$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: lEVGBYuCjZcvgqbPRspFb3WUimRclLZNrR3HVDk3XCI= Subject key identifier: F4:43:D5:8A:53:10:5A:63:DF:87:DA:11:A5:48:9D:EF:9F:67:69:A2 Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: 96 Signing time: Sat 29 Mar 2025 05:45:51 +0000 Manifest this update: Sat 29 Mar 2025 05:45:51 +0000 Manifest next update: Sat 05 Apr 2025 05:45:50 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: 2bOKktEBzTd+83fz+dVmbLaLZ1lPeG/eNGY9s7w1i3Q=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5 Validity Not Before: Mar 29 05:45:51 2025 GMT Not After : Apr 5 05:45:50 2025 GMT Subject: CN=67e7890f-3fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b5:01:21:f0:b6:f0:c4:a9:90:33:ca:01:33: d6:bd:ac:e5:74:44:30:e1:b8:a1:f4:b0:2d:db:99: 8d:61:04:9b:e4:f4:9c:c2:7b:8e:a8:c4:e2:fa:b9: f3:1e:b3:7e:36:ba:89:dc:3e:bd:bb:c5:66:56:c4: 96:53:e9:6a:09:38:6e:94:8a:7c:4e:3d:0c:b5:3e: 2e:0a:64:d5:f5:30:e0:d8:82:55:27:b7:05:ba:95: 00:d8:e8:ed:db:bb:e4:fc:bf:a1:fb:57:35:88:8d: 32:1a:78:36:3f:9f:45:35:d4:79:d4:ca:68:79:66: 0a:ab:03:ae:1d:c3:4e:75:ef:eb:13:7f:7f:9d:82: 1b:7e:a5:d4:43:93:22:40:b3:08:06:0a:4a:bf:d9: 96:3a:05:05:2e:69:64:5a:1a:a2:91:50:44:85:af: c8:ac:df:68:7d:5d:00:35:d2:0f:85:57:17:b5:54: 75:0b:1e:49:98:1b:9b:2e:05:29:3f:03:39:55:7a: 0c:a9:73:5c:26:74:65:32:d1:0b:9e:7d:37:32:01: 4b:59:51:33:c3:a1:f7:34:c6:1c:89:aa:87:86:c2: ea:81:2a:55:bb:dc:7a:28:08:b8:cd:d1:16:35:58: 36:36:f8:d3:78:fc:82:06:2f:59:72:92:7c:87:55: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:43:D5:8A:53:10:5A:63:DF:87:DA:11:A5:48:9D:EF:9F:67:69:A2 X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:57:4a:27:30:78:16:48:13:82:d8:33:aa:fa:fe:1e:90:69: 17:1b:83:14:f3:f2:59:bb:60:1a:ad:f2:c8:88:d6:df:80:ea: 51:3c:39:1e:aa:2e:ee:1b:97:71:b0:67:a3:0a:93:95:9f:51: 0d:79:b6:c0:e1:b8:8f:21:ab:4d:cb:a6:4c:69:b0:02:36:a6: b7:55:52:6b:a3:19:1a:bb:0d:d4:27:39:d8:4a:8c:c7:56:72: c3:ae:66:50:dd:6b:0e:cc:57:f6:d0:4e:d0:ae:7e:de:86:e7: d6:ed:84:56:72:42:54:fb:e8:cd:a2:4b:70:b5:14:7b:db:58: 93:a5:59:8b:6e:e2:3b:2b:bd:03:42:3e:6f:59:7c:76:37:a8: db:44:aa:f6:31:bf:60:bf:36:7c:01:f8:e9:93:fc:14:0f:ed: b7:8b:43:0a:e2:12:ea:77:14:1d:15:43:9f:f3:5a:ff:47:82: 1a:38:83:dd:96:ef:47:36:95:d0:fe:14:14:05:f1:78:12:d8: 5c:50:45:06:32:6d:9f:fb:f8:a4:1f:60:29:a5:3c:67:dd:f9: 49:01:f5:3e:e1:aa:0f:54:f1:4d:6a:9e:2b:1f:40:74:f4:2c: a3:5f:c5:8d:00:09:eb:2e:21:b3:70:17:0d:7d:25:89:5c:2f: 17:74:97:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUwMzI5MDU0NTUxWhcNMjUwNDA1MDU0NTUwWjAYMRYwFAYD VQQDEw02N2U3ODkwZi0zZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7UBIfC28MSpkDPKATPWvazldEQw4bih9LAt25mNYQSb5PScwnuOqMTi+rnz HrN+NrqJ3D69u8VmVsSWU+lqCThulIp8Tj0MtT4uCmTV9TDg2IJVJ7cFupUA2Ojt 27vk/L+h+1c1iI0yGng2P59FNdR51MpoeWYKqwOuHcNOde/rE39/nYIbfqXUQ5Mi QLMIBgpKv9mWOgUFLmlkWhqikVBEha/IrN9ofV0ANdIPhVcXtVR1Cx5JmBubLgUp PwM5VXoMqXNcJnRlMtELnn03MgFLWVEzw6H3NMYciaqHhsLqgSpVu9x6KAi4zdEW NVg2NvjTePyCBi9ZcpJ8h1Un+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRD1YpT EFpj34faEaVIne+fZ2miMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlV0onMHgWSBOC2DOq+v4ekGkXG4MU8/JZu2AarfLIiNbfgOpRPDke qi7uG5dxsGejCpOVn1ENebbA4biPIatNy6ZMabACNqa3VVJroxkauw3UJznYSozH VnLDrmZQ3WsOzFf20E7Qrn7ehufW7YRWckJU++jNoktwtRR721iTpVmLbuI7K70D Qj5vWXx2N6jbRKr2Mb9gvzZ8Afjpk/wUD+23i0MK4hLqdxQdFUOf81r/R4IaOIPd lu9HNpXQ/hQUBfF4EthcUEUGMm2f+/ikH2AppTxn3flJAfU+4aoPVPFNap4rH0B0 9CyjX8WNAAnrLiGzcBcNfSWJXC8XdJfJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:42:14 2025 by rpki-client