$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: mEOuKoH4ratNyo66B65HyXhI49664/MPLXaCqXv3fGo= Subject key identifier: B6:05:2B:7C:DE:CB:FE:F3:4A:14:2E:A2:68:17:40:7D:78:A2:10:6E Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 09E8 Signing time: Thu 24 Apr 2025 19:49:50 +0000 Manifest this update: Thu 24 Apr 2025 19:49:50 +0000 Manifest next update: Thu 01 May 2025 19:49:50 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: c45uFzSurjeGazIQmJXpj5NIYRBNJDLW4LPZhvRu8/4=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 5JEqGqZjOXkDQpngg62rkwfruwetrEFqTjvsf4P8Fxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Apr 24 19:49:50 2025 GMT Not After : May 1 19:49:50 2025 GMT Subject: CN=680a95de-d0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:61:19:18:43:9a:36:1f:a5:eb:e0:01:35: 02:e8:5d:b6:da:07:45:75:55:e5:02:6b:ce:6e:d7: 82:09:d6:b1:fd:92:47:27:f5:87:fb:9f:3f:d3:40: e0:57:50:e6:c7:60:3f:a0:d4:51:f7:1b:b9:0b:5d: 0b:31:cd:71:d1:8e:cb:a6:71:b8:5f:65:99:35:9b: 31:42:46:62:2c:ac:54:08:2a:7e:03:d7:96:34:22: e8:8d:bb:66:0b:5f:5c:24:73:c1:02:8b:e1:79:13: 52:b7:5b:e7:62:70:f9:fe:49:a1:1c:28:13:74:36: cc:69:3d:c9:71:a4:8a:1d:26:1e:fb:ae:11:8f:2b: 2b:9f:e6:ce:c0:a0:d3:c1:95:c6:c5:ef:1e:2d:ce: 9c:ac:94:c5:13:46:73:8e:a1:b4:23:b4:0f:4a:98: 2e:63:10:2e:9d:25:e1:a2:07:63:0e:31:8d:60:47: 1f:8a:40:ae:6a:16:53:e1:f2:f9:99:51:3c:65:74: 54:83:56:3e:2b:5a:7f:5d:a8:40:be:2d:b8:1f:52: b8:de:28:63:10:8f:ae:2d:47:3f:73:a3:76:1b:ae: cb:a6:2a:a7:0b:8e:63:fb:1d:1d:ac:e0:d3:18:4b: 69:af:d7:6d:d6:d3:69:a6:81:d7:5f:5b:ff:5c:ef: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:05:2B:7C:DE:CB:FE:F3:4A:14:2E:A2:68:17:40:7D:78:A2:10:6E X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:01:37:fc:90:06:66:2c:71:e3:5d:e8:53:41:d5:08:35:79: 53:3e:34:f3:42:4d:0e:4b:e3:af:3b:e5:77:fe:d5:78:1a:d1: 0b:d5:7f:e1:76:39:cb:b1:57:56:82:56:23:18:fb:91:d3:fc: 84:82:3d:a0:a0:9c:60:90:d2:ea:d9:87:25:42:e3:08:42:13: 32:b0:52:8c:e9:f4:79:63:53:73:8c:5e:f4:08:b3:18:bb:a9: c5:9d:84:04:73:d1:f6:5a:ac:4f:4c:88:a9:b4:ce:35:1d:3f: 29:1f:ac:5b:ba:92:5a:66:43:00:6c:bf:69:08:7f:83:7b:03: 7c:5a:9c:a9:d2:80:f2:28:eb:3e:71:f9:da:70:35:ae:ea:1c: e2:e5:49:1b:b7:e8:8f:96:b0:78:e6:6d:4a:99:02:73:08:1a: 14:49:5b:b6:84:ed:e7:67:32:25:77:0f:90:d6:4c:7c:b7:9c: bb:00:d3:92:0d:21:6e:4e:85:6f:cd:2e:93:7d:ba:69:3c:a1: 38:c6:27:19:c6:2d:0b:ef:f6:da:6b:4a:55:62:94:00:cd:68: c1:81:a8:b1:e5:86:a8:82:30:ba:ab:0f:a3:ed:8d:58:30:d1: 98:bf:88:35:64:69:52:73:90:ad:da:95:d6:12:3c:a4:95:84: c5:4c:78:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwNDI0MTk0OTUwWhcNMjUwNTAxMTk0OTUwWjAYMRYwFAYD VQQDEw02ODBhOTVkZS1kMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a1hGRhDmjYfpevgATUC6F222gdFdVXlAmvObteCCdax/ZJHJ/WH+58/00Dg V1Dmx2A/oNRR9xu5C10LMc1x0Y7LpnG4X2WZNZsxQkZiLKxUCCp+A9eWNCLojbtm C19cJHPBAovheRNSt1vnYnD5/kmhHCgTdDbMaT3JcaSKHSYe+64Rjysrn+bOwKDT wZXGxe8eLc6crJTFE0ZzjqG0I7QPSpguYxAunSXhogdjDjGNYEcfikCuahZT4fL5 mVE8ZXRUg1Y+K1p/XahAvi24H1K43ihjEI+uLUc/c6N2G67LpiqnC45j+x0drODT GEtpr9dt1tNppoHXX1v/XO/BNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYFK3ze y/7zShQuomgXQH14ohBuMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtATf8kAZmLHHjXehTQdUINXlTPjTzQk0OS+OvO+V3/tV4GtEL1X/h djnLsVdWglYjGPuR0/yEgj2goJxgkNLq2YclQuMIQhMysFKM6fR5Y1NzjF70CLMY u6nFnYQEc9H2WqxPTIiptM41HT8pH6xbupJaZkMAbL9pCH+DewN8Wpyp0oDyKOs+ cfnacDWu6hzi5Ukbt+iPlrB45m1KmQJzCBoUSVu2hO3nZzIldw+Q1kx8t5y7ANOS DSFuToVvzS6TfbppPKE4xicZxi0L7/baa0pVYpQAzWjBgaix5YaogjC6qw+j7Y1Y MNGYv4g1ZGlSc5Ct2pXWEjyklYTFTHgz -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:59 2025 by rpki-client