$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: a9JJ42ySd6j+SH9aSEyomb/lHPTF7XUBVBqpJAo5M+8= Subject key identifier: 22:F4:AD:EF:68:91:51:65:FE:AC:47:F8:21:B0:14:8C:CA:BB:01:00 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 026E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 0269 Signing time: Fri 25 Apr 2025 01:32:00 +0000 Manifest this update: Fri 25 Apr 2025 01:32:00 +0000 Manifest next update: Fri 02 May 2025 01:32:00 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: QlFiLO48XFNJ8maiyD3ji6VECwo1cft3Iq7YHNlxhxA=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 622 (0x26e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Apr 25 01:32:00 2025 GMT Not After : May 2 01:32:00 2025 GMT Subject: CN=680ae610-b5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:a4:9e:f7:b0:37:13:f1:13:cf:8d:23:fb: f8:e9:92:5d:76:10:ba:bc:d3:33:95:13:6b:06:d1: 40:44:47:09:2c:13:8e:8e:f5:3e:be:0a:de:b0:d1: 6a:68:5e:7f:1e:56:1c:20:d5:44:5d:d3:61:65:ee: 5d:1a:55:92:eb:70:88:af:c3:31:42:71:e6:8f:7b: d5:0a:b1:ec:f3:e9:c7:f0:90:7d:91:e6:c9:f1:5e: e3:4a:e4:e5:99:84:f2:c2:a0:ee:81:8e:3c:7b:ce: a9:81:9a:55:2e:bd:d9:a3:a3:6a:cd:54:50:04:25: 6a:19:9e:2d:8f:7e:d6:06:66:fb:64:22:0c:d2:8b: f4:10:e1:09:1c:f6:28:c6:62:a4:7c:2f:4a:3d:cc: ad:98:f3:db:2d:a7:02:97:a8:00:46:45:e2:e2:21: 00:35:4c:6a:d5:76:2c:38:52:17:31:7a:e5:32:68: ae:ac:93:81:f5:92:3b:ba:78:9d:87:ce:ef:18:48: ab:03:ee:8b:1d:5e:df:13:92:c8:2c:8f:09:6d:ac: c5:cd:c8:65:4f:34:3a:68:aa:57:b5:dc:82:21:47: a6:22:65:0f:6e:f2:81:b5:54:f9:5c:53:8b:9a:e3: 75:ea:a9:7d:63:e6:4e:26:e4:ee:b1:64:13:cc:90: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F4:AD:EF:68:91:51:65:FE:AC:47:F8:21:B0:14:8C:CA:BB:01:00 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:50:22:9c:da:4e:2d:26:f9:dd:96:fc:45:1d:44:d9:ba:b5: 74:ec:4f:d5:24:13:0f:17:ee:d2:83:d4:fa:67:cd:98:3b:21: e0:1b:1e:65:d7:ff:4c:be:eb:c5:3c:15:99:cf:8f:8f:25:07: 93:f2:f1:e6:0a:94:25:22:ee:d5:47:1a:b4:26:a6:e9:39:e7: 97:e3:1c:32:d3:00:7f:79:68:7a:22:df:ea:1a:da:0b:c3:2f: 65:0d:17:88:81:a3:4c:c3:32:b5:22:83:bc:2e:7f:c0:24:23: ba:0a:67:de:96:72:96:7f:b9:b9:90:94:fe:59:5e:79:f5:32: 4e:96:e0:66:cf:ee:02:c0:a8:32:b2:65:85:ff:13:95:15:42: e9:cb:1f:25:ab:56:e7:9c:e9:6c:1e:db:ff:c3:df:d4:28:e9: 5b:b6:dd:a8:b0:a0:37:a9:7e:92:04:37:2f:89:23:cf:ab:c7: e1:e4:35:d5:85:18:43:8d:f6:46:2a:da:28:ae:85:2b:ff:b5: 65:05:6c:46:4b:b4:38:08:d8:cc:b4:42:82:54:30:02:74:4d: e0:f6:22:e9:80:b5:a4:22:30:af:25:62:11:de:c4:a0:a4:ed: 2f:e9:3f:30:80:f4:90:fe:54:98:81:17:05:42:74:4a:e8:6e: 1f:86:7e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwNDI1MDEzMjAwWhcNMjUwNTAyMDEzMjAwWjAYMRYwFAYD VQQDEw02ODBhZTYxMC1iNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlqknvewNxPxE8+NI/v46ZJddhC6vNMzlRNrBtFAREcJLBOOjvU+vgresNFq aF5/HlYcINVEXdNhZe5dGlWS63CIr8MxQnHmj3vVCrHs8+nH8JB9kebJ8V7jSuTl mYTywqDugY48e86pgZpVLr3Zo6NqzVRQBCVqGZ4tj37WBmb7ZCIM0ov0EOEJHPYo xmKkfC9KPcytmPPbLacCl6gARkXi4iEANUxq1XYsOFIXMXrlMmiurJOB9ZI7unid h87vGEirA+6LHV7fE5LILI8JbazFzchlTzQ6aKpXtdyCIUemImUPbvKBtVT5XFOL muN16ql9Y+ZOJuTusWQTzJCu5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL0re9o kVFl/qxH+CGwFIzKuwEAMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvUCKc2k4tJvndlvxFHUTZurV07E/VJBMPF+7Sg9T6Z82YOyHgGx5l 1/9MvuvFPBWZz4+PJQeT8vHmCpQlIu7VRxq0JqbpOeeX4xwy0wB/eWh6It/qGtoL wy9lDReIgaNMwzK1IoO8Ln/AJCO6CmfelnKWf7m5kJT+WV559TJOluBmz+4CwKgy smWF/xOVFULpyx8lq1bnnOlsHtv/w9/UKOlbtt2osKA3qX6SBDcviSPPq8fh5DXV hRhDjfZGKtooroUr/7VlBWxGS7Q4CNjMtEKCVDACdE3g9iLpgLWkIjCvJWIR3sSg pO0v6T8wgPSQ/lSYgRcFQnRK6G4fhn62 -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:57 2025 by rpki-client