$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft File: jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json) Hash identifier: 6IAN87NhnciHrDBEToiGm6q6ML0CnZU0iql6rsXWxsQ= Subject key identifier: AF:13:2F:64:AB:08:D7:D3:A3:07:5B:58:36:85:7B:72:CB:8D:3B:56 Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441 Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft Manifest number: 0921 Signing time: Wed 02 Apr 2025 20:23:17 +0000 Manifest this update: Wed 02 Apr 2025 20:23:17 +0000 Manifest next update: Wed 09 Apr 2025 20:23:17 +0000 Files and hashes: 1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: lj0nQ94nGIb1mr5kDQqK/O/JVs2Oti36gdEe31xQkyM=) 2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: 1O8CvPoCX59yxkCTRAfeqT87JzO1ZPyxP3FQ7V/8EC0=) 3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 2lXGifV8wMvF5/8u5e/F18sZfZgZakRwfCdQQppNe70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8 Validity Not Before: Apr 2 20:23:17 2025 GMT Not After : Apr 9 20:23:17 2025 GMT Subject: CN=67ed9cb5-6e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:54:39:2c:38:32:f5:61:db:d3:39:7e:b8: 0c:04:a3:a6:ff:89:52:40:49:9d:21:1e:ff:d3:22: 44:74:30:ab:ba:75:ef:83:e0:c5:af:0c:1f:88:03: d0:2f:a7:63:3d:87:10:88:cf:17:79:df:df:41:e4: 61:73:5c:15:5f:9a:5b:1f:de:76:f7:a4:f6:95:39: b7:b0:ee:58:9f:d5:31:d1:fc:8e:c3:1f:1a:3b:87: 6b:56:38:37:bc:75:2c:63:52:74:48:77:8a:be:3a: 05:aa:75:ee:4d:2f:b5:9d:46:b2:70:e9:1b:69:67: 58:01:7a:30:f2:6e:7c:de:0e:30:f3:18:89:17:c0: 71:8a:20:59:bf:12:41:dd:f5:ee:1e:f0:16:35:84: 54:a0:76:40:dd:cc:47:fb:40:64:a0:39:47:8e:d3: f1:6a:f6:f2:3b:dc:3d:09:7e:b8:a1:c1:d2:60:d7: 23:bd:03:3e:20:d5:45:2d:e1:e4:fd:f2:eb:41:bf: 86:4d:c8:60:8b:c0:4c:b7:6e:a6:dc:d8:3a:3b:02: 5f:c1:3d:9d:81:2d:c1:03:b2:45:0b:48:bc:35:62: b0:8d:57:ac:ce:17:d3:1a:05:6f:cb:a9:c1:2b:43: cf:70:75:ea:31:5a:b6:61:a9:d0:cd:19:4b:89:11: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:13:2F:64:AB:08:D7:D3:A3:07:5B:58:36:85:7B:72:CB:8D:3B:56 X509v3 Authority Key Identifier: keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:46:ec:60:d5:e8:ab:12:19:cd:d4:5b:28:a2:4a:dd:83: 16:77:37:5b:94:14:95:34:ae:82:56:f6:e5:94:b9:dd:ed:72: 6f:f1:86:f0:5e:75:03:ec:89:46:e4:85:8d:79:66:c9:1d:42: 58:98:c8:18:db:1f:97:66:53:ec:e5:df:b5:4e:45:62:02:12: 31:7e:ae:1e:9c:a6:66:9c:92:46:62:7d:35:b2:75:c2:37:cc: 04:c2:e3:47:39:23:ad:b1:2c:82:88:c4:6a:b6:6d:42:e3:59: 5f:c4:c4:54:60:b9:90:fa:92:1a:0a:22:16:33:86:92:b2:50: d1:4e:1f:ac:c9:2e:9e:55:a2:75:ad:7c:12:9d:fb:4b:4a:d3: 89:20:be:52:06:27:1b:32:ce:ed:ff:bc:4c:68:a5:d8:b7:a3: e1:28:4b:9a:46:47:00:f3:cc:38:00:bb:94:85:ac:dc:ac:d5: 17:6b:e2:05:b4:37:81:51:ff:88:2d:7d:17:a6:d6:f4:0f:17: d2:ad:fe:91:96:f1:4f:c0:1e:29:e4:2b:2e:53:c5:a5:74:ea: 76:8d:fb:70:bf:0e:65:18:b3:78:5e:5a:b2:1d:25:50:df:25: 17:81:7d:57:0b:7b:c3:a9:36:b7:05:73:c9:79:f6:30:11:4c: c4:5e:49:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC RUM3MDU0NDEwHhcNMjUwNDAyMjAyMzE3WhcNMjUwNDA5MjAyMzE3WjAYMRYwFAYD VQQDEw02N2VkOWNiNS02ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLhUOSw4MvVh29M5frgMBKOm/4lSQEmdIR7/0yJEdDCrunXvg+DFrwwfiAPQ L6djPYcQiM8Xed/fQeRhc1wVX5pbH95296T2lTm3sO5Yn9Ux0fyOwx8aO4drVjg3 vHUsY1J0SHeKvjoFqnXuTS+1nUaycOkbaWdYAXow8m583g4w8xiJF8BxiiBZvxJB 3fXuHvAWNYRUoHZA3cxH+0BkoDlHjtPxavbyO9w9CX64ocHSYNcjvQM+INVFLeHk /fLrQb+GTchgi8BMt26m3Ng6OwJfwT2dgS3BA7JFC0i8NWKwjVeszhfTGgVvy6nB K0PPcHXqMVq2YanQzRlLiRE5LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8TL2Sr CNfTowdbWDaFe3LLjTtWMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC8xNDIwMjM4NEExQjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3 RG5EN215dlVBSnkteHdWRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcXkbsYNXoqxIZzdRbKKJK3YMWdzdblBSVNK6CVvbllLnd7XJv8Ybw XnUD7IlG5IWNeWbJHUJYmMgY2x+XZlPs5d+1TkViAhIxfq4enKZmnJJGYn01snXC N8wEwuNHOSOtsSyCiMRqtm1C41lfxMRUYLmQ+pIaCiIWM4aSslDRTh+syS6eVaJ1 rXwSnftLStOJIL5SBicbMs7t/7xMaKXYt6PhKEuaRkcA88w4ALuUhazcrNUXa+IF tDeBUf+ILX0Xptb0DxfSrf6RlvFPwB4p5CsuU8WldOp2jftwvw5lGLN4XlqyHSVQ 3yUXgX1XC3vDqTa3BXPJefYwEUzEXkku -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:52 2025 by rpki-client