$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: pGTUi7k4yZbhEzAXllEEz/vRdindkXWvQQ+DNayJN9Q= Subject key identifier: 80:BB:95:B6:6A:49:8F:3F:3F:E6:1A:B7:D1:15:0F:44:9E:09:17:99 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0BC0 Signing time: Thu 24 Apr 2025 18:46:22 +0000 Manifest this update: Thu 24 Apr 2025 18:46:21 +0000 Manifest next update: Thu 01 May 2025 18:46:21 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: ulDlGSzX99lF+1X0skF+2+ud0qgI9vQxpdXzFs3kETs=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: WVFiwUZapp9A6STjs2oU5G8NhDLpA0+WzTdM80uXluY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Apr 24 18:46:21 2025 GMT Not After : May 1 18:46:21 2025 GMT Subject: CN=680a86fe-2eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:08:9d:d3:4a:1f:bb:2c:4e:ad:87:a1:0e: f1:59:7a:02:02:bb:3f:a5:fd:c5:50:66:b0:b2:a4: 34:9c:f3:29:e7:2a:be:30:86:81:a5:4b:f8:04:96: 18:8a:48:15:fe:68:0a:21:15:ab:f9:01:c0:f0:be: 6f:16:d3:7c:31:f1:62:b0:7a:a6:ba:a0:c5:5f:fb: 9d:e5:25:84:9e:e1:af:c3:01:b8:a4:f8:b7:66:4c: e5:b0:36:e7:f7:03:5d:b9:9f:d6:21:6b:5e:22:51: 61:db:52:e7:1e:7e:7b:2f:32:3d:a6:62:21:ad:3f: 96:d0:8b:1e:d0:ba:25:25:50:47:68:07:a3:87:1e: f1:4f:f9:fa:70:61:d5:25:77:fe:b1:29:e0:d9:1c: 65:16:df:d6:24:b7:97:7b:73:56:17:bb:c3:aa:11: eb:da:83:0c:f3:d6:88:67:70:eb:59:ee:a4:55:f3: 44:9a:80:12:37:78:9c:c4:79:49:08:f8:86:11:8d: e0:f3:1f:e9:24:d3:98:18:07:41:43:26:16:55:eb: 57:ca:3b:64:36:38:ff:f9:44:ef:d5:37:21:72:7b: bb:6c:c2:39:cc:97:af:81:35:dd:a8:49:e6:55:87: c3:85:b8:a4:80:04:b4:7b:21:79:1b:7e:6d:6e:dd: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BB:95:B6:6A:49:8F:3F:3F:E6:1A:B7:D1:15:0F:44:9E:09:17:99 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f8:0a:e9:cd:4a:8c:43:22:c1:d9:da:73:e6:f8:b0:75:54: 73:ea:97:b8:6b:1b:42:d1:ab:77:68:08:32:87:b8:fa:c3:00: 99:1a:69:84:14:4e:8f:63:4c:3e:6e:23:46:a3:13:34:ef:63: b3:30:26:e1:9e:02:ba:43:71:39:42:13:44:3c:d7:2c:33:4c: f7:8a:ce:3a:c3:84:bb:09:18:4d:a3:ad:e5:f2:c1:c9:04:f5: 5c:c1:66:64:80:ab:42:78:0e:1d:c0:85:0f:d9:8c:fe:da:e0: f0:b2:da:56:4e:37:fd:70:f4:1f:9b:82:cc:7e:40:07:42:76: e7:cb:fc:c8:d9:3b:a7:da:ac:1a:8e:a2:77:8d:ed:a6:51:d5: 0a:e7:92:00:8e:fa:ed:7a:50:31:62:a2:7f:e0:e6:38:74:28: 95:88:8f:12:55:27:1f:51:4f:41:ba:c0:22:00:d2:2d:e0:c5: 99:72:5b:b9:3e:23:18:f0:00:55:96:62:95:8b:13:5c:3a:b2: c9:9c:90:fa:07:72:54:25:23:b7:58:5b:89:b4:96:4a:3b:e1: 91:fc:20:f8:7e:f1:9e:2b:9b:e7:00:88:e8:0e:03:c7:8f:c0: 11:9a:8e:95:38:40:53:0a:4d:bc:3b:74:bc:0d:88:d5:30:31: 0e:c7:22:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUwNDI0MTg0NjIxWhcNMjUwNTAxMTg0NjIxWjAYMRYwFAYD VQQDEw02ODBhODZmZS0yZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOUIndNKH7ssTq2HoQ7xWXoCArs/pf3FUGawsqQ0nPMp5yq+MIaBpUv4BJYY ikgV/mgKIRWr+QHA8L5vFtN8MfFisHqmuqDFX/ud5SWEnuGvwwG4pPi3ZkzlsDbn 9wNduZ/WIWteIlFh21LnHn57LzI9pmIhrT+W0Ise0LolJVBHaAejhx7xT/n6cGHV JXf+sSng2RxlFt/WJLeXe3NWF7vDqhHr2oMM89aIZ3DrWe6kVfNEmoASN3icxHlJ CPiGEY3g8x/pJNOYGAdBQyYWVetXyjtkNjj/+UTv1Tchcnu7bMI5zJevgTXdqEnm VYfDhbikgAS0eyF5G35tbt3WmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC7lbZq SY8/P+Yat9EVD0SeCReZMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT+ArpzUqMQyLB2dpz5viwdVRz6pe4axtC0at3aAgyh7j6wwCZGmmE FE6PY0w+biNGoxM072OzMCbhngK6Q3E5QhNEPNcsM0z3is46w4S7CRhNo63l8sHJ BPVcwWZkgKtCeA4dwIUP2Yz+2uDwstpWTjf9cPQfm4LMfkAHQnbny/zI2Tun2qwa jqJ3je2mUdUK55IAjvrtelAxYqJ/4OY4dCiViI8SVScfUU9BusAiANIt4MWZclu5 PiMY8ABVlmKVixNcOrLJnJD6B3JUJSO3WFuJtJZKO+GR/CD4fvGeK5vnAIjoDgPH j8ARmo6VOEBTCk28O3S8DYjVMDEOxyJu -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:05 2025 by rpki-client