$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft File: jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json) Hash identifier: kuE1qg6DdER9SWbtMqu1kz+jAyRUaPIQ7iPCIuwUkHo= Subject key identifier: 45:AA:B0:FA:42:C5:76:52:87:3D:36:48:A8:26:4F:63:E9:B7:7D:A7 Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft Manifest number: 01EA Signing time: Fri 25 Apr 2025 01:52:13 +0000 Manifest this update: Fri 25 Apr 2025 01:52:13 +0000 Manifest next update: Fri 02 May 2025 01:52:13 +0000 Files and hashes: 1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: RfgMSCFvsHE+RFuJjcomwdaym82M6a4okjFaQMN1Ng0=) 2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: Q+xBXhtidbH61CzoWLEFSg+uEFF8i0uaB/q+T0AhmlA=) 3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: i/k+PMmPjEOn62f4++TqWacooyVJfp9CI/snYpM2THY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB Validity Not Before: Apr 25 01:52:13 2025 GMT Not After : May 2 01:52:13 2025 GMT Subject: CN=680aeacd-e866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:a9:8a:4a:a5:ed:01:5c:b7:49:1c:b8:9b: ef:ad:51:a5:66:96:d8:08:6e:5e:bf:32:bb:9d:3e: 6f:22:3e:b5:30:c4:52:b1:b4:13:0c:62:63:06:50: 05:3d:1d:31:94:09:ec:7a:8c:93:a0:16:2d:89:48: d6:4b:e7:d3:21:52:ac:a3:3c:3c:8c:84:16:39:3c: bd:69:3f:d8:a2:6c:79:c4:a5:4b:63:45:42:f1:e9: 98:57:07:8c:a1:91:56:df:c9:66:8e:0a:81:2d:3d: c5:b6:4c:e9:90:f9:a8:ec:33:cf:d4:c9:c6:33:31: 33:c1:44:71:2b:d3:51:34:8a:95:d5:e1:00:94:02: 5f:2d:88:e5:53:b1:0c:98:66:74:21:7c:76:5d:b9: c7:61:bb:fe:d3:26:82:29:80:14:0f:64:2c:0e:7e: dd:81:08:3d:dc:d8:66:96:ca:e1:d1:18:8a:57:fd: 36:18:30:f9:37:57:54:f4:43:83:c4:34:f1:64:ae: 09:0a:4f:4c:ec:74:cf:cd:cf:3e:2e:85:6b:c3:ce: 45:f5:1b:b7:ef:04:09:9b:8a:be:14:04:61:90:32: 40:26:9e:54:36:e7:4a:8b:67:c9:75:3b:14:8b:d0: 60:bc:90:3e:a2:d3:e6:28:eb:97:27:22:3b:a9:98: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:B0:FA:42:C5:76:52:87:3D:36:48:A8:26:4F:63:E9:B7:7D:A7 X509v3 Authority Key Identifier: keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:15:99:95:b5:3a:03:14:c8:3d:e1:c8:4a:71:8f:be:e6:6b: 39:b8:24:94:7b:2c:1b:3d:07:b7:0c:6f:2b:85:56:3a:f6:6c: eb:de:8a:2a:4c:bf:4e:5c:3a:40:92:e5:6c:01:be:30:4e:96: ca:ef:37:06:57:27:dc:fd:dc:e9:58:f8:f7:2f:d0:af:a9:8b: 40:37:5b:18:f4:c3:5f:dd:84:86:3b:56:23:e5:be:b6:f9:8e: ab:fc:dc:ac:2e:e9:30:36:63:36:05:a4:e9:71:4d:4b:2a:88: 6c:81:4d:3b:ad:e5:31:db:2a:d8:47:ad:b5:00:dd:5d:ef:a9: 57:d6:01:dd:f2:c9:c6:69:9f:55:b0:da:e8:f6:5e:4e:39:f5: 77:40:ef:93:e6:84:e2:f8:5a:5b:a0:b6:cf:ce:6c:f0:8f:cc: c5:a6:05:18:13:3f:04:1a:3f:34:92:0f:8f:6d:fe:dd:ba:58: f8:c5:3b:e6:f3:b2:1b:1c:a5:6f:76:f6:74:ca:67:62:1f:2e: 40:a9:6e:87:a7:95:e0:52:b5:53:23:c6:1b:87:9f:cb:47:fe: f2:14:7a:ff:3a:cd:71:23:1f:fc:5e:1e:02:81:94:e9:e5:63: c5:06:05:47:39:91:7d:a2:77:1d:f8:76:cb:26:58:8d:f8:a0: 04:44:b8:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyMDIxMTAvBgNVBAUTKDhDQkU5REQ1OTkzNEM5QUQyMDVGQ0U2QUY4RUY0REI4 MDFGMUQzRUIwHhcNMjUwNDI1MDE1MjEzWhcNMjUwNTAyMDE1MjEzWjAYMRYwFAYD VQQDEw02ODBhZWFjZC1lODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5+pikql7QFct0kcuJvvrVGlZpbYCG5evzK7nT5vIj61MMRSsbQTDGJjBlAF PR0xlAnseoyToBYtiUjWS+fTIVKsozw8jIQWOTy9aT/Yomx5xKVLY0VC8emYVweM oZFW38lmjgqBLT3FtkzpkPmo7DPP1MnGMzEzwURxK9NRNIqV1eEAlAJfLYjlU7EM mGZ0IXx2XbnHYbv+0yaCKYAUD2QsDn7dgQg93Nhmlsrh0RiKV/02GDD5N1dU9EOD xDTxZK4JCk9M7HTPzc8+LoVrw85F9Ru37wQJm4q+FARhkDJAJp5UNudKi2fJdTsU i9BgvJA+otPmKOuXJyI7qZidtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWqsPpC xXZShz02SKgmT2Ppt32nMB8GA1UdIwQYMBaAFIy+ndWZNMmtIF/OavjvTbgB8dPr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjIwMi80RDQxQ0Y5MjQw OUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlhMGdYODVxLU85TnVBSHgw LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMNmQxWmsweWEwZ1g4NXEtTzlOdUFIeDAtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjIwMi80RDQxQ0Y5MjQwOUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlh MGdYODVxLU85TnVBSHgwLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMFZmVtToDFMg94chKcY++5ms5uCSUeywbPQe3DG8rhVY69mzr3ooq TL9OXDpAkuVsAb4wTpbK7zcGVyfc/dzpWPj3L9CvqYtAN1sY9MNf3YSGO1Yj5b62 +Y6r/NysLukwNmM2BaTpcU1LKohsgU07reUx2yrYR621AN1d76lX1gHd8snGaZ9V sNro9l5OOfV3QO+T5oTi+FpboLbPzmzwj8zFpgUYEz8EGj80kg+Pbf7dulj4xTvm 87IbHKVvdvZ0ymdiHy5AqW6Hp5XgUrVTI8Ybh5/LR/7yFHr/Os1xIx/8Xh4CgZTp 5WPFBgVHOZF9oncd+HbLJliN+KAERLgR -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:01 2025 by rpki-client