$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: e9GDNwZ5GuPgj03lBzEKPEZmcilcrY1NzSj0Saf1MjI= Subject key identifier: 3B:E2:53:87:B9:34:8F:E5:18:6A:F9:FF:2B:FB:F7:C9:B6:2A:84:B9 Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 091A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 0900 Signing time: Sun 06 Apr 2025 20:09:35 +0000 Manifest this update: Sun 06 Apr 2025 20:09:34 +0000 Manifest next update: Sun 13 Apr 2025 20:09:34 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: yN3R57AMs/Zn1Yl7k+6UG0GnDO4QzxX7Ale2fsoso2k=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC Validity Not Before: Apr 6 20:09:34 2025 GMT Not After : Apr 13 20:09:34 2025 GMT Subject: CN=67f2df7e-2ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:0b:8f:47:0a:20:07:7f:ad:48:fa:42:20: fe:e7:7f:fd:47:61:99:bf:99:01:28:49:67:bd:63: 1a:ba:c5:ae:6d:56:5c:fc:6c:7e:e8:0c:fa:37:5c: 85:02:b4:59:36:9f:21:c9:e4:a4:15:a4:60:5c:03: b3:93:a2:c3:aa:3e:2d:46:23:f8:c5:83:e4:98:6e: 8e:b9:ea:88:f0:78:14:b0:b1:a2:2f:e4:55:78:51: 1f:72:c6:92:70:ce:03:04:b7:05:c7:e6:5f:2f:9a: 5b:53:fc:30:ba:69:2e:4d:99:ed:f0:2e:13:69:00: d0:7a:89:35:42:c2:f1:9e:52:ab:31:7e:63:e2:c8: 0c:b8:80:21:fc:64:e5:e7:a0:8f:7c:ae:c3:14:e3: 1a:ce:91:a0:7d:3e:59:cc:a6:0e:8d:d3:eb:6a:9f: d3:fa:24:bc:9e:23:fa:0c:2b:06:ad:36:b2:69:83: b0:70:32:a3:11:db:3c:7e:d2:46:bb:f0:94:fe:d2: c7:ed:86:2a:a9:50:6d:9b:16:76:65:a4:db:98:5f: eb:51:5c:99:57:97:7d:10:fc:41:4c:2c:72:7e:a7: c1:e6:6d:a2:ad:ce:32:0e:6f:83:bd:ef:55:03:cf: b0:35:81:d0:9b:db:c3:09:0b:8b:9c:03:44:ad:d7: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:53:87:B9:34:8F:E5:18:6A:F9:FF:2B:FB:F7:C9:B6:2A:84:B9 X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:59:cd:08:cf:8a:40:81:82:a0:91:da:75:5f:3d:bb:69:3f: 86:eb:be:25:05:ca:85:b1:2b:cc:5d:fe:e8:fd:b0:1d:e0:4f: c9:0d:d5:d9:5c:51:f8:50:c7:f1:f8:30:ad:3c:61:05:ba:18: f3:d5:29:fa:b3:4e:88:ac:3d:0c:65:ab:1d:62:32:bc:64:10: fd:c9:b8:30:6b:4d:36:c6:d8:ec:7a:dc:90:a0:31:8d:f2:d3: 22:b2:d9:5c:2e:21:e0:8c:67:9c:27:89:97:a2:2d:e6:ac:78: c2:13:00:d2:00:2c:76:da:62:5c:39:dc:53:6d:d4:7f:12:ef: ba:b7:a9:8a:00:d7:cd:cb:ff:fc:59:a6:f8:3d:3b:29:2d:d2: 50:4e:d7:6e:a1:54:70:63:5c:f8:a0:db:61:cc:d3:91:b9:db: 35:7c:d2:de:99:03:88:c9:5a:66:e6:0b:0c:61:0e:dd:68:23: cb:df:f4:3a:9d:4e:b0:60:af:7b:dc:08:17:76:2c:9f:81:f0: 7e:46:6a:60:ba:07:98:7e:0a:4e:c1:62:50:ff:e8:47:6c:45: 90:57:2d:c6:c7:4a:df:3e:33:29:95:63:a6:fe:57:53:d2:24: bf:8f:ba:9a:a4:78:e8:b0:a3:2a:9e:32:aa:e0:46:4b:25:c0: 7b:4b:ed:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjUwNDA2MjAwOTM0WhcNMjUwNDEzMjAwOTM0WjAYMRYwFAYD VQQDEw02N2YyZGY3ZS0yYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlULj0cKIAd/rUj6QiD+53/9R2GZv5kBKElnvWMausWubVZc/Gx+6Az6N1yF ArRZNp8hyeSkFaRgXAOzk6LDqj4tRiP4xYPkmG6OueqI8HgUsLGiL+RVeFEfcsaS cM4DBLcFx+ZfL5pbU/wwumkuTZnt8C4TaQDQeok1QsLxnlKrMX5j4sgMuIAh/GTl 56CPfK7DFOMazpGgfT5ZzKYOjdPrap/T+iS8niP6DCsGrTayaYOwcDKjEds8ftJG u/CU/tLH7YYqqVBtmxZ2ZaTbmF/rUVyZV5d9EPxBTCxyfqfB5m2irc4yDm+Dve9V A8+wNYHQm9vDCQuLnANErdcq1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDviU4e5 NI/lGGr5/yv798m2KoS5MB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEWc0Iz4pAgYKgkdp1Xz27aT+G674lBcqFsSvMXf7o/bAd4E/JDdXZ XFH4UMfx+DCtPGEFuhjz1Sn6s06IrD0MZasdYjK8ZBD9ybgwa002xtjsetyQoDGN 8tMistlcLiHgjGecJ4mXoi3mrHjCEwDSACx22mJcOdxTbdR/Eu+6t6mKANfNy//8 Wab4PTspLdJQTtduoVRwY1z4oNthzNORuds1fNLemQOIyVpm5gsMYQ7daCPL3/Q6 nU6wYK973AgXdiyfgfB+RmpgugeYfgpOwWJQ/+hHbEWQVy3Gx0rfPjMplWOm/ldT 0iS/j7qapHjosKMqnjKq4EZLJcB7S+0l -----END CERTIFICATE-----Generated at Mon Apr 7 00:11:58 2025 by rpki-client