$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: OVAvouaRM9YAo/UkkvEtqHyTJLgenh+DL0x/97KxZDg= Subject key identifier: 7C:04:D0:DF:30:FE:7B:E0:69:85:11:CA:70:4A:69:C1:FE:3D:01:1B Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: F5 Signing time: Sun 11 May 2025 04:04:45 +0000 Manifest this update: Sun 11 May 2025 04:04:44 +0000 Manifest next update: Sun 18 May 2025 04:04:44 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: HHoJyMlQEDQEoydE1Fvt4Y73Y73NtHrUYR1+l6UIGfE=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: Ehjuv5Uf0g7hk8vGihsJTixHlQEY1frs5IM1jFNhEQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: May 11 04:04:44 2025 GMT Not After : May 18 04:04:44 2025 GMT Subject: CN=682021dd-53ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:78:c6:ec:5a:aa:80:fc:95:81:74:2e:0b: b8:a6:ba:1d:b2:b6:56:44:78:38:ce:d5:ec:76:78: af:1c:26:b2:8f:a7:9e:21:06:cf:4d:11:51:c0:2f: 2f:a5:1f:f8:f4:34:58:4a:8c:9e:4b:94:18:97:41: 3a:88:6e:0b:c3:92:d3:6a:88:2d:49:7c:68:00:e8: 24:09:3f:56:1b:7f:1d:53:cd:6e:da:34:be:06:ba: 14:ac:db:40:55:d4:7c:56:6d:3d:fb:e0:18:db:bd: a4:7d:fd:3c:69:65:62:52:6a:8d:92:d7:aa:81:53: 52:77:0d:4a:d5:41:c3:5e:43:66:1d:dd:db:0d:cf: 5d:1d:93:28:df:2f:96:07:4a:d9:b9:e3:cf:d7:7f: b6:81:9d:d2:da:99:ab:8f:6e:55:b1:e1:0c:43:53: 65:0b:68:f9:f2:ee:21:17:0b:2f:fa:70:ce:c7:b9: 50:45:d9:4c:96:39:4c:7c:4e:9a:1c:23:c0:0d:4f: a0:55:7b:02:f3:2d:c9:a7:16:f6:9f:93:09:1e:56: 46:9f:86:2e:50:2b:b1:50:60:53:6f:39:74:29:7f: 1a:d2:4c:a1:0a:dc:ad:38:10:bb:b1:cf:f6:60:e1: 76:7e:ea:14:5f:47:fd:a0:cf:a5:b9:c7:28:f3:d3: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:04:D0:DF:30:FE:7B:E0:69:85:11:CA:70:4A:69:C1:FE:3D:01:1B X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:fd:38:46:f4:05:8e:d4:af:d7:b5:df:c2:1b:0a:e5:97:bc: b4:54:5a:fd:af:f6:94:94:15:52:d1:68:4a:9e:d6:b1:e0:af: 52:e5:db:32:d4:bc:45:73:29:4d:f0:63:b6:8b:a0:66:31:68: 2f:1e:52:32:97:eb:fc:cf:04:d6:f4:2a:69:d6:1c:64:5f:cd: 01:6c:68:98:1e:15:1f:fc:31:f6:e2:e5:38:74:04:94:f8:72: 34:dc:58:cc:54:d9:fa:8c:4c:68:ff:16:00:93:be:66:aa:c8: 21:94:92:79:10:0a:ce:a9:9b:38:13:9b:6e:aa:c4:a5:45:3a: 0b:2e:07:d3:86:e0:c5:2f:f5:27:a8:69:0c:a7:42:34:e6:8f: 39:c2:a4:10:78:48:66:18:ee:1d:b6:05:76:e1:41:52:7a:b0: 96:06:13:d2:3c:d2:b1:3c:78:89:62:04:f0:fa:95:22:bf:11: 04:a2:77:24:6c:7b:10:a7:a7:ae:8d:6e:9e:20:a1:b3:9b:f8: 5a:e8:5b:c5:3e:98:d9:00:d6:46:0e:8c:9c:96:2a:6e:f2:67: 65:b1:bf:f8:5a:9e:b2:ad:30:b3:b9:20:69:02:55:90:09:76: 87:c1:bd:5b:ba:00:89:9f:9d:14:3b:8b:89:0e:dc:00:c9:b1: af:bf:1e:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNTExMDQwNDQ0WhcNMjUwNTE4MDQwNDQ0WjAYMRYwFAYD VQQDEw02ODIwMjFkZC01M2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO54xuxaqoD8lYF0Lgu4prodsrZWRHg4ztXsdnivHCayj6eeIQbPTRFRwC8v pR/49DRYSoyeS5QYl0E6iG4Lw5LTaogtSXxoAOgkCT9WG38dU81u2jS+BroUrNtA VdR8Vm09++AY272kff08aWViUmqNkteqgVNSdw1K1UHDXkNmHd3bDc9dHZMo3y+W B0rZuePP13+2gZ3S2pmrj25VseEMQ1NlC2j58u4hFwsv+nDOx7lQRdlMljlMfE6a HCPADU+gVXsC8y3Jpxb2n5MJHlZGn4YuUCuxUGBTbzl0KX8a0kyhCtytOBC7sc/2 YOF2fuoUX0f9oM+lucco89NpOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwE0N8w /nvgaYURynBKacH+PQEbMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw/ThG9AWO1K/Xtd/CGwrll7y0VFr9r/aUlBVS0WhKntax4K9S5dsy 1LxFcylN8GO2i6BmMWgvHlIyl+v8zwTW9Cpp1hxkX80BbGiYHhUf/DH24uU4dASU +HI03FjMVNn6jExo/xYAk75mqsghlJJ5EArOqZs4E5tuqsSlRToLLgfThuDFL/Un qGkMp0I05o85wqQQeEhmGO4dtgV24UFSerCWBhPSPNKxPHiJYgTw+pUivxEEonck bHsQp6eujW6eIKGzm/ha6FvFPpjZANZGDoyclipu8mdlsb/4Wp6yrTCzuSBpAlWQ CXaHwb1bugCJn50UO4uJDtwAybGvvx5b -----END CERTIFICATE-----Generated at Mon May 12 23:04:57 2025 by rpki-client