$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: 3Zc6FB4UcX0OEOxYaFfUmJ21A89AXXAs/hoPTS5784M= Subject key identifier: 25:52:83:D0:A1:EB:C4:77:BF:B8:D5:AE:03:59:65:53:1F:92:06:85 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 1659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 162A Signing time: Thu 24 Apr 2025 16:45:00 +0000 Manifest this update: Thu 24 Apr 2025 16:45:00 +0000 Manifest next update: Thu 01 May 2025 16:45:00 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: A6f210dVvcxF+31/nknOJ0NTgxDfSDrq1uTNXL+u414=) 2: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: j99DqXIlX/DsX6CAhLDODI4Li/SA5fMocxzYjvHfoI0=) 3: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: 8Wwh2LGsfMleJz4kPXncR947wixaVvdi2YpWJ6WAnNA=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: /AMe5fWdVkNbiDNAX3rxonqHX2GWCAFeTm3WBDEgams=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: C40oyBiTxjQqMGzoY7zwrfSLtJR/TE6dpDn0DYUL1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5721 (0x1659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Apr 24 16:45:00 2025 GMT Not After : May 1 16:45:00 2025 GMT Subject: CN=680a6a8c-de78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:48:12:c9:5c:90:43:aa:7f:c8:93:6e:07: 32:17:d6:8b:fc:29:d5:08:52:d5:c3:70:3a:22:73: 60:ea:a5:c0:9d:54:c0:2f:f8:49:77:22:6e:f0:31: 54:bf:9b:bd:e6:b9:59:ab:8d:d5:ec:88:0e:b5:60: 0c:75:46:e1:35:03:64:67:42:f6:68:6c:8a:15:4b: 1e:19:3c:b5:f0:0d:64:4f:5a:bf:f7:1f:2e:fa:30: 7d:4b:2b:e2:7f:09:14:37:fc:46:98:88:23:f2:3b: bd:c0:f5:d6:b3:e1:8d:3d:61:db:72:9f:0d:e9:4d: fb:44:61:26:13:17:15:96:4b:19:07:f7:76:fd:84: 4a:fe:e9:5f:04:0b:c3:21:60:29:b3:a9:e3:b4:4b: f8:3c:bc:8b:81:bd:cb:11:f7:3d:b0:a4:3e:30:16: e5:c8:ee:e7:ad:ee:7c:cf:c6:6e:58:d0:90:f0:4a: b5:20:60:4c:04:82:0d:5f:60:99:d8:f1:8c:51:de: 0e:70:fa:12:09:41:74:d0:c0:ab:ba:eb:d7:ec:11: 8c:18:44:86:e0:d1:1f:71:fc:b5:03:7a:9c:99:e1: 19:02:de:0c:bf:c0:60:19:7b:4f:66:f3:b2:a1:63: 3f:df:ce:81:2b:be:ba:5c:bb:ce:13:47:39:e3:d6: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:52:83:D0:A1:EB:C4:77:BF:B8:D5:AE:03:59:65:53:1F:92:06:85 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:9e:2e:f7:af:de:90:b7:5a:a5:2d:6d:09:5e:6c:ce:6b:33: bb:cb:29:16:e9:f7:25:8a:b5:9d:3c:bc:74:4d:24:fa:96:7f: ef:44:60:09:41:f8:b5:a1:d9:75:36:6e:fb:1b:18:c8:ac:27: 63:d3:e4:9a:72:2b:dd:5e:d4:e1:66:b6:93:37:12:6a:0b:2b: 87:ff:9c:13:44:d9:7f:9f:1a:28:53:86:ba:57:69:5c:f8:ea: f3:a8:e5:44:c9:69:6d:e5:8c:c4:ab:55:b4:ec:24:15:4f:a8: 99:fc:58:de:01:61:32:a0:04:e3:b0:32:69:eb:33:4b:6e:ee: 5b:f4:f1:f5:43:f9:25:a1:60:85:e8:ad:97:8e:67:ab:4b:d0: 37:f5:2e:c7:a5:2b:1d:77:26:2e:76:de:9b:f3:25:70:3b:2d: 70:03:34:c1:81:ed:49:7f:8b:1d:6a:63:95:39:a1:9d:7b:f5: fe:2e:d0:cf:39:ca:ab:60:d8:0d:6b:15:77:91:4f:99:ec:7c: 7e:bb:43:3f:9d:e3:de:fd:1e:dc:81:0e:8b:af:1e:3a:e2:30: 43:92:cb:bd:4a:26:43:1a:06:24:4e:ef:55:98:a8:8a:73:f7: 1d:15:ba:58:79:4b:f2:64:a3:62:79:3a:2c:b6:79:d6:40:ce: 1c:29:60:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUwNDI0MTY0NTAwWhcNMjUwNTAxMTY0NTAwWjAYMRYwFAYD VQQDEw02ODBhNmE4Yy1kZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrhIEslckEOqf8iTbgcyF9aL/CnVCFLVw3A6InNg6qXAnVTAL/hJdyJu8DFU v5u95rlZq43V7IgOtWAMdUbhNQNkZ0L2aGyKFUseGTy18A1kT1q/9x8u+jB9Syvi fwkUN/xGmIgj8ju9wPXWs+GNPWHbcp8N6U37RGEmExcVlksZB/d2/YRK/ulfBAvD IWAps6njtEv4PLyLgb3LEfc9sKQ+MBblyO7nre58z8ZuWNCQ8Eq1IGBMBIINX2CZ 2PGMUd4OcPoSCUF00MCruuvX7BGMGESG4NEfcfy1A3qcmeEZAt4Mv8BgGXtPZvOy oWM/386BK766XLvOE0c549bZvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVSg9Ch 68R3v7jVrgNZZVMfkgaFMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTni73r96Qt1qlLW0JXmzOazO7yykW6fclirWdPLx0TST6ln/vRGAJ Qfi1odl1Nm77GxjIrCdj0+SacivdXtThZraTNxJqCyuH/5wTRNl/nxooU4a6V2lc +OrzqOVEyWlt5YzEq1W07CQVT6iZ/FjeAWEyoATjsDJp6zNLbu5b9PH1Q/kloWCF 6K2XjmerS9A39S7HpSsddyYudt6b8yVwOy1wAzTBge1Jf4sdamOVOaGde/X+LtDP OcqrYNgNaxV3kU+Z7Hx+u0M/nePe/R7cgQ6Lrx464jBDksu9SiZDGgYkTu9VmKiK c/cdFbpYeUvyZKNieTostnnWQM4cKWAG -----END CERTIFICATE-----Generated at Sat Apr 26 05:14:29 2025 by rpki-client