$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft File: jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json) Hash identifier: nK6GZ+4quBQf+grqNYOOMtw8nH0HZ7l246ZbhvAfgYM= Subject key identifier: 57:06:CD:06:56:99:57:98:C2:58:CF:AC:8C:9F:D5:AA:63:E8:41:13 Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft Manifest number: 075E Signing time: Thu 24 Apr 2025 21:28:02 +0000 Manifest this update: Thu 24 Apr 2025 21:28:02 +0000 Manifest next update: Thu 01 May 2025 21:28:02 +0000 Files and hashes: 1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: 54Pm1WC+uXmvpDb8dtNJ2uuVV0AR4SLxXF/ohmfmHIo=) 2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Validity Not Before: Apr 24 21:28:02 2025 GMT Not After : May 1 21:28:02 2025 GMT Subject: CN=680aace2-de34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:42:97:04:71:ef:0d:8e:55:69:7f:b3:91: 80:68:a3:a3:95:f3:26:1b:90:ce:12:2a:5f:50:af: bc:ba:40:3a:28:ac:f0:dd:14:9c:6f:7a:f3:82:d4: 75:40:ba:58:c2:e3:ba:03:76:ad:92:72:93:2b:34: 00:fc:09:30:02:8d:b1:46:b6:81:a2:5d:58:a8:b0: ce:df:fd:45:d4:9f:f6:0d:a6:e5:78:7e:bf:56:a9: e8:eb:29:41:53:0b:81:74:05:81:fc:ea:02:14:13: 3e:de:45:bf:0b:2f:13:06:66:99:02:38:e1:77:52: 21:bf:5d:e4:75:cb:70:fc:14:0a:7d:3e:87:44:72: 7e:0f:a3:25:b5:87:65:3d:81:2a:a3:1d:22:5a:c0: f4:58:45:43:eb:c8:ff:f3:ca:b3:e1:d9:d1:c7:42: f6:f8:81:d3:da:48:c0:88:c5:75:2b:a7:18:96:dc: 14:e5:39:eb:a2:b1:36:0b:d2:75:39:fa:d2:3b:4e: 7f:a4:c1:c8:56:88:d2:10:81:2b:47:72:86:08:46: ff:b0:ef:70:73:14:7f:a5:7d:70:86:8a:81:07:83: dc:cb:c0:9d:40:86:43:14:dd:d2:f2:1f:bb:51:be: e3:f3:7b:1b:d9:59:65:65:db:68:08:f7:4a:0a:8e: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:06:CD:06:56:99:57:98:C2:58:CF:AC:8C:9F:D5:AA:63:E8:41:13 X509v3 Authority Key Identifier: keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0f:b9:7c:84:45:e0:d3:a3:b7:d2:d4:0b:b4:ca:75:41:ec: 2b:d4:85:09:a3:6b:3c:95:17:01:9a:2e:f1:e2:d4:2e:4f:fe: 02:ad:10:39:fe:c9:23:23:12:2d:8d:3e:4e:f2:70:96:1d:68: ec:80:93:17:00:c8:42:db:a3:93:fd:06:65:b5:1d:03:68:79: 92:e4:07:26:21:ed:61:7b:17:6f:e9:e0:ad:a8:b2:77:ad:b3: ac:93:8b:f5:74:86:61:6c:2c:87:63:cb:1e:b3:9d:1b:86:45: 09:20:bd:0f:38:dc:98:b9:5f:85:c4:a7:0c:15:83:7e:93:17: 4c:e3:c6:83:f8:34:06:24:0a:ee:bf:17:8f:20:ce:05:21:4f: fd:46:6b:ad:0e:91:bd:11:eb:81:23:35:2f:2c:74:f0:0b:be: fc:0b:93:e0:fd:9d:ed:0a:a5:c1:d2:ff:62:24:49:27:32:7d: 29:7a:a4:b0:f2:92:cf:84:2f:b8:5c:f6:13:0e:97:b2:fb:09: e7:0a:fc:67:16:4f:bd:7c:98:43:95:81:a7:4f:0f:4e:3b:c3: ed:f6:51:53:c6:73:f4:54:3f:24:09:8a:59:c5:41:86:bc:dc: b3:c6:49:92:48:b6:ee:50:d9:00:73:07:95:f0:51:d7:83:9f: 9c:f5:e1:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx N0YyMUJFMjAwHhcNMjUwNDI0MjEyODAyWhcNMjUwNTAxMjEyODAyWjAYMRYwFAYD VQQDEw02ODBhYWNlMi1kZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwchClwRx7w2OVWl/s5GAaKOjlfMmG5DOEipfUK+8ukA6KKzw3RScb3rzgtR1 QLpYwuO6A3atknKTKzQA/AkwAo2xRraBol1YqLDO3/1F1J/2DableH6/Vqno6ylB UwuBdAWB/OoCFBM+3kW/Cy8TBmaZAjjhd1Ihv13kdctw/BQKfT6HRHJ+D6MltYdl PYEqox0iWsD0WEVD68j/88qz4dnRx0L2+IHT2kjAiMV1K6cYltwU5TnrorE2C9J1 OfrSO05/pMHIVojSEIErR3KGCEb/sO9wcxR/pX1whoqBB4Pcy8CdQIZDFN3S8h+7 Ub7j83sb2VllZdtoCPdKCo5CMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcGzQZW mVeYwljPrIyf1apj6EETMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjdFRC8zMDg4Nzg5ODFGM0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9k NUNBY1RBVTFYLXNYOGh2aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKD7l8hEXg06O30tQLtMp1Qewr1IUJo2s8lRcBmi7x4tQuT/4CrRA5 /skjIxItjT5O8nCWHWjsgJMXAMhC26OT/QZltR0DaHmS5AcmIe1hexdv6eCtqLJ3 rbOsk4v1dIZhbCyHY8ses50bhkUJIL0PONyYuV+FxKcMFYN+kxdM48aD+DQGJAru vxePIM4FIU/9RmutDpG9EeuBIzUvLHTwC778C5Pg/Z3tCqXB0v9iJEknMn0peqSw 8pLPhC+4XPYTDpey+wnnCvxnFk+9fJhDlYGnTw9OO8Pt9lFTxnP0VD8kCYpZxUGG vNyzxkmSSLbuUNkAcweV8FHXg5+c9eEX -----END CERTIFICATE-----Generated at Sat Apr 26 05:50:05 2025 by rpki-client