$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: fbBBDXLWNrYagIuBPCaYjJsw2aCog9Ov2T3ieTom+h0= Subject key identifier: 79:DB:C2:D8:20:13:73:0D:CB:F2:72:EF:37:3B:E5:97:5C:B3:3D:3B Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 06DC Signing time: Thu 24 Apr 2025 21:50:47 +0000 Manifest this update: Thu 24 Apr 2025 21:50:46 +0000 Manifest next update: Thu 01 May 2025 21:50:46 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: PF1h8X/JW/4cIf0gxdIvtyt4+lLJEjYYIbTg2o8G/9s=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Apr 24 21:50:46 2025 GMT Not After : May 1 21:50:46 2025 GMT Subject: CN=680ab237-ac18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:38:24:88:17:2b:9d:f8:72:84:d7:4c:9c: 62:2f:9f:49:ee:b6:3d:2c:97:ec:17:c9:34:ce:58: f6:77:a6:a8:3d:8a:76:53:ec:9a:34:bc:60:d8:89: e3:84:13:23:25:cf:30:38:82:4c:0f:e5:cd:17:04: c0:d1:e4:c3:fc:e1:1d:4e:e8:73:34:2f:c8:a9:eb: 2e:1f:16:96:e9:4a:62:5d:1f:88:bf:f4:91:fe:be: 83:5a:57:98:01:79:2e:be:f6:5e:7f:a8:40:82:87: 04:be:fe:ec:b2:bd:52:03:28:19:6e:4e:94:28:ec: 24:cb:47:44:05:18:23:fe:79:bb:d3:64:0b:7b:c7: d5:3d:d6:73:2a:a9:13:ba:f6:1e:74:31:0a:98:4e: e0:d7:53:1f:fa:69:61:fd:a3:3f:ac:93:6d:e0:24: 95:80:86:94:bd:0a:a2:c5:f5:74:64:83:ee:26:58: ad:cf:7e:18:9e:25:f4:d9:12:44:13:37:05:c1:28: d4:97:bf:b2:f6:6f:97:85:65:4a:e9:ce:a6:bd:ce: 25:3e:78:b5:91:7e:bd:0d:56:d0:fd:58:23:1b:75: 91:f8:a2:02:61:3a:fc:c0:69:e7:2a:ea:21:18:10: 56:a5:d6:1e:15:83:41:ef:9c:d9:63:58:2a:be:1e: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DB:C2:D8:20:13:73:0D:CB:F2:72:EF:37:3B:E5:97:5C:B3:3D:3B X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c8:10:af:0b:8b:0c:a5:1c:4b:f6:04:80:89:41:6d:9b:29: c0:6f:08:ff:21:bd:a2:43:57:8b:48:51:d1:fc:46:bc:4d:fe: 21:a1:92:12:83:47:ad:4a:b5:f0:ca:5f:b7:f2:d3:92:ab:f9: 77:ef:d6:72:04:28:ff:12:b7:2b:27:6f:be:31:54:2f:f5:19: 5b:d7:28:85:da:f2:b7:c4:d7:87:7a:93:d5:06:75:37:c7:a0: e8:c4:1a:03:fc:c2:bb:2d:8e:60:51:09:2e:55:39:ab:2a:0d: 1d:3f:a7:41:da:e6:33:d2:35:a4:a3:58:47:52:ce:c7:e8:08: 01:33:9a:2b:fc:5d:5b:5e:15:95:64:85:8b:d0:12:79:03:9a: 13:48:39:56:d1:8e:e1:c5:85:da:d7:da:5e:00:77:6d:f1:28: 43:cc:14:d1:f3:cf:ce:7f:6f:4b:b3:46:08:93:73:05:c6:ae: 28:6b:e0:be:2e:71:94:2a:49:a5:c0:9d:33:37:87:b1:33:b2: 72:8a:31:2b:6d:28:73:c0:dc:5c:47:6a:a1:61:3d:b2:7f:1e: f2:bb:39:4c:f9:bf:c4:c1:bf:3f:ae:c4:b6:ba:67:3c:13:3f: 69:79:b2:b5:c3:38:76:4a:86:51:99:df:78:88:7f:74:3e:b1: 2a:8d:f0:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUwNDI0MjE1MDQ2WhcNMjUwNTAxMjE1MDQ2WjAYMRYwFAYD VQQDEw02ODBhYjIzNy1hYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaI4JIgXK534coTXTJxiL59J7rY9LJfsF8k0zlj2d6aoPYp2U+yaNLxg2Inj hBMjJc8wOIJMD+XNFwTA0eTD/OEdTuhzNC/IqesuHxaW6UpiXR+Iv/SR/r6DWleY AXkuvvZef6hAgocEvv7ssr1SAygZbk6UKOwky0dEBRgj/nm702QLe8fVPdZzKqkT uvYedDEKmE7g11Mf+mlh/aM/rJNt4CSVgIaUvQqixfV0ZIPuJlitz34YniX02RJE EzcFwSjUl7+y9m+XhWVK6c6mvc4lPni1kX69DVbQ/VgjG3WR+KICYTr8wGnnKuoh GBBWpdYeFYNB75zZY1gqvh7jNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnbwtgg E3MNy/Jy7zc75Zdcsz07MB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtyBCvC4sMpRxL9gSAiUFtmynAbwj/Ib2iQ1eLSFHR/Ea8Tf4hoZIS g0etSrXwyl+38tOSq/l379ZyBCj/ErcrJ2++MVQv9Rlb1yiF2vK3xNeHepPVBnU3 x6DoxBoD/MK7LY5gUQkuVTmrKg0dP6dB2uYz0jWko1hHUs7H6AgBM5or/F1bXhWV ZIWL0BJ5A5oTSDlW0Y7hxYXa19peAHdt8ShDzBTR88/Of29Ls0YIk3MFxq4oa+C+ LnGUKkmlwJ0zN4exM7JyijErbShzwNxcR2qhYT2yfx7yuzlM+b/Ewb8/rsS2umc8 Ez9pebK1wzh2SoZRmd94iH90PrEqjfDQ -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:41 2025 by rpki-client