:32:9C:83:DB X509v3 Authority Key Identifier: keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b2:28:6f:8c:55:a9:c2:dd:65:07:0f:90:a4:5b:f5:f4:c0: c3:a7:2b:98:b1:ee:2c:65:ee:ba:8a:2d:e6:f2:bc:48:44:5c: c7:82:93:c1:00:39:73:4a:52:60:d5:bf:9d:46:ca:15:cb:ad: 9f:87:89:8e:3e:b6:ed:bd:23:2e:fc:5e:59:f6:ca:30:93:44: 2c:36:a2:da:1b:f7:67:28:0b:01:fc:e9:24:5c:9b:d1:0d:2e: 6a:b5:54:d4:16:4f:2b:5b:b1:e6:75:f3:2a:2e:d2:2e:38:03: ec:a0:2d:80:91:fd:a5:05:25:62:57:2b:13:e6:eb:56:93:e6: 6a:18:c0:de:29:70:00:de:ee:9c:39:c0:bb:40:c1:a4:30:c0: c6:41:65:bc:6a:1d:c1:5e:d2:b0:c9:a0:3a:7b:fd:bd:b6:a8: d6:18:ee:cb:fc:5c:3e:c1:ca:dd:00:d7:e0:6b:0a:36:65:8a: e4:b4:1a:a8:c3:e2:c4:2a:b1:f5:c6:18:d2:ef:a4:9d:8c:50: 79:35:28:b4:0c:31:e1:ad:13:43:1e:a6:6b:8a:43:45:7b:93: fe:51:eb:b0:ec:1f:22:04:4a:5a:b0:3f:bf:85:7f:5a:73:03: de:c8:6a:2e:9f:5f:2e:f3:14:4e:fb:e7:b9:ae:5a:a0:23:3b: 40:a0:e3:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB MjY3OTdDOTQwHhcNMjUwNTEwMTY0MDU3WhcNMjUwNTE3MTY0MDU3WjAYMRYwFAYD VQQDEw02ODFmODE5OS0zNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucxwx5wejUEsPe39kv8yPvC5Vb3SBq/YDomH5VhkS8CD4Xza/vDvb5ocKuW4 Ds5UgRf6KCqyDf5EJMZi2G1JofrOCMEeJBXJ7y5Z/oItadlvd8TSl5m9i213XOXS aCfHLSTvZ+nRF6592MbnynRo9hZgwgW1bSHkLOeep9ORKsHRcw0IRWHdxmfpSsU9 LPIiVC2MKB9Y/nWnnLkNke5rnhrB8eDWThuaNuzja+Ga+KF4Z27mSsubRltC6CJj oHbOQ+U0V1QkcJKNb6x8ILPd5OlaiAK3TTp+A/048w1/E9MXPV6nSbiriz1eQjuU InXTWrB8KdAD9trycNu2AW3H6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnRZvks tMdW3yXX5CIh7k4ynIPbMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f TnZrZldPQlp1SW1pWjVmSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLsihvjFWpwt1lBw+QpFv19MDDpyuYse4sZe66ii3m8rxIRFzHgpPB ADlzSlJg1b+dRsoVy62fh4mOPrbtvSMu/F5Z9sowk0QsNqLaG/dnKAsB/OkkXJvR DS5qtVTUFk8rW7HmdfMqLtIuOAPsoC2Akf2lBSViVysT5utWk+ZqGMDeKXAA3u6c OcC7QMGkMMDGQWW8ah3BXtKwyaA6e/29tqjWGO7L/Fw+wcrdANfgawo2ZYrktBqo w+LEKrH1xhjS76SdjFB5NSi0DDHhrRNDHqZrikNFe5P+Ueuw7B8iBEpasD+/hX9a cwPeyGoun18u8xRO++e5rlqgIztAoOOZ -----END CERTIFICATE-----Generated at Sun May 11 12:12:32 2025 by rpki-client