$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: fG0pNq4uiRdWNi851Ep8xebydeoWfu8u3LTUGyYTrFs= Subject key identifier: CE:E9:E6:D2:C4:4E:36:F2:73:30:C9:E6:84:B0:D1:26:D2:8F:D6:92 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 01CA Signing time: Fri 25 Apr 2025 02:01:49 +0000 Manifest this update: Fri 25 Apr 2025 02:01:48 +0000 Manifest next update: Fri 02 May 2025 02:01:48 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: XprtQ/wwmWfjvHEOsC39DfFZpy6Wt+Ch1RgUcVei2Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Apr 25 02:01:48 2025 GMT Not After : May 2 02:01:48 2025 GMT Subject: CN=680aed0c-64b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:10:19:63:22:31:0b:a0:58:b1:11:d2:05: b9:d9:ee:b1:4e:40:f2:a8:66:3e:0d:20:f4:1c:13: ba:ee:93:86:b2:10:5b:da:9b:97:e2:4c:4d:92:9a: 6d:07:83:c3:43:f1:ce:82:14:76:14:1c:56:21:26: 12:44:9c:54:ab:58:6b:86:6b:2a:df:1e:d1:d8:c0: 02:1b:1e:62:c9:70:a4:95:72:34:cc:56:d6:47:56: 2b:1c:64:87:c9:20:d3:9a:a3:39:cb:09:5b:a7:46: 32:3b:01:1b:86:78:6e:d6:c5:c6:56:f2:7d:7f:40: de:d2:15:ab:c1:23:ba:01:f5:ec:88:6c:d3:35:af: 38:ea:32:45:03:54:76:c9:45:6e:71:3d:76:e3:89: 54:d6:ce:cf:0f:54:4a:de:fc:f9:8b:bb:e0:ef:8d: 5b:ca:70:8e:f2:d5:d6:f1:80:89:e7:0d:7a:26:92: c0:8e:fe:ae:25:3b:4b:65:a0:a5:7b:bd:b2:72:ba: f1:59:6d:2e:5a:48:18:f9:84:fe:71:f9:bd:6b:5e: 37:33:0d:6a:ff:03:a4:0a:27:46:7d:5c:31:1a:28: b8:ae:ec:12:bd:88:cc:17:23:b7:27:ca:7e:11:03: 0a:e8:bf:11:71:71:62:1d:74:ac:5f:be:ca:c9:f6: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E9:E6:D2:C4:4E:36:F2:73:30:C9:E6:84:B0:D1:26:D2:8F:D6:92 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ac:b7:52:f3:1c:63:ce:85:6c:91:20:77:9d:af:a7:90:12: 91:ac:b7:80:a7:1d:15:3f:e3:90:1f:cf:56:7f:7d:3e:77:22: 00:3b:a0:67:be:be:2d:01:81:e9:65:0c:ca:9a:6d:08:d7:f7: 19:2b:89:39:00:41:1a:47:e7:d7:0f:dc:b1:0f:f1:c8:ed:f5: 41:f1:c2:73:ee:e7:ca:20:68:d5:28:9b:62:0e:47:20:f9:ee: c6:b7:52:b9:a3:56:72:c1:4e:08:57:ab:a0:fa:84:f7:2e:03: e5:12:a0:32:ae:f9:c1:50:0a:ef:63:1e:0c:12:d8:b0:e2:bb: 08:54:93:3c:9c:2b:32:d7:73:af:92:53:66:45:e6:c3:12:28: e1:fa:0b:60:35:5b:6d:a0:49:18:a9:b0:69:6b:fe:80:79:c1: 04:06:19:ac:0a:30:37:dd:82:1a:68:0c:ee:9c:f7:1e:14:52: 16:a8:73:53:4b:74:76:01:a7:94:bb:c4:77:31:d9:1f:65:52: 78:88:f8:15:0e:cb:3e:45:a6:f6:5a:b6:d6:38:74:1a:36:68: a2:a2:fd:f8:b3:6d:94:5a:fb:53:bd:a7:2f:0f:1e:88:68:eb: 39:f0:3c:0f:0f:2f:02:fb:13:93:4a:58:51:c6:83:eb:15:64: 41:58:e6:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUwNDI1MDIwMTQ4WhcNMjUwNTAyMDIwMTQ4WjAYMRYwFAYD VQQDEw02ODBhZWQwYy02NGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwggQGWMiMQugWLER0gW52e6xTkDyqGY+DSD0HBO67pOGshBb2puX4kxNkppt B4PDQ/HOghR2FBxWISYSRJxUq1hrhmsq3x7R2MACGx5iyXCklXI0zFbWR1YrHGSH ySDTmqM5ywlbp0YyOwEbhnhu1sXGVvJ9f0De0hWrwSO6AfXsiGzTNa846jJFA1R2 yUVucT1244lU1s7PD1RK3vz5i7vg741bynCO8tXW8YCJ5w16JpLAjv6uJTtLZaCl e72ycrrxWW0uWkgY+YT+cfm9a143Mw1q/wOkCidGfVwxGii4ruwSvYjMFyO3J8p+ EQMK6L8RcXFiHXSsX77Kyfb+fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7p5tLE TjbyczDJ5oSw0SbSj9aSMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBarLdS8xxjzoVskSB3na+nkBKRrLeApx0VP+OQH89Wf30+dyIAO6Bn vr4tAYHpZQzKmm0I1/cZK4k5AEEaR+fXD9yxD/HI7fVB8cJz7ufKIGjVKJtiDkcg +e7Gt1K5o1ZywU4IV6ug+oT3LgPlEqAyrvnBUArvYx4MEtiw4rsIVJM8nCsy13Ov klNmRebDEijh+gtgNVttoEkYqbBpa/6AecEEBhmsCjA33YIaaAzunPceFFIWqHNT S3R2AaeUu8R3MdkfZVJ4iPgVDss+Rab2WrbWOHQaNmiiov34s22UWvtTvacvDx6I aOs58DwPDy8C+xOTSlhRxoPrFWRBWOZD -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:14 2025 by rpki-client