$ rpki-client -vvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft File: Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json) Hash identifier: yManBNv7vdP7PYS2wrVWm34vnW2rbXM67Ka2kHZxlTk= Subject key identifier: 7A:C4:09:A5:93:B3:DD:3C:D4:ED:65:8E:47:98:DC:D1:7F:16:62:89 Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 Certificate issuer: /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft Manifest number: 1F Signing time: Fri 25 Apr 2025 06:51:25 +0000 Manifest this update: Fri 25 Apr 2025 06:51:25 +0000 Manifest next update: Fri 02 May 2025 06:51:25 +0000 Files and hashes: 1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: duq4KbqIyar/wl2MxaMd5WiJGqxPYnxDNd9bebS6EPQ=) 2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: ddGHr0kpolkDLC4jRmYbLqkLIgOm/5JeTXQQ5En7IJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Validity Not Before: Apr 25 06:51:25 2025 GMT Not After : May 2 06:51:25 2025 GMT Subject: CN=680b30ed-fdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:2d:e1:ab:ba:e4:9d:96:16:aa:52:d4:60: 66:11:da:d9:08:58:57:4c:37:f4:11:ad:a7:3c:aa: e9:95:ad:4c:07:37:e0:8c:33:d9:c6:84:13:ff:dc: e8:9a:0d:68:69:92:a8:61:73:d9:56:89:17:69:35: f6:8b:0e:b1:12:10:fb:95:cf:56:55:6e:0f:7c:8b: 41:cf:d4:9f:b9:25:24:89:37:cd:e4:55:88:e0:ec: 45:75:73:2b:84:01:3b:a1:9c:a2:45:ee:0d:76:36: e2:b5:ce:cb:2c:b8:42:2a:cd:93:1c:63:ba:90:94: d7:9b:24:4d:a3:71:65:67:5f:01:b2:cf:9a:48:6b: af:69:9d:7d:02:f4:d2:f2:02:8a:72:3a:de:2a:53: e8:6f:3f:92:d7:f3:a5:e4:80:06:58:66:91:a8:76: 11:27:bd:35:3c:d7:4a:93:d5:57:a3:b5:67:8b:89: 03:ba:06:ae:79:3c:86:68:44:11:0c:8b:b4:2c:b4: 2d:3c:37:66:a7:0d:a8:7c:4f:ad:96:f8:03:e1:4f: f7:90:84:d0:2a:0d:a2:a0:38:e6:95:4d:2e:48:21: db:42:f6:ea:ad:fe:74:6f:ab:7c:8e:b3:2b:4a:e2: d3:f4:90:40:b5:d1:55:99:51:f0:41:4a:74:f6:e4: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C4:09:A5:93:B3:DD:3C:D4:ED:65:8E:47:98:DC:D1:7F:16:62:89 X509v3 Authority Key Identifier: keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f4:09:87:e2:b3:2f:86:33:67:d0:5f:a7:3a:89:61:4e:78: 23:1d:87:47:6d:67:ce:36:a8:1d:2e:f4:fc:d1:47:cc:cd:93: 56:42:9c:f5:81:30:a8:78:5f:de:19:fc:c7:9e:bd:90:a1:75: 65:11:9f:c0:7a:34:ca:f9:2d:c9:70:70:bf:c9:94:7c:82:e0: 05:b5:a0:63:96:eb:f9:5a:51:17:f4:3f:af:32:f6:df:3e:f4: e5:e0:69:42:ca:15:79:86:d4:64:a4:10:5a:ac:5f:f8:b7:5f: 18:a8:68:e2:99:90:6f:41:2a:48:24:54:67:a9:ca:26:e6:57: 63:4a:6d:74:ae:64:b9:de:89:96:9d:6c:c1:a8:b5:33:66:57: 20:4d:b7:bd:09:d7:ae:88:ee:ba:e8:92:7f:bb:be:e7:b7:fc: 89:a4:05:2f:42:c2:46:5d:ef:9d:f0:8a:7a:45:ac:86:2a:7f: a1:0e:07:d1:2e:96:1d:67:06:44:82:19:78:e1:8c:2c:17:d5: 12:cd:e2:69:b4:16:c3:4b:e6:69:53:f1:da:30:b2:f5:e8:45: 70:c5:57:6b:68:5d:cd:8c:89:3a:fc:db:41:af:26:15:dd:42: 88:8f:22:e5:43:34:1d:63:7f:6a:1c:a6:1c:9b:a2:b3:2a:99: 7b:9b:0c:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NUZBQjExMC8GA1UEBRMoMjZGOEJEMDNDNUEyQjdBQTcxNzU0NTlFQTA0N0E4ODY3 NjIzOUVFMDAeFw0yNTA0MjUwNjUxMjVaFw0yNTA1MDIwNjUxMjVaMBgxFjAUBgNV BAMTDTY4MGIzMGVkLWZkZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKyi3hq7rknZYWqlLUYGYR2tkIWFdMN/QRrac8qumVrUwHN+CMM9nGhBP/3Oia DWhpkqhhc9lWiRdpNfaLDrESEPuVz1ZVbg98i0HP1J+5JSSJN83kVYjg7EV1cyuE ATuhnKJF7g12NuK1zsssuEIqzZMcY7qQlNebJE2jcWVnXwGyz5pIa69pnX0C9NLy AopyOt4qU+hvP5LX86XkgAZYZpGodhEnvTU810qT1VejtWeLiQO6Bq55PIZoRBEM i7QstC08N2anDah8T62W+APhT/eQhNAqDaKgOOaVTS5IIdtC9uqt/nRvq3yOsytK 4tP0kEC10VWZUfBBSnT25F4lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUesQJpZOz 3TzU7WWOR5jc0X8WYokwHwYDVR0jBBgwFoAUJvi9A8Wit6pxdUWeoEeohnYjnuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1RkFCL0ZBODYzNzcyRjVB QzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZweGRVV2VvRWVvaG5Zam51 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSnZpOUE4V2l0NnB4ZFVXZW9FZW9obllqbnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 RkFCL0ZBODYzNzcyRjVBQzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZw eGRVV2VvRWVvaG5Zam51QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKr0CYfisy+GM2fQX6c6iWFOeCMdh0dtZ842qB0u9PzRR8zNk1ZCnPWB MKh4X94Z/MeevZChdWURn8B6NMr5LclwcL/JlHyC4AW1oGOW6/laURf0P68y9t8+ 9OXgaULKFXmG1GSkEFqsX/i3XxioaOKZkG9BKkgkVGepyibmV2NKbXSuZLneiZad bMGotTNmVyBNt70J166I7rrokn+7vue3/ImkBS9CwkZd753winpFrIYqf6EOB9Eu lh1nBkSCGXjhjCwX1RLN4mm0FsNL5mlT8dowsvXoRXDFV2toXc2MiTr820GvJhXd QoiPIuVDNB1jf2ocphyborMqmXubDK4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:53 2025 by rpki-client