$ rpki-client -vvf rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft File: jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft (raw, json) Hash identifier: UsYkqtmVtlYqTVocJi6LbJSqEUtczRlkvKl1TG91ZDs= Subject key identifier: BF:79:13:04:6D:4A:41:12:C8:96:34:CD:C1:FB:4F:3D:18:2F:0B:BF Authority key identifier: 8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 Certificate issuer: /CN=A91870C2/serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft Manifest number: 0C4B Signing time: Thu 24 Apr 2025 18:17:28 +0000 Manifest this update: Thu 24 Apr 2025 18:17:27 +0000 Manifest next update: Thu 01 May 2025 18:17:27 +0000 Files and hashes: 1: jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl (hash: dEgQIh8FYTH0X+dACczJE3lnXzqnBR0QRfKUg67bK9Y=) 2: 6FF4CA0E006311EAB403274DC4F9AE02.roa (hash: /mIKJtNFNWjniVzqj/Rj/Pp+GLlyWHhk+tCFjQhdH1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91870C2, serialNumber=8C78FEC7455920CBFDE030FE544E57F1EC9FC864 Validity Not Before: Apr 24 18:17:27 2025 GMT Not After : May 1 18:17:27 2025 GMT Subject: CN=680a8037-4f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:f3:41:97:54:29:00:06:20:fe:78:14:ff: 56:8a:a5:f9:4b:58:bf:55:e7:ca:1d:e2:cc:5c:0a: ba:7d:f8:81:79:14:54:5d:be:fb:ec:ff:a2:20:38: a3:cf:5d:1a:6e:67:71:e0:f6:27:27:be:84:ca:35: 77:cc:94:79:65:d2:60:33:bb:06:1d:bc:05:3d:b4: 1c:85:2f:8d:a9:db:4c:ed:1c:ac:61:2b:3c:35:c9: 2c:fe:8f:9a:0a:03:5c:42:7a:a2:0a:9c:d7:5e:f5: b4:d0:25:4c:fe:b0:37:d9:3d:27:2d:76:40:1f:a1: e9:1a:7b:a8:9f:73:0a:8f:e9:78:06:95:4c:88:2c: f1:9f:b1:0b:b1:0c:30:26:c0:1c:54:46:1b:85:b1: 45:59:fe:be:0c:cb:c0:ca:32:42:64:eb:74:ea:01: 1b:88:56:a8:f4:9b:7e:49:c4:33:77:98:95:75:97: dd:fd:19:04:f0:ea:fb:c3:24:75:b7:03:bb:91:dc: 88:11:7f:58:a6:4d:62:f1:60:d6:d6:dc:36:3b:3e: 49:5c:e4:fe:18:c9:6e:af:66:8f:e0:89:85:dd:10: cb:08:9e:65:6b:d8:22:a2:b3:1d:5f:eb:25:0f:9b: bb:76:8c:64:19:85:f4:6f:a3:c8:15:35:be:69:10: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:13:04:6D:4A:41:12:C8:96:34:CD:C1:FB:4F:3D:18:2F:0B:BF X509v3 Authority Key Identifier: keyid:8C:78:FE:C7:45:59:20:CB:FD:E0:30:FE:54:4E:57:F1:EC:9F:C8:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jHj-x0VZIMv94DD-VE5X8eyfyGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870C2/8D712EA2006211EAABE73F4CC4F9AE02/jHj-x0VZIMv94DD-VE5X8eyfyGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:50:75:87:99:7b:9c:b2:3e:be:55:54:1f:6e:cd:76:e9:e5: 72:8a:07:ef:f7:75:c8:d8:a5:8f:cf:81:ac:45:f5:5e:21:13: 58:82:01:f7:f2:a4:e7:f5:a3:d7:96:f7:7f:ab:d3:ac:98:84: e7:64:d3:ab:ff:2b:a7:2b:7c:04:3e:26:af:73:b7:f6:02:87: 0b:c2:a5:53:8d:4b:a8:12:08:3d:4c:c7:bf:9d:3a:62:ef:8d: e3:e5:b6:3a:73:a3:1d:d4:1e:91:30:c2:32:2f:88:a3:fb:de: eb:83:f1:c6:cb:28:47:71:ab:f4:8c:19:df:ee:fd:a8:5d:05: 76:ea:db:12:f8:56:7f:45:37:3f:af:2c:a1:f4:88:95:44:38: 2e:33:91:a3:00:5e:5d:a9:7e:8e:21:94:37:6c:e8:e8:54:be: 43:82:23:bf:70:6c:1b:fe:02:21:b3:23:e6:f6:c5:f7:88:cd: 4c:ab:85:18:c6:ad:3d:0b:2f:7e:06:22:37:ba:a9:a6:62:2e: 48:82:c6:29:91:c5:06:c2:6d:72:d3:47:03:51:2e:97:8f:64: ab:2a:26:37:eb:cf:f9:a6:98:09:8f:11:a2:f6:a0:a5:f9:f6: 13:62:f9:ba:6b:b4:c4:b1:0d:20:eb:cf:34:58:bf:aa:95:97: f1:1b:21:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcwQzIxMTAvBgNVBAUTKDhDNzhGRUM3NDU1OTIwQ0JGREUwMzBGRTU0NEU1N0Yx RUM5RkM4NjQwHhcNMjUwNDI0MTgxNzI3WhcNMjUwNTAxMTgxNzI3WjAYMRYwFAYD VQQDEw02ODBhODAzNy00Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoXzQZdUKQAGIP54FP9WiqX5S1i/VefKHeLMXAq6ffiBeRRUXb777P+iIDij z10abmdx4PYnJ76EyjV3zJR5ZdJgM7sGHbwFPbQchS+NqdtM7RysYSs8Ncks/o+a CgNcQnqiCpzXXvW00CVM/rA32T0nLXZAH6HpGnuon3MKj+l4BpVMiCzxn7ELsQww JsAcVEYbhbFFWf6+DMvAyjJCZOt06gEbiFao9Jt+ScQzd5iVdZfd/RkE8Or7wyR1 twO7kdyIEX9Ypk1i8WDW1tw2Oz5JXOT+GMlur2aP4ImF3RDLCJ5la9giorMdX+sl D5u7doxkGYX0b6PIFTW+aRCkFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL95EwRt SkESyJY0zcH7Tz0YLwu/MB8GA1UdIwQYMBaAFIx4/sdFWSDL/eAw/lROV/Hsn8hk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzBDMi84RDcxMkVBMjAw NjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklNdjk0REQtVkU1WDhleWZ5 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIai14MFZaSU12OTRERC1WRTVYOGV5ZnlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzBDMi84RDcxMkVBMjAwNjIxMUVBQUJFNzNGNENDNEY5QUUwMi9qSGoteDBWWklN djk0REQtVkU1WDhleWZ5R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVUHWHmXucsj6+VVQfbs126eVyigfv93XI2KWPz4GsRfVeIRNYggH3 8qTn9aPXlvd/q9OsmITnZNOr/yunK3wEPiavc7f2AocLwqVTjUuoEgg9TMe/nTpi 743j5bY6c6Md1B6RMMIyL4ij+97rg/HGyyhHcav0jBnf7v2oXQV26tsS+FZ/RTc/ ryyh9IiVRDguM5GjAF5dqX6OIZQ3bOjoVL5DgiO/cGwb/gIhsyPm9sX3iM1Mq4UY xq09Cy9+BiI3uqmmYi5IgsYpkcUGwm1y00cDUS6Xj2SrKiY368/5ppgJjxGi9qCl +fYTYvm6a7TEsQ0g6880WL+qlZfxGyG2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:32 2025 by rpki-client