$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: /Vi4+oQwNNHZnP/aCWS8orp9LUBWILoyPXXkFFmxcpc= Subject key identifier: 46:0D:75:02:09:EC:AA:34:C3:50:E9:92:32:2C:4C:79:CD:9E:0E:E1 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 0261 Signing time: Fri 25 Apr 2025 01:33:15 +0000 Manifest this update: Fri 25 Apr 2025 01:33:15 +0000 Manifest next update: Fri 02 May 2025 01:33:15 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: AOIE4stwJX6a0lCQfRZndo24aKUZjAbSIhLnpCQEpEY=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Apr 25 01:33:15 2025 GMT Not After : May 2 01:33:15 2025 GMT Subject: CN=680ae65b-362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:49:05:93:10:da:3c:19:6f:41:bf:25:8c:3f: 6a:12:72:7c:a2:d5:4a:83:99:9f:63:8e:64:cd:6a: 5d:52:b8:2c:f8:15:90:7a:88:77:d1:01:b3:e5:46: 2f:5b:27:60:09:87:3d:d7:5e:28:6a:b1:29:32:35: 48:1a:5e:d7:a9:65:2f:8d:60:4a:3e:53:30:57:e7: 84:f1:4a:bc:87:48:af:90:7e:50:5c:c5:d4:8e:2a: 16:22:e3:67:9d:03:72:11:7e:fa:60:41:dc:46:ae: 44:86:ae:e7:af:84:01:90:d6:61:08:34:f4:9b:87: 4f:fb:ba:3b:89:17:7e:58:a8:c9:95:68:04:1b:ee: 67:92:00:25:c7:43:ae:cb:d1:84:73:da:60:5a:9f: 4a:b0:5c:21:ee:bb:5d:63:f9:04:5a:fd:ff:88:0b: ca:28:2f:36:46:16:ab:c8:e3:43:59:53:4c:ca:53: 3b:6c:d9:7e:32:73:f7:9e:b7:1d:d5:1e:9c:fc:f2: 70:67:16:1e:c0:62:28:82:92:e1:d3:1f:f5:87:dc: 23:4a:48:79:a9:45:22:9f:87:e6:3d:90:ca:b9:c8: d4:2d:d2:2b:d3:6f:79:a4:fb:b1:6e:4c:c5:6e:aa: 97:33:83:2b:0b:dd:e3:ad:9b:3f:98:fa:4e:ec:bc: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:75:02:09:EC:AA:34:C3:50:E9:92:32:2C:4C:79:CD:9E:0E:E1 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:4b:2c:86:66:ec:59:bc:8c:20:48:d4:30:c9:d2:2e:45:ad: 2b:92:5e:f0:e5:d3:bc:aa:cf:64:6a:08:cc:84:ff:ce:b8:22: e9:94:3d:2a:c0:f7:3e:96:e0:47:4c:7d:af:1f:2b:f7:57:49: c9:99:65:bb:6e:7d:00:4a:ce:bf:2b:a0:23:a0:35:66:56:f8: b7:a6:e0:59:2f:86:b1:a3:c0:f8:88:6b:87:a8:a5:15:11:e0: 3c:d2:3f:4b:02:32:6a:06:23:e4:20:86:25:18:e3:58:61:5c: 89:20:a5:79:b7:5d:30:bc:18:9c:1f:e0:2f:4a:47:49:e0:22: c8:2d:b1:35:80:45:2a:72:9e:b7:13:ee:ca:b6:26:17:44:f4: 4d:a0:b3:36:f4:40:6f:3b:b9:f2:62:49:26:7d:f2:c0:48:62: de:db:be:8a:f9:3a:36:1f:13:63:01:a5:92:3f:45:fa:80:b4: 26:2f:72:09:42:22:aa:f6:5f:88:4a:ce:47:ba:a4:c3:10:0b: 5d:1b:79:9d:31:52:fe:f2:14:f9:99:68:5f:4d:ee:ab:ae:b9: 5f:c8:81:87:85:f4:db:c7:79:41:36:1d:f1:0c:cf:0c:59:d9: 2e:67:8c:c2:b9:02:ee:af:4b:47:60:5e:5f:ba:c1:30:85:91: cb:d5:ae:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwNDI1MDEzMzE1WhcNMjUwNTAyMDEzMzE1WjAYMRYwFAYD VQQDEw02ODBhZTY1Yi0zNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20kFkxDaPBlvQb8ljD9qEnJ8otVKg5mfY45kzWpdUrgs+BWQeoh30QGz5UYv WydgCYc9114oarEpMjVIGl7XqWUvjWBKPlMwV+eE8Uq8h0ivkH5QXMXUjioWIuNn nQNyEX76YEHcRq5Ehq7nr4QBkNZhCDT0m4dP+7o7iRd+WKjJlWgEG+5nkgAlx0Ou y9GEc9pgWp9KsFwh7rtdY/kEWv3/iAvKKC82RharyONDWVNMylM7bNl+MnP3nrcd 1R6c/PJwZxYewGIogpLh0x/1h9wjSkh5qUUin4fmPZDKucjULdIr0295pPuxbkzF bqqXM4MrC93jrZs/mPpO7Lx6GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYNdQIJ 7Ko0w1DpkjIsTHnNng7hMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiSyyGZuxZvIwgSNQwydIuRa0rkl7w5dO8qs9kagjMhP/OuCLplD0q wPc+luBHTH2vHyv3V0nJmWW7bn0ASs6/K6AjoDVmVvi3puBZL4axo8D4iGuHqKUV EeA80j9LAjJqBiPkIIYlGONYYVyJIKV5t10wvBicH+AvSkdJ4CLILbE1gEUqcp63 E+7KtiYXRPRNoLM29EBvO7nyYkkmffLASGLe276K+To2HxNjAaWSP0X6gLQmL3IJ QiKq9l+ISs5HuqTDEAtdG3mdMVL+8hT5mWhfTe6rrrlfyIGHhfTbx3lBNh3xDM8M WdkuZ4zCuQLur0tHYF5fusEwhZHL1a5X -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:41 2025 by rpki-client