$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: ucM79e4kMawwSM4lSmzVDJkxVIN2rL8EywI5LHyUggM= Subject key identifier: 11:38:63:FB:3A:C5:DB:3F:96:43:86:BD:E1:71:CE:51:8B:4F:12:E6 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0F91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0F8A Signing time: Thu 24 Apr 2025 17:32:08 +0000 Manifest this update: Thu 24 Apr 2025 17:32:08 +0000 Manifest next update: Thu 01 May 2025 17:32:08 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: Jiby5ol56ONSzLkriHWs+ydb6B9ZxuCxc9Ld2qkcCXc=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3985 (0xf91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Apr 24 17:32:08 2025 GMT Not After : May 1 17:32:08 2025 GMT Subject: CN=680a7598-dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:dd:e6:a4:23:3d:17:6b:b8:e7:57:10:12: e2:84:15:8d:48:3e:47:bc:c2:70:61:01:43:50:f0: 68:14:b3:72:61:e7:3d:2f:8e:c9:34:dd:b2:45:c4: 52:37:5b:70:cc:5c:b8:f2:3c:aa:09:0d:70:bf:4b: 5c:3f:18:bd:9b:ee:2f:c5:4c:c8:3d:4a:5d:15:04: 2d:ec:aa:75:30:c7:bf:9b:19:d9:b4:cd:89:8d:d4: 98:5b:2d:ce:3c:7d:33:49:8a:a5:1f:f2:23:d7:c9: eb:30:89:cd:15:00:74:7e:76:c9:57:76:15:5a:90: a0:34:7f:b0:cd:cd:33:38:a9:02:95:91:f6:25:32: a0:cf:79:b2:86:dd:50:3a:2a:3a:96:86:13:77:c1: af:20:46:54:cd:fb:ca:93:53:96:f6:04:1c:29:ee: f7:9f:45:cd:28:a1:14:f8:9d:1a:b7:25:77:a5:54: 3d:e8:59:57:ce:1b:b1:f6:23:c6:8f:f7:43:f1:82: d1:dd:7c:4c:6f:3a:f5:fd:d3:9a:c4:92:c7:e0:e0: 57:4b:5d:87:f3:8b:aa:46:9f:20:61:36:17:4a:98: 52:f1:f4:3f:ab:25:cb:98:a9:3c:41:71:1d:0e:27: f5:98:46:ea:eb:91:3f:a2:69:f0:11:07:4d:ef:72: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:63:FB:3A:C5:DB:3F:96:43:86:BD:E1:71:CE:51:8B:4F:12:E6 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:23:12:2c:e6:4a:bc:dd:13:d2:17:8c:01:03:56:b5:ea: a7:0f:7a:ba:35:de:8b:2e:d5:e5:f4:a9:89:5c:b7:29:47:c2: 37:2d:90:af:cb:3c:46:c7:28:95:9a:14:88:0b:68:f0:99:ed: 0e:ef:45:fb:96:d5:aa:11:00:80:ac:9a:98:f1:b2:0f:1b:34: 50:50:c3:12:f6:63:62:af:7c:32:a5:4e:1b:97:62:5e:c8:99: a6:eb:45:54:49:3a:d9:e9:bc:09:a4:d9:5f:ad:db:ef:d5:ab: c1:26:46:6f:c7:8f:6b:a9:15:8b:cf:e6:6d:3e:8c:31:2c:fd: 54:a5:0d:50:bb:4a:1b:dd:a7:ba:6b:80:e8:a0:c1:c7:ab:23: 0c:c0:6c:c3:71:f2:78:dd:b1:f8:6a:09:4d:4b:1e:2b:9d:84: a3:96:9b:3b:e2:92:a2:1c:59:f0:10:99:d0:51:c5:87:a8:37: bc:03:2e:13:e0:06:5e:5f:ff:35:bf:50:16:69:00:d6:5a:f0: 50:b9:16:c7:1c:ef:71:a3:e0:00:92:9b:67:00:68:ec:c6:bd: 3f:76:c1:ca:f0:3a:86:e1:b5:f0:75:dc:9b:e7:34:fc:9e:80: 21:1c:d9:f1:99:69:d6:7b:65:a5:16:6e:dc:41:c1:dc:98:8f: bb:68:a9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUwNDI0MTczMjA4WhcNMjUwNTAxMTczMjA4WjAYMRYwFAYD VQQDEw02ODBhNzU5OC1kYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum/d5qQjPRdruOdXEBLihBWNSD5HvMJwYQFDUPBoFLNyYec9L47JNN2yRcRS N1twzFy48jyqCQ1wv0tcPxi9m+4vxUzIPUpdFQQt7Kp1MMe/mxnZtM2JjdSYWy3O PH0zSYqlH/Ij18nrMInNFQB0fnbJV3YVWpCgNH+wzc0zOKkClZH2JTKgz3myht1Q Oio6loYTd8GvIEZUzfvKk1OW9gQcKe73n0XNKKEU+J0atyV3pVQ96FlXzhux9iPG j/dD8YLR3XxMbzr1/dOaxJLH4OBXS12H84uqRp8gYTYXSphS8fQ/qyXLmKk8QXEd Dif1mEbq65E/omnwEQdN73IlxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBE4Y/s6 xds/lkOGveFxzlGLTxLmMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIbiMSLOZKvN0T0heMAQNWteqnD3q6Nd6LLtXl9KmJXLcpR8I3LZCv yzxGxyiVmhSIC2jwme0O70X7ltWqEQCArJqY8bIPGzRQUMMS9mNir3wypU4bl2Je yJmm60VUSTrZ6bwJpNlfrdvv1avBJkZvx49rqRWLz+ZtPowxLP1UpQ1Qu0ob3ae6 a4DooMHHqyMMwGzDcfJ43bH4aglNSx4rnYSjlps74pKiHFnwEJnQUcWHqDe8Ay4T 4AZeX/81v1AWaQDWWvBQuRbHHO9xo+AAkptnAGjsxr0/dsHK8DqG4bXwddyb5zT8 noAhHNnxmWnWe2WlFm7cQcHcmI+7aKl1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:21 2025 by rpki-client