$ rpki-client -vvf rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft File: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft (raw, json) Hash identifier: NFu7PXWRdId0x711BKmBl+hYcPfLpHLik1PDZ9p62VU= Subject key identifier: C5:82:2A:DB:8E:4D:40:72:F3:B1:D1:4D:27:6A:9E:98:62:B4:1E:71 Authority key identifier: 8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F Certificate issuer: /CN=A918223E/serialNumber=8E7E4A03582039E461ECED910008C9827362359F Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft Manifest number: 030D Signing time: Fri 25 Apr 2025 00:58:54 +0000 Manifest this update: Fri 25 Apr 2025 00:58:54 +0000 Manifest next update: Fri 02 May 2025 00:58:54 +0000 Files and hashes: 1: jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl (hash: +YkDWFrQ1XLJQlKcwkwlV3k2v2mUPDlH5Ycr0KY9Wto=) 2: 9157BBDACD0611EC9D520C1DC4F9AE02.roa (hash: YtkawvfO7yeuU6y5W4AKOD+xrJidxM5yq8UxdQskunc=) 3: 0E3C1B3E7F9B11EFB3A18650C4F9AE02.roa (hash: NTWtz3XRI466vgMgJNYPHPV7KaEaKes8YjQ4ENseuEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918223E, serialNumber=8E7E4A03582039E461ECED910008C9827362359F Validity Not Before: Apr 25 00:58:54 2025 GMT Not After : May 2 00:58:54 2025 GMT Subject: CN=680ade4e-b43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:66:f1:05:8c:43:dc:f8:c5:fa:50:9d:68: 3a:6c:df:13:5a:fa:fa:76:d5:53:92:ba:9e:dd:65: d9:04:04:99:8e:e7:4e:34:ee:84:2c:4a:3e:50:cf: 30:cc:98:dc:04:c0:6f:61:ad:3c:d6:9d:27:f0:20: 3e:b8:7b:e6:c2:d6:83:01:69:d9:f5:8a:1b:6f:11: c8:82:b3:6d:68:60:1f:db:34:2e:a9:70:ad:fc:ae: 31:12:ce:26:5d:28:c7:a5:11:8a:11:16:67:db:1b: 0e:24:3d:12:ed:81:80:42:38:cc:05:2e:34:ae:6e: dd:e3:df:d0:da:00:1b:b0:01:63:03:c1:f8:89:4b: 2c:dd:2f:95:0e:38:fc:56:80:69:3b:34:04:33:76: e6:2b:e3:c3:2f:1e:7e:01:df:a6:76:aa:4d:ef:e8: 0b:cd:8b:79:a7:13:b3:4b:3f:95:af:97:ec:c0:99: 8f:d9:8f:00:06:d5:69:f0:df:b1:c4:a7:f5:3f:c9: 74:a9:69:7f:76:e1:d8:75:36:a4:e1:38:46:58:94: 58:40:5c:ae:19:7c:fd:16:12:7c:cd:be:e0:f6:97: f0:d5:93:96:e6:8c:5f:39:05:c3:da:9a:58:f6:98: 12:89:c2:39:f6:bb:8d:07:37:16:c2:f9:f9:c6:9d: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:2A:DB:8E:4D:40:72:F3:B1:D1:4D:27:6A:9E:98:62:B4:1E:71 X509v3 Authority Key Identifier: keyid:8E:7E:4A:03:58:20:39:E4:61:EC:ED:91:00:08:C9:82:73:62:35:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918223E/5F6B3A5ECD0411EC86137D1CC4F9AE02/jn5KA1ggOeRh7O2RAAjJgnNiNZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f7:a9:f7:4a:3a:d7:6c:d3:4a:56:8d:3e:56:f4:85:94:6d: a6:09:5b:d4:d2:de:31:81:88:2f:33:77:61:9e:d2:44:30:96: 37:5f:94:b5:de:92:86:9e:b7:fd:c3:51:77:3a:bd:1d:4b:1b: 5a:5a:36:1b:0a:6f:5c:94:d9:7a:b4:69:fe:13:71:88:c2:52: bd:e1:af:28:07:8f:38:32:01:bb:df:ec:65:61:67:e4:04:e0: f4:58:a9:1c:e3:68:1a:e9:e8:5a:14:40:a1:f8:be:79:93:0e: c3:62:6e:67:f0:67:6a:1b:98:fb:fb:54:f9:0e:e0:ab:a4:1f: 18:d8:27:38:4f:6c:bd:0d:bd:20:1c:9f:c9:ac:bf:2c:e1:eb: fd:3d:55:41:02:fb:ba:01:a7:c4:36:58:df:6d:eb:9d:a8:6d: 87:cc:25:81:e8:f7:f1:e5:36:e9:6a:b4:91:51:7d:07:b0:87: ac:3a:b0:b9:93:4e:63:77:91:d7:60:1b:4f:70:16:d4:52:a4: 90:39:5a:1c:f5:5f:4f:9f:5d:43:07:4d:85:a2:55:0f:bb:2b: b1:75:0d:9e:b1:86:ef:9c:4f:41:ad:3d:5e:b7:98:cf:cc:3d: 7f:3a:08:ef:50:4e:67:9b:87:c8:74:19:42:5c:36:c3:be:01: 0b:16:48:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyM0UxMTAvBgNVBAUTKDhFN0U0QTAzNTgyMDM5RTQ2MUVDRUQ5MTAwMDhDOTgy NzM2MjM1OUYwHhcNMjUwNDI1MDA1ODU0WhcNMjUwNTAyMDA1ODU0WjAYMRYwFAYD VQQDEw02ODBhZGU0ZS1iNDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApc1m8QWMQ9z4xfpQnWg6bN8TWvr6dtVTkrqe3WXZBASZjudONO6ELEo+UM8w zJjcBMBvYa081p0n8CA+uHvmwtaDAWnZ9YobbxHIgrNtaGAf2zQuqXCt/K4xEs4m XSjHpRGKERZn2xsOJD0S7YGAQjjMBS40rm7d49/Q2gAbsAFjA8H4iUss3S+VDjj8 VoBpOzQEM3bmK+PDLx5+Ad+mdqpN7+gLzYt5pxOzSz+Vr5fswJmP2Y8ABtVp8N+x xKf1P8l0qWl/duHYdTak4ThGWJRYQFyuGXz9FhJ8zb7g9pfw1ZOW5oxfOQXD2ppY 9pgSicI59ruNBzcWwvn5xp36+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWCKtuO TUBy87HRTSdqnphitB5xMB8GA1UdIwQYMBaAFI5+SgNYIDnkYeztkQAIyYJzYjWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjIzRS81RjZCM0E1RUNE MDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09lUmg3TzJSQUFqSmduTmlO WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puNUtBMWdnT2VSaDdPMlJBQWpKZ25OaU5aOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjIzRS81RjZCM0E1RUNEMDQxMUVDODYxMzdEMUNDNEY5QUUwMi9qbjVLQTFnZ09l Umg3TzJSQUFqSmduTmlOWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA896n3SjrXbNNKVo0+VvSFlG2mCVvU0t4xgYgvM3dhntJEMJY3X5S1 3pKGnrf9w1F3Or0dSxtaWjYbCm9clNl6tGn+E3GIwlK94a8oB484MgG73+xlYWfk BOD0WKkc42ga6ehaFECh+L55kw7DYm5n8GdqG5j7+1T5DuCrpB8Y2Cc4T2y9Db0g HJ/JrL8s4ev9PVVBAvu6AafENljfbeudqG2HzCWB6Pfx5TbparSRUX0HsIesOrC5 k05jd5HXYBtPcBbUUqSQOVoc9V9Pn11DB02FolUPuyuxdQ2esYbvnE9BrT1et5jP zD1/OgjvUE5nm4fIdBlCXDbDvgELFkgO -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:50 2025 by rpki-client