$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: dOSWTEooMo7NxvUUG2NatpwYR2/L8LiTO/8gyjhbxYM= Subject key identifier: 9F:53:B6:5A:CE:24:D8:B5:D9:06:56:F4:01:90:FB:84:24:C9:65:63 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C29 Signing time: Thu 24 Apr 2025 18:31:35 +0000 Manifest this update: Thu 24 Apr 2025 18:31:34 +0000 Manifest next update: Thu 01 May 2025 18:31:34 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: 9u19zhtqydlylaho0IIw6XLggGQQ+RmYpvX5ZvjPPN4=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: Ze8Yanp+k5PHmh85OnFiLG44bNuhfOzahNgejKqhDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: Apr 24 18:31:34 2025 GMT Not After : May 1 18:31:34 2025 GMT Subject: CN=680a8387-e6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:b5:ea:91:77:c2:d2:fb:f9:db:f7:ee:12: 36:01:1a:84:18:1a:39:bd:02:8d:83:e2:e6:9a:64: 41:fa:94:13:34:77:3c:3a:9d:35:51:07:2e:b1:82: d0:06:f2:8c:ca:a6:d9:ab:bc:2d:f4:af:8d:f8:17: fc:0b:a4:75:d5:1d:8e:55:4c:ad:ef:6b:a5:32:87: 56:8b:32:62:f9:e1:97:4b:7f:43:14:82:59:ae:0f: 38:cc:7b:be:65:4b:48:38:54:3a:eb:39:22:b1:2f: 77:61:e7:ce:c8:b0:ab:e6:89:e9:24:f5:fb:a1:68: 30:0d:c9:00:12:db:41:ba:0d:59:43:49:7f:11:ce: e0:dc:9b:77:01:67:ff:51:72:4f:82:c8:83:a4:28: e6:14:d5:31:f0:71:ea:3b:a2:ea:c7:28:22:a9:44: 7b:22:13:85:8f:a7:c6:79:41:7f:63:4e:08:3b:98: f1:42:57:21:9f:bd:42:f0:98:c5:37:b5:44:51:ab: 04:a3:6c:f5:e0:07:cf:ac:dd:ba:ca:ee:ad:88:10: 4c:d5:68:00:84:a3:34:92:a3:d5:35:a0:ee:d7:e7: 38:1a:f1:cc:92:99:4b:b8:66:ef:2d:2f:51:ce:fe: 1e:84:3b:2f:4e:b0:ed:43:d6:a3:cb:df:e4:8d:b7: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:B6:5A:CE:24:D8:B5:D9:06:56:F4:01:90:FB:84:24:C9:65:63 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:e1:9f:55:ae:24:ca:32:57:04:d2:23:66:e4:85:fc:b2: a0:c4:19:46:4a:10:50:e2:65:e2:ca:59:b1:90:03:a9:64:ea: 01:64:94:69:93:d6:9a:12:30:02:fd:86:06:e8:48:81:89:f9: 19:13:6f:58:4e:53:73:2f:db:39:6a:e2:2d:32:a6:48:01:35: f0:31:99:8b:1a:77:b9:da:41:a2:20:4d:6c:04:6b:56:c8:1d: 91:e4:54:8e:03:4e:9c:0a:f6:26:f1:c2:a6:23:65:a4:5c:35: a0:74:ef:bb:a1:12:2e:8f:71:76:46:0e:17:22:88:b4:9b:32: 7d:58:c7:7b:c2:27:24:d5:bc:7c:f2:61:62:9b:fa:94:18:e0: 0b:ec:6c:ce:83:d3:bb:00:68:36:3f:b3:24:96:84:ee:5e:0e: 24:36:88:10:07:03:8c:d7:e3:5b:8a:a0:26:65:2d:c9:a9:58: 75:bf:e7:8e:a1:d9:b7:5f:ce:ed:bd:cf:6d:36:84:c5:0d:f1: 05:14:9f:fc:2c:91:2e:0d:b6:81:e8:07:07:ce:07:22:fc:d2: fd:b0:fa:b1:e8:89:79:61:51:35:2b:4c:72:5e:b0:b2:3c:ea: c1:45:ce:c3:91:09:c3:e5:8e:a8:93:0a:4e:dc:11:e9:ef:50: 6a:b8:15:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUwNDI0MTgzMTM0WhcNMjUwNTAxMTgzMTM0WjAYMRYwFAYD VQQDEw02ODBhODM4Ny1lNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHe16pF3wtL7+dv37hI2ARqEGBo5vQKNg+LmmmRB+pQTNHc8Op01UQcusYLQ BvKMyqbZq7wt9K+N+Bf8C6R11R2OVUyt72ulModWizJi+eGXS39DFIJZrg84zHu+ ZUtIOFQ66zkisS93YefOyLCr5onpJPX7oWgwDckAEttBug1ZQ0l/Ec7g3Jt3AWf/ UXJPgsiDpCjmFNUx8HHqO6LqxygiqUR7IhOFj6fGeUF/Y04IO5jxQlchn71C8JjF N7VEUasEo2z14AfPrN26yu6tiBBM1WgAhKM0kqPVNaDu1+c4GvHMkplLuGbvLS9R zv4ehDsvTrDtQ9ajy9/kjbec2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9TtlrO JNi12QZW9AGQ+4QkyWVjMB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ/eGfVa4kyjJXBNIjZuSF/LKgxBlGShBQ4mXiylmxkAOpZOoBZJRp k9aaEjAC/YYG6EiBifkZE29YTlNzL9s5auItMqZIATXwMZmLGne52kGiIE1sBGtW yB2R5FSOA06cCvYm8cKmI2WkXDWgdO+7oRIuj3F2Rg4XIoi0mzJ9WMd7wick1bx8 8mFim/qUGOAL7GzOg9O7AGg2P7MkloTuXg4kNogQBwOM1+NbiqAmZS3JqVh1v+eO odm3X87tvc9tNoTFDfEFFJ/8LJEuDbaB6AcHzgci/NL9sPqx6Il5YVE1K0xyXrCy POrBRc7DkQnD5Y6okwpO3BHp71BquBUJ -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:46 2025 by rpki-client