$ rpki-client -vvf rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft File: pjmEmL39gbnWUbUS4OnwRXr6TSg.mft (raw, json) Hash identifier: g/IKiQXfeEfl+5ri/b6T/CLQd9ZjtpoOc1hn8ZUUC9I= Subject key identifier: 92:8D:C8:0F:F8:98:82:53:0B:C8:38:44:3B:B1:A6:55:EC:62:34:83 Authority key identifier: A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 Certificate issuer: /CN=A916333C/serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Certificate serial: 0872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft Manifest number: 086D Signing time: Thu 10 Apr 2025 20:36:10 +0000 Manifest this update: Thu 10 Apr 2025 20:36:09 +0000 Manifest next update: Thu 17 Apr 2025 20:36:09 +0000 Files and hashes: 1: pjmEmL39gbnWUbUS4OnwRXr6TSg.crl (hash: 79JH/Q1DYbJAIFW78Gd8NFR1AH47Av9W3L89bDe12z0=) 2: A211CBBEBF3911EABB1C5578C4F9AE02.roa (hash: 9wXMOm9fVh9YiiXGFKNsgIYR+u452tjlEUQ6Zp2HaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 20:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916333C, serialNumber=A6398498BDFD81B9D651B512E0E9F0457AFA4D28 Validity Not Before: Apr 10 20:36:09 2025 GMT Not After : Apr 17 20:36:09 2025 GMT Subject: CN=67f82bb9-14fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:08:c5:79:f4:f8:ee:56:29:a5:e1:72:03:4e: de:b0:01:e1:65:9f:6f:32:d8:50:aa:7d:e9:0f:2c: 9c:8d:40:b0:5f:9b:1c:50:7d:5d:43:4f:79:92:65: 9f:b7:22:d8:97:cd:ad:68:4a:e1:1e:97:bd:ff:e1: a0:41:ac:73:8b:a1:f0:6b:23:ff:e6:65:88:a7:10: cd:10:51:03:99:55:d6:52:50:9e:6b:d0:f7:07:ac: 70:2a:31:1b:4d:ea:74:42:dc:ac:ed:26:72:a3:c9: 93:d3:ee:6e:62:02:a2:f7:3f:f9:4a:ca:6e:1d:87: 8b:bb:47:4a:1c:05:a7:df:73:cf:41:ae:22:ac:d6: 41:cc:e7:5f:fb:13:96:25:e7:50:3e:8d:c4:e8:8e: bb:89:c4:bd:17:13:51:56:a8:2d:cb:e2:da:71:2f: 80:bc:0e:16:a2:c1:66:f1:25:ab:cd:4e:e3:e3:29: dc:83:90:d9:dc:5a:3e:1b:68:62:df:f4:30:a7:26: 0f:27:d8:a5:ee:ef:29:b3:3c:80:f6:54:d7:37:b6: 2c:b4:f4:45:f3:18:a7:9f:e9:ad:85:af:f8:f0:23: 2d:dd:d3:8f:2c:44:7c:20:75:c8:5d:45:2a:42:16: f9:6d:5c:e2:03:19:7b:04:b8:65:ae:20:29:8f:81: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:C8:0F:F8:98:82:53:0B:C8:38:44:3B:B1:A6:55:EC:62:34:83 X509v3 Authority Key Identifier: keyid:A6:39:84:98:BD:FD:81:B9:D6:51:B5:12:E0:E9:F0:45:7A:FA:4D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjmEmL39gbnWUbUS4OnwRXr6TSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916333C/9B79A8FEBF3811EAA55D1177C4F9AE02/pjmEmL39gbnWUbUS4OnwRXr6TSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:28:32:90:c8:45:81:44:0e:3e:81:fa:9d:c9:d0:06:b5:bb: db:55:2c:d4:2c:a9:ad:2b:59:4a:04:43:5e:88:7b:20:8f:ff: 3d:5c:2f:83:83:66:64:6f:53:0a:36:57:0f:f8:c8:ac:ee:d2: 48:4b:d2:8c:6c:b5:b3:f1:56:17:3d:a2:70:7a:9f:51:41:6e: e2:ee:95:6c:c2:40:3f:e0:2d:de:56:cb:da:4f:e0:a4:72:4f: 67:d0:fb:08:0f:29:5c:bb:f9:c2:2d:50:15:0e:25:8b:36:6d: da:ac:1e:30:89:bd:0e:73:2b:2b:fb:ed:97:01:01:b1:41:bf: 86:7e:c1:55:76:68:f3:b7:9a:33:9b:4a:16:2c:22:70:ce:91: 92:e6:66:e7:e2:a9:79:27:72:72:25:90:a3:88:89:48:4e:80: 25:a6:26:f3:1b:cd:a3:52:e6:25:5e:c0:06:bb:b9:f7:d2:e5: 6e:52:e7:fb:0c:66:28:d8:38:ee:74:4b:a6:a1:99:cc:24:2f: 85:93:e8:a5:03:c7:a3:cc:12:0f:9a:48:be:10:44:57:be:cf: 3f:18:8e:a9:01:73:0d:0a:7e:3b:6b:48:7b:5d:12:b2:d2:0e: 9e:8b:90:d5:de:81:77:ec:18:a4:f8:79:f8:43:6f:ab:31:00: f9:63:df:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzM0MxMTAvBgNVBAUTKEE2Mzk4NDk4QkRGRDgxQjlENjUxQjUxMkUwRTlGMDQ1 N0FGQTREMjgwHhcNMjUwNDEwMjAzNjA5WhcNMjUwNDE3MjAzNjA5WjAYMRYwFAYD VQQDEw02N2Y4MmJiOS0xNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQjFefT47lYppeFyA07esAHhZZ9vMthQqn3pDyycjUCwX5scUH1dQ095kmWf tyLYl82taErhHpe9/+GgQaxzi6HwayP/5mWIpxDNEFEDmVXWUlCea9D3B6xwKjEb Tep0Qtys7SZyo8mT0+5uYgKi9z/5SspuHYeLu0dKHAWn33PPQa4irNZBzOdf+xOW JedQPo3E6I67icS9FxNRVqgty+LacS+AvA4WosFm8SWrzU7j4yncg5DZ3Fo+G2hi 3/QwpyYPJ9il7u8pszyA9lTXN7YstPRF8xinn+mtha/48CMt3dOPLER8IHXIXUUq Qhb5bVziAxl7BLhlriApj4GIZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKNyA/4 mIJTC8g4RDuxplXsYjSDMB8GA1UdIwQYMBaAFKY5hJi9/YG51lG1EuDp8EV6+k0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzMzQy85Qjc5QThGRUJG MzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdibldVYlVTNE9ud1JYcjZU U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BqbUVtTDM5Z2JuV1ViVVM0T253UlhyNlRTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzMzQy85Qjc5QThGRUJGMzgxMUVBQTU1RDExNzdDNEY5QUUwMi9wam1FbUwzOWdi bldVYlVTNE9ud1JYcjZUU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMKDKQyEWBRA4+gfqdydAGtbvbVSzULKmtK1lKBENeiHsgj/89XC+D g2Zkb1MKNlcP+Mis7tJIS9KMbLWz8VYXPaJwep9RQW7i7pVswkA/4C3eVsvaT+Ck ck9n0PsIDylcu/nCLVAVDiWLNm3arB4wib0Ocysr++2XAQGxQb+GfsFVdmjzt5oz m0oWLCJwzpGS5mbn4ql5J3JyJZCjiIlIToAlpibzG82jUuYlXsAGu7n30uVuUuf7 DGYo2DjudEumoZnMJC+Fk+ilA8ejzBIPmki+EERXvs8/GI6pAXMNCn47a0h7XRKy 0g6ei5DV3oF37Bik+Hn4Q2+rMQD5Y9+6 -----END CERTIFICATE-----Generated at Sat Apr 12 17:45:27 2025 by rpki-client