$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: pb64BF2qBzZvHoKKv0iYjiGYLNQdLW5q0VB+ZxxZyGY= Subject key identifier: A4:B4:E8:0C:F6:26:24:90:D9:89:C3:E6:60:92:CE:5B:37:76:5F:19 Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0CE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0CDA Signing time: Fri 04 Apr 2025 18:14:09 +0000 Manifest this update: Fri 04 Apr 2025 18:14:08 +0000 Manifest next update: Fri 11 Apr 2025 18:14:08 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: cU6xBiFVzG40/++F+tKrmmiea/UjNgk8ZrmSkLeFObI=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: QrHwkCxaqX0D4CMUIb/gJ2hugEkme/UAAaAoVbq7U4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3300 (0xce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0 Validity Not Before: Apr 4 18:14:08 2025 GMT Not After : Apr 11 18:14:08 2025 GMT Subject: CN=67f02171-a654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:9b:62:7f:ed:af:c3:64:49:d1:07:0d:fb: b8:1a:90:01:88:c9:1f:16:d0:b6:07:26:8d:8c:35: 75:e3:61:39:f5:39:a7:5d:28:6e:ce:a8:35:21:7a: 12:8a:fa:4a:4c:67:eb:fe:3b:82:59:5a:d2:38:78: 05:c0:1f:08:99:6e:c9:24:c4:04:7f:72:44:83:85: ef:1b:5b:d6:f0:8f:cb:12:13:c7:36:64:8f:21:74: ad:61:27:3a:41:dd:fb:75:47:1e:2c:92:ee:e2:1d: a7:a4:0e:d0:9f:5e:8d:d0:bb:3d:26:4d:6b:3b:56: c5:23:8c:04:9e:3f:e7:57:0f:59:ab:62:bc:a0:5c: 03:52:1a:81:9d:fe:19:1b:c8:26:1f:9f:57:a8:70: 7a:58:58:04:de:2b:fa:7a:37:fa:b6:95:a5:07:8f: 56:3a:99:fd:60:23:21:7c:d2:02:80:17:fd:eb:05: d0:5e:9c:2b:70:7a:97:c9:86:02:91:b4:0d:32:69: 94:74:e7:19:d4:e6:69:54:25:65:2d:d5:15:fc:5a: 0a:51:76:9c:5c:24:d7:74:8c:0d:93:ec:8b:d8:f1: 1a:78:10:59:39:ff:75:a9:7a:ef:c7:74:77:90:aa: b0:11:6d:41:74:91:c5:ef:34:b5:56:25:28:cd:44: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B4:E8:0C:F6:26:24:90:D9:89:C3:E6:60:92:CE:5B:37:76:5F:19 X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0a:c1:50:f9:33:de:c0:19:3b:fb:d2:df:f9:30:b4:2d:de: 4c:7e:f3:36:76:23:b0:b9:a5:e9:59:cf:92:98:71:1e:b8:5a: d7:bb:31:42:83:f2:02:7c:77:9e:10:06:d6:8d:ac:fa:31:e3: 26:b9:c1:08:3a:0b:39:50:f8:6c:13:8a:a0:98:e9:77:6a:74: f3:94:64:f7:d1:db:eb:0a:3b:cc:f2:e9:e8:f7:b2:75:65:68: 3b:e1:61:b7:f0:93:87:f6:d9:4f:49:cd:73:05:1e:13:bf:95: 3a:97:89:37:a6:bd:ba:4a:df:77:e7:0c:c2:43:7c:05:19:50: b2:f8:92:aa:ee:1d:f6:58:e3:a3:66:d3:2b:c7:d4:04:ec:64: 6d:8c:a7:b8:d4:e9:a2:ba:b2:98:1f:67:3e:34:e5:6f:2e:7c: c0:a6:84:1a:7b:db:9a:c1:62:f3:e4:25:1d:75:14:da:63:6b: 64:d8:29:f9:d3:36:f3:0b:a4:ca:45:9c:cf:72:27:1a:01:8f: 51:94:23:8e:e2:0e:a2:71:2c:9c:f3:5a:b2:b2:58:20:97:b6: 1b:07:62:42:07:50:ce:34:33:8e:f7:cb:08:e0:ff:8c:90:b4: f2:2a:36:e4:94:ca:ce:ef:75:d5:8e:29:7e:24:8c:3b:fe:3f: 7d:ad:2b:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjUwNDA0MTgxNDA4WhcNMjUwNDExMTgxNDA4WjAYMRYwFAYD VQQDEw02N2YwMjE3MS1hNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtCbYn/tr8NkSdEHDfu4GpABiMkfFtC2ByaNjDV142E59TmnXShuzqg1IXoS ivpKTGfr/juCWVrSOHgFwB8ImW7JJMQEf3JEg4XvG1vW8I/LEhPHNmSPIXStYSc6 Qd37dUceLJLu4h2npA7Qn16N0Ls9Jk1rO1bFI4wEnj/nVw9Zq2K8oFwDUhqBnf4Z G8gmH59XqHB6WFgE3iv6ejf6tpWlB49WOpn9YCMhfNICgBf96wXQXpwrcHqXyYYC kbQNMmmUdOcZ1OZpVCVlLdUV/FoKUXacXCTXdIwNk+yL2PEaeBBZOf91qXrvx3R3 kKqwEW1BdJHF7zS1ViUozUSkgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKS06Az2 JiSQ2YnD5mCSzls3dl8ZMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJCsFQ+TPewBk7+9Lf+TC0Ld5MfvM2diOwuaXpWc+SmHEeuFrXuzFC g/ICfHeeEAbWjaz6MeMmucEIOgs5UPhsE4qgmOl3anTzlGT30dvrCjvM8uno97J1 ZWg74WG38JOH9tlPSc1zBR4Tv5U6l4k3pr26St935wzCQ3wFGVCy+JKq7h32WOOj ZtMrx9QE7GRtjKe41OmiurKYH2c+NOVvLnzApoQae9uawWLz5CUddRTaY2tk2Cn5 0zbzC6TKRZzPcicaAY9RlCOO4g6icSyc81qyslggl7YbB2JCB1DONDOO98sI4P+M kLTyKjbklMrO73XVjil+JIw7/j99rSvV -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:38 2025 by rpki-client