$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft File: JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json) Hash identifier: CGDgvKrjho6ybhO+JM3sC6ar7lkV3e520+u7aVqo1Mw= Subject key identifier: 89:42:31:F0:F1:04:CE:00:EE:01:02:3A:F1:86:4A:8F:26:21:65:C0 Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 Certificate issuer: /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft Manifest number: 071A Signing time: Wed 30 Apr 2025 21:32:47 +0000 Manifest this update: Wed 30 Apr 2025 21:32:46 +0000 Manifest next update: Wed 07 May 2025 21:32:46 +0000 Files and hashes: 1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: usJNLORhM58rgGWfT1WW/wGDfIXS7FQLXviJxEYB5QA=) 2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: FBuNSRl7XnXjjg9AlzEceanFZnpfOYLenTTWUna+f+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969 Validity Not Before: Apr 30 21:32:46 2025 GMT Not After : May 7 21:32:46 2025 GMT Subject: CN=681296fe-c283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:a9:5a:b2:30:0a:f5:67:b7:3c:f7:84:c4: 37:c1:06:7d:8b:fd:58:61:ed:3f:37:08:05:b6:25: 78:2c:8b:35:b1:5f:d6:79:d7:de:77:04:ff:43:d6: f9:54:27:64:98:b0:8d:0d:44:06:bd:9c:57:97:6e: 71:ef:ee:1e:d4:28:09:91:7f:9a:86:ee:b7:84:8f: de:d2:e0:03:1e:89:b1:ba:81:21:f2:cb:61:ce:6e: c6:dd:8b:39:80:2a:43:5a:b7:9c:97:fc:a4:6e:29: 36:57:76:b3:ad:22:16:94:0a:89:c9:24:0e:08:e8: 48:26:6c:c2:04:63:41:92:0d:3c:4a:66:7b:e6:f4: c7:92:b6:0e:d5:1a:e2:8a:30:8a:bc:e2:b4:83:ea: 53:63:1a:73:1f:25:71:d2:42:81:d4:fe:f4:09:f6: c6:6c:35:cd:40:2e:0c:ce:6b:1d:6e:cc:af:7d:94: c2:ba:46:95:7f:6d:11:8b:c7:cf:b4:65:cb:c3:83: 3d:7e:cb:56:f3:e7:8c:2c:48:5d:8f:91:1b:79:88: ba:aa:b5:a7:29:bb:4f:4f:81:57:1b:31:b7:ed:21: 05:3a:33:4e:ab:16:fd:da:0d:64:a0:8c:5e:5d:9e: b8:3e:eb:15:6e:7d:ed:5e:b8:74:14:5a:a1:c0:47: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:42:31:F0:F1:04:CE:00:EE:01:02:3A:F1:86:4A:8F:26:21:65:C0 X509v3 Authority Key Identifier: keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ce:38:75:cc:89:30:15:fd:e9:77:f8:a4:af:15:4c:28:74: 6a:70:84:c0:b7:5e:c7:f0:c4:5f:a2:90:b8:fb:4e:f2:25:fa: 1c:b3:ef:77:cb:cb:00:fc:eb:64:61:a3:d6:5f:d5:9f:53:4d: 23:e8:15:e4:4f:f2:40:63:90:22:8e:bd:1a:9c:8f:78:aa:e8: f6:92:05:fd:fb:5b:88:93:d4:20:cd:c7:9b:9d:59:81:ca:a8: 7b:7a:41:ec:4c:fa:33:10:37:f2:23:bd:bb:a1:a1:93:6d:a6: 04:01:e8:3b:87:98:93:50:97:f0:3b:d0:eb:51:3a:5c:4d:98: bc:64:59:b6:6d:8f:c5:7d:99:9d:2d:23:f7:2c:cd:01:96:fb: c6:6d:5a:59:83:61:1b:76:48:62:48:3b:06:66:91:b6:82:0b: bb:1c:2d:68:27:13:72:e2:c2:34:e7:93:88:05:3c:56:45:8f: 43:fd:04:0a:16:e0:04:1d:12:f0:df:ef:f4:ca:78:3b:40:0a: 00:81:c6:77:58:99:2f:55:37:57:70:83:82:0e:5a:68:6d:2a: b2:a5:6b:5d:d0:ac:56:61:f5:9c:98:0f:07:3c:82:58:d8:74: 12:0f:1a:42:4d:60:d1:72:75:ad:29:ee:d4:f6:26:83:44:e3: 42:ca:70:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4 NkFDOUE5NjkwHhcNMjUwNDMwMjEzMjQ2WhcNMjUwNTA3MjEzMjQ2WjAYMRYwFAYD VQQDEw02ODEyOTZmZS1jMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgmpWrIwCvVntzz3hMQ3wQZ9i/1YYe0/NwgFtiV4LIs1sV/WedfedwT/Q9b5 VCdkmLCNDUQGvZxXl25x7+4e1CgJkX+ahu63hI/e0uADHomxuoEh8sthzm7G3Ys5 gCpDWrecl/ykbik2V3azrSIWlAqJySQOCOhIJmzCBGNBkg08SmZ75vTHkrYO1Rri ijCKvOK0g+pTYxpzHyVx0kKB1P70CfbGbDXNQC4MzmsdbsyvfZTCukaVf20Ri8fP tGXLw4M9fstW8+eMLEhdj5EbeYi6qrWnKbtPT4FXGzG37SEFOjNOqxb92g1koIxe XZ64PusVbn3tXrh0FFqhwEcitQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlCMfDx BM4A7gECOvGGSo8mIWXAMB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDAyMi85NEU3Q0FGODMzQUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBL aUNPMThjb2dEbkNHckpxV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjzjh1zIkwFf3pd/ikrxVMKHRqcITAt17H8MRfopC4+07yJfocs+93 y8sA/OtkYaPWX9WfU00j6BXkT/JAY5Aijr0anI94quj2kgX9+1uIk9QgzcebnVmB yqh7ekHsTPozEDfyI727oaGTbaYEAeg7h5iTUJfwO9DrUTpcTZi8ZFm2bY/FfZmd LSP3LM0BlvvGbVpZg2EbdkhiSDsGZpG2ggu7HC1oJxNy4sI055OIBTxWRY9D/QQK FuAEHRLw3+/0yng7QAoAgcZ3WJkvVTdXcIOCDlpobSqypWtd0KxWYfWcmA8HPIJY 2HQSDxpCTWDRcnWtKe7U9iaDRONCynBD -----END CERTIFICATE-----Generated at Thu May 1 13:55:36 2025 by rpki-client