$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft File: JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft (raw, json) Hash identifier: TIchadI9SiwUOaipmGNDYAKDx5Ym5MVluRFFw+r0iUo= Subject key identifier: 9E:6B:CB:AB:DD:6E:2C:95:98:F3:EA:BB:F4:F9:AB:51:E1:8D:5D:28 Authority key identifier: 26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6 Certificate issuer: /CN=A91A1FF1/serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft Manifest number: 8C Signing time: Fri 09 May 2025 05:31:44 +0000 Manifest this update: Fri 09 May 2025 05:31:44 +0000 Manifest next update: Fri 16 May 2025 05:31:44 +0000 Files and hashes: 1: JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl (hash: dhAPiAhxX3frl6+BfaG5EYwqRC9pNN9kGoXMEaOBrkI=) 2: 369F08805B9B11EFA3A8CD42C4F9AE02.roa (hash: PHdU3YbsBVnKyiJBLqMyf65QtChsTtupcMmQjvSYsFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1FF1, serialNumber=263A55146E3172CFD8F00A6BB17BCB0EC20915C6 Validity Not Before: May 9 05:31:44 2025 GMT Not After : May 16 05:31:44 2025 GMT Subject: CN=681d9340-af2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:14:69:9b:6b:bb:19:82:8f:9d:48:36:64: cc:d6:d7:ca:d4:af:cd:b0:4d:13:1e:1f:66:79:bb: a7:48:89:df:eb:70:4f:79:65:53:02:88:4f:24:6c: 3b:ad:79:57:9a:a3:44:06:41:9f:d4:ae:9f:bc:36: 4a:00:4a:31:b5:e8:c8:b8:1a:7b:bf:f5:62:34:a0: e1:8a:8c:12:4a:db:e3:4e:b1:eb:8c:60:77:92:45: 67:d8:fa:60:78:5d:70:43:fd:f5:83:07:68:c0:c4: 0f:14:36:49:01:b5:92:e7:be:33:24:cd:78:87:24: 4a:00:47:69:07:6a:dd:fa:2b:9c:32:09:bf:ec:84: ea:70:da:ac:7f:37:04:58:2f:9c:8c:b1:1c:bd:2e: 69:c6:ba:44:b5:92:5e:e8:23:ef:51:29:ee:c9:7b: 7e:0f:f1:ce:bf:50:9f:50:0c:75:21:85:cd:78:9f: ae:fa:34:27:1b:9a:50:11:ae:94:74:23:8e:e3:ca: d5:d8:14:b1:d5:1f:04:ff:54:02:f0:c7:4e:20:7e: dd:20:ac:56:98:72:16:87:17:57:19:de:3f:3d:69: a9:5c:45:24:c0:0d:15:f9:cf:21:e4:bc:dd:06:1e: 47:25:bf:de:2e:fa:92:d1:f2:34:85:6c:66:6c:4c: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6B:CB:AB:DD:6E:2C:95:98:F3:EA:BB:F4:F9:AB:51:E1:8D:5D:28 X509v3 Authority Key Identifier: keyid:26:3A:55:14:6E:31:72:CF:D8:F0:0A:6B:B1:7B:CB:0E:C2:09:15:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JjpVFG4xcs_Y8AprsXvLDsIJFcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1FF1/00D8F9AE5B9B11EF96AA4F42C4F9AE02/JjpVFG4xcs_Y8AprsXvLDsIJFcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d6:56:8b:5b:65:fc:48:90:89:71:63:0a:39:60:97:32:14: 60:fb:e6:10:44:28:2a:0b:be:d6:e3:64:ed:78:59:c8:98:93: 1f:83:d1:61:d0:5f:e2:ce:4d:9a:3c:f3:7a:58:a7:ed:9c:5d: 76:ef:0a:84:50:72:df:7e:ad:e2:ad:55:9c:3d:3f:6d:91:c8: b1:3e:7a:bf:4d:c1:78:b3:01:7c:1c:29:a7:54:b3:12:06:fa: d6:74:ae:f1:26:12:7c:d4:df:39:1c:f7:53:59:3c:28:36:63: 39:1d:c4:15:f1:0e:d0:86:3d:a5:b8:13:bc:a0:fc:82:91:20: 20:1d:97:81:f0:76:e8:df:4b:2f:c1:ff:11:ea:f7:ee:d3:8f: 5a:e8:93:78:f0:b3:52:1c:bd:5a:c4:b0:b6:d5:26:9b:02:7e: 21:96:e7:a5:d9:ce:b2:36:6a:42:dd:01:0b:d4:e8:3b:d2:4b: e9:ca:c2:bf:2a:4f:32:8a:a9:ac:b8:73:60:ad:28:71:b6:58: 51:c0:81:b9:c2:7a:4b:d4:eb:3e:2b:68:93:6e:65:9d:06:62: 80:94:ac:c8:ad:59:ec:80:32:10:21:0a:c2:ef:69:d9:38:e6: a3:41:8b:b1:13:22:03:9d:40:5f:4f:58:5b:9c:01:c0:c9:2f: 6c:bb:be:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFGRjExMTAvBgNVBAUTKDI2M0E1NTE0NkUzMTcyQ0ZEOEYwMEE2QkIxN0JDQjBF QzIwOTE1QzYwHhcNMjUwNTA5MDUzMTQ0WhcNMjUwNTE2MDUzMTQ0WjAYMRYwFAYD VQQDEw02ODFkOTM0MC1hZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEAUaZtruxmCj51INmTM1tfK1K/NsE0THh9mebunSInf63BPeWVTAohPJGw7 rXlXmqNEBkGf1K6fvDZKAEoxtejIuBp7v/ViNKDhiowSStvjTrHrjGB3kkVn2Ppg eF1wQ/31gwdowMQPFDZJAbWS574zJM14hyRKAEdpB2rd+iucMgm/7ITqcNqsfzcE WC+cjLEcvS5pxrpEtZJe6CPvUSnuyXt+D/HOv1CfUAx1IYXNeJ+u+jQnG5pQEa6U dCOO48rV2BSx1R8E/1QC8MdOIH7dIKxWmHIWhxdXGd4/PWmpXEUkwA0V+c8h5Lzd Bh5HJb/eLvqS0fI0hWxmbEwWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5ry6vd biyVmPPqu/T5q1HhjV0oMB8GA1UdIwQYMBaAFCY6VRRuMXLP2PAKa7F7yw7CCRXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUZGMS8wMEQ4RjlBRTVC OUIxMUVGOTZBQTRGNDJDNEY5QUUwMi9KanBWRkc0eGNzX1k4QXByc1h2TERzSUpG Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pqcFZGRzR4Y3NfWThBcHJzWHZMRHNJSkZjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUZGMS8wMEQ4RjlBRTVCOUIxMUVGOTZBQTRGNDJDNEY5QUUwMi9KanBWRkc0eGNz X1k4QXByc1h2TERzSUpGY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg1laLW2X8SJCJcWMKOWCXMhRg++YQRCgqC77W42TteFnImJMfg9Fh 0F/izk2aPPN6WKftnF127wqEUHLffq3irVWcPT9tkcixPnq/TcF4swF8HCmnVLMS BvrWdK7xJhJ81N85HPdTWTwoNmM5HcQV8Q7Qhj2luBO8oPyCkSAgHZeB8Hbo30sv wf8R6vfu049a6JN48LNSHL1axLC21SabAn4hluel2c6yNmpC3QEL1Og70kvpysK/ Kk8yiqmsuHNgrShxtlhRwIG5wnpL1Os+K2iTbmWdBmKAlKzIrVnsgDIQIQrC72nZ OOajQYuxEyIDnUBfT1hbnAHAyS9su76o -----END CERTIFICATE-----Generated at Sun May 11 04:37:14 2025 by rpki-client