$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft File: JHItMcJRPk5_h-23Df6dyU-EaLo.mft (raw, json) Hash identifier: c2FQ8NFYLxZJ9ibQrGZztFPt9aKhcJbWprPuHIfzma0= Subject key identifier: 27:F6:40:79:02:C7:5E:C2:5D:B4:AF:05:90:CC:A2:5F:44:5C:46:8C Authority key identifier: 24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA Certificate issuer: /CN=A91186C2/serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft Manifest number: 36 Signing time: Fri 25 Apr 2025 06:34:32 +0000 Manifest this update: Fri 25 Apr 2025 06:34:31 +0000 Manifest next update: Fri 02 May 2025 06:34:31 +0000 Files and hashes: 1: JHItMcJRPk5_h-23Df6dyU-EaLo.crl (hash: 91K9gxSqs2Zg7mKU8Xy8NgAjKz3VUae23xVD65w5p/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=24722D31C2513E4E7F87EDB70DFE9DC94F8468BA Validity Not Before: Apr 25 06:34:31 2025 GMT Not After : May 2 06:34:31 2025 GMT Subject: CN=680b2cf7-96ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:92:94:27:64:37:c0:d8:4c:f2:aa:89:c1:30: 85:02:ce:82:7e:da:4a:51:76:0e:d0:68:3a:57:2e: d0:c9:7e:ad:bd:07:3f:3e:6b:99:96:cd:2b:fe:90: a3:bd:2b:63:c2:84:e4:ff:26:61:6c:e5:6c:1f:87: c2:d9:10:67:75:a0:1f:86:57:14:39:08:f4:ff:ab: 0c:ca:7b:2a:eb:df:f1:d5:4e:f0:a8:6b:de:90:88: bc:73:59:da:b7:1b:cd:70:b2:47:8b:99:4d:42:cb: ab:71:75:a3:2c:d9:e6:64:19:48:7f:52:46:a1:99: 53:86:78:d5:e0:db:be:fb:4d:9c:e1:10:39:34:2c: 3a:4d:f0:69:44:1b:cd:b4:c9:53:20:26:83:17:49: 59:e9:67:40:0c:51:c9:18:6f:1c:19:85:d2:27:35: ea:49:e4:50:79:4a:69:c1:f5:f0:43:41:1c:ef:fa: f4:02:ee:e1:82:d2:f0:ab:ef:ef:3b:c7:d5:9e:2e: 58:92:1d:11:17:f4:24:52:0b:76:d7:8e:ce:f9:5f: 77:68:fc:bf:aa:e3:05:2d:2f:bd:c0:e6:d0:8c:84: ad:a0:87:b6:db:f5:7b:2b:e9:24:2d:90:8c:e4:92: 4a:bd:06:43:86:d9:2e:e6:0d:58:ef:5a:9d:48:cb: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F6:40:79:02:C7:5E:C2:5D:B4:AF:05:90:CC:A2:5F:44:5C:46:8C X509v3 Authority Key Identifier: keyid:24:72:2D:31:C2:51:3E:4E:7F:87:ED:B7:0D:FE:9D:C9:4F:84:68:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHItMcJRPk5_h-23Df6dyU-EaLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/2555BF06D17F11EFB3846928C4F9AE02/JHItMcJRPk5_h-23Df6dyU-EaLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3a:02:62:c8:9e:3c:86:f4:b5:78:fc:4e:50:76:2a:57:e8: d5:9f:7d:c9:a7:55:32:2d:2d:e9:49:98:fa:fc:4e:a7:c7:84: f9:8d:d8:71:c7:b8:0f:1e:a5:f6:de:07:c7:40:1a:08:df:a3: 4e:65:cf:e7:5a:d9:04:24:fb:d5:5a:e0:02:00:d3:84:ea:5e: ce:34:f2:28:03:57:43:bb:9e:ae:49:fc:45:4c:25:3f:8f:a6: ed:65:b9:7d:55:06:e4:44:db:17:fe:02:cd:5e:9b:42:35:db: 6a:79:ba:c1:7e:43:da:0e:dd:1e:27:6b:08:92:dc:df:55:42: a9:1f:6d:c5:20:bc:13:0b:16:e6:5c:db:83:98:90:89:2f:33: b3:1a:ea:77:03:67:92:02:fd:15:61:10:7a:76:a3:a5:71:d4: e5:fc:03:e8:59:88:f1:50:15:73:5c:8c:84:34:9f:2b:b0:43: ae:82:05:1f:4e:4a:cf:5a:2d:ab:af:74:f0:e6:f4:4d:f4:78: 74:cf:0b:bf:43:4e:83:0e:16:b9:82:d4:39:84:73:ba:d1:40: 03:21:10:96:0a:98:e4:e5:4e:1d:bd:13:95:01:23:56:c4:bb: 6a:0a:7f:ec:ff:17:fa:98:74:7a:d4:e8:8c:31:2b:92:cd:1e: a7:59:19:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoMjQ3MjJEMzFDMjUxM0U0RTdGODdFREI3MERGRTlEQzk0 Rjg0NjhCQTAeFw0yNTA0MjUwNjM0MzFaFw0yNTA1MDIwNjM0MzFaMBgxFjAUBgNV BAMTDTY4MGIyY2Y3LTk2Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbkpQnZDfA2EzyqonBMIUCzoJ+2kpRdg7QaDpXLtDJfq29Bz8+a5mWzSv+kKO9 K2PChOT/JmFs5Wwfh8LZEGd1oB+GVxQ5CPT/qwzKeyrr3/HVTvCoa96QiLxzWdq3 G81wskeLmU1Cy6txdaMs2eZkGUh/UkahmVOGeNXg2777TZzhEDk0LDpN8GlEG820 yVMgJoMXSVnpZ0AMUckYbxwZhdInNepJ5FB5SmnB9fBDQRzv+vQC7uGC0vCr7+87 x9WeLliSHREX9CRSC3bXjs75X3do/L+q4wUtL73A5tCMhK2gh7bb9Xsr6SQtkIzk kkq9BkOG2S7mDVjvWp1Iy7UfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ/ZAeQLH XsJdtK8FkMyiX0RcRowwHwYDVR0jBBgwFoAUJHItMcJRPk5/h+23Df6dyU+EaLow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzI1NTVCRjA2RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL0pISXRNY0pSUGs1X2gtMjNEZjZkeVUtRWFM by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkhJdE1jSlJQazVfaC0yM0RmNmR5VS1FYUxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzI1NTVCRjA2RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL0pISXRNY0pSUGs1 X2gtMjNEZjZkeVUtRWFMby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAg6AmLInjyG9LV4/E5QdipX6NWffcmnVTItLelJmPr8TqfHhPmN2HHH uA8epfbeB8dAGgjfo05lz+da2QQk+9Va4AIA04TqXs408igDV0O7nq5J/EVMJT+P pu1luX1VBuRE2xf+As1em0I122p5usF+Q9oO3R4nawiS3N9VQqkfbcUgvBMLFuZc 24OYkIkvM7Ma6ncDZ5IC/RVhEHp2o6Vx1OX8A+hZiPFQFXNcjIQ0nyuwQ66CBR9O Ss9aLauvdPDm9E30eHTPC79DToMOFrmC1DmEc7rRQAMhEJYKmOTlTh29E5UBI1bE u2oKf+z/F/qYdHrU6IwxK5LNHqdZGSo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:57 2025 by rpki-client