$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: erSqF5tHepyCWkeqjOnVLVXsaTwHxS9xtp2Dpw2zNeQ= Subject key identifier: E6:C8:70:7D:DD:8A:7A:1E:D3:CF:AB:7D:CB:6E:42:0B:4A:61:82:84 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: C5 Signing time: Fri 25 Apr 2025 04:50:41 +0000 Manifest this update: Fri 25 Apr 2025 04:50:40 +0000 Manifest next update: Fri 02 May 2025 04:50:40 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: pQVTl7CUMZymjCksk/a8xbhZIsFANhefRPcC9gieE+g=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: m2sARVY1bYsl1KWknE2ii32pPqsgNqR/nyrCyyQr3Rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Apr 25 04:50:40 2025 GMT Not After : May 2 04:50:40 2025 GMT Subject: CN=680b14a0-9345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:ca:9d:77:46:bd:cd:61:89:71:e5:bc:ca: 18:cb:22:c3:fe:21:76:81:f8:a3:9a:d0:02:63:19: d9:d0:2e:fc:9e:14:82:c4:5d:6e:1d:47:ba:31:c6: 21:19:8b:f8:92:5d:66:d7:ea:0f:7c:85:6b:3a:df: 30:e5:74:f9:77:69:20:46:94:28:fd:5a:96:d3:db: 1e:5e:53:51:0f:99:99:75:b4:b8:b7:51:1a:06:49: 02:be:29:52:e6:41:7e:dc:c8:b3:bf:be:e1:1f:7b: 89:04:75:f3:31:d8:e0:3b:81:0f:5b:35:a1:b9:6a: e3:2e:22:7a:4a:c8:82:2d:70:1d:22:10:6b:73:0a: 43:73:99:fa:63:64:1c:f1:28:76:88:96:85:1b:d0: f9:fc:78:c3:25:6c:c0:70:b6:69:7c:68:2a:13:6e: b7:9f:9c:82:2d:f5:43:c6:7f:76:3d:5a:f8:91:5e: bf:5d:48:88:5c:bb:7b:76:70:67:cc:01:31:3b:54: c5:ab:34:55:43:ef:6a:73:0f:c2:15:af:52:87:fc: 71:5f:26:e6:ce:39:a1:84:74:f8:29:17:a5:93:cf: 02:f6:ee:43:a5:5e:d3:16:47:29:04:f5:e9:a2:c4: 5c:ad:f8:54:d2:2e:87:e6:74:9b:04:26:7b:0f:1b: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:70:7D:DD:8A:7A:1E:D3:CF:AB:7D:CB:6E:42:0B:4A:61:82:84 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:68:1d:58:7a:2f:52:8d:76:ec:5a:36:1c:d4:79:f9:4c:c7: 4a:bc:bd:dd:99:0c:e3:ad:df:8d:6e:17:93:87:bd:2e:0e:3a: 00:51:5c:90:cd:e7:da:13:2d:9d:d0:d3:aa:7f:2b:26:b4:1e: 5c:38:be:8d:71:64:ef:f8:1f:45:c9:60:8f:03:4f:26:60:0a: e9:85:54:ef:b8:32:38:b2:76:fe:b3:12:a2:36:bc:6c:20:d2: f4:ae:84:49:30:1c:68:68:b4:b9:a8:ec:4d:53:ee:22:18:1e: b4:db:0f:44:86:0f:d3:7c:43:0f:e1:5b:a7:43:f7:92:32:ea: 34:63:6a:3a:8e:e0:83:d5:93:78:74:50:db:37:81:d4:44:99: 5a:99:d4:69:6a:06:58:48:c1:0a:c4:76:b7:0b:c1:fb:2f:51: 4e:44:20:ac:fb:5f:da:2f:1c:f7:a6:68:18:ac:9e:8f:d8:ac: 97:27:a9:18:6c:5d:da:d0:51:fb:b1:f7:25:de:b8:4e:a0:7e: 34:29:da:b1:97:d6:75:f0:35:4c:b1:92:06:b0:a7:04:e6:f8: 88:71:ab:23:38:5a:02:c4:ba:92:90:8f:87:a8:05:45:28:1b: 60:b4:17:3b:8e:a1:65:f8:f2:95:f7:ba:5a:11:de:f4:a8:98: fb:6b:86:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwNDI1MDQ1MDQwWhcNMjUwNTAyMDQ1MDQwWjAYMRYwFAYD VQQDEw02ODBiMTRhMC05MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDzKnXdGvc1hiXHlvMoYyyLD/iF2gfijmtACYxnZ0C78nhSCxF1uHUe6McYh GYv4kl1m1+oPfIVrOt8w5XT5d2kgRpQo/VqW09seXlNRD5mZdbS4t1EaBkkCvilS 5kF+3Mizv77hH3uJBHXzMdjgO4EPWzWhuWrjLiJ6SsiCLXAdIhBrcwpDc5n6Y2Qc 8Sh2iJaFG9D5/HjDJWzAcLZpfGgqE263n5yCLfVDxn92PVr4kV6/XUiIXLt7dnBn zAExO1TFqzRVQ+9qcw/CFa9Sh/xxXybmzjmhhHT4KRelk88C9u5DpV7TFkcpBPXp osRcrfhU0i6H5nSbBCZ7DxswGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObIcH3d inoe08+rfctuQgtKYYKEMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATaB1Yei9SjXbsWjYc1Hn5TMdKvL3dmQzjrd+NbheTh70uDjoAUVyQ zefaEy2d0NOqfysmtB5cOL6NcWTv+B9FyWCPA08mYArphVTvuDI4snb+sxKiNrxs INL0roRJMBxoaLS5qOxNU+4iGB602w9Ehg/TfEMP4VunQ/eSMuo0Y2o6juCD1ZN4 dFDbN4HURJlamdRpagZYSMEKxHa3C8H7L1FORCCs+1/aLxz3pmgYrJ6P2KyXJ6kY bF3a0FH7sfcl3rhOoH40Kdqxl9Z18DVMsZIGsKcE5viIcasjOFoCxLqSkI+HqAVF KBtgtBc7jqFl+PKV97paEd70qJj7a4Y8 -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:40 2025 by rpki-client