$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: 7Z7Xm/TnIYFrenEhELCMEOV7FTR4/yxtZ/rW9kqbgUM= Subject key identifier: 66:BA:E3:E4:92:A3:5E:1B:82:62:62:F0:95:A2:1E:A3:00:71:F5:3E Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 080A Signing time: Fri 04 Apr 2025 21:02:17 +0000 Manifest this update: Fri 04 Apr 2025 21:02:16 +0000 Manifest next update: Fri 11 Apr 2025 21:02:16 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: Hxg++u/arHUtagIshojxTvXgH5bap/ozWn1jqtR4vhY=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: 55v8+5WnNCdQgy/pYZyJsyT33va4H3HoMwf1KQsvvdg=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: S9nY3Sl7EDqBHlCNRNgF0IQF6K39qge4nOXqDi55XVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8 Validity Not Before: Apr 4 21:02:16 2025 GMT Not After : Apr 11 21:02:16 2025 GMT Subject: CN=67f048d8-0dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:09:d5:fd:f3:5e:fa:33:32:b3:ce:58:f3: 23:18:b5:f7:b0:ca:28:b8:a3:ac:87:de:67:a6:f8: dd:21:bc:24:ce:ec:a2:18:37:8f:2a:ee:2c:44:22: db:79:52:14:b2:d5:76:7c:15:3a:93:e7:46:50:9a: ad:38:69:a4:48:c4:5a:f4:4e:55:0a:4f:ed:62:dd: 54:b0:b1:97:96:e0:f4:4e:f3:c0:4f:35:07:bf:14: 36:aa:8f:cc:4d:a9:e5:e9:a7:9e:0b:ab:58:29:34: fc:58:fc:10:5c:3f:c6:a1:b7:ae:4a:21:7a:4b:7f: ee:cc:5c:60:27:d3:3a:53:0a:0c:07:9b:65:f1:8b: 76:76:b9:b3:f2:02:ec:1f:c7:86:83:d2:a2:e3:11: c5:23:ab:2c:1b:74:2e:89:99:b7:b9:69:4f:a8:88: 71:6e:c3:19:df:44:63:fd:b1:7e:28:bc:a7:c3:25: 5d:15:18:e1:70:88:c4:8e:62:a4:89:11:d1:91:6d: 78:45:78:a7:07:cc:9e:bc:70:c1:95:c4:a0:ee:b9: 25:2e:aa:d5:f9:1e:de:2c:32:b6:a2:13:21:9d:8d: d8:56:ba:b5:ea:36:c6:3a:c1:f1:ac:43:ff:1f:6f: bf:27:e6:41:bc:b0:a0:2f:45:a6:e2:a0:f7:e3:c6: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BA:E3:E4:92:A3:5E:1B:82:62:62:F0:95:A2:1E:A3:00:71:F5:3E X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:2c:13:cb:80:2d:fa:a6:73:8d:03:a6:f3:c8:a3:63:37:ac: 20:0c:5e:64:83:b1:92:9b:72:04:22:47:b8:73:11:02:90:e2: 16:de:38:46:f2:f1:ea:01:94:7c:e8:98:2f:f0:e2:f5:4a:d3: 6a:67:48:ba:d2:8c:98:37:04:cc:8b:07:46:72:26:19:b4:c0: 22:a4:69:0a:eb:a4:ce:56:42:8c:0a:df:a7:ab:10:ef:81:b9: ea:a7:e0:32:65:7c:c3:38:e9:df:55:2d:61:a2:d4:c1:44:8c: 65:ef:c8:ef:62:df:e5:20:03:7a:fd:7d:4f:40:2a:2a:9d:8a: e7:58:f7:81:16:16:11:8a:19:b6:ac:e5:cd:cf:e8:5d:45:df: da:eb:91:05:b1:b7:8d:95:e6:87:15:c4:8f:bf:ee:c8:8d:38: 73:95:34:13:59:c5:a1:1a:5f:df:bd:e5:37:e3:d7:22:ff:d8: 49:e0:f7:3e:af:ea:ef:6d:4d:8f:72:45:e8:78:ef:96:fb:24: 48:b1:b2:e5:1b:b1:ec:38:fa:df:48:ef:f9:2c:8a:30:7c:c6: 6f:c1:fb:03:5b:63:ce:4b:03:a8:fd:d1:12:63:e6:83:97:fe: 7c:4a:53:cf:e3:ea:ea:9b:a1:20:46:7c:2a:e2:14:e8:12:7d: b8:b6:e7:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjUwNDA0MjEwMjE2WhcNMjUwNDExMjEwMjE2WjAYMRYwFAYD VQQDEw02N2YwNDhkOC0wZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFQJ1f3zXvozMrPOWPMjGLX3sMoouKOsh95npvjdIbwkzuyiGDePKu4sRCLb eVIUstV2fBU6k+dGUJqtOGmkSMRa9E5VCk/tYt1UsLGXluD0TvPATzUHvxQ2qo/M Tanl6aeeC6tYKTT8WPwQXD/GobeuSiF6S3/uzFxgJ9M6UwoMB5tl8Yt2drmz8gLs H8eGg9Ki4xHFI6ssG3QuiZm3uWlPqIhxbsMZ30Rj/bF+KLynwyVdFRjhcIjEjmKk iRHRkW14RXinB8yevHDBlcSg7rklLqrV+R7eLDK2ohMhnY3YVrq16jbGOsHxrEP/ H2+/J+ZBvLCgL0Wm4qD348aU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa64+SS o14bgmJi8JWiHqMAcfU+MB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHLBPLgC36pnONA6bzyKNjN6wgDF5kg7GSm3IEIke4cxECkOIW3jhG 8vHqAZR86Jgv8OL1StNqZ0i60oyYNwTMiwdGciYZtMAipGkK66TOVkKMCt+nqxDv gbnqp+AyZXzDOOnfVS1hotTBRIxl78jvYt/lIAN6/X1PQCoqnYrnWPeBFhYRihm2 rOXNz+hdRd/a65EFsbeNleaHFcSPv+7IjThzlTQTWcWhGl/fveU349ci/9hJ4Pc+ r+rvbU2PckXoeO+W+yRIsbLlG7HsOPrfSO/5LIowfMZvwfsDW2POSwOo/dESY+aD l/58SlPP4+rqm6EgRnwq4hToEn24tudI -----END CERTIFICATE-----Generated at Sat Apr 5 12:51:06 2025 by rpki-client