$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json) Hash identifier: bRvRPy5bTzTWyZnF8J7POWsVpNfQ7T/J+cuC/LamJ+w= Subject key identifier: 29:60:57:2A:7A:58:8E:FD:11:50:2B:F8:2F:0A:3C:94:87:46:FC:38 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft Manifest number: 019C Signing time: Fri 25 Apr 2025 02:57:08 +0000 Manifest this update: Fri 25 Apr 2025 02:57:08 +0000 Manifest next update: Fri 02 May 2025 02:57:08 +0000 Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: /F8Nz2J6L4IU6RuBCS1qEy+mZ3uFSCE0FTWjNpf+cTQ=) 2: 267FE3681C4B11F082276911C4F9AE02.roa (hash: IwAZrjoyGmsUGmE4JOsWaeHq5fs6QvEAYA+JnsGMyLo=) 3: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=) 4: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: baZGvTyIaF8PILI14dVTbXunLuwY6sMo3vWHfxxLvRw=) 5: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: OMFUXP/cctAoz4Xum6QNfmkgufq2udvA4e2an/c9gCg=) 6: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: lfkr3wnF/gd810FZkIOk1rPPX3nFh2BPUr1atDdR1QQ=) 7: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: /jkIGuU72p12nz6+bmqYXQjGUP7RRNXyE9lz7PQstzA=) 8: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Apr 25 02:57:08 2025 GMT Not After : May 2 02:57:08 2025 GMT Subject: CN=680afa04-a4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9f:8e:ef:03:a7:11:4b:e6:74:33:21:cb:51: 78:6b:8e:25:b8:28:d6:77:d2:28:68:b5:8f:81:51: c2:1d:ee:35:d7:8b:38:fc:b8:ee:52:7d:24:84:d9: a6:3f:21:85:79:53:22:41:89:5c:93:20:b9:32:b8: ca:88:97:1c:9f:e6:e3:d1:5d:c0:83:85:6c:95:bc: 12:82:d6:39:d0:98:fd:bd:16:30:45:0f:35:ff:5f: a1:54:e3:2b:58:59:5f:97:39:b4:97:d2:90:c2:4e: ce:62:56:e2:3e:0b:ba:bf:98:31:97:34:bb:90:03: e1:82:ea:93:36:23:c8:c6:f8:4b:e4:ee:3a:0f:81: a6:73:49:e9:9e:3d:ab:d8:df:95:ee:77:e3:b6:ee: 02:25:0a:39:33:d4:61:78:81:37:25:1c:0e:06:db: ca:0b:9b:c4:2b:fb:e3:9c:f2:af:9f:19:0c:0f:8d: 53:c7:5e:b4:84:cd:ee:4c:af:5c:9f:6c:2d:ad:78: 8d:7b:fa:93:e6:2e:bd:9b:b5:cf:79:d1:5c:21:b2: 54:84:de:bf:99:9d:ea:d2:dd:b1:7a:36:19:ff:4d: 3d:47:c7:6c:c9:ec:ba:20:c8:00:cd:65:a4:5f:58: ca:73:50:f9:03:75:c1:1c:3c:66:8e:ab:9e:84:03: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:60:57:2A:7A:58:8E:FD:11:50:2B:F8:2F:0A:3C:94:87:46:FC:38 X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:81:c6:81:14:57:7f:b5:b3:a7:d6:f6:c5:ce:a6:81:a4:a3: a8:a7:57:24:2a:e5:fa:6d:3d:16:14:46:d7:2e:bb:dc:47:a8: 8f:a4:e1:06:19:8d:fd:e6:f6:5d:07:d5:31:05:62:b7:56:38: 62:35:81:e0:49:16:fc:e6:f7:d9:a5:f1:ce:9e:90:fd:07:a5: 1f:20:e3:19:8b:ff:43:58:85:bc:3e:3d:6a:e7:0d:b1:15:56: 68:97:4f:35:0c:50:c8:82:6b:32:d5:15:0c:58:be:85:6f:9a: c7:3c:17:fb:c8:17:99:b9:32:95:a4:8e:65:b7:83:3d:38:32: 1e:d7:83:cd:5b:12:4d:28:b3:d3:7d:97:a3:eb:28:d4:15:99: 37:88:80:7d:1c:06:de:18:4b:97:25:1a:7a:dc:33:9e:ca:67: 67:98:6a:f8:5a:61:88:2d:b2:3e:a5:50:59:56:1d:87:cd:f8: 09:e2:d9:7e:4a:71:4d:27:6f:bc:c6:5d:71:4e:68:4e:0d:30: ef:04:0c:bc:95:89:fa:4b:79:e4:17:b6:20:7f:21:5d:29:cd: 9a:58:42:dd:98:a8:18:7f:c1:02:b6:2f:f1:40:5f:89:e1:d9: 64:45:57:75:4b:97:66:0f:b3:2f:b9:96:be:c8:f5:2d:df:1b: fe:4a:98:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwNDI1MDI1NzA4WhcNMjUwNTAyMDI1NzA4WjAYMRYwFAYD VQQDEw02ODBhZmEwNC1hNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z+O7wOnEUvmdDMhy1F4a44luCjWd9IoaLWPgVHCHe4114s4/LjuUn0khNmm PyGFeVMiQYlckyC5MrjKiJccn+bj0V3Ag4VslbwSgtY50Jj9vRYwRQ81/1+hVOMr WFlflzm0l9KQwk7OYlbiPgu6v5gxlzS7kAPhguqTNiPIxvhL5O46D4Gmc0npnj2r 2N+V7nfjtu4CJQo5M9RheIE3JRwOBtvKC5vEK/vjnPKvnxkMD41Tx160hM3uTK9c n2wtrXiNe/qT5i69m7XPedFcIbJUhN6/mZ3q0t2xejYZ/009R8dsyey6IMgAzWWk X1jKc1D5A3XBHDxmjquehAPZwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClgVyp6 WI79EVAr+C8KPJSHRvw4MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0M4Ny9FNzgyODU0RUVGMEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1 dDhUZzBFbk1ybklvNG8tMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDgcaBFFd/tbOn1vbFzqaBpKOop1ckKuX6bT0WFEbXLrvcR6iPpOEG GY395vZdB9UxBWK3VjhiNYHgSRb85vfZpfHOnpD9B6UfIOMZi/9DWIW8Pj1q5w2x FVZol081DFDIgmsy1RUMWL6Fb5rHPBf7yBeZuTKVpI5lt4M9ODIe14PNWxJNKLPT fZej6yjUFZk3iIB9HAbeGEuXJRp63DOeymdnmGr4WmGILbI+pVBZVh2HzfgJ4tl+ SnFNJ2+8xl1xTmhODTDvBAy8lYn6S3nkF7YgfyFdKc2aWELdmKgYf8ECti/xQF+J 4dlkRVd1S5dmD7MvuZa+yPUt3xv+SpjG -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:19 2025 by rpki-client