$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: Tu35XobKKuP2oCPrnvWl7tQRXWp+dFdInzn2t91f7ac= Subject key identifier: 12:97:AE:0E:EA:DD:22:99:30:86:A4:47:8E:57:2C:96:19:5D:7D:AD Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 09C9 Signing time: Thu 24 Apr 2025 19:50:55 +0000 Manifest this update: Thu 24 Apr 2025 19:50:55 +0000 Manifest next update: Thu 01 May 2025 19:50:55 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: A6aml7FpX3toPSDRdCWs3csyDprRICFgL+ukdll0vec=) 2: 7E0A4CF07DD511EA906A3E7AC4F9AE02.roa (hash: 2nNnMwW7ScyaYHi8tlqpC8yOAW8NMr5phOvnAPCxu2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Apr 24 19:50:55 2025 GMT Not After : May 1 19:50:55 2025 GMT Subject: CN=680a961f-e1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:1d:27:43:fa:92:59:24:2a:54:88:76:f1: b7:7c:50:ee:15:08:c1:bb:e6:23:d8:1f:52:3a:5c: 0e:24:cf:54:9f:bd:d2:f5:d9:44:b1:31:cb:7b:39: 5f:ab:7b:52:7e:27:bb:ba:74:90:ca:05:48:b9:aa: 45:3a:9a:2d:e5:3b:b0:2c:eb:63:4b:74:e8:8e:6f: 5f:ba:e6:61:09:3f:6f:d6:27:3c:34:fa:fe:3a:30: 76:e6:0f:8e:97:1f:39:74:1c:b1:3f:2b:91:a4:2c: ca:37:43:24:0c:92:a3:46:33:af:82:3c:80:6e:72: c6:cc:34:de:39:31:2d:d7:6b:a5:b1:a7:87:3e:b6: 27:2d:1d:c0:af:a6:28:4d:1d:3f:bc:64:21:a8:d3: 27:21:cf:b3:cd:34:f5:83:43:de:d8:78:fd:f3:5b: 05:11:cf:70:5c:4c:93:8d:8a:c9:e0:87:09:3b:6d: 9e:b0:57:67:3c:22:46:9b:15:af:f5:69:c7:8d:71: 93:7f:ba:72:66:aa:d3:ab:be:65:db:b3:e0:e9:48: 30:49:72:00:e8:29:2e:23:55:6a:b8:ef:02:f3:eb: ca:70:44:94:cd:cc:61:89:31:53:28:32:cd:61:dc: 8c:2d:da:cf:80:a6:5d:63:6f:1f:dc:f5:e0:9e:a8: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:97:AE:0E:EA:DD:22:99:30:86:A4:47:8E:57:2C:96:19:5D:7D:AD X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:94:1e:d5:f7:79:6d:08:44:42:57:2d:61:af:fd:39:4a:bd: a6:ed:84:8a:82:6d:ae:dc:42:ac:23:b8:62:ce:ca:46:72:be: b9:07:50:1b:1a:b2:4a:7f:14:9f:1f:ad:6c:d9:6a:c7:33:14: 95:52:51:4f:ab:a5:30:4e:c2:9f:d2:d3:20:f2:42:3b:88:c0: 0e:7a:22:85:83:12:d8:02:3f:48:ea:b2:b1:91:4b:10:e8:1d: cd:e9:db:a5:31:0a:3a:e7:cd:da:78:68:5c:6f:4c:30:3d:7b: 1f:2a:bb:bf:50:7f:c5:68:74:7c:0a:24:c1:12:8d:50:c3:0e: 57:0f:46:7c:c1:69:3f:63:a6:90:52:77:10:cd:19:ac:fe:18: c5:94:0f:c8:d6:4f:f5:26:40:a1:a4:c8:46:8f:a7:5e:7a:eb: af:4c:44:77:ea:4d:e8:57:31:ce:b8:9b:db:87:ee:a9:c8:9a: ca:c9:b0:84:77:cb:ab:e3:c7:c4:99:5b:72:f9:22:d8:99:5f: ca:95:0d:ed:f2:8b:93:55:9f:6f:ef:76:e3:cb:fc:ae:4e:0a: 4f:f5:15:62:15:89:bf:ca:1b:55:8d:4a:cc:33:7c:a7:77:37: 76:22:16:17:af:19:f7:aa:62:4c:ba:19:6a:42:05:19:d1:74: e1:18:f3:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUwNDI0MTk1MDU1WhcNMjUwNTAxMTk1MDU1WjAYMRYwFAYD VQQDEw02ODBhOTYxZi1lMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPwdJ0P6klkkKlSIdvG3fFDuFQjBu+Yj2B9SOlwOJM9Un73S9dlEsTHLezlf q3tSfie7unSQygVIuapFOpot5TuwLOtjS3Tojm9fuuZhCT9v1ic8NPr+OjB25g+O lx85dByxPyuRpCzKN0MkDJKjRjOvgjyAbnLGzDTeOTEt12ulsaeHPrYnLR3Ar6Yo TR0/vGQhqNMnIc+zzTT1g0Pe2Hj981sFEc9wXEyTjYrJ4IcJO22esFdnPCJGmxWv 9WnHjXGTf7pyZqrTq75l27Pg6UgwSXIA6CkuI1VquO8C8+vKcESUzcxhiTFTKDLN YdyMLdrPgKZdY28f3PXgnqjmowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKXrg7q 3SKZMIakR45XLJYZXX2tMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUlB7V93ltCERCVy1hr/05Sr2m7YSKgm2u3EKsI7hizspGcr65B1Ab GrJKfxSfH61s2WrHMxSVUlFPq6UwTsKf0tMg8kI7iMAOeiKFgxLYAj9I6rKxkUsQ 6B3N6dulMQo6583aeGhcb0wwPXsfKru/UH/FaHR8CiTBEo1Qww5XD0Z8wWk/Y6aQ UncQzRms/hjFlA/I1k/1JkChpMhGj6deeuuvTER36k3oVzHOuJvbh+6pyJrKybCE d8ur48fEmVty+SLYmV/KlQ3t8ouTVZ9v73bjy/yuTgpP9RViFYm/yhtVjUrMM3yn dzd2IhYXrxn3qmJMuhlqQgUZ0XThGPNz -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:47 2025 by rpki-client