$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: 0jH/tdD/x5m8nycg3gVeqGjd0Rs/TZDmTKzl4iY+zxM= Subject key identifier: 1D:3B:13:9D:2D:7F:8D:82:0C:4E:CE:5E:F3:52:3E:6C:F8:E5:13:23 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 06D1 Signing time: Thu 24 Apr 2025 21:56:34 +0000 Manifest this update: Thu 24 Apr 2025 21:56:34 +0000 Manifest next update: Thu 01 May 2025 21:56:34 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: KwNcCpeB5PuaR1wflTE4Gw/z/e5vaouvsmN26U4wTv0=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Apr 24 21:56:34 2025 GMT Not After : May 1 21:56:34 2025 GMT Subject: CN=680ab392-8dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:66:74:5f:e8:b1:06:cf:50:c1:c2:65:35: 38:b0:1e:53:b8:5a:1a:e0:d8:7f:4c:26:72:f6:67: fe:bf:0e:36:f7:f9:26:8b:5c:15:76:a0:3a:34:84: 09:8d:06:65:9d:b1:53:1b:41:12:f4:a2:1c:be:96: 9b:9b:84:ae:9a:08:70:bc:26:e1:b7:27:8c:26:7b: 77:c1:c1:47:29:82:25:4e:9b:75:43:09:a2:58:83: 14:51:7a:76:99:43:c0:ea:48:ac:ff:5a:4c:77:39: 4e:fb:38:be:11:5b:25:d9:e5:4a:41:17:9b:c9:52: 92:90:10:90:fa:3b:d8:15:e6:0b:7f:d4:65:1d:18: a1:c5:fe:6d:8c:5c:43:cc:a4:7b:ba:3e:b8:58:a4: e7:a2:07:1c:cc:25:b5:c2:58:76:2c:d7:90:02:8c: 41:18:c9:bc:2d:12:ee:02:47:52:4b:fc:f2:5d:2c: e1:3e:c9:0d:15:bc:57:ad:ae:03:b7:1d:5c:cd:a5: 43:77:dd:e1:62:9e:35:07:f1:c5:cb:09:03:84:b1: f7:c8:8b:7f:c7:b6:f3:27:c7:53:62:14:75:31:67: 88:2e:3d:77:22:a6:b3:3d:fd:2f:6e:40:cf:6a:43: 74:db:96:71:29:01:f5:c4:dd:92:be:cf:fb:56:82: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:13:9D:2D:7F:8D:82:0C:4E:CE:5E:F3:52:3E:6C:F8:E5:13:23 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b1:e3:2c:03:12:da:49:09:c6:4d:fd:5e:e4:2b:33:f3:6d: 50:8d:68:c0:d3:8c:2c:84:d9:3c:42:fc:e2:35:b9:58:ae:74: f6:b7:21:c3:3a:97:f6:90:f5:a1:6a:7b:61:f3:36:cc:2f:71: 66:2e:90:43:6f:8f:8b:ce:7e:8d:a0:39:98:a5:5d:31:6e:47: 60:16:15:a7:c8:1a:15:45:c6:0a:ad:0c:c5:09:2d:be:c2:4f: 4a:47:a9:8b:d1:6a:16:4a:6f:3a:f9:aa:9b:25:99:d7:a3:f7: b0:00:a4:b2:71:cc:b0:d8:ac:4e:d7:1e:3f:0c:c4:e3:0d:d8: 0d:90:c5:98:5c:90:ba:e6:b8:7f:fc:1a:35:27:a8:07:a1:02: fd:fd:b4:5c:31:2e:07:ef:05:93:86:15:83:08:cf:e5:ea:ed: 82:8a:30:f0:5b:5e:2c:42:f4:57:5d:22:00:20:36:ef:12:1c: 53:f9:e0:b7:c5:c1:1b:c5:4d:29:ea:89:74:bb:dc:77:ee:be: c5:35:19:ad:85:31:6b:e4:33:d7:9c:76:8a:89:db:fb:33:55: 2e:a3:58:8c:88:75:cf:81:a1:7b:09:a5:0f:8d:a4:76:1b:39: 8b:9c:f3:fb:46:03:a3:c0:15:52:cd:52:72:64:5f:7e:99:f5: ea:af:e0:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwNDI0MjE1NjM0WhcNMjUwNTAxMjE1NjM0WjAYMRYwFAYD VQQDEw02ODBhYjM5Mi04ZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3NmdF/osQbPUMHCZTU4sB5TuFoa4Nh/TCZy9mf+vw429/kmi1wVdqA6NIQJ jQZlnbFTG0ES9KIcvpabm4SumghwvCbhtyeMJnt3wcFHKYIlTpt1QwmiWIMUUXp2 mUPA6kis/1pMdzlO+zi+EVsl2eVKQRebyVKSkBCQ+jvYFeYLf9RlHRihxf5tjFxD zKR7uj64WKTnogcczCW1wlh2LNeQAoxBGMm8LRLuAkdSS/zyXSzhPskNFbxXra4D tx1czaVDd93hYp41B/HFywkDhLH3yIt/x7bzJ8dTYhR1MWeILj13IqazPf0vbkDP akN025ZxKQH1xN2Svs/7VoIkwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB07E50t f42CDE7OXvNSPmz45RMjMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIseMsAxLaSQnGTf1e5Csz821QjWjA04wshNk8QvziNblYrnT2tyHD Opf2kPWhanth8zbML3FmLpBDb4+Lzn6NoDmYpV0xbkdgFhWnyBoVRcYKrQzFCS2+ wk9KR6mL0WoWSm86+aqbJZnXo/ewAKSyccyw2KxO1x4/DMTjDdgNkMWYXJC65rh/ /Bo1J6gHoQL9/bRcMS4H7wWThhWDCM/l6u2CijDwW14sQvRXXSIAIDbvEhxT+eC3 xcEbxU0p6ol0u9x37r7FNRmthTFr5DPXnHaKidv7M1Uuo1iMiHXPgaF7CaUPjaR2 GzmLnPP7RgOjwBVSzVJyZF9+mfXqr+BJ -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:40 2025 by rpki-client