$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft File: JZsDpaLh4szE5L116zNvIxG0RCo.mft (raw, json) Hash identifier: JUIfgbL8nj+dETfo3n8rVJWZDp4YuIvmotFNHV6K5lI= Subject key identifier: BF:21:05:78:95:9C:47:84:F9:B0:E2:F4:4F:AD:26:90:B0:B4:CC:10 Authority key identifier: 25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A Certificate issuer: /CN=A91A87D6/serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft Manifest number: 0D Signing time: Thu 15 May 2025 07:24:28 +0000 Manifest this update: Thu 15 May 2025 07:24:27 +0000 Manifest next update: Thu 22 May 2025 07:24:27 +0000 Files and hashes: 1: JZsDpaLh4szE5L116zNvIxG0RCo.crl (hash: 1+F1hyH+MpDuQdlJM8fcy6x2zgyoU9uZTVD4rNL80/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87D6, serialNumber=259B03A5A2E1E2CCC4E4BD75EB336F2311B4442A Validity Not Before: May 15 07:24:27 2025 GMT Not After : May 22 07:24:27 2025 GMT Subject: CN=682596ac-f458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:4d:72:c3:88:20:d5:6f:62:f2:0d:5c:e7: 1d:ce:fa:01:dd:3f:ed:c3:68:82:f5:03:3b:69:43: 72:d5:2b:89:cc:66:4c:6e:d6:fd:79:a2:2d:93:29: ec:2e:10:b8:b7:e2:22:b2:a1:d5:0c:e4:22:ed:72: 0b:1c:20:d3:d7:06:01:bc:cd:9c:3f:82:8b:4c:11: 5c:74:c6:67:08:30:49:18:b9:80:3d:26:56:58:b8: 77:6d:3a:2b:93:06:f5:8f:6f:77:c4:48:02:29:ab: 6a:32:93:f7:ac:a5:ad:85:3b:4d:4d:66:9d:0a:00: 9a:62:5e:76:56:a6:1c:1e:45:af:13:ec:66:e0:1a: 9a:50:af:21:77:8c:e5:b3:5f:94:d9:d4:10:eb:64: d2:48:1f:66:0e:ae:b9:59:40:42:99:89:90:47:78: 2b:ce:d0:e5:b2:2c:99:ff:10:6d:eb:89:32:cc:ab: bd:46:6a:20:16:77:0c:20:5a:5a:35:87:e6:53:79: dc:30:bb:ce:9d:f8:42:c9:f3:fa:5f:07:dc:0f:c7: e2:f5:7b:59:8c:92:7b:3d:a2:7c:4b:5d:93:2c:25: 39:6d:6b:78:49:bf:42:b2:d2:0b:8d:16:30:25:b7: 78:ae:81:bb:c4:ac:1b:57:e6:8b:40:8d:50:83:5a: 07:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:21:05:78:95:9C:47:84:F9:B0:E2:F4:4F:AD:26:90:B0:B4:CC:10 X509v3 Authority Key Identifier: keyid:25:9B:03:A5:A2:E1:E2:CC:C4:E4:BD:75:EB:33:6F:23:11:B4:44:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZsDpaLh4szE5L116zNvIxG0RCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87D6/1E46093420A611F09FC22A5AC4F9AE02/JZsDpaLh4szE5L116zNvIxG0RCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2c:68:b7:df:11:1f:53:b3:8e:88:42:c7:26:02:68:b2:9c: 97:24:4c:09:e5:3b:60:84:f2:a8:fd:a7:36:93:03:a1:df:8d: 82:0c:06:3a:4f:5a:d5:c7:45:67:12:ba:f0:94:0f:80:3d:e2: ab:4e:1a:5f:52:b0:39:57:bf:f5:3b:02:be:53:a7:8a:91:70: ab:75:93:f9:f6:ce:94:1c:5b:cd:0b:96:da:6f:5a:69:26:06: 27:10:0d:a3:5b:24:92:6c:47:fe:6f:1e:72:b6:d2:cf:e1:22: cf:c0:f3:c5:93:58:1f:c9:f1:50:b8:1b:65:5d:ec:a0:ba:bd: ff:a0:d8:84:f4:93:d8:b2:53:11:b2:6e:6e:18:54:db:23:90: 5b:01:74:ba:eb:0a:ed:2f:d0:f6:ac:d2:eb:c8:20:57:32:ca: 35:c6:75:95:63:ae:f9:58:bb:04:a6:64:4e:08:1c:d8:5c:e6: 27:7f:61:20:76:3a:74:a8:b2:04:75:60:3b:12:b6:50:9b:82: d2:c4:dc:e8:a7:81:d0:30:9f:71:d0:e4:b2:32:a1:1b:2c:cc: a4:fe:dd:bc:7a:d8:75:db:df:6b:de:13:7a:64:d5:f8:61:59: 42:33:28:f5:15:49:28:9b:93:9d:07:97:f5:bd:ff:a6:a7:72: 7a:63:f0:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODdENjExMC8GA1UEBRMoMjU5QjAzQTVBMkUxRTJDQ0M0RTRCRDc1RUIzMzZGMjMx MUI0NDQyQTAeFw0yNTA1MTUwNzI0MjdaFw0yNTA1MjIwNzI0MjdaMBgxFjAUBgNV BAMTDTY4MjU5NmFjLWY0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6901yw4gg1W9i8g1c5x3O+gHdP+3DaIL1AztpQ3LVK4nMZkxu1v15oi2TKewu ELi34iKyodUM5CLtcgscINPXBgG8zZw/gotMEVx0xmcIMEkYuYA9JlZYuHdtOiuT BvWPb3fESAIpq2oyk/espa2FO01NZp0KAJpiXnZWphweRa8T7GbgGppQryF3jOWz X5TZ1BDrZNJIH2YOrrlZQEKZiZBHeCvO0OWyLJn/EG3riTLMq71GaiAWdwwgWlo1 h+ZTedwwu86d+ELJ8/pfB9wPx+L1e1mMkns9onxLXZMsJTlta3hJv0Ky0guNFjAl t3iugbvErBtX5otAjVCDWgffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvyEFeJWc R4T5sOL0T60mkLC0zBAwHwYDVR0jBBgwFoAUJZsDpaLh4szE5L116zNvIxG0RCow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4N0Q2LzFFNDYwOTM0MjBB NjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6RTVMMTE2ek52SXhHMFJD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSlpzRHBhTGg0c3pFNUwxMTZ6TnZJeEcwUkNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 N0Q2LzFFNDYwOTM0MjBBNjExRjA5RkMyMkE1QUM0RjlBRTAyL0pac0RwYUxoNHN6 RTVMMTE2ek52SXhHMFJDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUsaLffER9Ts46IQscmAmiynJckTAnlO2CE8qj9pzaTA6HfjYIMBjpP WtXHRWcSuvCUD4A94qtOGl9SsDlXv/U7Ar5Tp4qRcKt1k/n2zpQcW80LltpvWmkm BicQDaNbJJJsR/5vHnK20s/hIs/A88WTWB/J8VC4G2Vd7KC6vf+g2IT0k9iyUxGy bm4YVNsjkFsBdLrrCu0v0Pas0uvIIFcyyjXGdZVjrvlYuwSmZE4IHNhc5id/YSB2 OnSosgR1YDsStlCbgtLE3OingdAwn3HQ5LIyoRsszKT+3bx62HXb32veE3pk1fhh WUIzKPUVSSibk50Hl/W9/6ancnpj8O4= -----END CERTIFICATE-----Generated at Fri May 16 05:06:41 2025 by rpki-client