$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft File: jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft (raw, json) Hash identifier: dYWBh3ZQx1tEHqyJzc7PMBRhdL4le5Vo+0KwVNu6Ujk= Subject key identifier: 68:47:A4:F9:45:85:B4:BB:51:7B:6A:B0:62:26:B2:AA:DD:F1:AE:F1 Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Certificate serial: 06CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft Manifest number: 06CA Signing time: Thu 24 Apr 2025 21:51:22 +0000 Manifest this update: Thu 24 Apr 2025 21:51:21 +0000 Manifest next update: Thu 01 May 2025 21:51:21 +0000 Files and hashes: 1: jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl (hash: f7Lg1zN4wiKVam0dLRNkZHkf55g6DhNR+MHTwIyzJps=) 2: 22D8137A51A711EBAAAB6410C4F9AE02.roa (hash: W1YtTgfcUQgVCMN18bivEJ+sBWqdB/GL1VhO0Gs0eBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1743 (0x6cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3 Validity Not Before: Apr 24 21:51:21 2025 GMT Not After : May 1 21:51:21 2025 GMT Subject: CN=680ab25a-2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:6a:9e:42:23:df:3d:53:d1:9d:18:5e:22: 61:39:7d:6a:db:f5:0a:78:9a:0b:2b:03:af:a6:eb: 20:6f:e4:f7:25:a6:16:bd:c5:d9:23:c4:c4:88:0a: 91:1e:19:ad:a5:89:c5:d7:bd:50:75:de:84:23:76: 18:c1:19:4f:86:1a:17:41:a1:94:0e:20:16:c6:3a: e9:af:0f:27:9e:a3:02:9e:d0:c4:01:54:73:cb:ad: d2:39:16:ae:eb:af:2a:ad:da:ea:3b:8f:c8:4a:8e: bc:57:50:9b:e2:7a:6b:c7:3c:23:6e:b8:69:26:0b: df:35:19:d1:15:5a:e7:ac:07:f6:20:bf:fe:c1:df: 7e:ce:57:50:db:e8:9d:dd:b4:8e:6d:2b:6f:17:91: 51:2b:aa:2d:6b:ea:02:3b:8c:2f:ef:55:ed:3b:03: 11:c7:29:b2:8e:59:ca:5d:c9:d9:88:a7:b7:56:91: fe:e4:5b:89:05:91:44:a3:8f:19:56:ab:cd:11:7b: 56:a6:e4:26:d2:1f:6a:48:2b:22:5f:8b:8e:a7:55: c7:9b:4c:01:34:79:20:9e:1d:01:26:6f:c6:72:4f: 12:4d:99:50:5c:03:11:2b:94:1c:79:17:b0:bd:a6: b1:cb:1a:57:ee:a7:2d:cd:49:f9:41:56:37:b0:ac: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:A4:F9:45:85:B4:BB:51:7B:6A:B0:62:26:B2:AA:DD:F1:AE:F1 X509v3 Authority Key Identifier: keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3f:05:8d:9f:af:fb:88:3f:ab:62:0d:b3:42:c5:72:ca:25: 3a:5c:a3:08:3a:c8:c7:e8:55:bf:4d:01:20:b7:96:9a:9c:17: 2d:d3:ff:26:7e:f6:f5:ee:4a:bc:ce:99:9a:8f:1d:c0:04:3e: af:e3:dd:25:d6:d7:7d:d3:7b:27:2f:17:58:e0:ff:a7:50:5e: 89:cf:98:51:4f:6d:12:6e:74:27:4e:ec:c7:1a:8b:99:7c:ae: 91:4a:2c:92:e7:48:32:98:53:e0:c8:de:ee:38:c7:9a:3a:34: c6:e8:3e:23:23:c5:9f:86:64:4a:a1:80:34:a7:7a:cd:62:06: 19:7a:38:47:3e:4d:5e:91:11:90:72:76:9b:70:52:2a:47:7c: e3:b5:97:3b:ff:fa:38:d9:b0:9a:cc:d9:ef:2a:c7:ed:ec:af: 20:3e:8f:43:af:51:44:ac:ac:c2:05:c5:b9:f4:9e:ff:47:3a: 65:d2:2f:1f:91:93:b9:10:b4:7e:5a:3d:2e:70:29:9b:2a:35: 4b:3a:84:79:56:1a:13:78:a6:b2:b4:ac:59:5d:98:91:90:ae: 11:c7:f5:ca:10:08:0c:91:cc:01:f1:22:f9:a7:cb:34:ee:d8: 5f:a1:91:63:a3:96:d2:36:04:08:fd:eb:b2:46:22:65:45:7f: e6:18:70:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBNkMxMTAvBgNVBAUTKDhEMTZGRDBFMjVGQjg5NkUyNkZBNzM0QUJDOTg0Q0U0 QjQ2OThERDMwHhcNMjUwNDI0MjE1MTIxWhcNMjUwNTAxMjE1MTIxWjAYMRYwFAYD VQQDEw02ODBhYjI1YS0yNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPdqnkIj3z1T0Z0YXiJhOX1q2/UKeJoLKwOvpusgb+T3JaYWvcXZI8TEiAqR HhmtpYnF171Qdd6EI3YYwRlPhhoXQaGUDiAWxjrprw8nnqMCntDEAVRzy63SORau 668qrdrqO4/ISo68V1Cb4nprxzwjbrhpJgvfNRnRFVrnrAf2IL/+wd9+zldQ2+id 3bSObStvF5FRK6ota+oCO4wv71XtOwMRxymyjlnKXcnZiKe3VpH+5FuJBZFEo48Z VqvNEXtWpuQm0h9qSCsiX4uOp1XHm0wBNHkgnh0BJm/Gck8STZlQXAMRK5QceRew vaaxyxpX7qctzUn5QVY3sKwUYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhHpPlF hbS7UXtqsGImsqrd8a7xMB8GA1UdIwQYMBaAFI0W/Q4l+4luJvpzSryYTOS0aY3T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUE2Qy8zQjg0OTNCNDUx QTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lXNG0tbk5LdkpoTTVMUnBq ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSYjlEaVg3aVc0bS1uTkt2SmhNNUxScGpkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUE2Qy8zQjg0OTNCNDUxQTUxMUVCQjRBRjA0MEVDNEY5QUUwMi9qUmI5RGlYN2lX NG0tbk5LdkpoTTVMUnBqZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHPwWNn6/7iD+rYg2zQsVyyiU6XKMIOsjH6FW/TQEgt5aanBct0/8m fvb17kq8zpmajx3ABD6v490l1td903snLxdY4P+nUF6Jz5hRT20SbnQnTuzHGouZ fK6RSiyS50gymFPgyN7uOMeaOjTG6D4jI8WfhmRKoYA0p3rNYgYZejhHPk1ekRGQ cnabcFIqR3zjtZc7//o42bCazNnvKsft7K8gPo9Dr1FErKzCBcW59J7/Rzpl0i8f kZO5ELR+Wj0ucCmbKjVLOoR5VhoTeKaytKxZXZiRkK4Rx/XKEAgMkcwB8SL5p8s0 7thfoZFjo5bSNgQI/euyRiJlRX/mGHDt -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:10 2025 by rpki-client