$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: YriWh1c6a6dblsURUI7cYIvXmQJaBDjP3gOmyNRBYU8= Subject key identifier: BD:DA:9B:09:26:58:DC:81:F6:D3:AF:B2:79:34:94:5E:B0:89:D7:CD Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 0780 Signing time: Wed 02 Apr 2025 21:20:28 +0000 Manifest this update: Wed 02 Apr 2025 21:20:27 +0000 Manifest next update: Wed 09 Apr 2025 21:20:27 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: 2se+Kq41pm0DMJcqtN6Fc9yH9LyH86t7e4dBDNsKSV4=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493 Validity Not Before: Apr 2 21:20:27 2025 GMT Not After : Apr 9 21:20:27 2025 GMT Subject: CN=67edaa1b-4b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:54:99:63:9a:f7:53:95:16:d9:2b:8a:23: b8:94:0c:9d:20:64:5b:c2:2c:80:a4:c0:65:99:83: f0:84:1f:1e:69:10:aa:d2:19:3b:f9:15:fb:9e:47: 5c:be:0c:57:5f:83:29:99:c0:b7:a9:bb:c7:92:51: 14:3f:ff:7e:a0:d2:c6:62:ae:c6:85:87:2d:46:29: e9:07:54:01:53:8d:e8:79:7b:6f:0a:f9:5d:c0:de: 8d:ff:1c:25:e3:69:58:fc:e3:f3:39:1d:11:82:96: 7e:7c:ea:63:52:62:e2:c5:98:b2:53:f1:72:ff:0b: 2c:c3:79:c7:ae:32:52:d5:94:18:19:1a:a4:18:2b: b2:bc:b6:c6:17:bc:3d:37:03:b8:67:92:bd:02:f0: 60:76:54:b1:93:3f:09:22:ad:04:8c:50:ab:7f:95: ff:9b:5c:8d:29:fa:07:78:6f:83:65:93:59:2d:26: 51:e0:fb:04:9f:ae:a7:18:f6:8b:09:ce:ab:c9:ca: be:13:6b:04:68:ec:e1:bb:aa:ab:43:49:83:d4:b4: cc:8e:ca:2b:49:99:b3:1e:45:2f:81:31:b0:36:d8: 9a:f5:a6:ee:19:98:f3:9b:4a:98:30:46:04:47:09: 3b:9d:55:2f:27:d0:40:fc:d1:af:1c:1c:16:f8:44: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DA:9B:09:26:58:DC:81:F6:D3:AF:B2:79:34:94:5E:B0:89:D7:CD X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:13:f4:1e:c5:df:79:c7:d8:05:20:fb:64:9b:c1:60:1c:e9: 86:4d:e3:96:4f:a1:31:4e:44:a7:c9:d8:d7:0d:0c:a4:e1:1f: 81:13:76:9f:54:53:8d:23:1a:ef:86:da:97:ee:38:ad:2a:bf: a2:06:e1:d8:a2:24:7e:55:16:da:fb:99:64:5d:d9:92:6a:94: 76:7b:d7:d5:b3:82:8c:5d:a8:4f:38:0a:2c:3f:63:9b:f0:7f: 27:d5:f2:fe:8f:c8:30:d8:0f:a2:ad:c6:8f:4f:bd:dc:a9:a0: 49:f1:f6:05:85:66:c2:17:6e:74:c4:fe:4a:aa:51:b4:b8:ff: 16:10:b0:de:73:91:23:c2:fb:ca:ed:13:bd:89:41:61:6d:66: a0:48:ec:48:e3:ba:42:eb:90:67:1f:ae:22:13:f4:a8:53:ad: b8:1f:7d:f0:de:d3:9b:c7:e3:c7:59:dc:47:18:99:77:43:fc: 56:9a:b8:ab:19:56:64:3c:23:82:c0:91:b8:02:e3:f5:26:eb: 86:e8:26:87:04:73:52:e0:ae:10:88:db:9f:84:19:5a:7e:94: 96:cd:3c:eb:a2:be:53:d9:b7:7f:ee:bb:f1:38:d0:7b:67:a2: 59:5f:ea:a8:f5:5a:92:fd:78:86:2b:45:39:3e:a2:46:b9:5b: aa:70:b6:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUwNDAyMjEyMDI3WhcNMjUwNDA5MjEyMDI3WjAYMRYwFAYD VQQDEw02N2VkYWExYi00YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfVUmWOa91OVFtkriiO4lAydIGRbwiyApMBlmYPwhB8eaRCq0hk7+RX7nkdc vgxXX4MpmcC3qbvHklEUP/9+oNLGYq7GhYctRinpB1QBU43oeXtvCvldwN6N/xwl 42lY/OPzOR0RgpZ+fOpjUmLixZiyU/Fy/wssw3nHrjJS1ZQYGRqkGCuyvLbGF7w9 NwO4Z5K9AvBgdlSxkz8JIq0EjFCrf5X/m1yNKfoHeG+DZZNZLSZR4PsEn66nGPaL Cc6rycq+E2sEaOzhu6qrQ0mD1LTMjsorSZmzHkUvgTGwNtia9abuGZjzm0qYMEYE Rwk7nVUvJ9BA/NGvHBwW+EQh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3amwkm WNyB9tOvsnk0lF6widfNMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzE/Qexd95x9gFIPtkm8FgHOmGTeOWT6ExTkSnydjXDQyk4R+BE3af VFONIxrvhtqX7jitKr+iBuHYoiR+VRba+5lkXdmSapR2e9fVs4KMXahPOAosP2Ob 8H8n1fL+j8gw2A+ircaPT73cqaBJ8fYFhWbCF250xP5KqlG0uP8WELDec5EjwvvK 7RO9iUFhbWagSOxI47pC65BnH64iE/SoU624H33w3tObx+PHWdxHGJl3Q/xWmrir GVZkPCOCwJG4AuP1JuuG6CaHBHNS4K4QiNufhBlafpSWzTzror5T2bd/7rvxONB7 Z6JZX+qo9VqS/XiGK0U5PqJGuVuqcLbF -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:07 2025 by rpki-client