$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: 4npevOtxEEzbBX09DiibKQU/KgdASEkJTKHTqDtJz0A= Subject key identifier: 94:4F:A6:73:72:3A:1A:66:AD:B1:82:4E:B8:06:69:EB:FC:53:C0:24 Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 091C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 0909 Signing time: Thu 24 Apr 2025 20:13:48 +0000 Manifest this update: Thu 24 Apr 2025 20:13:48 +0000 Manifest next update: Thu 01 May 2025 20:13:48 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: A5J1QvwSUVWNvmX2qWVLl02QqYcPAatEmoCXkQUJeNs=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: LRUqK0HbwhlophByZnm497LSzITbbBMeAuaK57/ofL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Validity Not Before: Apr 24 20:13:48 2025 GMT Not After : May 1 20:13:48 2025 GMT Subject: CN=680a9b7c-a62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:c6:04:3d:7a:53:ce:53:75:8a:04:b2:bc: ee:89:de:10:91:6a:c8:42:d0:ca:a1:87:b2:7d:fc: 79:c7:6e:1f:44:87:e8:5e:60:da:70:dd:a3:44:46: b3:de:fa:48:d1:67:8a:fe:b5:67:3c:fd:83:f4:69: b2:6d:b1:a7:40:4d:11:2c:0a:b4:50:5e:ae:8e:8b: c3:d1:61:bf:b5:c9:eb:08:65:4c:d7:23:04:98:6c: 47:58:aa:40:3c:34:18:c1:6c:a7:5d:86:ff:be:44: c2:db:28:8b:86:f4:6d:c9:d3:16:80:a3:f9:fe:a4: 5c:e9:fc:30:6e:f0:2d:36:58:57:22:a8:c0:da:fc: 12:2f:4d:ae:25:8c:63:26:5e:0e:f4:61:83:64:e0: 0e:3c:31:00:3f:54:08:c7:8c:8a:84:a7:5c:b9:89: 32:af:16:e0:75:35:9b:50:3a:66:79:46:41:22:64: 1a:11:ab:8c:10:4e:4b:02:96:52:14:f9:d9:77:42: 29:2f:d4:20:57:43:74:4b:d1:fb:e3:53:fe:a7:53: 76:84:09:0c:dd:fb:35:98:36:35:f5:93:23:3e:50: 35:44:f1:b1:79:4a:f3:50:2e:8f:84:19:31:af:10: b1:2c:a4:d9:49:97:3c:89:b1:16:0b:ad:46:81:38: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:A6:73:72:3A:1A:66:AD:B1:82:4E:B8:06:69:EB:FC:53:C0:24 X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:cd:43:cb:39:1c:ee:43:37:2c:50:1b:d6:5e:7a:14:80: 0d:79:67:20:1a:b3:06:31:19:4e:a9:96:f3:63:81:0a:61:49: af:4f:c8:3f:bc:0d:bc:e1:34:d7:0c:81:29:da:40:41:43:49: 4d:1b:9d:d5:39:5d:2f:a4:81:ba:cf:35:25:a6:34:b7:b7:34: b5:ab:e7:53:c5:04:0f:f3:c5:69:f3:eb:39:6e:9f:d6:39:14: 8b:75:3c:c5:4f:e5:9b:66:42:1c:9a:7e:9a:32:62:18:a5:6f: 2d:ef:50:9f:49:2f:f9:0f:2d:76:72:3d:33:6a:7d:df:ac:48: 02:c9:07:46:65:17:f7:a6:8c:74:34:7c:e9:63:82:38:c6:32: 0e:97:73:7c:66:ae:e5:a5:93:6d:54:c7:50:64:57:bf:c5:9b: 3f:ac:49:32:c9:0a:0c:e8:7e:8f:de:76:51:85:40:a5:23:37: 3b:1a:4e:b5:f9:14:71:e6:bd:95:c3:ed:18:84:55:a5:b7:b9: c1:cf:5a:84:b7:e2:a0:25:1b:86:e4:4d:10:de:9a:eb:69:e2: 4f:58:0f:30:aa:f5:0e:89:1a:b2:fa:21:67:1f:04:39:11:8a: 64:eb:b0:e4:82:27:93:5a:86:77:02:14:86:58:19:03:d0:50: 0f:24:37:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjUwNDI0MjAxMzQ4WhcNMjUwNTAxMjAxMzQ4WjAYMRYwFAYD VQQDEw02ODBhOWI3Yy1hNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoADGBD16U85TdYoEsrzuid4QkWrIQtDKoYeyffx5x24fRIfoXmDacN2jREaz 3vpI0WeK/rVnPP2D9GmybbGnQE0RLAq0UF6ujovD0WG/tcnrCGVM1yMEmGxHWKpA PDQYwWynXYb/vkTC2yiLhvRtydMWgKP5/qRc6fwwbvAtNlhXIqjA2vwSL02uJYxj Jl4O9GGDZOAOPDEAP1QIx4yKhKdcuYkyrxbgdTWbUDpmeUZBImQaEauMEE5LApZS FPnZd0IpL9QgV0N0S9H741P+p1N2hAkM3fs1mDY19ZMjPlA1RPGxeUrzUC6PhBkx rxCxLKTZSZc8ibEWC61GgThgKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRPpnNy OhpmrbGCTrgGaev8U8AkMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV481Dyzkc7kM3LFAb1l56FIANeWcgGrMGMRlOqZbzY4EKYUmvT8g/ vA284TTXDIEp2kBBQ0lNG53VOV0vpIG6zzUlpjS3tzS1q+dTxQQP88Vp8+s5bp/W ORSLdTzFT+WbZkIcmn6aMmIYpW8t71CfSS/5Dy12cj0zan3frEgCyQdGZRf3pox0 NHzpY4I4xjIOl3N8Zq7lpZNtVMdQZFe/xZs/rEkyyQoM6H6P3nZRhUClIzc7Gk61 +RRx5r2Vw+0YhFWlt7nBz1qEt+KgJRuG5E0Q3prraeJPWA8wqvUOiRqy+iFnHwQ5 EYpk67DkgieTWoZ3AhSGWBkD0FAPJDew -----END CERTIFICATE-----Generated at Sat Apr 26 15:09:03 2025 by rpki-client