$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: i54iW8YBt6TbGSgSEfV8K2Prc0ZCgnzme13scKKv1a4= Subject key identifier: 1A:C0:DF:48:94:B3:5B:56:78:A7:17:58:85:D5:CB:69:F1:CC:A6:3A Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 14 Signing time: Sun 11 May 2025 06:45:05 +0000 Manifest this update: Sun 11 May 2025 06:45:05 +0000 Manifest next update: Sun 18 May 2025 06:45:05 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: iT9XuQ/w2Q85P28+PF+7IQwkVLlCYvybyH9A6bHKorY=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: B3AcpWyXKMA7OW20cqJ3DyGxcTH2gK1jrAHX+1xbxr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: May 11 06:45:05 2025 GMT Not After : May 18 06:45:05 2025 GMT Subject: CN=68204771-7205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:ea:90:ae:59:57:8d:98:6b:ca:6f:e2:e4: 43:f1:25:4d:8d:99:51:eb:be:f0:36:51:cc:26:bd: 4e:47:da:96:16:29:1f:01:56:eb:13:04:b9:b8:72: 21:35:03:50:3b:84:a3:5c:b4:37:d2:b1:5f:0e:6c: 52:bf:2e:91:51:1b:77:46:3e:8a:26:1d:08:56:9b: 09:8c:6d:43:73:32:fd:a6:8f:7b:fd:ba:fc:32:6a: b8:fc:49:56:ae:9a:33:5a:fa:69:d4:3b:76:36:9b: 2c:4b:6d:0f:3a:31:92:f0:0c:4d:98:7c:1c:09:84: 48:39:8e:15:99:be:6c:9c:df:b0:67:ed:32:7f:1a: ca:ff:50:05:87:fb:85:03:96:db:a2:08:ac:fa:12: 27:26:86:5d:b7:32:df:ef:9e:dc:fa:83:d0:11:d9: 49:91:81:f8:8a:b6:a9:df:2d:0e:3d:d9:cc:be:06: f3:39:b5:8f:f9:31:f7:2f:5a:82:fc:5c:f9:91:6d: ac:a9:dc:da:8c:0d:ff:47:ca:46:04:e2:ab:18:02: 0f:40:9a:61:40:34:4e:a1:a1:82:1f:20:0a:15:a9: 9b:01:ac:27:fa:43:df:1b:bd:ed:78:92:3b:2a:24: 21:a7:c1:bb:b5:3a:5f:07:bd:74:58:80:33:ee:5f: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C0:DF:48:94:B3:5B:56:78:A7:17:58:85:D5:CB:69:F1:CC:A6:3A X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:cc:03:40:5f:4c:9a:70:48:17:a4:e1:f6:cb:ee:69:b2: ec:22:35:61:f9:ed:62:13:19:8c:bf:15:a7:6e:04:c2:f8:af: aa:4a:19:58:66:1e:f3:aa:3b:32:c6:b0:45:9c:10:cb:1b:4a: d5:8b:ae:9f:4a:38:91:2e:b5:51:e6:1a:07:6d:e8:b7:f5:a8: 72:40:21:bc:7b:78:8f:ec:27:25:2e:05:50:15:d3:0d:e2:a1: b0:54:9e:cb:42:54:cb:21:06:94:d0:00:31:4b:47:53:98:1c: c5:64:53:e9:bd:99:11:24:ca:fe:67:df:20:e8:2d:52:b9:4b: 90:61:1f:cb:6b:3d:44:bf:25:a6:bc:1d:27:13:2d:70:3c:dd: 4a:be:61:c0:58:88:7d:fc:89:ea:92:46:46:05:8c:c3:c8:f7: 4f:23:88:45:ae:61:fd:a6:4b:c3:5a:1a:de:4c:21:45:59:2e: 9a:61:68:43:5b:b0:a7:6c:06:98:cd:41:38:43:ba:cb:45:01: a9:e1:a4:ba:f5:ad:ab:bb:14:ba:10:27:89:97:bb:70:c9:ff: 32:66:98:96:06:d8:c8:39:8a:08:04:d1:e6:5b:c3:47:3d:c5: 9f:0e:4a:30:bd:cd:74:4b:1c:ad:b4:c9:d0:ca:61:ad:73:51: d9:fc:15:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTA1MTEwNjQ1MDVaFw0yNTA1MTgwNjQ1MDVaMBgxFjAUBgNV BAMTDTY4MjA0NzcxLTcyMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/MuqQrllXjZhrym/i5EPxJU2NmVHrvvA2UcwmvU5H2pYWKR8BVusTBLm4ciE1 A1A7hKNctDfSsV8ObFK/LpFRG3dGPoomHQhWmwmMbUNzMv2mj3v9uvwyarj8SVau mjNa+mnUO3Y2myxLbQ86MZLwDE2YfBwJhEg5jhWZvmyc37Bn7TJ/Gsr/UAWH+4UD ltuiCKz6Eicmhl23Mt/vntz6g9AR2UmRgfiKtqnfLQ492cy+BvM5tY/5MfcvWoL8 XPmRbayp3NqMDf9HykYE4qsYAg9AmmFANE6hoYIfIAoVqZsBrCf6Q98bve14kjsq JCGnwbu1Ol8HvXRYgDPuX79vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGsDfSJSz W1Z4pxdYhdXLafHMpjowHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEl4zANAX0yacEgXpOH2y+5psuwiNWH57WITGYy/FaduBML4r6pKGVhm HvOqOzLGsEWcEMsbStWLrp9KOJEutVHmGgdt6Lf1qHJAIbx7eI/sJyUuBVAV0w3i obBUnstCVMshBpTQADFLR1OYHMVkU+m9mREkyv5n3yDoLVK5S5BhH8trPUS/Jaa8 HScTLXA83Uq+YcBYiH38ieqSRkYFjMPI908jiEWuYf2mS8NaGt5MIUVZLpphaENb sKdsBpjNQThDustFAanhpLr1rau7FLoQJ4mXu3DJ/zJmmJYG2Mg5iggE0eZbw0c9 xZ8OSjC9zXRLHK20ydDKYa1zUdn8Fdc= -----END CERTIFICATE-----Generated at Mon May 12 04:22:15 2025 by rpki-client