$ rpki-client -vvf rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft File: jNZeQOKuy7xVttozRr8czjg1wnc.mft (raw, json) Hash identifier: uuFpzLA1G0vv0ZLWNHtPreCEuP2Cq19ShAxHoU2gPrk= Subject key identifier: A6:A8:8D:F8:4A:49:D6:B7:0E:1F:13:16:04:80:2D:26:5F:B6:13:13 Authority key identifier: 8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 Certificate issuer: /CN=A919A6EB/serialNumber=8CD65E40E2AECBBC55B6DA3346BF1CCE3835C277 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft Manifest number: 0151 Signing time: Thu 03 Apr 2025 03:24:49 +0000 Manifest this update: Thu 03 Apr 2025 03:24:49 +0000 Manifest next update: Thu 10 Apr 2025 03:24:48 +0000 Files and hashes: 1: jNZeQOKuy7xVttozRr8czjg1wnc.crl (hash: HYYzOaeEdVmY+qpmURUcCqtLmElVQZ9LNIFf7k1uI1o=) 2: 4CEE00EC0A8811EEA788A750C4F9AE02.roa (hash: QZB86xYAagOUVtXc6ojgleop4GqbWBDM0jf+6qBiFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A6EB Validity Not Before: Apr 3 03:24:49 2025 GMT Not After : Apr 10 03:24:48 2025 GMT Subject: CN=67edff81-772c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:db:cf:27:77:36:b0:50:25:1a:fe:28:04: f2:44:3a:2d:01:81:38:5a:57:1c:b7:d6:5d:fa:cb: 3c:e6:a7:af:8c:cf:15:ef:83:6f:03:93:79:04:b0: 1b:ce:49:9c:7e:98:4e:62:46:7d:ad:7e:b3:d9:82: f6:03:0e:1c:a0:fa:5b:7a:d6:6c:fc:a6:16:96:f5: c8:72:b1:ce:6a:1c:24:a5:3c:fe:5a:35:56:4e:b3: b7:79:db:c7:94:ab:a3:21:38:d0:a1:e0:8e:5a:fb: c8:9a:da:62:8a:65:e0:60:18:72:14:f5:dd:b6:83: 28:59:66:b0:a3:7c:b9:93:57:df:94:e1:c3:d8:d8: 86:68:98:82:7f:5e:65:f3:0c:a6:7e:c3:20:02:79: 4c:e5:ed:f5:49:ff:f1:1b:8e:e0:9b:b0:ba:86:db: a3:f9:c6:f9:14:24:0d:b8:87:da:03:a2:3a:87:e3: 63:04:99:f8:51:f0:6d:cc:5f:7b:60:f3:f9:be:c1: c3:ad:0f:63:d8:41:e4:20:22:d4:53:14:8f:6d:9f: 78:d1:2a:e2:ce:41:28:aa:41:0d:5f:14:d7:62:25: 08:80:47:23:41:e9:09:df:0e:26:6a:61:6d:26:d9: ae:0b:bd:f8:ca:47:cb:be:24:5e:da:64:6c:4a:ec: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A8:8D:F8:4A:49:D6:B7:0E:1F:13:16:04:80:2D:26:5F:B6:13:13 X509v3 Authority Key Identifier: keyid:8C:D6:5E:40:E2:AE:CB:BC:55:B6:DA:33:46:BF:1C:CE:38:35:C2:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNZeQOKuy7xVttozRr8czjg1wnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A6EB/DD4C1B2A0A5A11EEBE824344C4F9AE02/jNZeQOKuy7xVttozRr8czjg1wnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cc:5a:da:dd:e9:aa:ef:d2:d9:eb:23:d5:da:29:fd:ea:e3: 48:15:09:0b:a3:82:0f:6e:6d:59:ad:4a:ce:b8:77:1a:06:ab: ae:f5:95:1e:8c:7c:6d:99:fc:1a:c5:9c:2a:79:ea:da:97:c9: 74:d9:42:88:ba:18:20:cd:2a:39:f9:f2:3c:26:0b:de:76:95: b2:59:64:52:35:2f:d4:3e:27:52:f3:74:31:05:1b:cb:65:df: 9d:aa:3f:02:fb:b6:7c:67:5b:ab:35:cc:2a:b3:47:1d:9b:a6: 9f:97:90:73:7a:d5:8e:c8:6c:83:7c:12:a0:b5:52:b0:26:0b: 61:60:7c:da:80:19:25:ce:63:7c:ef:3b:a2:94:21:1c:5e:02: 46:4e:f3:20:bf:f9:86:6e:74:e6:6a:ec:f7:ce:c8:a5:86:fb: ec:64:2e:fc:eb:10:2d:2c:4c:9e:76:a4:aa:23:89:10:de:fe: 11:8a:34:67:c4:52:e9:75:82:ad:52:0a:56:bb:6c:51:8f:31: 62:b6:bb:d8:f8:29:64:82:89:6c:30:e9:e9:ae:d3:a7:12:09: f1:40:9a:eb:29:6f:0e:e2:c7:e6:05:9a:22:d6:ae:c8:be:e4: ad:4a:85:5b:dd:39:7b:c9:85:da:78:38:23:5a:41:1e:7b:ba: c2:40:d9:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE2RUIxMTAvBgNVBAUTKDhDRDY1RTQwRTJBRUNCQkM1NUI2REEzMzQ2QkYxQ0NF MzgzNUMyNzcwHhcNMjUwNDAzMDMyNDQ5WhcNMjUwNDEwMDMyNDQ4WjAYMRYwFAYD VQQDEw02N2VkZmY4MS03NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmd7bzyd3NrBQJRr+KATyRDotAYE4Wlcct9Zd+ss85qevjM8V74NvA5N5BLAb zkmcfphOYkZ9rX6z2YL2Aw4coPpbetZs/KYWlvXIcrHOahwkpTz+WjVWTrO3edvH lKujITjQoeCOWvvImtpiimXgYBhyFPXdtoMoWWawo3y5k1fflOHD2NiGaJiCf15l 8wymfsMgAnlM5e31Sf/xG47gm7C6htuj+cb5FCQNuIfaA6I6h+NjBJn4UfBtzF97 YPP5vsHDrQ9j2EHkICLUUxSPbZ940SrizkEoqkENXxTXYiUIgEcjQekJ3w4mamFt JtmuC734ykfLviRe2mRsSuw/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaojfhK Sda3Dh8TFgSALSZfthMTMB8GA1UdIwQYMBaAFIzWXkDirsu8VbbaM0a/HM44NcJ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTZFQi9ERDRDMUIyQTBB NUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3eFZ0dG96UnI4Y3pqZzF3 bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOWmVRT0t1eTd4VnR0b3pScjhjempnMXduYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTZFQi9ERDRDMUIyQTBBNUExMUVFQkU4MjQzNDRDNEY5QUUwMi9qTlplUU9LdXk3 eFZ0dG96UnI4Y3pqZzF3bmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNzFra3emq79LZ6yPV2in96uNIFQkLo4IPbm1ZrUrOuHcaBquu9ZUe jHxtmfwaxZwqeeral8l02UKIuhggzSo5+fI8JgvedpWyWWRSNS/UPidS83QxBRvL Zd+dqj8C+7Z8Z1urNcwqs0cdm6afl5BzetWOyGyDfBKgtVKwJgthYHzagBklzmN8 7zuilCEcXgJGTvMgv/mGbnTmauz3zsilhvvsZC786xAtLEyedqSqI4kQ3v4RijRn xFLpdYKtUgpWu2xRjzFitrvY+ClkgolsMOnprtOnEgnxQJrrKW8O4sfmBZoi1q7I vuStSoVb3Tl7yYXaeDgjWkEee7rCQNmJ -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:51 2025 by rpki-client