$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft File: jegu_2I015t6ZfpgoFMAfagoH8w.mft (raw, json) Hash identifier: /byfQHLmTus2SivYG8NyF/R2RkC1DjYOO9uzaqpsJTw= Subject key identifier: 9B:11:60:EF:BF:8C:33:18:FD:95:6E:3C:6B:BC:40:F1:17:1B:48:95 Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC Certificate issuer: /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft Manifest number: B6 Signing time: Sat 29 Mar 2025 05:29:15 +0000 Manifest this update: Sat 29 Mar 2025 05:29:14 +0000 Manifest next update: Sat 05 Apr 2025 05:29:14 +0000 Files and hashes: 1: jegu_2I015t6ZfpgoFMAfagoH8w.crl (hash: owEwc8OEPm774kTMFzfae162XxXgVj8rRkRbBa8snTg=) 2: F71189FC0C3211EF98143258C4F9AE02.roa (hash: 1AY7vatzUpFHp5X1pZedPLvi7H/JL85AC54mCkIIjVQ=) 3: 21D692500C1E11EFBA32F937C4F9AE02.roa (hash: SqF3faGShmfVPpXoXHL91JRHc62cO3NIyQXQDMCvuMY=) 4: 591DB9860C1F11EF9FC57C84C4F9AE02.roa (hash: biXO0as9Jxz6iqfKtDJWe3xCLQ4Ga58pXoS+qJsNKSs=) 5: 269D906E0C1D11EF87936F72C4F9AE02.roa (hash: TkvEA48hkZdfXv9N6AC+PYtqjUdjJ0lc4V/6xa2JEy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91846F6 Validity Not Before: Mar 29 05:29:14 2025 GMT Not After : Apr 5 05:29:14 2025 GMT Subject: CN=67e7852a-b1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:ff:be:b3:61:1a:42:fd:7e:47:5e:20:aa: 30:43:8a:c1:3f:12:98:44:0c:38:fe:f4:56:02:3a: 75:16:b3:a4:1e:f7:8e:61:fa:b4:0b:17:c0:e8:8e: ae:0f:4d:14:b3:b8:03:3a:75:3e:c0:fc:12:62:da: 13:c0:ec:91:a5:89:0f:e9:9d:2b:03:e5:ef:64:8b: 91:4a:ec:a8:3c:59:db:c9:d4:e9:e6:41:1f:35:79: f8:5d:49:ff:72:49:62:93:bb:3d:05:c3:62:42:28: 13:b0:e3:b1:f8:c5:31:c6:93:b6:7c:8c:ba:62:77: ae:c5:40:be:03:01:e0:59:f3:48:90:61:21:0d:9b: c8:d1:f3:9c:69:49:e5:33:41:d2:05:c2:13:23:9c: 4e:5b:07:e7:d7:12:e0:a3:61:17:56:cc:e5:db:f7: a1:d4:f0:90:68:11:2c:29:34:e0:c3:f3:63:1c:08: 8f:ef:b0:28:81:a4:54:d0:8a:94:8a:1b:44:6c:5b: 5a:ba:1b:cf:e8:f8:bc:05:0e:72:bb:a9:c4:d7:a3: 73:00:d7:ec:3e:9b:f6:e9:c6:7e:61:96:bc:da:88: 16:7c:a8:28:1f:7b:c8:52:31:a8:5f:8c:8a:bd:fb: 02:35:58:73:df:2e:ee:a4:d0:9a:d5:ae:2e:df:0d: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:60:EF:BF:8C:33:18:FD:95:6E:3C:6B:BC:40:F1:17:1B:48:95 X509v3 Authority Key Identifier: keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:79:96:79:6d:ba:d7:e1:39:8c:b4:9c:67:92:e1:cc:da:81: a5:d3:9a:18:72:88:e6:9d:9f:ee:24:10:e9:53:c8:6a:11:aa: e2:d6:8a:10:c6:7f:d2:75:6b:b7:0a:f8:68:ed:7e:fc:ad:12: 44:d1:07:69:3f:46:8a:2e:e6:54:e5:96:79:90:e5:48:0f:f5: 01:c1:97:92:e4:8e:50:98:fd:26:a3:54:24:72:59:f4:36:c2: dc:3d:29:b6:70:07:8f:c1:3e:2c:35:77:e1:6d:04:5b:db:45: a8:1f:37:f9:f1:c7:d9:b3:8c:dd:12:7a:ab:a7:8f:01:e0:06: 0d:c1:8f:a4:89:89:f3:e9:a6:30:c0:4a:fb:be:72:c3:85:c9: e0:4a:0b:2a:de:a6:34:f9:43:37:0c:3b:1b:be:0c:7d:05:6e: 32:a0:f2:11:65:92:c1:ac:35:4f:23:8c:5c:a2:0d:ab:52:11: b2:37:e7:7b:9b:2e:b3:84:23:3c:48:18:c0:cb:b1:ca:b1:9c: f2:d4:e7:b8:80:8a:eb:f7:24:11:54:6b:13:07:d9:61:24:36: d4:1a:a4:f1:8d:b1:ac:85:74:2c:27:d3:e4:13:20:cc:ab:8f: f3:4c:fe:2d:00:10:ba:d1:03:22:1a:ce:76:ee:73:23:62:af: 52:dd:91:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ2RjYxMTAvBgNVBAUTKDhERTgyRUZGNjIzNEQ3OUI3QTY1RkE2MEEwNTMwMDdE QTgyODFGQ0MwHhcNMjUwMzI5MDUyOTE0WhcNMjUwNDA1MDUyOTE0WjAYMRYwFAYD VQQDEw02N2U3ODUyYS1iMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxv/vrNhGkL9fkdeIKowQ4rBPxKYRAw4/vRWAjp1FrOkHveOYfq0CxfA6I6u D00Us7gDOnU+wPwSYtoTwOyRpYkP6Z0rA+XvZIuRSuyoPFnbydTp5kEfNXn4XUn/ cklik7s9BcNiQigTsOOx+MUxxpO2fIy6YneuxUC+AwHgWfNIkGEhDZvI0fOcaUnl M0HSBcITI5xOWwfn1xLgo2EXVszl2/eh1PCQaBEsKTTgw/NjHAiP77AogaRU0IqU ihtEbFtauhvP6Pi8BQ5yu6nE16NzANfsPpv26cZ+YZa82ogWfKgoH3vIUjGoX4yK vfsCNVhz3y7upNCa1a4u3w18wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsRYO+/ jDMY/ZVuPGu8QPEXG0iVMB8GA1UdIwQYMBaAFI3oLv9iNNebemX6YKBTAH2oKB/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDZGNi9GNEExQjJEODBD MTgxMUVGOUZGNzAxNDFDNEY5QUUwMi9qZWd1XzJJMDE1dDZaZnBnb0ZNQWZhZ29I OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plZ3VfMkkwMTV0NlpmcGdvRk1BZmFnb0g4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDZGNi9GNEExQjJEODBDMTgxMUVGOUZGNzAxNDFDNEY5QUUwMi9qZWd1XzJJMDE1 dDZaZnBnb0ZNQWZhZ29IOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAteZZ5bbrX4TmMtJxnkuHM2oGl05oYcojmnZ/uJBDpU8hqEari1ooQ xn/SdWu3Cvho7X78rRJE0QdpP0aKLuZU5ZZ5kOVID/UBwZeS5I5QmP0mo1Qkcln0 NsLcPSm2cAePwT4sNXfhbQRb20WoHzf58cfZs4zdEnqrp48B4AYNwY+kiYnz6aYw wEr7vnLDhcngSgsq3qY0+UM3DDsbvgx9BW4yoPIRZZLBrDVPI4xcog2rUhGyN+d7 my6zhCM8SBjAy7HKsZzy1Oe4gIrr9yQRVGsTB9lhJDbUGqTxjbGshXQsJ9PkEyDM q4/zTP4tABC60QMiGs527nMjYq9S3ZFw -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:59 2025 by rpki-client