$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: 5H5/o4gxAs4KoqLu+G0MDe/Jbop2d6ESOPvKBsxXFlQ= Subject key identifier: 85:D1:99:6E:28:FB:F1:90:84:45:8A:DF:9B:9F:88:BD:DD:4A:5A:10 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0A3A Signing time: Thu 24 Apr 2025 19:44:51 +0000 Manifest this update: Thu 24 Apr 2025 19:44:50 +0000 Manifest next update: Thu 01 May 2025 19:44:50 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: XJ335mXug6x/yErmsX5g8sVbD5FlaLXATfjES2gmxPg=) 2: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: 9yUs2nKXPHCpJS0mrHo2Ggq8ympf47XQx/Xh9xer3UE=) 3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: Yqq1lSs0wPeM1q20JA/ItyHg0apHcnbKTMncp1/GYDE=) 4: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: 068N8IEWl9KU9macKHjuazaF7bz9gnL8QBjCVoEygRE=) 5: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: kpR0s/alzHJxJv4b8Y4mih9UUNQwPIfKSjlw3hDfeWQ=) 6: F4FCC41E648311EC88370386C4F9AE02.roa (hash: b4ZFTEPGE9Eys204eUqpF+7p489cvPKvRjplNeXr+vk=) 7: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 33Lt9iacdoAJt5PFtlWSBj+z9HbFVVUjpu5jsfW7jp4=) 8: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: 3CHVCYcA7uR6YYnaviE1S/TMYRhsJjcvlmAm4mTQrmQ=) 9: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: ICd6VVGw9xVz+wcPqJ3UVJmdStRmzwwWVF/J8p4R2lY=) 10: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: 5cDMbBqP2e/j21s9fqpqtIuoXCOWr6gs9WfTIXKzVRM=) 11: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: UrtD2u9UWUKzFTykNRG+n6MNvw96LFxtDU8P+JeQejM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Apr 24 19:44:50 2025 GMT Not After : May 1 19:44:50 2025 GMT Subject: CN=680a94b3-7de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:b1:16:be:78:ca:e9:4e:21:db:16:df:04: 88:fd:13:a5:ab:a4:ee:66:31:66:04:ed:8b:69:62: ed:70:ee:78:42:72:4f:6e:84:b8:40:69:77:3b:29: e3:ba:fe:92:80:84:2f:76:96:9d:1e:38:da:23:57: 83:e0:0b:cc:5b:ac:ff:b6:93:1a:b8:8a:fd:38:6d: 22:46:38:d8:f5:fa:29:14:51:92:82:87:f9:08:f7: 39:b9:20:f8:bb:56:c3:df:cf:19:9c:61:8c:60:6d: 98:c4:67:b4:25:aa:56:ac:d9:f5:6b:e8:3e:25:ec: 6e:ba:3d:98:69:dc:ff:02:35:07:a4:5e:aa:0b:8f: c9:a8:cb:b7:f2:b7:53:b6:57:62:f6:86:1c:3a:58: 89:06:4b:4f:3c:2a:ff:6f:c8:8b:76:c7:a0:46:28: e2:9f:97:10:b3:88:96:60:ad:76:de:ac:ad:0e:05: 55:31:87:66:80:21:0d:34:ba:e3:d0:00:12:17:93: 67:94:12:fb:65:d6:16:17:fe:1c:e2:0f:7b:09:19: fc:3b:70:3c:af:b7:33:94:db:71:a1:03:22:76:4a: 27:43:29:fb:a9:58:9b:1f:28:b0:b6:d9:7d:16:d3: 5a:da:05:26:57:8e:23:7d:7f:a2:8a:44:d7:ae:f4: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D1:99:6E:28:FB:F1:90:84:45:8A:DF:9B:9F:88:BD:DD:4A:5A:10 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1d:89:9b:3b:de:21:11:1a:a1:ad:28:3c:84:85:0e:25:0a: e9:36:14:aa:72:3b:7a:2e:ea:37:65:79:45:43:ab:24:66:00: 58:0e:94:98:d4:5b:36:5b:55:fc:0b:77:49:65:59:77:a2:90: 35:f5:55:0f:c6:e3:0b:b6:7c:3f:7d:fd:e4:c4:34:f2:3e:af: 17:77:e1:ac:1e:58:de:28:d2:53:fb:42:8a:49:9b:71:08:ce: 9f:4a:ea:69:75:7b:60:64:32:d9:8c:08:5a:38:57:02:f1:76: 92:bd:37:76:28:d8:50:35:23:15:35:c6:45:50:12:5a:47:39: 19:d3:39:31:df:a6:a4:61:64:4f:51:28:b4:cb:b9:c9:57:23: 69:ba:19:fb:26:40:e1:85:74:2c:12:59:86:0c:f6:d8:bc:86: d2:9c:c3:28:93:ef:c4:92:1b:06:e5:b1:50:db:b8:d3:da:cd: d3:dd:6f:50:c6:6f:d6:d7:f6:7d:66:ba:5c:3f:ec:e9:67:23: 25:b5:41:2d:7d:a1:19:57:ef:fe:7c:84:1a:fc:59:cb:8f:6d: bf:0e:ee:e4:35:99:85:cb:15:79:b8:68:c5:ae:69:9e:b8:e8: 8c:a9:38:36:9a:b1:e4:f8:c3:02:38:ae:33:a7:34:04:e7:9a: 90:58:36:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjUwNDI0MTk0NDUwWhcNMjUwNTAxMTk0NDUwWjAYMRYwFAYD VQQDEw02ODBhOTRiMy03ZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDexFr54yulOIdsW3wSI/ROlq6TuZjFmBO2LaWLtcO54QnJPboS4QGl3Oynj uv6SgIQvdpadHjjaI1eD4AvMW6z/tpMauIr9OG0iRjjY9fopFFGSgof5CPc5uSD4 u1bD388ZnGGMYG2YxGe0JapWrNn1a+g+Jexuuj2Yadz/AjUHpF6qC4/JqMu38rdT tldi9oYcOliJBktPPCr/b8iLdsegRijin5cQs4iWYK123qytDgVVMYdmgCENNLrj 0AASF5NnlBL7ZdYWF/4c4g97CRn8O3A8r7czlNtxoQMidkonQyn7qVibHyiwttl9 FtNa2gUmV44jfX+iikTXrvSi0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXRmW4o +/GQhEWK35ufiL3dSloQMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOHYmbO94hERqhrSg8hIUOJQrpNhSqcjt6Luo3ZXlFQ6skZgBYDpSY 1Fs2W1X8C3dJZVl3opA19VUPxuMLtnw/ff3kxDTyPq8Xd+GsHljeKNJT+0KKSZtx CM6fSuppdXtgZDLZjAhaOFcC8XaSvTd2KNhQNSMVNcZFUBJaRzkZ0zkx36akYWRP USi0y7nJVyNpuhn7JkDhhXQsElmGDPbYvIbSnMMok+/EkhsG5bFQ27jT2s3T3W9Q xm/W1/Z9ZrpcP+zpZyMltUEtfaEZV+/+fIQa/FnLj22/Du7kNZmFyxV5uGjFrmme uOiMqTg2mrHk+MMCOK4zpzQE55qQWDYl -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:55 2025 by rpki-client