$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft File: jl6uTAO8OzRb54-MjppDt_mOM6Y.mft (raw, json) Hash identifier: 1Czu0RZ4mIInAXy7FfVI1mP5MYhfGI3nDskyWqpDJi4= Subject key identifier: 60:EB:1F:80:3B:1A:93:75:21:BD:2D:07:CF:B5:CD:3C:AA:9E:1E:D6 Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 Certificate issuer: /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft Manifest number: 33 Signing time: Sun 11 May 2025 06:21:38 +0000 Manifest this update: Sun 11 May 2025 06:21:37 +0000 Manifest next update: Sun 18 May 2025 06:21:37 +0000 Files and hashes: 1: jl6uTAO8OzRb54-MjppDt_mOM6Y.crl (hash: bsewTsjlRX+cTx5w8qn8iTkiIYJCVRO1AhBmc8VK9sI=) 2: 6031B83AE89211EFA8EA2645C4F9AE02.roa (hash: AC+SXi1UsfNodH/t6eT8f4fZVqnQxWUGCxU261CtJPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6 Validity Not Before: May 11 06:21:37 2025 GMT Not After : May 18 06:21:37 2025 GMT Subject: CN=682041f1-4f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:f3:3a:16:a5:cf:92:d4:80:f2:c0:5b:95: e0:e8:bb:5d:05:7f:41:2d:be:05:cb:6b:ef:eb:91: 73:f0:0d:24:41:e4:ba:3f:cb:d0:7c:d6:53:88:83: ab:2a:20:87:e4:c4:32:a6:31:e6:2f:70:6b:44:48: fd:2a:5c:de:e5:a9:c0:8f:ee:36:91:67:94:de:54: 3c:0d:38:1d:7b:90:1d:d0:f5:a7:6d:d8:5a:c3:ce: 15:77:36:8d:08:17:b9:ef:66:92:4b:11:03:b5:67: 21:ae:29:67:9a:1f:ed:65:8d:16:42:8a:2d:5d:c9: 44:36:f0:cf:ab:e2:40:ac:7f:5d:07:ad:0e:5d:8d: 58:8b:51:ce:f2:d7:3e:8c:5b:89:db:a6:e6:0c:cd: 17:a2:74:5b:0d:5c:bb:59:8d:2d:a2:97:cc:87:92: 19:98:05:ef:d1:1d:81:4a:6d:de:70:68:44:f1:81: 31:37:97:aa:64:ba:3a:d6:80:5c:0d:47:af:8f:44: 74:d9:79:b1:87:d2:eb:91:c0:2f:e8:f6:a9:50:6d: 78:a7:50:61:7c:58:e3:4f:dd:2c:85:9d:d9:38:df: dc:6c:43:6c:b6:ac:a7:b6:f1:fc:7f:cb:bb:f6:3a: 94:e6:a0:bc:4c:96:a1:25:72:76:98:f5:84:a0:e5: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EB:1F:80:3B:1A:93:75:21:BD:2D:07:CF:B5:CD:3C:AA:9E:1E:D6 X509v3 Authority Key Identifier: keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:1a:92:f6:f9:a9:0b:b9:fd:cc:70:8b:57:1f:df:37:bb:f3: f4:ec:e1:47:38:a1:35:0b:1c:94:4b:26:5f:9d:37:75:05:3a: d3:64:ff:c1:c8:f4:ee:d7:a5:b0:e2:39:79:54:ef:30:41:bf: 75:69:c8:fb:c2:42:6d:36:95:f5:5d:b2:65:ce:77:96:5c:1b: fa:4c:32:67:da:d8:a1:ff:df:a4:8e:d2:5e:d3:59:c8:6d:3d: ad:f6:a3:aa:be:88:98:7d:2b:c9:21:d2:e4:b5:b4:4b:2f:7a: 36:e8:49:c2:18:d8:3c:3b:ef:dc:c6:f1:b5:bc:5b:ed:47:23: 13:c3:e3:1a:62:e0:b3:a3:dc:a8:1b:b1:6d:a6:12:2a:5f:80: 3e:c8:b3:66:be:46:4e:de:a6:b1:7f:b7:c9:9d:d2:7b:18:9a: 73:ab:8c:f6:ec:e4:74:7e:e6:7d:7c:36:30:11:c5:b8:0a:b9: 54:73:07:da:2f:dc:1a:21:3e:7f:8b:da:b4:13:c1:8b:01:25: df:2b:dd:1a:12:6c:04:6e:bf:e2:07:02:c5:58:94:93:79:49: 71:ae:6c:1f:d0:f2:25:c7:95:02:a9:bf:33:e9:45:d9:06:a9: dd:81:e0:32:9a:ab:88:a1:6f:8b:11:1d:2d:c1:55:b0:d3:bf: f3:3c:36:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzUxMjExMC8GA1UEBRMoOEU1RUFFNEMwM0JDM0IzNDVCRTc4RjhDOEU5QTQzQjdG OThFMzNBNjAeFw0yNTA1MTEwNjIxMzdaFw0yNTA1MTgwNjIxMzdaMBgxFjAUBgNV BAMTDTY4MjA0MWYxLTRmNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5//M6FqXPktSA8sBbleDou10Ff0EtvgXLa+/rkXPwDSRB5Lo/y9B81lOIg6sq IIfkxDKmMeYvcGtESP0qXN7lqcCP7jaRZ5TeVDwNOB17kB3Q9adt2FrDzhV3No0I F7nvZpJLEQO1ZyGuKWeaH+1ljRZCii1dyUQ28M+r4kCsf10HrQ5djViLUc7y1z6M W4nbpuYMzReidFsNXLtZjS2il8yHkhmYBe/RHYFKbd5waETxgTE3l6pkujrWgFwN R6+PRHTZebGH0uuRwC/o9qlQbXinUGF8WONP3SyFndk439xsQ2y2rKe28fx/y7v2 OpTmoLxMlqElcnaY9YSg5ZMBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYOsfgDsa k3UhvS0Hz7XNPKqeHtYwHwYDVR0jBBgwFoAUjl6uTAO8OzRb54+MjppDt/mOM6Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNTEyL0ExOEFCRjI4RTNB MzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamw2dVRBTzhPelJiNTQtTWpwcER0X21PTTZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NTEyL0ExOEFCRjI4RTNBMzExRUZCOEVCOEM1MUM0RjlBRTAyL2psNnVUQU84T3pS YjU0LU1qcHBEdF9tT002WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALoakvb5qQu5/cxwi1cf3ze78/Ts4Uc4oTULHJRLJl+dN3UFOtNk/8HI 9O7XpbDiOXlU7zBBv3VpyPvCQm02lfVdsmXOd5ZcG/pMMmfa2KH/36SO0l7TWcht Pa32o6q+iJh9K8kh0uS1tEsvejboScIY2Dw779zG8bW8W+1HIxPD4xpi4LOj3Kgb sW2mEipfgD7Is2a+Rk7eprF/t8md0nsYmnOrjPbs5HR+5n18NjARxbgKuVRzB9ov 3BohPn+L2rQTwYsBJd8r3RoSbARuv+IHAsVYlJN5SXGubB/Q8iXHlQKpvzPpRdkG qd2B4DKaq4ihb4sRHS3BVbDTv/M8NkA= -----END CERTIFICATE-----Generated at Mon May 12 19:44:07 2025 by rpki-client