$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: GlyixiZDZ/rp6gGcJ72ZkjlqNTDr1OLX29epxVm1sc4= Subject key identifier: D7:7B:EE:D6:D6:B7:3D:E7:8B:EE:1D:74:29:8B:EA:31:6E:D4:97:BB Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0105 Signing time: Fri 25 Apr 2025 04:12:01 +0000 Manifest this update: Fri 25 Apr 2025 04:12:01 +0000 Manifest next update: Fri 02 May 2025 04:12:01 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: Wi/rtywgeuTyeMFaiyRh4xKPox3sa774W5WQrAP/Wds=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Apr 25 04:12:01 2025 GMT Not After : May 2 04:12:01 2025 GMT Subject: CN=680b0b91-3412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:4d:e0:66:8a:f4:cc:b7:3d:55:2b:68:2a: d3:4c:43:a2:a5:0f:8a:80:95:64:4d:7f:95:4c:f9: 97:9e:93:42:8b:7f:31:72:6a:b7:b2:68:08:0f:94: d9:a1:12:a6:dc:3e:9a:ee:fa:1e:26:ac:6d:d6:dd: b2:2e:e0:ec:2d:51:e6:72:30:31:91:cf:60:7f:b2: b4:a7:10:d0:1e:82:c7:69:56:d7:de:31:f3:30:d6: 47:69:b8:5e:12:b5:90:30:c2:5b:37:c0:6b:6a:6b: 04:bf:53:e3:7a:8d:35:0e:12:72:ad:74:53:a8:97: c6:2f:14:53:24:0c:6c:67:f8:40:14:44:b9:42:b3: 13:fd:23:d0:b6:6e:cc:1b:be:38:8b:7d:4f:f3:7c: ac:b0:37:c9:77:07:25:aa:e0:5a:eb:29:fa:15:83: e7:27:ed:21:16:42:fe:3f:f6:eb:24:4b:b8:c4:53: 54:e9:eb:ad:7e:a8:63:cd:41:74:2a:2c:5a:2f:a6: b9:3a:52:f9:a8:6c:30:3e:4a:50:87:3a:82:08:39: 11:80:3f:e3:38:2e:f9:de:d4:2b:ec:68:bb:d6:68: e2:79:30:b7:2f:46:8b:a5:aa:11:4e:fd:15:26:b7: ab:8a:ee:f9:fb:82:3e:3f:c6:69:f0:89:bd:24:01: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:EE:D6:D6:B7:3D:E7:8B:EE:1D:74:29:8B:EA:31:6E:D4:97:BB X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:b2:f8:c0:e9:15:d0:18:cb:8d:ca:3b:87:96:da:30:ae: a6:b2:3b:ad:7e:28:fa:d4:25:a5:1a:d6:ff:0b:e4:76:b8:08: 5a:71:8f:2d:c0:26:f4:49:d9:09:e5:97:1a:38:15:4e:e2:f7: 7b:2b:a7:ee:78:95:5c:dd:e9:95:cf:82:db:47:f2:b1:77:85: 95:7c:75:1b:3a:8e:56:e7:3f:10:d0:45:31:0f:9d:69:8b:c5: 12:4b:3a:1f:94:72:d0:84:ff:9b:99:b5:45:ae:e0:58:34:59: 08:fc:c1:a1:5e:65:1e:ba:6e:38:c9:70:e2:c0:0b:77:eb:b7: 80:53:91:29:7f:94:98:73:f6:64:92:7b:2f:af:ea:7a:94:01: 67:f4:47:5f:97:ac:ac:91:00:1b:ed:4c:44:11:b1:9c:33:c4: 77:6c:80:64:75:3d:76:e9:b4:df:dd:c2:0b:64:e5:a8:3a:34: ca:39:1d:0b:ec:1a:49:2b:ce:c7:79:89:3a:5c:c9:d9:2e:69: a5:3d:59:08:19:f1:8a:b7:c0:47:19:8e:d9:0c:f7:67:6b:9e: 96:68:b7:12:fa:f2:ee:69:ed:5d:92:1c:53:55:17:4e:c9:78: 19:3b:c2:ab:2a:a6:e6:42:6b:94:5f:14:6c:c7:a7:b6:8b:69: 7b:1b:d9:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNDI1MDQxMjAxWhcNMjUwNTAyMDQxMjAxWjAYMRYwFAYD VQQDEw02ODBiMGI5MS0zNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r9N4GaK9My3PVUraCrTTEOipQ+KgJVkTX+VTPmXnpNCi38xcmq3smgID5TZ oRKm3D6a7voeJqxt1t2yLuDsLVHmcjAxkc9gf7K0pxDQHoLHaVbX3jHzMNZHabhe ErWQMMJbN8BramsEv1Pjeo01DhJyrXRTqJfGLxRTJAxsZ/hAFES5QrMT/SPQtm7M G744i31P83yssDfJdwclquBa6yn6FYPnJ+0hFkL+P/brJEu4xFNU6eutfqhjzUF0 KixaL6a5OlL5qGwwPkpQhzqCCDkRgD/jOC753tQr7Gi71mjieTC3L0aLpaoRTv0V Jreriu75+4I+P8Zp8Im9JAGbrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd77tbW tz3ni+4ddCmL6jFu1Je7MB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkWrL4wOkV0BjLjco7h5baMK6msjutfij61CWlGtb/C+R2uAhacY8t wCb0SdkJ5ZcaOBVO4vd7K6fueJVc3emVz4LbR/Kxd4WVfHUbOo5W5z8Q0EUxD51p i8USSzoflHLQhP+bmbVFruBYNFkI/MGhXmUeum44yXDiwAt367eAU5Epf5SYc/Zk knsvr+p6lAFn9Edfl6yskQAb7UxEEbGcM8R3bIBkdT126bTf3cILZOWoOjTKOR0L 7BpJK87HeYk6XMnZLmmlPVkIGfGKt8BHGY7ZDPdna56WaLcS+vLuae1dkhxTVRdO yXgZO8KrKqbmQmuUXxRsx6e2i2l7G9kb -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:38 2025 by rpki-client