$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: 1GBwULfKEA6foOQIhH3cQkYCFmmHaKHoLIXDjFX7wh0= Subject key identifier: 27:72:F1:03:42:09:56:08:FE:F8:44:66:F0:0B:E2:94:A9:B6:F2:FF Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 0776 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 0759 Signing time: Thu 24 Apr 2025 21:30:03 +0000 Manifest this update: Thu 24 Apr 2025 21:30:03 +0000 Manifest next update: Thu 01 May 2025 21:30:03 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: RtFAquWN8vRpG9/REgAWNBUxlLsr4yL8toAyknIatDk=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: 8+1XQwF+N1uRgo6m/yuRPrxH+AEwqewgbTlOR/yQ1Is=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: oBTylAc0/+wG9PO1+l3Ek9c9prat0lyvUmk+iqPxpuA=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: zl+C3NthfIT+XlnjBqg1tdgjzR0Zd+EdwBs85D/sIUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1910 (0x776) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Apr 24 21:30:03 2025 GMT Not After : May 1 21:30:03 2025 GMT Subject: CN=680aad5b-aaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:00:a2:a7:5f:56:15:35:da:98:83:2a:33: c3:cf:05:32:54:cd:e8:da:62:bb:36:ec:d4:f5:f5: 17:bc:ca:7d:46:4f:31:11:45:be:c8:76:d0:bf:72: a7:6e:20:ea:26:78:2a:48:23:e7:bb:e7:2a:73:3f: 88:32:1c:44:c0:90:a5:ca:86:ed:5d:48:62:06:1c: b7:77:71:74:67:50:ed:64:8e:eb:9d:7c:0a:16:10: 93:11:90:6a:44:5e:2e:ef:bd:99:dd:ee:1b:e5:17: fb:9f:dd:66:44:d5:f2:cd:75:24:93:92:4b:ce:dd: 58:cc:cd:a9:db:ed:e4:78:23:73:08:ce:c7:92:14: 1a:e4:8e:8e:51:2a:9a:05:b7:a0:19:ec:be:d6:3b: e5:79:3a:6c:33:00:83:18:4c:c8:ca:44:24:15:05: ec:6d:fb:94:3e:40:67:d7:4a:d6:21:dc:b2:e6:b9: 2d:87:cb:5d:bf:be:a9:00:70:ce:8b:35:bd:0b:6a: f4:c3:d8:11:1c:53:a6:df:88:1d:76:e0:9a:15:53: b1:53:c6:95:10:1d:77:ed:7b:e0:f7:4c:26:c4:3b: 5b:64:ea:67:cb:54:46:19:9f:9e:45:35:3a:0c:0c: f5:b1:86:c6:6d:93:9b:df:68:0f:59:9d:63:9d:2b: 09:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:F1:03:42:09:56:08:FE:F8:44:66:F0:0B:E2:94:A9:B6:F2:FF X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ca:5b:47:db:48:e6:16:d0:b5:c3:22:1b:a6:af:65:71:58: 91:33:f3:5a:86:62:49:4d:56:8d:b0:d9:c7:5b:a5:99:a5:86: ca:20:68:83:77:b6:63:78:e1:c7:03:1c:00:76:20:0c:fd:4c: ba:b6:12:44:0a:c5:ba:4f:a9:72:19:ad:c6:94:35:58:b6:58: ef:81:87:61:1b:ef:00:6d:00:70:f8:d8:ff:48:83:a6:3c:a7: 4e:4e:58:dd:51:e6:c5:f6:80:81:b4:17:8c:8b:e6:3e:39:04: 68:ab:a1:ab:89:8a:42:69:19:74:7a:b8:f0:cd:cd:29:60:0c: 39:41:e0:b4:4f:54:5b:32:08:71:20:96:5b:14:9a:8b:df:63: b2:42:f6:a3:41:dc:6d:9e:d9:b0:15:29:fb:cd:2e:c3:fb:0f: f6:98:e9:37:4e:eb:55:7b:8f:a9:9f:cc:eb:6e:b7:50:ad:9f: b3:73:a2:22:00:27:b9:06:bc:c5:0c:4d:e1:8a:43:d1:dc:ca: cf:92:8d:81:61:1b:f6:72:42:e7:91:ca:d3:3e:66:27:31:ae: 74:27:76:ef:a7:38:98:1a:04:2b:9a:d2:5d:2b:2e:c9:80:9b: f7:2e:bf:a4:75:e4:5b:0e:39:97:37:82:42:be:30:45:5c:26: d4:cd:70:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUwNDI0MjEzMDAzWhcNMjUwNTAxMjEzMDAzWjAYMRYwFAYD VQQDEw02ODBhYWQ1Yi1hYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+cAoqdfVhU12piDKjPDzwUyVM3o2mK7NuzU9fUXvMp9Rk8xEUW+yHbQv3Kn biDqJngqSCPnu+cqcz+IMhxEwJClyobtXUhiBhy3d3F0Z1DtZI7rnXwKFhCTEZBq RF4u772Z3e4b5Rf7n91mRNXyzXUkk5JLzt1YzM2p2+3keCNzCM7HkhQa5I6OUSqa BbegGey+1jvleTpsMwCDGEzIykQkFQXsbfuUPkBn10rWIdyy5rkth8tdv76pAHDO izW9C2r0w9gRHFOm34gdduCaFVOxU8aVEB137Xvg90wmxDtbZOpny1RGGZ+eRTU6 DAz1sYbGbZOb32gPWZ1jnSsJvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdy8QNC CVYI/vhEZvAL4pSptvL/MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUyltH20jmFtC1wyIbpq9lcViRM/NahmJJTVaNsNnHW6WZpYbKIGiD d7ZjeOHHAxwAdiAM/Uy6thJECsW6T6lyGa3GlDVYtljvgYdhG+8AbQBw+Nj/SIOm PKdOTljdUebF9oCBtBeMi+Y+OQRoq6GriYpCaRl0erjwzc0pYAw5QeC0T1RbMghx IJZbFJqL32OyQvajQdxtntmwFSn7zS7D+w/2mOk3TutVe4+pn8zrbrdQrZ+zc6Ii ACe5BrzFDE3hikPR3MrPko2BYRv2ckLnkcrTPmYnMa50J3bvpziYGgQrmtJdKy7J gJv3Lr+kdeRbDjmXN4JCvjBFXCbUzXBA -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:19 2025 by rpki-client