$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: W5OMZ5hPUwZNEb5FwVRrOtagfmhR9SW2onUa3HC8Ilg= Subject key identifier: 98:DA:6A:CA:A2:C8:D6:58:12:1D:0E:3F:D0:3B:B3:46:AC:58:1B:F7 Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0AF6 Signing time: Wed 30 Apr 2025 19:11:20 +0000 Manifest this update: Wed 30 Apr 2025 19:11:20 +0000 Manifest next update: Wed 07 May 2025 19:11:20 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: a5RVBYj31vvVI+CzQT6zT9JhMfc7f7lrv4A9O6X9PBk=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Apr 30 19:11:20 2025 GMT Not After : May 7 19:11:20 2025 GMT Subject: CN=681275d8-bdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:55:69:b4:00:00:1e:81:03:b1:87:97:f6: 08:3a:0a:5a:9d:89:1c:c2:85:f4:5c:82:a5:e3:98: e6:d0:81:73:3d:ba:8a:53:b2:b2:36:5e:64:d8:55: 7b:1d:be:ef:0f:d4:43:1f:3e:d5:fc:6e:2b:93:a9: 7d:4c:cb:f9:87:45:67:01:12:95:fe:fc:08:80:6d: 09:12:17:65:53:f7:1d:fe:2a:b2:cf:ac:76:cf:53: c6:ae:d8:d5:56:86:4f:0f:e8:94:7d:b1:39:6a:b0: 72:52:b5:87:96:61:99:d2:82:b7:9c:dd:7d:7c:83: 2d:25:3d:ec:87:46:4a:8a:2e:43:6a:f6:44:c1:7d: bb:ab:7b:dc:1e:88:3e:7d:d5:5e:31:77:3a:26:58: a8:ff:72:ae:93:38:0a:57:ad:66:49:b6:4e:92:69: 43:c3:8e:55:d2:1f:8b:bf:c2:ee:36:c9:46:2b:28: ec:ce:75:c4:ca:02:26:6c:90:85:47:c3:82:d0:76: d8:9b:d2:f0:f5:1c:62:a5:94:27:f8:f7:4b:54:be: bc:ee:5a:67:35:be:b6:5b:f8:78:db:01:c5:50:87: 38:d7:bd:ba:d1:8f:34:b1:9f:a8:a9:5c:9b:e0:3b: 1d:4a:a9:42:a6:1a:d0:7b:77:cd:95:72:a5:a0:04: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DA:6A:CA:A2:C8:D6:58:12:1D:0E:3F:D0:3B:B3:46:AC:58:1B:F7 X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6d:ed:8d:b1:d6:23:2b:5f:a2:30:dd:d7:ee:a7:9a:49:4f: 1f:2b:9d:84:91:f2:c4:57:22:21:d5:2f:12:e2:13:48:84:25: d6:0d:d9:2a:37:62:e1:3d:3b:61:89:f1:2a:68:f9:14:e3:b1: 4e:00:7f:ba:5c:b6:1f:3e:f5:2e:c9:f6:58:2b:08:1e:94:5f: 93:45:a7:8e:02:ec:fb:19:8f:bf:42:0a:56:3c:c8:f6:f5:e7: 56:2d:25:8d:ff:91:a3:b7:06:88:53:89:72:72:4c:54:2d:32: 1d:0c:46:33:8f:c3:77:8c:83:ae:b9:2f:79:0f:61:f4:6f:e0: a4:89:c4:0d:60:a9:b5:99:1b:a3:38:34:61:b5:df:b8:83:0e: 27:92:a0:c4:33:33:91:01:27:02:38:c9:20:f3:74:7f:29:a8: 25:5f:56:ee:3e:6e:6a:2e:99:62:66:e3:df:fc:ed:df:b4:50: 58:7c:36:f0:e8:bc:01:dc:0c:8a:07:83:27:b0:cd:73:e4:ba: 8b:7b:88:d1:b0:70:ac:64:cb:3c:fc:00:03:42:28:9e:3b:7d: 01:8f:84:4a:d5:80:61:de:9c:fc:74:e3:98:c8:83:8c:cf:28: 1b:af:5e:74:26:90:71:fe:a6:6b:b7:7a:f3:2d:5e:89:64:87: e0:31:c1:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwNDMwMTkxMTIwWhcNMjUwNTA3MTkxMTIwWjAYMRYwFAYD VQQDEw02ODEyNzVkOC1iZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuetVabQAAB6BA7GHl/YIOgpanYkcwoX0XIKl45jm0IFzPbqKU7KyNl5k2FV7 Hb7vD9RDHz7V/G4rk6l9TMv5h0VnARKV/vwIgG0JEhdlU/cd/iqyz6x2z1PGrtjV VoZPD+iUfbE5arByUrWHlmGZ0oK3nN19fIMtJT3sh0ZKii5DavZEwX27q3vcHog+ fdVeMXc6Jlio/3KukzgKV61mSbZOkmlDw45V0h+Lv8LuNslGKyjsznXEygImbJCF R8OC0HbYm9Lw9RxipZQn+PdLVL687lpnNb62W/h42wHFUIc417260Y80sZ+oqVyb 4DsdSqlCphrQe3fNlXKloATXVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjaasqi yNZYEh0OP9A7s0asWBv3MB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxbe2NsdYjK1+iMN3X7qeaSU8fK52EkfLEVyIh1S8S4hNIhCXWDdkq N2LhPTthifEqaPkU47FOAH+6XLYfPvUuyfZYKwgelF+TRaeOAuz7GY+/QgpWPMj2 9edWLSWN/5GjtwaIU4lyckxULTIdDEYzj8N3jIOuuS95D2H0b+CkicQNYKm1mRuj ODRhtd+4gw4nkqDEMzORAScCOMkg83R/KaglX1buPm5qLpliZuPf/O3ftFBYfDbw 6LwB3AyKB4MnsM1z5LqLe4jRsHCsZMs8/AADQiieO30Bj4RK1YBh3pz8dOOYyIOM zygbr150JpBx/qZrt3rzLV6JZIfgMcGN -----END CERTIFICATE-----Generated at Fri May 2 01:45:43 2025 by rpki-client