$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft File: jPbyYoPglD4X1BKxnKKvLNYNRYc.mft (raw, json) Hash identifier: KklMtMrHC3EcZsD/sGbcaKXh3MeDcsYDmPci93Lx5Mw= Subject key identifier: 45:41:3F:E8:C7:AE:06:65:06:0F:FA:3D:C0:25:FE:59:E0:62:93:E9 Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587 Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft Manifest number: 0A00 Signing time: Fri 04 Apr 2025 20:02:06 +0000 Manifest this update: Fri 04 Apr 2025 20:02:05 +0000 Manifest next update: Fri 11 Apr 2025 20:02:05 +0000 Files and hashes: 1: jPbyYoPglD4X1BKxnKKvLNYNRYc.crl (hash: Or68wMHemlTDIUcVZNNlJnqGTHs/b9UBzk0qZCIItOI=) 2: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (hash: m/p8bbAHJM24HdYiY9DoNYUeIyo2VNJNxbaHYIEgDWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B7EB Validity Not Before: Apr 4 20:02:05 2025 GMT Not After : Apr 11 20:02:05 2025 GMT Subject: CN=67f03abd-fbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:84:13:ff:c4:fe:fb:7b:74:48:04:de:10: 9d:10:6d:30:e1:bc:53:fb:5d:35:96:72:aa:4d:aa: be:26:e7:12:2d:9c:b1:39:ad:31:48:cb:c5:f0:2f: bc:e7:7c:40:83:ea:57:ad:cd:a4:bd:e3:aa:c2:39: 0a:15:29:bd:32:02:96:59:5d:13:ae:ae:eb:36:09: 6e:74:a9:43:dc:56:73:4d:ff:bf:98:66:cd:ce:ec: 3b:fb:48:af:44:dd:83:d4:cb:f8:91:4e:26:84:74: e9:74:55:42:0d:9f:4e:67:fe:58:fc:aa:82:1b:6c: 67:59:72:cd:f0:48:b8:c1:13:bc:44:36:34:69:6f: 16:63:53:a7:9f:65:97:d7:6a:d5:98:20:61:27:6a: ae:fd:f4:7e:5f:8b:08:dc:29:be:36:2c:40:ac:0f: 82:70:fe:35:08:eb:c4:89:77:91:90:44:c5:29:0e: fc:31:b5:21:d7:be:5f:f0:21:94:c3:02:e4:1e:fc: 80:b1:c0:5c:ef:9b:11:44:41:66:c6:9c:d8:70:c3: ed:b5:c5:aa:a5:d8:4c:cd:2a:64:91:95:73:e5:c7: 88:bc:10:c1:2a:14:2b:45:2f:c3:cf:ad:34:d7:12: f5:8a:b5:c0:b0:2a:54:af:54:4c:59:55:b5:e1:38: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:41:3F:E8:C7:AE:06:65:06:0F:FA:3D:C0:25:FE:59:E0:62:93:E9 X509v3 Authority Key Identifier: keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3b:ac:0b:5e:0c:0f:9d:4e:6a:0c:13:03:c8:d5:09:b2:a6: 2f:df:aa:31:87:96:89:d6:f4:1a:6d:fc:fd:1e:5b:a5:4c:29: 66:6a:77:69:bc:6a:e7:2d:50:30:34:03:28:de:09:40:0b:f7: 01:10:2f:d7:e3:44:10:e2:25:da:c0:ee:80:7b:63:2b:c3:b0: 30:15:f3:b9:ff:81:e1:86:c5:ee:22:3f:75:1e:d5:82:b8:6c: 43:4f:53:ad:a2:8b:1b:eb:ae:21:71:14:5f:d0:03:17:62:1e: 79:cc:d0:4c:dd:bf:88:54:e0:38:90:ee:36:21:b8:7c:6f:03: a6:e2:e5:f2:16:8b:2d:cd:83:5a:75:3f:11:65:04:3c:12:63: 39:73:88:2e:a6:18:18:72:2f:ef:a8:7b:32:a4:9a:1b:c2:eb: 7e:11:e1:58:7f:ba:ef:10:14:53:09:40:58:c1:09:37:a5:d1: 3a:21:ab:23:30:cf:3d:a7:d9:61:d2:da:36:7b:41:a2:f0:52: c8:85:58:6a:5c:25:ec:01:2c:f9:5b:03:bd:b2:65:9b:4b:b6: af:45:38:20:c6:74:30:78:53:6d:4b:53:26:6a:78:3d:27:0d: e9:2e:19:79:33:96:bf:42:f5:35:d0:dd:7c:bc:18:bd:ab:82: b3:5d:4e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD RDYwRDQ1ODcwHhcNMjUwNDA0MjAwMjA1WhcNMjUwNDExMjAwMjA1WjAYMRYwFAYD VQQDEw02N2YwM2FiZC1mYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXaEE//E/vt7dEgE3hCdEG0w4bxT+101lnKqTaq+JucSLZyxOa0xSMvF8C+8 53xAg+pXrc2kveOqwjkKFSm9MgKWWV0Trq7rNgludKlD3FZzTf+/mGbNzuw7+0iv RN2D1Mv4kU4mhHTpdFVCDZ9OZ/5Y/KqCG2xnWXLN8Ei4wRO8RDY0aW8WY1Onn2WX 12rVmCBhJ2qu/fR+X4sI3Cm+NixArA+CcP41COvEiXeRkETFKQ78MbUh175f8CGU wwLkHvyAscBc75sRREFmxpzYcMPttcWqpdhMzSpkkZVz5ceIvBDBKhQrRS/Dz600 1xL1irXAsCpUr1RMWVW14Tjl8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVBP+jH rgZlBg/6PcAl/lngYpPpMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjdFQi83OTFGNEU3NjczRTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xE NFgxQkt4bktLdkxOWU5SWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfO6wLXgwPnU5qDBMDyNUJsqYv36oxh5aJ1vQabfz9HlulTClmandp vGrnLVAwNAMo3glAC/cBEC/X40QQ4iXawO6Ae2Mrw7AwFfO5/4HhhsXuIj91HtWC uGxDT1Otoosb664hcRRf0AMXYh55zNBM3b+IVOA4kO42Ibh8bwOm4uXyFostzYNa dT8RZQQ8EmM5c4guphgYci/vqHsypJobwut+EeFYf7rvEBRTCUBYwQk3pdE6Iasj MM89p9lh0to2e0Gi8FLIhVhqXCXsASz5WwO9smWbS7avRTggxnQweFNtS1Mmang9 Jw3pLhl5M5a/QvU10N18vBi9q4KzXU7y -----END CERTIFICATE-----Generated at Sun Apr 6 01:12:38 2025 by rpki-client