$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft File: Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft (raw, json) Hash identifier: 0HHSNsyUCDQdxzAMhULA2/NnoFeOelFVzaExMKKyu+Y= Subject key identifier: 6B:8D:0D:43:07:BD:50:BD:7F:E1:42:28:2F:37:EF:7D:C3:A2:37:52 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft Manifest number: 058E Signing time: Sun 04 May 2025 22:53:39 +0000 Manifest this update: Sun 04 May 2025 22:53:38 +0000 Manifest next update: Sun 11 May 2025 22:53:38 +0000 Files and hashes: 1: Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl (hash: gpXAeyADXcj1LSuk1fp4/za9hsIvg46xRN+s/JssDBk=) 2: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (hash: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85, serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: May 4 22:53:38 2025 GMT Not After : May 11 22:53:38 2025 GMT Subject: CN=6817eff3-7a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:d0:02:8d:95:91:d5:fb:83:29:17:1e:39: 85:bd:38:fa:d5:b9:28:ce:da:e7:e6:eb:0d:f6:57: 79:8c:a2:7f:c9:8a:2c:0f:a5:ff:1e:2b:68:00:1e: 3b:01:a4:b2:1e:81:50:49:7a:11:2b:ed:34:a2:f1: 54:f4:f1:66:23:4d:2f:da:9a:c8:0b:90:83:86:52: 74:b2:2e:dd:36:07:2b:9e:04:61:89:49:fd:04:10: 13:bd:89:b7:2d:aa:7c:b0:ad:9d:e8:30:f9:02:93: 7f:62:18:dc:cb:f3:63:44:fd:6d:44:f7:a2:8c:5e: ab:5c:98:30:6d:47:d8:4c:85:41:d6:a4:11:48:d0: f7:8d:db:0c:17:c9:78:15:46:18:77:f7:27:9f:0d: 8a:87:fe:25:c5:8c:0e:32:fa:96:ae:b4:d8:69:3d: 1a:24:0d:ea:e3:45:d5:ba:4d:b4:8a:6d:79:a7:2d: c4:6c:c9:0c:ad:f1:9c:fb:d1:d1:2d:18:7e:f9:07: 18:14:c0:09:12:c8:c4:4f:8a:bd:b2:f6:76:16:5a: 36:12:23:42:01:df:ca:8c:f4:5b:8d:d5:76:f9:8c: df:4c:80:e4:81:3e:05:61:52:1e:85:aa:45:fe:40: 02:3c:9c:6e:a8:d8:7d:6c:4c:6d:bf:74:c7:39:4c: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:0D:43:07:BD:50:BD:7F:E1:42:28:2F:37:EF:7D:C3:A2:37:52 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:68:08:e0:84:c1:db:77:80:61:27:b0:67:69:93:83:12:da: b5:2a:f1:fe:0b:35:98:45:37:ec:3c:94:41:94:32:30:7d:50: f4:ae:6f:99:a2:f7:7b:f6:8e:d3:77:1f:20:d5:09:da:ce:56: 57:5c:48:b7:d8:94:83:a9:e1:c4:2e:16:90:46:22:cc:7a:14: d1:7c:ec:10:2d:e4:f3:c9:37:8d:15:5a:24:ba:bf:c9:c3:7b: dc:e4:82:16:69:5c:02:2d:5c:49:5d:4d:1c:54:57:8f:c2:3a: f8:ec:42:df:58:74:4d:18:a1:4a:d3:d5:23:26:98:24:4b:8a: 69:51:b3:ba:13:88:f9:99:38:6c:28:08:32:9c:40:2a:00:34: fb:f4:ea:a9:c7:9b:98:e3:24:21:16:6e:03:65:43:c9:91:1f: 69:7f:a0:2f:8e:33:b3:04:50:ed:d2:1d:f1:86:b7:0a:e4:98: bb:ff:39:70:e3:23:82:66:0f:71:66:ed:97:b4:0a:2a:51:6d: 3f:8d:9c:cd:42:78:43:d9:c8:fb:a3:02:db:cf:df:f6:d6:3f: 74:ac:ff:3c:66:24:e8:29:85:3b:d1:f2:f5:b6:6a:eb:4f:62: 32:e1:d2:4b:94:e3:07:fb:02:79:94:a8:2d:f6:51:c2:e2:f5: e5:3c:d9:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjUwNTA0MjI1MzM4WhcNMjUwNTExMjI1MzM4WjAYMRYwFAYD VQQDEw02ODE3ZWZmMy03YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58DQAo2VkdX7gykXHjmFvTj61bkoztrn5usN9ld5jKJ/yYosD6X/HitoAB47 AaSyHoFQSXoRK+00ovFU9PFmI00v2prIC5CDhlJ0si7dNgcrngRhiUn9BBATvYm3 Lap8sK2d6DD5ApN/Yhjcy/NjRP1tRPeijF6rXJgwbUfYTIVB1qQRSND3jdsMF8l4 FUYYd/cnnw2Kh/4lxYwOMvqWrrTYaT0aJA3q40XVuk20im15py3EbMkMrfGc+9HR LRh++QcYFMAJEsjET4q9svZ2Flo2EiNCAd/KjPRbjdV2+YzfTIDkgT4FYVIehapF /kACPJxuqNh9bExtv3THOUxtHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuNDUMH vVC9f+FCKC83733DojdSMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQ4NS9BOEQ0QUZFQ0QwRTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJL a3ZRRmd1c1l6YmJQbGtUX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIaAjghMHbd4BhJ7BnaZODEtq1KvH+CzWYRTfsPJRBlDIwfVD0rm+Z ovd79o7Tdx8g1QnazlZXXEi32JSDqeHELhaQRiLMehTRfOwQLeTzyTeNFVokur/J w3vc5IIWaVwCLVxJXU0cVFePwjr47ELfWHRNGKFK09UjJpgkS4ppUbO6E4j5mThs KAgynEAqADT79Oqpx5uY4yQhFm4DZUPJkR9pf6AvjjOzBFDt0h3xhrcK5Ji7/zlw 4yOCZg9xZu2XtAoqUW0/jZzNQnhD2cj7owLbz9/21j90rP88ZiToKYU70fL1tmrr T2Iy4dJLlOMH+wJ5lKgt9lHC4vXlPNls -----END CERTIFICATE-----Generated at Mon May 5 03:12:33 2025 by rpki-client