$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: pmxeVIm3JI1XTm9oY71pKgLPd4yuIM/Jk5M9bEG+Cd4= Subject key identifier: FD:7D:AE:D6:76:80:F5:5C:33:D9:53:0E:3C:63:14:82:A3:58:DD:CB Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 0117 Signing time: Fri 25 Apr 2025 03:54:58 +0000 Manifest this update: Fri 25 Apr 2025 03:54:57 +0000 Manifest next update: Fri 02 May 2025 03:54:57 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: KN6+zdOhffM2tjoF7mJYkNPzN4srKT63Ivtagvr471g=) 2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: v+Dp0K1hdXxl3OPWO8uxhWsiC5bQl5Ff5tXnCdcq4MU=) 3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: aBvIA0eeQ14OUWSBauC6xUgN/Yota75Po8HtX8rLsaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: Apr 25 03:54:57 2025 GMT Not After : May 2 03:54:57 2025 GMT Subject: CN=680b0791-0790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:04:97:2a:de:78:96:8a:ec:22:04:0b:16: 2e:af:8b:aa:3d:5f:2b:a7:99:01:15:e8:b8:1d:36: 41:89:a5:a3:dd:71:a5:b7:ff:1f:f5:3b:47:bb:ad: 66:96:5c:62:00:76:05:51:43:e0:78:53:eb:fe:03: a2:88:40:40:ad:04:75:8a:fc:bb:5d:9e:22:22:70: e8:2f:c2:73:5f:8f:28:73:46:e3:50:a8:e8:43:1e: b0:13:2f:61:1e:cf:2b:d2:41:0e:e4:6c:8c:84:7d: ec:db:0a:d4:f3:e1:18:39:81:8e:b6:18:f6:7a:de: f3:61:ba:fd:65:9b:88:68:aa:4b:b7:73:e8:b6:46: 44:db:51:b8:57:4e:37:2c:37:76:ba:f4:ab:c6:9b: 87:6f:e3:74:5d:0d:d8:3f:1b:39:84:55:4c:4d:c5: f5:53:a2:1c:6f:2d:da:2a:9b:a4:55:84:63:da:b5: 15:ba:1b:7f:c4:7d:86:87:17:f6:90:11:36:50:fd: fd:39:1f:7a:1b:51:f8:90:48:01:89:79:eb:84:18: 64:b1:96:ed:da:68:67:cb:13:40:fa:9b:9b:b1:cd: 77:2a:bd:48:c6:90:a1:4f:6c:50:31:84:51:bc:4d: 05:b6:b2:64:dd:a1:e4:24:1b:d6:c3:88:87:00:45: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7D:AE:D6:76:80:F5:5C:33:D9:53:0E:3C:63:14:82:A3:58:DD:CB X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:00:a0:13:65:4e:6c:e4:ac:6a:b8:05:fd:83:79:83:4b:89: 79:52:70:d4:f4:c1:0b:cc:bc:31:f8:fc:cd:00:19:8d:84:95: 88:55:c4:54:59:dc:a8:b0:8d:9c:69:cb:a2:19:d7:dc:0f:62: a3:21:28:8d:28:c8:67:0e:e2:f4:e0:eb:4b:90:00:ca:b5:d6: f9:42:b2:f7:41:a4:63:af:6f:32:e4:4d:38:27:5a:4a:bf:36: cb:f2:12:55:e4:c2:34:22:97:a1:fa:21:07:6c:68:ba:0c:af: 44:da:e0:84:2b:42:42:13:e1:ed:d2:c5:9a:bb:47:a2:a6:8b: af:10:0e:36:f3:36:3b:13:72:34:c2:58:4c:f7:fe:94:12:60: b8:b4:f9:bf:1b:3b:fe:a9:fd:46:05:12:26:d7:37:a2:10:80: 3e:00:27:05:69:c7:17:40:60:ef:15:29:b0:47:ce:89:19:f6: ad:2c:f5:46:0c:1b:c1:0c:fc:01:60:f2:b4:8f:3f:b0:cd:2a: be:10:4c:3a:81:35:0a:d7:3e:67:a7:b9:0a:8f:5e:fb:c3:0a: b9:74:ab:40:0d:7c:d9:d6:b7:42:2c:23:14:e6:17:c7:7a:b8: fc:0b:62:38:65:6b:84:ea:ba:56:09:81:9c:a3:27:c3:20:c4: 48:41:96:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQTUxMTAvBgNVBAUTKDhDRENFNTc4QTIzOUU1OENFN0ZFNzY4M0JCNDc2OUY5 REM1NTIyQkEwHhcNMjUwNDI1MDM1NDU3WhcNMjUwNTAyMDM1NDU3WjAYMRYwFAYD VQQDEw02ODBiMDc5MS0wNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmUElyreeJaK7CIECxYur4uqPV8rp5kBFei4HTZBiaWj3XGlt/8f9TtHu61m llxiAHYFUUPgeFPr/gOiiEBArQR1ivy7XZ4iInDoL8JzX48oc0bjUKjoQx6wEy9h Hs8r0kEO5GyMhH3s2wrU8+EYOYGOthj2et7zYbr9ZZuIaKpLt3PotkZE21G4V043 LDd2uvSrxpuHb+N0XQ3YPxs5hFVMTcX1U6Icby3aKpukVYRj2rUVuht/xH2Ghxf2 kBE2UP39OR96G1H4kEgBiXnrhBhksZbt2mhnyxNA+pubsc13Kr1IxpChT2xQMYRR vE0FtrJk3aHkJBvWw4iHAEVIWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP19rtZ2 gPVcM9lTDjxjFIKjWN3LMB8GA1UdIwQYMBaAFIzc5XiiOeWM5/52g7tHafncVSK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBNS9BMUMwNEQwQTc2 Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZem5fbmFEdTBkcC1keFZJ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vklyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBNS9BMUMwNEQwQTc2Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZ em5fbmFEdTBkcC1keFZJcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4AKATZU5s5KxquAX9g3mDS4l5UnDU9MELzLwx+PzNABmNhJWIVcRU WdyosI2cacuiGdfcD2KjISiNKMhnDuL04OtLkADKtdb5QrL3QaRjr28y5E04J1pK vzbL8hJV5MI0Ipeh+iEHbGi6DK9E2uCEK0JCE+Ht0sWau0eipouvEA428zY7E3I0 wlhM9/6UEmC4tPm/Gzv+qf1GBRIm1zeiEIA+ACcFaccXQGDvFSmwR86JGfatLPVG DBvBDPwBYPK0jz+wzSq+EEw6gTUK1z5np7kKj177wwq5dKtADXzZ1rdCLCMU5hfH erj8C2I4ZWuE6rpWCYGcoyfDIMRIQZZI -----END CERTIFICATE-----Generated at Sat Apr 26 04:01:28 2025 by rpki-client