$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: seNtW/WbPh+NFzHvcSLsvv4WQF174UuFHdS6NJx/Hyg= Subject key identifier: AE:B1:3C:54:85:39:B7:B0:92:06:F0:AC:2A:BB:49:CB:86:97:C4:BC Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 03D9 Signing time: Fri 25 Apr 2025 00:20:00 +0000 Manifest this update: Fri 25 Apr 2025 00:19:59 +0000 Manifest next update: Fri 02 May 2025 00:19:59 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: wAzHcRAnj5gxBPFkNxb1/GIdurmS2sREkx/fOL05vHI=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Apr 25 00:19:59 2025 GMT Not After : May 2 00:19:59 2025 GMT Subject: CN=680ad530-c3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:6a:ed:2c:84:3d:d3:0a:5c:84:6a:a1:47: cc:98:9b:71:d5:3d:a7:df:ef:37:5d:7a:d1:5f:b4: 1d:8c:94:22:d4:a8:cd:30:d5:ca:1d:cc:3c:97:d7: 2f:5b:cd:17:f4:40:82:2e:a5:e7:68:06:75:c2:3b: e0:2c:76:88:63:f4:53:61:b5:96:5e:c0:d7:d9:c4: b4:52:0d:ea:89:fe:e1:94:a2:91:90:e0:9f:81:7a: be:46:07:65:4d:bf:1c:31:7d:38:0f:f7:b6:33:a7: 7d:48:bf:2e:e9:ab:07:18:c6:e9:5f:ec:e2:ed:29: 66:81:35:89:a9:b9:df:3f:55:fd:bd:85:dd:d3:89: f9:43:c0:24:24:f6:c6:69:07:fc:af:d6:49:ec:16: 7e:ab:6d:8c:44:59:55:9d:4a:37:8d:dc:7b:6f:0b: fc:f0:e2:dd:d1:0f:50:62:d0:03:d7:43:7d:e8:56: 14:32:f8:34:7f:b8:db:a6:6b:3c:06:f9:6b:b7:e5: 89:73:19:89:8b:a6:17:22:37:91:10:79:eb:be:e3: ef:5f:1d:bd:30:a8:89:40:4f:f9:43:4e:d9:54:1c: 50:5d:ac:f4:55:36:ee:c6:69:60:e9:7b:4f:d1:dc: 79:a6:c9:b7:f9:f7:d5:bb:64:ea:83:7b:89:6d:ee: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B1:3C:54:85:39:B7:B0:92:06:F0:AC:2A:BB:49:CB:86:97:C4:BC X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fd:7b:e4:62:ab:4e:c0:87:60:f5:3c:07:83:f7:84:5f:03: 05:de:c7:d8:58:98:f5:ff:9c:f8:6b:48:74:c2:06:e9:c8:ea: 11:04:b6:60:27:0b:0d:f3:02:5e:17:03:1e:01:a9:96:68:30: be:00:87:db:36:8e:b6:01:4f:c8:a6:15:09:70:69:5b:3d:bc: 0a:f2:b2:c8:3c:8f:38:d6:37:a7:41:df:90:ef:6e:55:5b:b8: ec:d6:59:0f:1a:e3:b8:18:cc:c7:a6:aa:98:a7:99:85:77:7e: 5e:83:26:5f:1c:36:a8:ca:12:37:bd:5c:89:53:01:e2:90:ab: 58:94:6f:24:73:7f:06:e3:48:c1:ab:7a:96:23:f3:06:e0:d9: b2:4e:f7:ac:83:01:80:fb:fd:db:b6:ae:35:14:bb:fc:75:fc: fa:86:0e:9e:76:08:e6:31:98:a8:f1:1d:06:05:7b:e5:a9:c2: 9d:38:86:9e:61:7d:75:0c:6c:50:b5:4d:5e:06:f2:99:c5:0b: 7d:ca:9c:99:6f:ea:83:d4:c2:6f:9b:0b:69:4c:3b:6f:53:2f: db:f6:aa:97:ce:69:db:b6:7c:9b:64:1d:31:0a:fe:d7:15:a7: f3:9c:92:a2:b0:d8:9b:18:aa:d7:1c:1c:cc:25:3f:95:38:91: f3:4e:d9:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwNDI1MDAxOTU5WhcNMjUwNTAyMDAxOTU5WjAYMRYwFAYD VQQDEw02ODBhZDUzMC1jM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0Vq7SyEPdMKXIRqoUfMmJtx1T2n3+83XXrRX7QdjJQi1KjNMNXKHcw8l9cv W80X9ECCLqXnaAZ1wjvgLHaIY/RTYbWWXsDX2cS0Ug3qif7hlKKRkOCfgXq+Rgdl Tb8cMX04D/e2M6d9SL8u6asHGMbpX+zi7SlmgTWJqbnfP1X9vYXd04n5Q8AkJPbG aQf8r9ZJ7BZ+q22MRFlVnUo3jdx7bwv88OLd0Q9QYtAD10N96FYUMvg0f7jbpms8 Bvlrt+WJcxmJi6YXIjeREHnrvuPvXx29MKiJQE/5Q07ZVBxQXaz0VTbuxmlg6XtP 0dx5psm3+ffVu2Tqg3uJbe5smwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6xPFSF ObewkgbwrCq7ScuGl8S8MB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr/XvkYqtOwIdg9TwHg/eEXwMF3sfYWJj1/5z4a0h0wgbpyOoRBLZg JwsN8wJeFwMeAamWaDC+AIfbNo62AU/IphUJcGlbPbwK8rLIPI841jenQd+Q725V W7js1lkPGuO4GMzHpqqYp5mFd35egyZfHDaoyhI3vVyJUwHikKtYlG8kc38G40jB q3qWI/MG4NmyTvesgwGA+/3btq41FLv8dfz6hg6edgjmMZio8R0GBXvlqcKdOIae YX11DGxQtU1eBvKZxQt9ypyZb+qD1MJvmwtpTDtvUy/b9qqXzmnbtnybZB0xCv7X FafznJKisNibGKrXHBzMJT+VOJHzTtlU -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:46 2025 by rpki-client