$ rpki-client -vvf rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft File: rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft (raw, json) Hash identifier: 8osjGn0YfWwsRpL7q9Tl01bFchoCVevLT+x116mRRmw= Subject key identifier: 52:61:30:DE:40:7F:EC:94:44:5D:78:E7:CE:23:7C:33:FB:42:10:71 Authority key identifier: AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 Certificate issuer: /CN=A91384DF/serialNumber=AC9789F28AF168B26C50964615DF06D7EC7202E3 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft Manifest number: B2 Signing time: Sat 05 Apr 2025 05:20:45 +0000 Manifest this update: Sat 05 Apr 2025 05:20:45 +0000 Manifest next update: Sat 12 Apr 2025 05:20:45 +0000 Files and hashes: 1: rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl (hash: nyT6omTCmoG1KGjuC52l9VsrmQs2Xj1WZaprhruKomc=) 2: 69BCFB40037711EFBE813223C4F9AE02.roa (hash: PMFbGoDR6epjiOKU9mJpCjoNmw0cJb5L7rzhHF+eaLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384DF Validity Not Before: Apr 5 05:20:45 2025 GMT Not After : Apr 12 05:20:45 2025 GMT Subject: CN=67f0bdad-64aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:3d:c8:3f:0e:62:c6:7d:25:b9:f9:3a:57: 40:49:da:ab:3d:45:9b:cc:14:ed:b1:b6:56:34:45: f3:3d:bd:ad:a7:2b:76:98:b7:8f:a8:c7:d1:b3:40: 69:90:21:6b:6a:70:c1:e1:fc:9e:d1:72:c8:a1:f2: 12:bd:f1:37:e6:cf:62:86:fb:7f:72:4e:bb:c2:69: 88:6f:3c:fe:62:d4:c2:da:3d:bb:8b:3f:40:dc:03: 2e:cb:7f:40:1e:d0:e2:0f:3a:22:78:db:46:76:8a: ab:6c:7e:50:06:d7:70:b1:6b:70:8f:44:a0:7f:08: a6:e2:c3:7b:df:37:53:be:63:e4:39:11:80:9b:d6: 21:84:7c:9c:9b:d7:9a:1e:21:81:de:97:f4:c4:3d: 39:59:aa:a1:96:6f:6d:49:2b:e4:74:4b:d0:ee:f7: f2:85:cd:5d:70:11:0e:4b:12:85:7c:69:82:62:15: 5a:01:21:e4:dc:55:5c:b2:81:bb:bb:9c:a3:e7:4e: 9f:ed:2b:79:6e:40:05:2e:c8:b8:01:9c:df:18:8e: 4d:b8:70:94:6c:1f:9e:9b:c3:98:7d:b1:f7:a4:22: 9f:b5:94:46:d1:ce:87:9e:a8:f5:55:90:bf:2e:c2: fa:6d:39:9c:31:25:24:86:56:be:d6:ed:5a:57:13: 13:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:61:30:DE:40:7F:EC:94:44:5D:78:E7:CE:23:7C:33:FB:42:10:71 X509v3 Authority Key Identifier: keyid:AC:97:89:F2:8A:F1:68:B2:6C:50:96:46:15:DF:06:D7:EC:72:02:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJeJ8orxaLJsUJZGFd8G1-xyAuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384DF/AE164B62037611EFACA7F921C4F9AE02/rJeJ8orxaLJsUJZGFd8G1-xyAuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:f9:32:25:c9:6d:81:2f:8e:6c:55:c2:01:3f:e7:56:f9: 23:c6:e9:1f:25:45:47:53:7b:07:89:e5:14:f8:75:64:4d:82: 69:2a:aa:30:8c:15:76:87:5d:d9:28:12:b6:d0:5a:4c:0f:1c: 58:a0:8a:86:7f:f0:de:ce:6b:2f:ed:b7:0b:f3:73:ae:7f:bd: 65:74:0c:76:67:d8:10:f3:c5:73:3d:f2:e5:8b:da:68:c8:9c: 21:a9:94:bf:6b:3a:79:26:16:95:8e:1e:4b:cd:75:13:6b:d5: 1c:9b:22:0d:80:a5:a2:44:00:47:ce:af:d8:52:b9:36:a1:a2: a4:d7:a9:1f:45:4a:5f:c1:af:f6:29:45:4c:de:be:b6:bd:fd: 4b:42:8a:23:f8:0a:de:4b:91:67:4b:00:62:f3:6d:01:59:2c: 76:0b:16:37:90:fb:19:58:40:a6:27:4e:29:a6:6a:d5:50:90: dc:4d:9f:90:a5:0f:6b:d1:b4:2b:66:89:fe:13:12:37:46:1c: 53:1e:6a:6c:f8:8f:6b:c2:d0:4d:1a:64:53:00:a1:ba:c3:97: 4e:a3:ef:92:63:60:7b:80:cc:64:60:16:c7:26:b0:2b:b9:b6: 97:00:48:57:37:bd:cf:e6:2d:7d:59:4e:91:19:3d:c2:91:ee: bb:28:0a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0REYxMTAvBgNVBAUTKEFDOTc4OUYyOEFGMTY4QjI2QzUwOTY0NjE1REYwNkQ3 RUM3MjAyRTMwHhcNMjUwNDA1MDUyMDQ1WhcNMjUwNDEyMDUyMDQ1WjAYMRYwFAYD VQQDEw02N2YwYmRhZC02NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+k9yD8OYsZ9Jbn5OldASdqrPUWbzBTtsbZWNEXzPb2tpyt2mLePqMfRs0Bp kCFranDB4fye0XLIofISvfE35s9ihvt/ck67wmmIbzz+YtTC2j27iz9A3AMuy39A HtDiDzoieNtGdoqrbH5QBtdwsWtwj0Sgfwim4sN73zdTvmPkORGAm9YhhHycm9ea HiGB3pf0xD05Waqhlm9tSSvkdEvQ7vfyhc1dcBEOSxKFfGmCYhVaASHk3FVcsoG7 u5yj506f7St5bkAFLsi4AZzfGI5NuHCUbB+em8OYfbH3pCKftZRG0c6Hnqj1VZC/ LsL6bTmcMSUkhla+1u1aVxMTiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJhMN5A f+yURF14584jfDP7QhBxMB8GA1UdIwQYMBaAFKyXifKK8WiybFCWRhXfBtfscgLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRERi9BRTE2NEI2MjAz NzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFMSnNVSlpHRmQ4RzEteHlB dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKZUo4b3J4YUxKc1VKWkdGZDhHMS14eUF1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRERi9BRTE2NEI2MjAzNzYxMUVGQUNBN0Y5MjFDNEY5QUUwMi9ySmVKOG9yeGFM SnNVSlpHRmQ4RzEteHlBdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB+/kyJcltgS+ObFXCAT/nVvkjxukfJUVHU3sHieUU+HVkTYJpKqow jBV2h13ZKBK20FpMDxxYoIqGf/Dezmsv7bcL83Ouf71ldAx2Z9gQ88VzPfLli9po yJwhqZS/azp5JhaVjh5LzXUTa9UcmyINgKWiRABHzq/YUrk2oaKk16kfRUpfwa/2 KUVM3r62vf1LQooj+AreS5FnSwBi820BWSx2CxY3kPsZWECmJ04ppmrVUJDcTZ+Q pQ9r0bQrZon+ExI3RhxTHmps+I9rwtBNGmRTAKG6w5dOo++SY2B7gMxkYBbHJrAr ubaXAEhXN73P5i19WU6RGT3Cke67KArX -----END CERTIFICATE-----Generated at Sat Apr 5 10:32:09 2025 by rpki-client