$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft File: jLkrEub5htMT1T88qrB-vjJVrro.mft (raw, json) Hash identifier: DQHgtWLfk2mkHkxXxmfwUaJSoyZwvmrUxeLhfsYQ9RQ= Subject key identifier: 23:D1:7D:8E:3C:D8:2C:AF:2F:48:5F:1B:FC:D3:B9:17:CD:81:FA:21 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft Manifest number: 1A52 Signing time: Wed 14 May 2025 16:26:15 +0000 Manifest this update: Wed 14 May 2025 16:26:14 +0000 Manifest next update: Wed 21 May 2025 16:26:14 +0000 Files and hashes: 1: jLkrEub5htMT1T88qrB-vjJVrro.crl (hash: 2liQpYZzXo8NtRppnj5gkqFCOWe4SnEz7kx0y8djsWM=) 2: 452D6C36BD1411EAA4875216C4F9AE02.roa (hash: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6748 (0x1a5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: May 14 16:26:14 2025 GMT Not After : May 21 16:26:14 2025 GMT Subject: CN=6824c427-aaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:78:a0:88:89:3a:58:f8:66:ee:5b:3f:84:96: d8:ae:2e:98:1f:bf:7d:b4:03:c2:43:df:b8:19:8f: a4:0d:77:90:66:9f:20:b7:a6:8f:ea:5c:44:62:42: e0:9f:9f:cf:13:a6:cc:7a:3a:68:b1:a6:55:87:45: f7:0a:ad:c2:56:7b:d6:bb:da:cc:f5:2f:3f:f8:54: c2:cf:34:fd:c5:5f:d0:71:80:94:d8:c5:88:87:36: 17:1a:ac:a1:06:75:83:d3:1d:8d:2a:37:6c:b5:36: d8:fc:2e:a2:ca:5e:2d:ea:26:89:8b:e8:43:70:4a: 83:a5:4c:d6:44:92:30:d1:7c:8b:f8:ea:7e:91:89: b5:fc:24:b0:9f:76:52:70:8e:0d:cd:3b:b3:cb:66: 7b:27:9e:21:52:bd:c4:6b:dd:c7:df:1d:af:51:e0: 73:81:26:f3:08:18:8c:3a:7d:fe:bc:38:a0:b1:8c: 7e:f3:2a:e3:59:d3:b0:0c:4b:7d:7f:3c:25:93:dd: 4c:97:f0:44:7b:ae:0e:62:47:a1:07:05:6d:56:61: 64:e2:7e:05:00:d8:25:87:72:7c:a7:fe:c4:c1:ef: 65:53:09:7c:36:81:6f:fe:a8:88:11:d8:56:a4:12: 49:45:b2:ce:3a:8d:e2:bf:a4:1d:0d:a7:5e:be:20: 92:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D1:7D:8E:3C:D8:2C:AF:2F:48:5F:1B:FC:D3:B9:17:CD:81:FA:21 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:50:17:9c:e5:42:ea:dc:42:36:b8:c0:ac:25:b4:3a:28:b0: 38:17:95:61:84:d7:ab:1b:3a:d6:5c:53:2c:d4:1d:e6:49:4e: ea:a9:ad:8a:eb:02:09:42:e2:a6:20:09:0e:d9:f8:ed:76:74: 20:4f:68:23:0d:65:a9:4d:52:34:0c:2e:16:b0:c5:83:57:87: 9f:57:b9:62:18:b9:be:4b:bf:71:c6:19:aa:ff:25:05:22:dd: 57:a0:ad:c0:80:b0:5d:98:6b:d1:23:2e:f1:3b:0b:cf:a5:73: 1c:a8:5b:b1:7e:f8:3a:e1:e3:5f:be:75:57:81:13:18:b9:4b: 61:93:f0:83:7d:c0:f2:62:b2:e0:f0:9f:e1:d3:77:91:6d:d8: 61:84:12:ab:97:e6:dc:63:ee:78:35:60:c5:17:ef:cc:06:d1: a8:8c:b3:63:a3:21:08:34:a3:ab:d4:1b:56:82:3e:4f:60:7e: 16:0f:c2:b9:68:21:e7:85:02:a2:ec:82:53:28:48:c7:7e:ce: c3:8c:dc:81:ed:84:20:4e:5a:69:79:e3:4a:78:57:d8:ad:e8: 89:a0:7c:c4:30:f8:ad:f4:d3:d1:0e:22:3a:ad:eb:76:55:79: 00:61:7b:0a:60:98:dc:8f:f4:b6:9a:71:a3:32:2a:92:fa:d3: c9:f3:f8:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwNTE0MTYyNjE0WhcNMjUwNTIxMTYyNjE0WjAYMRYwFAYD VQQDEw02ODI0YzQyNy1hYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73igiIk6WPhm7ls/hJbYri6YH799tAPCQ9+4GY+kDXeQZp8gt6aP6lxEYkLg n5/PE6bMejposaZVh0X3Cq3CVnvWu9rM9S8/+FTCzzT9xV/QcYCU2MWIhzYXGqyh BnWD0x2NKjdstTbY/C6iyl4t6iaJi+hDcEqDpUzWRJIw0XyL+Op+kYm1/CSwn3ZS cI4NzTuzy2Z7J54hUr3Ea93H3x2vUeBzgSbzCBiMOn3+vDigsYx+8yrjWdOwDEt9 fzwlk91Ml/BEe64OYkehBwVtVmFk4n4FANglh3J8p/7Ewe9lUwl8NoFv/qiIEdhW pBJJRbLOOo3iv6QdDadeviCSGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPRfY48 2CyvL0hfG/zTuRfNgfohMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY0RS9CRjQ3QkY4QzQxMzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0 TVQxVDg4cXJCLXZqSlZycm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8UBec5ULq3EI2uMCsJbQ6KLA4F5VhhNerGzrWXFMs1B3mSU7qqa2K 6wIJQuKmIAkO2fjtdnQgT2gjDWWpTVI0DC4WsMWDV4efV7liGLm+S79xxhmq/yUF It1XoK3AgLBdmGvRIy7xOwvPpXMcqFuxfvg64eNfvnVXgRMYuUthk/CDfcDyYrLg 8J/h03eRbdhhhBKrl+bcY+54NWDFF+/MBtGojLNjoyEINKOr1BtWgj5PYH4WD8K5 aCHnhQKi7IJTKEjHfs7DjNyB7YQgTlppeeNKeFfYreiJoHzEMPit9NPRDiI6ret2 VXkAYXsKYJjcj/S2mnGjMiqS+tPJ8/ii -----END CERTIFICATE-----Generated at Thu May 15 00:04:04 2025 by rpki-client