$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft File: jhRqR_5i0JoyZs4IOlecrROlgGY.mft (raw, json) Hash identifier: u4cmVkNxLH2NT6HXR1F1SnxUyv0Q3odA6dkpHHK2lP8= Subject key identifier: 30:82:F2:61:1E:E4:E8:B5:FC:B6:E8:FC:F7:D4:7F:06:67:13:C9:95 Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft Manifest number: 016B Signing time: Sat 03 May 2025 03:17:51 +0000 Manifest this update: Sat 03 May 2025 03:17:51 +0000 Manifest next update: Sat 10 May 2025 03:17:51 +0000 Files and hashes: 1: jhRqR_5i0JoyZs4IOlecrROlgGY.crl (hash: 33xdYM/PfZ9WWh5YC+z2SLtEDPJ/K1rEhrlnCsgwNLs=) 2: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (hash: u3KQ4+2IgJpu2VdTdgcmH5lKk3YgiV3NcKX66uGGiko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: May 3 03:17:51 2025 GMT Not After : May 10 03:17:51 2025 GMT Subject: CN=68158adf-6f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:48:b3:95:9d:31:94:91:a5:1f:5c:1f:fd: c0:8f:b9:26:db:65:8e:89:92:a9:9d:a7:9d:27:88: 75:a5:16:07:8d:5c:15:c2:d7:18:dc:49:f3:35:29: 3e:7c:9f:9b:15:ae:46:b6:ed:0b:68:8a:cd:65:53: 97:e8:df:cb:d3:60:22:2a:1e:c9:48:68:82:ee:dd: fa:a1:1d:e1:ea:1e:38:2d:cc:6c:0e:18:5f:99:1a: 9b:5c:fb:5e:c7:56:e4:46:7a:10:cd:02:5e:9f:18: 17:b9:6d:50:65:e9:5d:b0:4b:b6:8c:86:f4:75:b5: a8:c5:77:00:03:52:ea:af:03:ce:ae:95:33:c1:b2: af:a8:06:1d:0e:08:9c:95:08:70:08:80:07:1d:85: f1:1d:48:16:c7:97:b3:1e:92:5b:a3:ee:86:f5:c5: 20:3f:2e:9c:1c:e2:13:cf:f6:69:43:bf:52:00:b1: 41:ff:3a:da:72:c7:fc:3a:d6:13:4c:c6:ff:b2:82: 66:b6:8d:3c:54:78:ed:78:87:14:cb:c7:da:0c:ba: 5e:c3:ea:9e:50:42:f2:be:26:7e:f8:9e:47:38:d9: 92:dc:aa:3d:64:60:88:09:90:0c:40:90:ee:82:a6: ca:1a:d0:e5:6c:ab:79:50:44:b7:5d:19:0f:f4:f5: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:82:F2:61:1E:E4:E8:B5:FC:B6:E8:FC:F7:D4:7F:06:67:13:C9:95 X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:57:55:6d:94:6f:fe:61:6c:bd:a5:39:5f:01:e4:f8:b1:fb: 9b:62:ac:d8:80:01:e4:24:17:39:88:d3:b1:fe:49:27:e6:f6: 5e:4e:e1:13:7c:cb:04:5d:0b:fa:b4:be:64:b7:3c:3b:3d:cf: 3e:e0:e3:a2:4b:76:42:7a:1f:63:b1:de:ac:c5:9b:81:17:ca: 43:4c:af:15:d7:b0:3f:30:55:2b:46:1f:6d:73:fc:1e:a9:04: 5b:08:2a:6f:36:0b:a7:50:25:c7:1e:9b:83:cd:f8:f3:d3:14: a7:1e:27:94:09:fd:c0:3a:9e:4c:41:ff:ae:29:d6:38:42:5c: c4:25:4f:f0:57:4a:33:a2:32:3f:4c:e1:29:7f:1a:20:df:79: a6:1c:97:d8:0a:cb:2d:7c:61:6e:98:02:bc:2d:e7:60:e7:e4: 44:50:0b:11:e0:6a:10:81:4f:bf:6e:3e:93:3f:99:95:52:57: 72:35:ca:12:1c:fe:50:9c:ae:2f:a3:62:3e:5e:79:81:4a:6d: d4:03:f7:f5:5f:8a:7a:13:e1:43:87:9e:7e:b1:e8:bc:9c:99: 34:2a:49:7e:da:90:9d:c5:bc:26:8e:93:42:09:e2:fe:e5:1d: 8d:d1:c1:ae:bd:f1:3d:a7:82:58:4b:00:69:1d:26:26:92:a0: 96:f4:59:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUwNTAzMDMxNzUxWhcNMjUwNTEwMDMxNzUxWjAYMRYwFAYD VQQDEw02ODE1OGFkZi02ZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QJIs5WdMZSRpR9cH/3Aj7km22WOiZKpnaedJ4h1pRYHjVwVwtcY3EnzNSk+ fJ+bFa5Gtu0LaIrNZVOX6N/L02AiKh7JSGiC7t36oR3h6h44LcxsDhhfmRqbXPte x1bkRnoQzQJenxgXuW1QZeldsEu2jIb0dbWoxXcAA1LqrwPOrpUzwbKvqAYdDgic lQhwCIAHHYXxHUgWx5ezHpJbo+6G9cUgPy6cHOITz/ZpQ79SALFB/zracsf8OtYT TMb/soJmto08VHjteIcUy8faDLpew+qeUELyviZ++J5HONmS3Ko9ZGCICZAMQJDu gqbKGtDlbKt5UES3XRkP9PUzhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCC8mEe 5Oi1/Lbo/PfUfwZnE8mVMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzBDOS8wMjI3QjlBRUZBMjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBK b3laczRJT2xlY3JST2xnR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZV1VtlG/+YWy9pTlfAeT4sfubYqzYgAHkJBc5iNOx/kkn5vZeTuET fMsEXQv6tL5ktzw7Pc8+4OOiS3ZCeh9jsd6sxZuBF8pDTK8V17A/MFUrRh9tc/we qQRbCCpvNgunUCXHHpuDzfjz0xSnHieUCf3AOp5MQf+uKdY4QlzEJU/wV0ozojI/ TOEpfxog33mmHJfYCsstfGFumAK8Ledg5+REUAsR4GoQgU+/bj6TP5mVUldyNcoS HP5QnK4vo2I+XnmBSm3UA/f1X4p6E+FDh55+sei8nJk0Kkl+2pCdxbwmjpNCCeL+ 5R2N0cGuvfE9p4JYSwBpHSYmkqCW9Flo -----END CERTIFICATE-----Generated at Mon May 5 03:32:56 2025 by rpki-client