$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft File: jVurNwypLk9f14n8InMxD5rqOPY.mft (raw, json) Hash identifier: XaElXQt1cqwAnCXEhKef9U/rCBib9PcyvoJt0WVdLgA= Subject key identifier: 72:BC:C4:4D:FE:55:78:88:50:95:8C:53:C4:9D:97:CD:F6:34:9D:1A Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6 Certificate issuer: /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft Manifest number: 0514 Signing time: Thu 24 Apr 2025 23:28:23 +0000 Manifest this update: Thu 24 Apr 2025 23:28:23 +0000 Manifest next update: Thu 01 May 2025 23:28:23 +0000 Files and hashes: 1: jVurNwypLk9f14n8InMxD5rqOPY.crl (hash: e+dJcMKhvEWjYV3iNPkxeebo6GCAzSoX0DZ/kkUydRc=) 2: 4F3ABD0EE1BE11EFBB23912EC4F9AE02.roa (hash: dz/S8eDbHmndjXTOuJkGfGiQYc10aVqQzusp0F+1yvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7290, serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6 Validity Not Before: Apr 24 23:28:23 2025 GMT Not After : May 1 23:28:23 2025 GMT Subject: CN=680ac917-0fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:53:80:a8:10:83:17:76:a0:1c:75:05:56: 4a:05:bf:13:46:ae:8b:c4:78:e4:9f:69:ed:23:b7: 76:dc:a6:61:6a:58:f7:04:47:43:f3:01:4e:b2:ef: 4e:05:6e:b5:f3:8b:0a:1d:ed:29:29:29:47:b2:eb: e0:3d:45:9e:ca:93:9a:b9:96:27:b0:a6:d6:ed:ef: d7:83:08:eb:5b:cf:fc:6c:6b:fc:86:45:79:4f:ad: 6d:b3:27:de:4f:94:25:0e:26:f3:4f:fb:9d:ac:42: fe:ac:3d:e1:22:31:b3:92:c5:f7:7d:a2:6e:d3:f2: ea:75:1c:c7:9c:af:5b:86:59:59:f5:b6:9c:9e:4f: af:9b:d2:12:63:4b:a6:ab:02:85:a2:d7:43:46:cf: d1:f5:1d:ad:ed:af:ad:c4:b1:6c:40:d9:43:6c:0a: f5:6e:89:94:9e:d0:07:40:52:30:c1:60:92:95:10: a2:88:dc:e9:29:f6:5e:6b:06:0c:8d:d8:5b:1f:48: de:b2:47:d4:24:7d:f7:18:98:e4:a8:4b:0d:bb:0e: 98:b2:b3:a5:ee:55:11:2d:da:34:12:03:20:63:3a: 3b:d7:e3:05:2a:32:f5:a3:b4:0a:2c:d4:f0:93:1b: c7:36:59:82:c6:c4:78:60:dc:49:73:34:c8:c5:85: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BC:C4:4D:FE:55:78:88:50:95:8C:53:C4:9D:97:CD:F6:34:9D:1A X509v3 Authority Key Identifier: keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:19:d2:e9:5c:19:5f:17:fb:8c:1c:a9:47:57:68:c0:57:02: a2:04:0f:a9:15:0b:a1:6f:fc:3d:2e:66:aa:f0:4a:8c:2f:bd: ee:56:23:52:68:1e:ea:a6:92:b0:95:52:4b:3e:13:89:40:b2: e2:ef:65:14:6d:52:97:ac:34:b5:96:db:ae:3c:34:b7:fa:8d: f0:fe:52:0a:ad:b7:3e:46:2b:49:40:a5:23:a0:77:4f:10:99: c8:51:d6:f9:5a:5d:38:98:b0:c9:7e:71:b7:93:67:fb:a6:b6: da:da:6f:3f:83:03:08:f8:3f:8b:c1:7d:72:3c:ec:e0:9c:11: 5e:00:17:59:16:60:d3:3a:ce:dc:e0:4e:25:86:71:8c:3b:4a: c2:fe:b2:e9:07:5f:5f:33:8d:89:74:5b:b7:96:bf:42:76:5c: e1:fa:ad:65:e8:b0:dc:ca:eb:35:93:3f:cb:bb:ed:15:d7:cb: f7:fb:e9:d4:93:4a:57:3a:dd:36:86:42:68:40:d4:45:5a:ef: 0b:3a:a8:e7:26:1e:18:35:e0:ec:22:5b:40:41:2a:fa:ce:80: 3f:92:ac:9a:14:ce:57:7f:70:e7:4f:e4:44:a4:04:79:64:fa: 76:ba:a1:02:33:fd:1f:17:61:ad:b9:5c:43:9e:f5:d8:4f:0c: 79:69:42:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyOTAxMTAvBgNVBAUTKDhENUJBQjM3MENBOTJFNEY1RkQ3ODlGQzIyNzMzMTBG OUFFQTM4RjYwHhcNMjUwNDI0MjMyODIzWhcNMjUwNTAxMjMyODIzWjAYMRYwFAYD VQQDEw02ODBhYzkxNy0wZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UBTgKgQgxd2oBx1BVZKBb8TRq6LxHjkn2ntI7d23KZhalj3BEdD8wFOsu9O BW6184sKHe0pKSlHsuvgPUWeypOauZYnsKbW7e/XgwjrW8/8bGv8hkV5T61tsyfe T5QlDibzT/udrEL+rD3hIjGzksX3faJu0/LqdRzHnK9bhllZ9bacnk+vm9ISY0um qwKFotdDRs/R9R2t7a+txLFsQNlDbAr1bomUntAHQFIwwWCSlRCiiNzpKfZeawYM jdhbH0jeskfUJH33GJjkqEsNuw6YsrOl7lURLdo0EgMgYzo71+MFKjL1o7QKLNTw kxvHNlmCxsR4YNxJczTIxYV+YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK8xE3+ VXiIUJWMU8Sdl832NJ0aMB8GA1UdIwQYMBaAFI1bqzcMqS5PX9eJ/CJzMQ+a6jj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzI5MC9GNjgxNDFFMDBC MDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExrOWYxNG44SW5NeEQ1cnFP UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pWdXJOd3lwTGs5ZjE0bjhJbk14RDVycU9QWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzI5MC9GNjgxNDFFMDBCMDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExr OWYxNG44SW5NeEQ1cnFPUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChGdLpXBlfF/uMHKlHV2jAVwKiBA+pFQuhb/w9Lmaq8EqML73uViNS aB7qppKwlVJLPhOJQLLi72UUbVKXrDS1ltuuPDS3+o3w/lIKrbc+RitJQKUjoHdP EJnIUdb5Wl04mLDJfnG3k2f7prba2m8/gwMI+D+LwX1yPOzgnBFeABdZFmDTOs7c 4E4lhnGMO0rC/rLpB19fM42JdFu3lr9Cdlzh+q1l6LDcyus1kz/Lu+0V18v3++nU k0pXOt02hkJoQNRFWu8LOqjnJh4YNeDsIltAQSr6zoA/kqyaFM5Xf3DnT+REpAR5 ZPp2uqECM/0fF2GtuVxDnvXYTwx5aUKH -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:39 2025 by rpki-client