$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json) Hash identifier: Twybka037l0/be2+CMhboBecqa8hGEGNCjcEpOVsZ18= Subject key identifier: 8C:06:AF:ED:A8:F9:5A:36:56:28:AC:C4:64:77:2B:03:86:7F:C0:E9 Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft Manifest number: 019A Signing time: Fri 25 Apr 2025 02:32:19 +0000 Manifest this update: Fri 25 Apr 2025 02:32:19 +0000 Manifest next update: Fri 02 May 2025 02:32:19 +0000 Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: WezQt1tRW1jwhIwGN0+5VijyQxmxj6LMCnn2A0k0OLk=) 2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Y3uWvVWc5h8AjMOh0rbq998afPQd3Tj5ztFh5AezKOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Validity Not Before: Apr 25 02:32:19 2025 GMT Not After : May 2 02:32:19 2025 GMT Subject: CN=680af433-7e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:b8:59:f7:3d:c0:50:28:3d:4a:2e:39:8a: eb:bf:d2:67:a0:b6:02:c3:2c:e4:da:b0:12:5d:23: ee:82:34:25:17:4f:33:17:95:13:21:85:19:96:eb: e0:ef:a3:ac:04:b1:02:c7:58:d0:2a:42:6c:54:f7: 86:a7:bd:b4:53:d4:67:d8:4a:0d:29:23:92:65:f3: e1:74:4a:83:44:31:85:49:76:68:52:18:c6:31:ea: e9:f0:22:e2:18:d9:59:55:8a:e2:b1:90:83:9d:1f: f8:f8:1c:b4:66:e2:61:7e:62:59:04:d8:bb:fa:bf: 4f:27:a4:fd:04:e1:4b:f6:9b:7c:ac:b4:a5:de:8d: 17:cd:db:30:23:48:a5:9c:55:97:96:1f:3a:d5:ff: 7d:3b:3b:80:39:f6:3d:45:d3:dd:56:aa:e8:88:58: 4e:31:03:ab:ef:19:67:fe:07:60:8e:f7:cc:b3:c1: b2:ef:9a:6e:cd:78:d5:fd:a2:a7:fd:6e:de:48:ce: e7:a4:f2:0e:75:da:04:0d:62:1b:a4:c4:d2:19:c9: 4d:e6:73:ab:58:dd:cb:ad:9c:15:eb:d7:37:d7:5c: 25:d6:1b:34:b3:b5:38:ed:c3:00:a6:14:86:05:cd: d8:00:dc:30:76:4e:0f:ce:1b:c2:18:53:f0:bc:ff: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:06:AF:ED:A8:F9:5A:36:56:28:AC:C4:64:77:2B:03:86:7F:C0:E9 X509v3 Authority Key Identifier: keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8d:0d:8e:67:c1:8f:52:01:4f:c8:df:19:6d:da:a9:08:c6: b2:57:08:95:c0:23:d9:f4:5e:78:d7:3e:a4:de:e2:51:c3:87: af:da:5f:3a:39:b7:a4:95:95:4b:14:bf:88:00:05:70:2a:49: 1b:bb:ee:f3:c0:22:b3:60:b0:8e:9b:e1:38:97:b1:90:e5:e0: 17:ac:1e:08:d5:e6:8f:4d:e2:2b:d5:9e:16:96:d7:93:32:de: d2:c5:f0:fa:bd:1b:b2:ca:65:3d:43:1e:b9:2e:e0:5b:ad:5b: da:34:40:9e:bf:9c:cb:19:96:c6:17:d5:ef:cd:5c:d0:c1:fa: ef:33:f7:6b:d0:fe:a0:9f:ec:9a:00:80:52:78:41:74:ab:a5: 86:0e:19:5f:0f:79:c7:e8:6d:55:0b:f3:ca:4c:95:24:ea:fc: 91:43:fe:1b:18:fe:8a:bc:70:ea:13:3f:ba:87:e0:47:eb:33: 55:2b:7d:88:99:40:70:f5:1f:68:a6:f9:34:d1:2e:59:c4:b1: 45:c5:4d:42:df:84:b1:e7:f1:e3:73:a2:6c:55:82:ac:9c:f8: 7c:65:53:a6:59:96:b2:d2:79:33:b4:e8:14:9a:5b:f2:12:1b: 61:3e:86:01:77:a2:6f:79:fd:4a:a6:e2:1c:a7:22:1c:6c:14: f4:4f:4b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4 REFBRkRDREUwHhcNMjUwNDI1MDIzMjE5WhcNMjUwNTAyMDIzMjE5WjAYMRYwFAYD VQQDEw02ODBhZjQzMy03ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CC4Wfc9wFAoPUouOYrrv9JnoLYCwyzk2rASXSPugjQlF08zF5UTIYUZluvg 76OsBLECx1jQKkJsVPeGp720U9Rn2EoNKSOSZfPhdEqDRDGFSXZoUhjGMerp8CLi GNlZVYrisZCDnR/4+By0ZuJhfmJZBNi7+r9PJ6T9BOFL9pt8rLSl3o0XzdswI0il nFWXlh861f99OzuAOfY9RdPdVqroiFhOMQOr7xln/gdgjvfMs8Gy75puzXjV/aKn /W7eSM7npPIOddoEDWIbpMTSGclN5nOrWN3LrZwV69c311wl1hs0s7U47cMAphSG Bc3YANwwdk4PzhvCGFPwvP9BGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwGr+2o +Vo2ViisxGR3KwOGf8DpMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrjQ2OZ8GPUgFPyN8ZbdqpCMayVwiVwCPZ9F541z6k3uJRw4ev2l86 ObeklZVLFL+IAAVwKkkbu+7zwCKzYLCOm+E4l7GQ5eAXrB4I1eaPTeIr1Z4WlteT Mt7SxfD6vRuyymU9Qx65LuBbrVvaNECev5zLGZbGF9XvzVzQwfrvM/dr0P6gn+ya AIBSeEF0q6WGDhlfD3nH6G1VC/PKTJUk6vyRQ/4bGP6KvHDqEz+6h+BH6zNVK32I mUBw9R9opvk00S5ZxLFFxU1C34Sx5/Hjc6JsVYKsnPh8ZVOmWZay0nkztOgUmlvy EhthPoYBd6Jvef1KpuIcpyIcbBT0T0st -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:27 2025 by rpki-client