$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: eOlg8BI9s1jnph3R2jsvJxRwU3UYsIBx23eYfPb2LTw= Subject key identifier: B6:A9:3D:9C:A4:A4:96:88:DB:7B:27:14:BD:2E:E2:AA:25:DE:0B:81 Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 092C Signing time: Thu 24 Apr 2025 20:12:32 +0000 Manifest this update: Thu 24 Apr 2025 20:12:31 +0000 Manifest next update: Thu 01 May 2025 20:12:31 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: 8IMJEguPF2VQOLOOzWyuf1Enqn7Lr8jHVwztQophyNQ=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: 1O8CvPoCX59yxkCTRAfeqT87JzO1ZPyxP3FQ7V/8EC0=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 2lXGifV8wMvF5/8u5e/F18sZfZgZakRwfCdQQppNe70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Validity Not Before: Apr 24 20:12:31 2025 GMT Not After : May 1 20:12:31 2025 GMT Subject: CN=680a9b30-ad81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:db:cd:85:70:4a:05:de:fe:e7:e7:6f:e7: 9e:a2:92:95:3a:91:c4:c7:13:4b:a2:27:87:98:5f: 4b:12:df:b9:10:bb:98:d8:c0:de:39:a8:e6:81:b0: e7:34:fe:3f:a4:9c:f7:f9:e3:83:b5:8f:b0:43:bc: 93:7f:8c:07:d3:f3:26:a9:34:ee:52:93:75:63:2c: 40:3e:18:bc:b6:c6:87:09:28:08:72:cf:68:61:9f: 7e:c1:81:17:de:41:8d:69:a4:e5:99:33:19:3f:0f: a8:d0:90:88:b9:14:7a:f5:e7:65:fb:ae:1c:40:62: 51:36:42:13:fe:ac:f2:31:fa:57:d0:c1:4d:76:21: 6b:86:59:d1:5d:70:8e:2f:03:f9:fd:74:6b:bd:2a: e2:5f:24:e3:79:06:c1:31:30:f0:09:96:d8:30:b8: bf:af:96:46:14:5f:22:4f:2c:c8:a8:9d:1c:1c:ff: 95:40:a0:4a:97:07:9c:20:0e:bf:9e:9f:13:0b:bd: 9b:a0:c3:02:79:85:46:3a:94:46:41:4e:49:87:9d: 57:c4:99:b2:9b:39:b1:54:cd:29:89:d6:ff:65:2a: 67:f1:6e:36:72:97:03:66:53:d5:b9:3a:6f:f4:b2: d4:74:fa:82:33:0a:28:85:5e:df:11:a9:ad:52:e1: 61:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A9:3D:9C:A4:A4:96:88:DB:7B:27:14:BD:2E:E2:AA:25:DE:0B:81 X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:85:94:60:11:22:cf:24:78:0c:e9:7d:6b:e9:25:22:df:62: 21:f5:45:1f:48:dd:25:67:c8:fd:8e:67:6a:99:16:f1:ea:4d: 40:8c:22:5b:11:a5:a7:94:ee:ce:6f:1e:1c:3d:36:10:f7:2c: a1:39:76:a9:8f:00:a0:52:9f:af:49:f5:35:7f:3f:36:39:c5: 62:6a:a1:d6:83:77:a0:37:77:a1:c3:d0:5d:5b:6d:5e:6b:10: 00:c5:32:21:d2:6b:14:63:73:e9:bd:0e:e0:32:85:3a:88:11: 4e:43:e5:de:03:f3:98:42:6a:bc:d6:c9:56:3c:73:5a:c6:84: 8d:af:b5:a9:1b:de:7d:fc:9b:83:d0:7d:a9:c8:83:a2:99:1f: 74:e9:5d:d4:9b:1a:05:1f:e8:b1:e5:38:ab:09:37:b3:f8:f1: 8f:be:ec:94:22:77:7c:52:f9:79:76:95:45:54:a8:7c:74:db: 1b:e7:53:bd:67:58:59:6d:f5:1c:91:61:61:87:26:dc:10:9b: fe:5e:d7:c4:ec:1e:0d:6e:7c:fd:a3:37:2b:c9:49:6a:bd:3f: 3f:68:49:87:41:46:5d:51:c4:de:7a:85:4d:2d:7e:10:95:0c: 0d:66:71:43:50:29:5c:34:bc:af:94:79:5c:36:03:6b:db:e3: ec:8e:a4:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUwNDI0MjAxMjMxWhcNMjUwNTAxMjAxMjMxWjAYMRYwFAYD VQQDEw02ODBhOWIzMC1hZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNDbzYVwSgXe/ufnb+eeopKVOpHExxNLoieHmF9LEt+5ELuY2MDeOajmgbDn NP4/pJz3+eODtY+wQ7yTf4wH0/MmqTTuUpN1YyxAPhi8tsaHCSgIcs9oYZ9+wYEX 3kGNaaTlmTMZPw+o0JCIuRR69edl+64cQGJRNkIT/qzyMfpX0MFNdiFrhlnRXXCO LwP5/XRrvSriXyTjeQbBMTDwCZbYMLi/r5ZGFF8iTyzIqJ0cHP+VQKBKlwecIA6/ np8TC72boMMCeYVGOpRGQU5Jh51XxJmymzmxVM0pidb/ZSpn8W42cpcDZlPVuTpv 9LLUdPqCMwoohV7fEamtUuFhRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLapPZyk pJaI23snFL0u4qol3guBMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlhZRgESLPJHgM6X1r6SUi32Ih9UUfSN0lZ8j9jmdqmRbx6k1AjCJb EaWnlO7Obx4cPTYQ9yyhOXapjwCgUp+vSfU1fz82OcViaqHWg3egN3ehw9BdW21e axAAxTIh0msUY3PpvQ7gMoU6iBFOQ+XeA/OYQmq81slWPHNaxoSNr7WpG959/JuD 0H2pyIOimR906V3UmxoFH+ix5TirCTez+PGPvuyUInd8Uvl5dpVFVKh8dNsb51O9 Z1hZbfUckWFhhybcEJv+XtfE7B4Nbnz9ozcryUlqvT8/aEmHQUZdUcTeeoVNLX4Q lQwNZnFDUClcNLyvlHlcNgNr2+PsjqTZ -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:41 2025 by rpki-client