$ rpki-client -vvf rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft File: JxcwkTdorwE4ujkDJNqUMcQJukQ.mft (raw, json) Hash identifier: HocoKxNQM5LdCfcrIedk+/+L2NSGuybgJnyAJRUexzY= Subject key identifier: 74:C3:5C:0E:91:42:70:34:E4:A8:4C:84:AD:8F:4B:E3:94:B9:1F:11 Authority key identifier: 27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 Certificate issuer: /CN=A916091A/serialNumber=271730913768AF0138BA390324DA9431C409BA44 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:05:31 +0000 Manifest this update: Fri 25 Apr 2025 02:05:31 +0000 Manifest next update: Fri 02 May 2025 02:05:31 +0000 Files and hashes: 1: JxcwkTdorwE4ujkDJNqUMcQJukQ.crl (hash: zobx/qumAtU5xOSs/7faa1lJGmaEzcJvjDbdaobuFdQ=) 2: 7FFCAA30667111EDB5CCA77DC4F9AE02.roa (hash: HdPmwaawT5O+7w2o5NE/TwveYFSujOehIUM1n6BW8zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916091A, serialNumber=271730913768AF0138BA390324DA9431C409BA44 Validity Not Before: Apr 25 02:05:31 2025 GMT Not After : May 2 02:05:31 2025 GMT Subject: CN=680aedeb-08b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:84:f1:90:17:60:d2:dd:3c:7e:ae:2f:67: 2c:db:29:02:f0:fe:9e:34:e7:af:9a:f6:bc:73:eb: fa:48:17:6d:f9:f8:c8:8f:2c:17:c7:82:f8:b8:52: 7a:86:46:b5:24:74:2e:2e:8b:66:fe:b7:17:22:eb: 2e:a5:b7:4d:94:5a:7a:d4:46:b8:fd:fb:47:64:87: a3:5a:4a:5f:6b:c8:e7:1c:ea:e0:c8:28:35:e7:18: 69:3a:44:9f:eb:8f:c1:10:af:cb:ea:92:49:fe:25: 66:a0:6a:42:89:78:a2:df:1c:0c:1e:24:35:21:e2: 5b:c4:53:58:4a:96:d8:ab:cd:b5:a0:98:60:5d:44: 42:64:cc:42:89:c4:c8:13:dc:70:2f:d9:87:16:d3: 6c:e0:b7:0e:95:b9:31:a9:9b:bb:a5:8e:3d:f6:e3: f6:d2:9d:4c:73:5e:0a:c9:30:1f:c4:30:6b:75:41: a9:50:85:c1:8b:26:a6:d8:3a:f3:87:72:89:0d:d7: f0:53:ef:b2:6d:c8:c1:f5:80:db:5d:c5:a2:c8:a8: ee:3e:29:00:ae:ed:29:84:90:ba:c4:a5:1f:dc:58: 5b:4c:ee:28:0f:ff:a8:06:35:2b:a8:42:13:a1:64: 7e:87:1c:78:01:56:71:5c:5b:82:dc:b5:73:27:7b: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C3:5C:0E:91:42:70:34:E4:A8:4C:84:AD:8F:4B:E3:94:B9:1F:11 X509v3 Authority Key Identifier: keyid:27:17:30:91:37:68:AF:01:38:BA:39:03:24:DA:94:31:C4:09:BA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JxcwkTdorwE4ujkDJNqUMcQJukQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916091A/4204057E666D11EDB5565777C4F9AE02/JxcwkTdorwE4ujkDJNqUMcQJukQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d8:9d:fc:2b:bc:2a:87:c5:90:e7:da:79:10:c1:ac:e5:df: 98:61:80:4a:d1:7d:25:bd:17:1b:a4:92:c9:ca:57:10:b3:43: e8:b1:f3:08:e4:d2:41:b4:38:a0:e2:b4:18:b1:2b:b6:5f:23: 1a:65:af:66:de:54:0f:19:bb:63:7b:79:a0:94:9e:3d:e6:04: 13:50:6f:ea:87:89:51:3e:3e:9d:80:89:ba:49:c8:b6:39:a3: 80:11:6d:e0:91:f3:e3:ae:2e:4f:61:9d:02:02:f8:64:fb:79: b0:9f:8f:cb:33:5a:92:82:08:40:15:cf:9a:34:af:b8:67:42: 2e:cf:48:d8:8b:ce:0d:69:96:0f:72:7d:e4:08:62:77:fc:85: 6e:a5:a2:30:4c:81:ac:43:70:c6:88:cf:ee:3e:42:76:48:22: 59:cb:3b:fa:dc:5c:55:5d:d2:24:4e:d9:92:53:70:a9:95:f2: 78:0a:7b:69:6f:3e:0b:84:a0:90:3e:72:b1:f3:9f:10:08:d1: 7f:36:b7:55:e8:b9:4a:50:b6:ce:d2:79:ce:00:33:95:d8:58: c8:28:b5:81:cb:68:75:6d:a4:66:99:be:cf:5d:15:e9:5c:96: dd:30:2d:8b:19:cb:e3:11:87:32:62:d6:61:ea:8b:d4:6c:a2: 42:86:35:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA5MUExMTAvBgNVBAUTKDI3MTczMDkxMzc2OEFGMDEzOEJBMzkwMzI0REE5NDMx QzQwOUJBNDQwHhcNMjUwNDI1MDIwNTMxWhcNMjUwNTAyMDIwNTMxWjAYMRYwFAYD VQQDEw02ODBhZWRlYi0wOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2feE8ZAXYNLdPH6uL2cs2ykC8P6eNOevmva8c+v6SBdt+fjIjywXx4L4uFJ6 hka1JHQuLotm/rcXIusupbdNlFp61Ea4/ftHZIejWkpfa8jnHOrgyCg15xhpOkSf 64/BEK/L6pJJ/iVmoGpCiXii3xwMHiQ1IeJbxFNYSpbYq821oJhgXURCZMxCicTI E9xwL9mHFtNs4LcOlbkxqZu7pY499uP20p1Mc14KyTAfxDBrdUGpUIXBiyam2Drz h3KJDdfwU++ybcjB9YDbXcWiyKjuPikAru0phJC6xKUf3FhbTO4oD/+oBjUrqEIT oWR+hxx4AVZxXFuC3LVzJ3vn0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTDXA6R QnA05KhMhK2PS+OUuR8RMB8GA1UdIwQYMBaAFCcXMJE3aK8BOLo5AyTalDHECbpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDkxQS80MjA0MDU3RTY2 NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3RTR1amtESk5xVU1jUUp1 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p4Y3drVGRvcndFNHVqa0RKTnFVTWNRSnVrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDkxQS80MjA0MDU3RTY2NkQxMUVEQjU1NjU3NzdDNEY5QUUwMi9KeGN3a1Rkb3J3 RTR1amtESk5xVU1jUUp1a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB2J38K7wqh8WQ59p5EMGs5d+YYYBK0X0lvRcbpJLJylcQs0PosfMI 5NJBtDig4rQYsSu2XyMaZa9m3lQPGbtje3mglJ495gQTUG/qh4lRPj6dgIm6Sci2 OaOAEW3gkfPjri5PYZ0CAvhk+3mwn4/LM1qSgghAFc+aNK+4Z0Iuz0jYi84NaZYP cn3kCGJ3/IVupaIwTIGsQ3DGiM/uPkJ2SCJZyzv63FxVXdIkTtmSU3CplfJ4Cntp bz4LhKCQPnKx858QCNF/NrdV6LlKULbO0nnOADOV2FjIKLWBy2h1baRmmb7PXRXp XJbdMC2LGcvjEYcyYtZh6ovUbKJChjWH -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:49 2025 by rpki-client