$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft File: cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json) Hash identifier: 92Cgeu8S6NaK21te6XF0X/6/mTgfCVcZ0DBY0uuplJc= Subject key identifier: 03:52:0A:F6:B2:AC:F7:1F:AF:19:21:F7:D3:E6:98:4E:C0:4C:F1:54 Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft Manifest number: 0383 Signing time: Fri 25 Apr 2025 00:36:45 +0000 Manifest this update: Fri 25 Apr 2025 00:36:44 +0000 Manifest next update: Fri 02 May 2025 00:36:44 +0000 Files and hashes: 1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: 2wZBUSIYiX+r5wI+QYupFoqhqZimW8b6BnGtJ0egus0=) 2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Apr 25 00:36:44 2025 GMT Not After : May 2 00:36:44 2025 GMT Subject: CN=680ad91d-e9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:85:6a:ca:b6:47:ee:af:43:64:2b:d4:63: 89:b4:1a:c3:07:7b:56:80:52:f5:be:69:05:c6:f0: 5b:fe:fc:2c:c1:8a:98:78:37:11:ea:5b:2f:80:15: 9e:21:7d:34:15:a6:d2:6d:12:36:91:5f:96:49:54: 96:f0:fe:1e:a5:89:24:a3:01:82:96:15:f0:4d:82: 87:c2:b7:18:4e:11:73:ad:5f:94:07:9f:77:d9:b9: 1b:50:fd:9b:3b:ab:0a:8e:10:80:8f:10:a6:5d:4d: 5a:46:33:e7:0d:e5:84:32:d5:e5:47:33:e5:8d:d1: a4:87:9f:c1:c9:80:19:82:d9:ee:ae:c4:ea:fd:40: e5:f5:7f:33:92:e1:79:77:fc:02:e8:8b:64:1e:17: 3f:53:1f:78:f5:aa:8c:78:b2:36:cb:c3:bb:b8:6b: 8e:4b:55:74:ef:44:09:eb:33:e8:b7:b7:03:25:93: 25:b4:b1:5e:c0:b5:b3:a2:98:a6:a0:5e:65:16:38: 7f:31:fc:4f:de:87:9e:74:e2:f6:18:c5:53:a5:df: b7:40:30:bf:a5:90:da:a6:60:3f:3f:23:21:e7:43: fd:98:ec:14:46:72:fb:19:b3:98:7c:be:f3:01:7e: 8a:ef:a5:d4:01:61:34:bc:1c:7f:af:dd:5d:dd:00: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:52:0A:F6:B2:AC:F7:1F:AF:19:21:F7:D3:E6:98:4E:C0:4C:F1:54 X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:4e:61:76:33:e6:4f:14:22:0b:00:b8:4f:4d:6b:cf:52:1b: b0:45:20:2a:08:09:f0:12:5d:cb:08:53:00:89:db:77:1f:37: 7d:9e:ec:24:a5:e5:69:67:d9:c0:ae:10:88:de:e4:fa:84:b2: 96:5e:c2:05:82:ce:c2:ed:da:95:35:cf:94:c4:a9:c4:81:d5: 34:10:91:d5:60:46:71:5c:2a:c3:a9:18:a4:bb:eb:eb:1c:3a: 8a:89:0e:db:af:80:d5:f0:04:94:93:7e:c2:31:e1:b3:b9:23: cf:9c:4a:c1:80:fe:87:20:fc:4a:3a:94:b5:f1:fa:33:5b:f0: 31:6c:c6:a0:cd:cf:61:f1:01:4a:c6:1e:be:fc:ca:8b:44:7e: eb:95:7a:a2:72:4c:44:d3:fe:b8:be:e9:54:6d:2b:87:a0:10: 9c:92:70:1c:25:8f:ec:03:e1:fd:4c:03:42:4c:a0:2c:5e:49: a8:6b:5b:45:f8:33:0a:06:f4:2b:04:4c:a8:c8:eb:93:dd:2e: 1a:6b:14:df:86:79:31:9f:93:cb:20:7b:37:ca:90:77:60:5c: 10:0e:b6:a2:a5:98:f7:19:e1:30:f4:93:89:b5:f9:7a:ba:94: a7:72:53:33:99:43:91:e9:25:33:86:16:1e:d2:51:da:53:3a: 62:65:d8:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjUwNDI1MDAzNjQ0WhcNMjUwNTAyMDAzNjQ0WjAYMRYwFAYD VQQDEw02ODBhZDkxZC1lOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6aFasq2R+6vQ2Qr1GOJtBrDB3tWgFL1vmkFxvBb/vwswYqYeDcR6lsvgBWe IX00FabSbRI2kV+WSVSW8P4epYkkowGClhXwTYKHwrcYThFzrV+UB5932bkbUP2b O6sKjhCAjxCmXU1aRjPnDeWEMtXlRzPljdGkh5/ByYAZgtnursTq/UDl9X8zkuF5 d/wC6ItkHhc/Ux949aqMeLI2y8O7uGuOS1V070QJ6zPot7cDJZMltLFewLWzopim oF5lFjh/MfxP3oeedOL2GMVTpd+3QDC/pZDapmA/PyMh50P9mOwURnL7GbOYfL7z AX6K76XUAWE0vBx/r91d3QDEpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANSCvay rPcfrxkh99PmmE7ATPFUMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXTmF2M+ZPFCILALhPTWvPUhuwRSAqCAnwEl3LCFMAidt3Hzd9nuwk peVpZ9nArhCI3uT6hLKWXsIFgs7C7dqVNc+UxKnEgdU0EJHVYEZxXCrDqRiku+vr HDqKiQ7br4DV8ASUk37CMeGzuSPPnErBgP6HIPxKOpS18fozW/AxbMagzc9h8QFK xh6+/MqLRH7rlXqickxE0/64vulUbSuHoBCcknAcJY/sA+H9TANCTKAsXkmoa1tF +DMKBvQrBEyoyOuT3S4aaxTfhnkxn5PLIHs3ypB3YFwQDraipZj3GeEw9JOJtfl6 upSnclMzmUOR6SUzhhYe0lHaUzpiZdic -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:28 2025 by rpki-client