$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: fc9G2RcoFF/YtZYeqcgZDsY5KrQ0WT2b7Mm9UurltPQ= Subject key identifier: A4:FF:DD:D2:F0:16:7B:D7:F9:57:53:86:C1:46:43:4D:58:DB:FE:60 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 348A Signing time: Thu 24 Apr 2025 15:16:28 +0000 Manifest this update: Thu 24 Apr 2025 15:16:28 +0000 Manifest next update: Thu 01 May 2025 15:16:28 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: 9h8+a7sxmXaiJHxVlYAZuaR4h1ZfUyJivRvAdeHKjic=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 4K1AhY9g2ySc0ysIrXTw5HOO4AeH3GPRlqEzwlH2eL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Apr 24 15:16:28 2025 GMT Not After : May 1 15:16:28 2025 GMT Subject: CN=680a55cc-22f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c4:5e:c5:1f:af:7f:07:25:f3:f2:31:59:83: f4:ac:8e:34:c1:f3:e3:de:4c:39:09:ce:a0:d3:44: 91:bd:38:10:df:06:fc:09:66:e4:f8:75:47:6c:22: 72:49:bd:b3:9a:ab:07:f8:16:ca:6a:25:d2:20:a2: e6:38:e3:66:aa:d5:49:23:0d:61:88:52:da:47:58: a1:92:1f:26:f4:c7:ed:61:74:50:7c:53:3b:18:91: 35:85:32:dd:0d:8e:f3:0b:7b:98:8e:47:df:39:34: d6:10:d5:4d:a4:6f:03:16:2f:e2:b1:7b:6d:b0:40: 78:34:63:99:84:9f:d8:05:e7:45:78:bf:22:e7:2a: dd:e6:cc:5f:14:4b:6f:a7:36:44:85:4a:98:e6:f1: 30:91:a7:c6:cb:60:ab:38:71:0f:37:19:ec:2f:50: 93:4c:82:e3:33:7e:08:ac:dd:a4:18:6d:46:10:09: 37:a5:cc:be:ef:59:03:7c:36:37:54:be:8f:9e:c7: 7d:68:7e:97:ad:9e:e4:fb:ae:84:ef:7c:80:9c:ed: c4:e9:cb:61:8e:d0:4b:2b:e7:ee:de:db:b8:2d:9a: a3:a5:04:3d:e3:00:cf:a8:1a:63:b2:9c:33:ad:cf: 01:e3:fe:b8:85:57:bf:ff:7e:d1:72:8b:1c:03:8a: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:DD:D2:F0:16:7B:D7:F9:57:53:86:C1:46:43:4D:58:DB:FE:60 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7e:00:37:f5:5b:2c:5c:9a:d6:04:ad:49:ad:fc:f2:cb:07: 64:2e:8a:2b:77:eb:5c:13:26:8c:19:34:c9:18:d6:26:b5:f9: 6d:a1:ac:95:34:2e:b6:4c:c7:37:d6:4a:d8:6d:e0:a0:fd:94: 52:7f:0a:57:e4:9c:d3:e0:be:9e:5a:83:90:0d:79:59:fc:88: e2:21:8c:8d:b0:02:93:4c:33:f3:d8:42:65:b1:e1:78:af:05: d7:67:e8:0a:d9:45:b1:39:8f:d4:47:b2:7c:92:6e:ed:92:ab: 5f:3e:68:aa:52:fe:ec:51:22:34:25:86:83:1c:fb:4e:ce:f2: 37:94:46:28:3e:4a:4b:1a:69:70:c2:f0:67:09:b5:09:24:68: 38:2a:64:8d:38:8f:72:11:1d:28:af:ee:27:02:0c:a7:a3:b6: f4:0c:a4:dc:47:e8:56:78:31:f5:f7:fc:4a:3e:e8:8f:a3:1a: 26:c6:df:29:de:62:b5:e5:f0:d8:33:db:9d:d4:40:3d:18:d2: 3b:f1:95:db:d4:57:54:5f:c8:c6:c3:e4:22:7c:49:02:54:45: 74:e6:9f:61:1c:cb:73:af:5a:88:c5:8f:ff:64:3f:c3:8d:4e: 10:98:c8:45:e9:13:38:fb:1b:4a:f1:e5:86:4c:47:da:4b:55: 0d:10:7d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUwNDI0MTUxNjI4WhcNMjUwNTAxMTUxNjI4WjAYMRYwFAYD VQQDEw02ODBhNTVjYy0yMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsRexR+vfwcl8/IxWYP0rI40wfPj3kw5Cc6g00SRvTgQ3wb8CWbk+HVHbCJy Sb2zmqsH+BbKaiXSIKLmOONmqtVJIw1hiFLaR1ihkh8m9MftYXRQfFM7GJE1hTLd DY7zC3uYjkffOTTWENVNpG8DFi/isXttsEB4NGOZhJ/YBedFeL8i5yrd5sxfFEtv pzZEhUqY5vEwkafGy2CrOHEPNxnsL1CTTILjM34IrN2kGG1GEAk3pcy+71kDfDY3 VL6Pnsd9aH6XrZ7k+66E73yAnO3E6cthjtBLK+fu3tu4LZqjpQQ94wDPqBpjspwz rc8B4/64hVe//37RcoscA4pr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKT/3dLw FnvX+VdThsFGQ01Y2/5gMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/fgA39VssXJrWBK1JrfzyywdkLoord+tcEyaMGTTJGNYmtfltoayV NC62TMc31krYbeCg/ZRSfwpX5JzT4L6eWoOQDXlZ/IjiIYyNsAKTTDPz2EJlseF4 rwXXZ+gK2UWxOY/UR7J8km7tkqtfPmiqUv7sUSI0JYaDHPtOzvI3lEYoPkpLGmlw wvBnCbUJJGg4KmSNOI9yER0or+4nAgyno7b0DKTcR+hWeDH19/xKPuiPoxomxt8p 3mK15fDYM9ud1EA9GNI78ZXb1FdUX8jGw+QifEkCVEV05p9hHMtzr1qIxY//ZD/D jU4QmMhF6RM4+xtK8eWGTEfaS1UNEH2O -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:02 2025 by rpki-client