$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft File: jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft (raw, json) Hash identifier: RVFLJOWdlmHuH4/r+jgoBOntIC82pPaqRYeW0Iz3d20= Subject key identifier: EA:E6:4C:DD:67:F3:AB:0A:FC:52:4A:60:5D:D7:D2:80:EC:6C:21:45 Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft Manifest number: AB Signing time: Wed 09 Apr 2025 05:03:01 +0000 Manifest this update: Wed 09 Apr 2025 05:03:00 +0000 Manifest next update: Wed 16 Apr 2025 05:03:00 +0000 Files and hashes: 1: jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl (hash: r+QIWadbaun7Bo2wPEDIZ6J8nQ81aEyGDx5JhVvWUCo=) 2: A51B73A01F0711EFB7C30655C4F9AE02.roa (hash: Ie9Y5pCGNtZspU9t66mnmp1QTKLtQUg0jtZnjasjHa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181375 Validity Not Before: Apr 9 05:03:00 2025 GMT Not After : Apr 16 05:03:00 2025 GMT Subject: CN=67f5ff85-da57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:58:48:b4:84:d9:83:da:0b:f4:4e:8c:a3:25: 84:76:3f:76:b2:ed:b3:73:7a:9b:72:cc:8f:0c:ac: af:a0:05:b7:ff:48:36:45:c6:3c:4e:9d:8f:fa:5c: 5e:50:f3:39:07:c3:84:91:51:63:ab:3a:f8:86:36: 2c:18:d2:a3:63:79:d1:93:df:72:e1:5e:f1:a4:06: ce:ee:85:57:60:d2:d0:b2:2d:e7:ef:50:ad:b7:70: a6:5c:94:e4:54:34:0e:7e:73:f6:fe:10:37:14:9e: 2a:19:44:44:3a:37:16:4c:2b:2d:c7:8c:24:b8:7d: 9d:79:44:7c:c5:6b:0f:47:f8:6a:68:6f:d3:91:c2: 14:b8:22:a3:3e:b4:4b:f4:46:f8:2d:90:52:07:06: 97:6b:e3:14:95:59:32:5c:33:fb:d7:d1:50:30:b2: e8:ee:74:3d:c2:2c:28:86:be:19:86:03:e7:02:25: 06:83:35:20:3c:70:f4:52:18:ec:b1:cf:b5:38:f9: eb:ab:91:50:f4:61:fd:dd:73:29:73:48:c0:19:96: 1a:4c:e6:4d:31:8b:37:38:da:1b:4e:dc:23:2e:d2: 86:66:40:d4:38:6b:01:11:5f:99:21:78:32:b1:c7: fd:ff:19:7c:94:61:e5:87:01:eb:17:15:06:53:3e: d6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E6:4C:DD:67:F3:AB:0A:FC:52:4A:60:5D:D7:D2:80:EC:6C:21:45 X509v3 Authority Key Identifier: keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:71:d0:d7:c7:8d:10:bd:35:2d:ec:b9:80:2c:36:b9:46:74: e5:9b:d4:a5:2d:c9:13:c4:b2:22:29:35:d9:96:ac:81:57:f4: 66:a3:b1:da:a4:a4:8a:37:40:43:d8:0c:4b:34:e0:c7:4c:a8: cc:a2:2f:8d:b0:c9:b8:57:f7:5c:91:e3:ff:34:15:de:d6:e3: e8:43:3e:4f:6e:2a:b7:13:3f:8d:ce:b0:c6:5f:b5:f3:7e:e8: c1:9d:55:76:fd:fd:28:68:63:c4:be:e4:7d:dd:2a:eb:ae:bf: a4:3e:8f:3e:09:d0:c0:46:fd:ef:5d:bf:60:8b:99:dd:fa:e7: 44:80:56:69:da:f1:a5:be:bb:84:0a:1f:c3:d4:6c:5b:95:3b: 91:e3:b0:32:90:f3:97:10:a3:16:6a:73:8e:29:61:bd:11:60: 0c:88:20:91:0b:61:c7:28:6a:83:96:05:28:34:25:cf:ab:b7: ce:96:b5:01:a7:b9:f5:d2:0e:c4:a6:35:d0:11:fc:7e:f6:84: 15:a7:03:8c:71:8d:29:9a:21:c3:a2:8d:77:1a:5e:2f:67:da: 7b:aa:1c:fe:f3:de:7f:94:8d:4b:cc:56:03:85:88:04:3f:17: 9c:42:81:bc:53:1f:68:0a:15:dc:09:f9:35:a6:98:67:21:cc: ed:63:3b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNzUxMTAvBgNVBAUTKDhEQ0RFNTJCOUI4QjA1MjJCRTI2NzEzQTQxODY1Njcw QTYxRUU4NkQwHhcNMjUwNDA5MDUwMzAwWhcNMjUwNDE2MDUwMzAwWjAYMRYwFAYD VQQDEw02N2Y1ZmY4NS1kYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FhItITZg9oL9E6MoyWEdj92su2zc3qbcsyPDKyvoAW3/0g2RcY8Tp2P+lxe UPM5B8OEkVFjqzr4hjYsGNKjY3nRk99y4V7xpAbO7oVXYNLQsi3n71Ctt3CmXJTk VDQOfnP2/hA3FJ4qGUREOjcWTCstx4wkuH2deUR8xWsPR/hqaG/TkcIUuCKjPrRL 9Eb4LZBSBwaXa+MUlVkyXDP719FQMLLo7nQ9wiwohr4ZhgPnAiUGgzUgPHD0Uhjs sc+1OPnrq5FQ9GH93XMpc0jAGZYaTOZNMYs3ONobTtwjLtKGZkDUOGsBEV+ZIXgy scf9/xl8lGHlhwHrFxUGUz7W/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrmTN1n 86sK/FJKYF3X0oDsbCFFMB8GA1UdIwQYMBaAFI3N5SubiwUiviZxOkGGVnCmHuht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM3NS9BRUQ1ODMxRTFG MDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJTSy1KbkU2UVlaV2NLWWU2 RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pjM2xLNXVMQlNLLUpuRTZRWVpXY0tZZTZHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM3NS9BRUQ1ODMxRTFGMDYxMUVGQTYxQUJBNTFDNEY5QUUwMi9qYzNsSzV1TEJT Sy1KbkU2UVlaV2NLWWU2RzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgcdDXx40QvTUt7LmALDa5RnTlm9SlLckTxLIiKTXZlqyBV/Rmo7Ha pKSKN0BD2AxLNODHTKjMoi+NsMm4V/dckeP/NBXe1uPoQz5Pbiq3Ez+NzrDGX7Xz fujBnVV2/f0oaGPEvuR93Srrrr+kPo8+CdDARv3vXb9gi5nd+udEgFZp2vGlvruE Ch/D1GxblTuR47AykPOXEKMWanOOKWG9EWAMiCCRC2HHKGqDlgUoNCXPq7fOlrUB p7n10g7EpjXQEfx+9oQVpwOMcY0pmiHDoo13Gl4vZ9p7qhz+895/lI1LzFYDhYgE PxecQoG8Ux9oChXcCfk1pphnIcztYzss -----END CERTIFICATE-----Generated at Fri Apr 11 23:34:24 2025 by rpki-client