$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: ONF0v9+wJD6jhVM8jzyc+O+ujx7lgg78/5/5l4ObJ9U= Subject key identifier: 90:B3:6D:35:70:DF:66:32:4D:F0:C7:FE:CD:1C:78:1D:CD:9F:BA:F8 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01B0 Signing time: Fri 25 Apr 2025 02:23:15 +0000 Manifest this update: Fri 25 Apr 2025 02:23:15 +0000 Manifest next update: Fri 02 May 2025 02:23:15 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: ClJNkskViwYv3v84c6qxqFuUw18NM5aFfY2wYz+ZzEQ=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Apr 25 02:23:15 2025 GMT Not After : May 2 02:23:15 2025 GMT Subject: CN=680af213-c647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:64:88:86:a3:51:58:cd:8b:b9:54:cf:15: 20:62:ce:1d:0c:6f:60:97:2f:e4:3d:c3:a4:d6:4f: 73:68:1a:20:4d:be:94:26:a8:49:4d:ba:8f:f4:93: b6:3a:a1:7c:e4:c7:a6:be:e3:1d:98:04:a7:3e:62: 7c:ea:17:6f:1b:f6:16:0f:21:cf:c1:17:25:c1:0a: 5b:8d:39:cd:a2:b0:81:80:3a:1b:46:cd:9d:6c:ec: a5:7c:62:ff:29:d4:6c:a4:54:68:70:8e:bb:5b:42: 38:2a:f1:bc:2d:19:52:08:1c:3f:b5:75:ae:c7:06: 5b:75:3c:49:ff:c7:74:a3:3d:56:c7:c6:bf:ea:01: 87:d6:f9:2e:d3:98:07:e0:2a:d2:d8:fc:b0:c4:3e: 92:f8:0a:aa:4d:63:d8:cf:7e:8a:dc:e9:ef:7c:e2: 6d:93:12:27:9e:a6:0f:e4:66:1c:ac:fd:1f:86:12: c8:6d:bf:4e:6b:3e:16:53:94:f0:7b:34:01:1d:d6: 75:55:27:7b:bc:a3:ee:70:e5:0c:d0:bb:81:27:12: 02:63:0f:1e:29:07:83:37:b7:46:bb:cc:2b:0d:e9: 30:cb:b0:c6:14:36:2d:de:4d:56:d9:45:e4:48:6e: 7d:f5:d3:79:c0:ab:0e:a1:37:0c:b2:95:3d:a1:23: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B3:6D:35:70:DF:66:32:4D:F0:C7:FE:CD:1C:78:1D:CD:9F:BA:F8 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ab:78:19:6c:20:82:ec:81:50:a0:30:a2:0d:92:6b:0c:ce: e6:be:8b:36:08:82:e6:45:ca:21:b4:7c:8d:fc:ef:b4:f0:69: 94:0e:27:ad:6c:6f:2c:be:e8:fb:47:17:19:48:34:50:be:d3: 85:44:3e:4e:8e:9e:15:64:6e:f2:df:dd:63:24:89:43:7a:e8: c6:42:11:39:f6:1f:b1:9f:d8:06:76:89:57:d7:e9:59:1e:71: b0:87:89:d8:9a:f6:ec:24:10:9c:3e:7d:c9:09:21:04:61:9d: 77:93:8e:36:eb:12:6e:fc:a2:94:e9:41:e2:e3:88:64:0a:7e: e9:a3:a8:8d:62:c4:56:b0:27:46:78:bc:05:7e:55:c4:08:be: 7c:bf:5a:7a:3e:3a:61:32:42:ff:7c:48:9d:62:08:c7:52:8f: 02:6c:80:0e:41:9f:0d:f2:9d:66:6d:36:57:7f:61:6d:2c:ff: 58:e7:c0:ad:7b:1a:75:9e:29:06:d8:24:a8:27:40:ed:25:53: 18:d5:3e:a3:2e:db:da:7e:ec:ac:f4:54:03:9d:58:16:bc:fe: 15:82:a4:34:0a:d0:ed:cb:54:5a:32:98:57:d0:f1:86:18:19: 0b:cb:5d:00:d4:d1:03:0f:99:01:f2:f0:8a:86:6f:4d:ff:54: 1d:ae:32:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwNDI1MDIyMzE1WhcNMjUwNTAyMDIyMzE1WjAYMRYwFAYD VQQDEw02ODBhZjIxMy1jNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2FkiIajUVjNi7lUzxUgYs4dDG9gly/kPcOk1k9zaBogTb6UJqhJTbqP9JO2 OqF85MemvuMdmASnPmJ86hdvG/YWDyHPwRclwQpbjTnNorCBgDobRs2dbOylfGL/ KdRspFRocI67W0I4KvG8LRlSCBw/tXWuxwZbdTxJ/8d0oz1Wx8a/6gGH1vku05gH 4CrS2PywxD6S+AqqTWPYz36K3OnvfOJtkxInnqYP5GYcrP0fhhLIbb9Oaz4WU5Tw ezQBHdZ1VSd7vKPucOUM0LuBJxICYw8eKQeDN7dGu8wrDekwy7DGFDYt3k1W2UXk SG599dN5wKsOoTcMspU9oSMa+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCzbTVw 32YyTfDH/s0ceB3Nn7r4MB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMq3gZbCCC7IFQoDCiDZJrDM7mvos2CILmRcohtHyN/O+08GmUDiet bG8svuj7RxcZSDRQvtOFRD5Ojp4VZG7y391jJIlDeujGQhE59h+xn9gGdolX1+lZ HnGwh4nYmvbsJBCcPn3JCSEEYZ13k4426xJu/KKU6UHi44hkCn7po6iNYsRWsCdG eLwFflXECL58v1p6PjphMkL/fEidYgjHUo8CbIAOQZ8N8p1mbTZXf2FtLP9Y58Ct exp1nikG2CSoJ0DtJVMY1T6jLtvafuys9FQDnVgWvP4VgqQ0CtDty1RaMphX0PGG GBkLy10A1NEDD5kB8vCKhm9N/1QdrjJS -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:52 2025 by rpki-client