$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: wz8WH6iALTzj8VszxwGlyqi6FPbuKiAQfJEJfqb1tZc= Subject key identifier: 8B:B5:CB:10:1B:31:08:73:92:24:7F:0E:D1:ED:26:A5:9A:D0:A1:AC Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0AF1 Signing time: Sun 20 Apr 2025 19:11:08 +0000 Manifest this update: Sun 20 Apr 2025 19:11:07 +0000 Manifest next update: Sun 27 Apr 2025 19:11:07 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: g4Z2XndyCHv7WscIv5KQ4/JFucv2ijpgUlFYyX7Lbsc=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Apr 20 19:11:07 2025 GMT Not After : Apr 27 19:11:07 2025 GMT Subject: CN=680546cc-b944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:ef:fb:59:f9:4f:b6:44:80:e4:08:0d:4d: 8e:b3:4d:ed:01:ca:61:e2:c5:2f:90:4f:69:ef:4e: ac:c1:db:ab:f2:33:fc:94:c0:ae:2f:20:e3:73:ee: c7:f0:6f:87:6a:65:5f:3b:fe:e3:fa:3b:c8:45:64: e4:d9:34:aa:e4:45:63:c4:3a:16:6f:d9:7d:9d:39: 23:d7:26:38:88:50:8e:fa:b8:2d:e0:e6:60:eb:c5: d0:7f:87:a5:b4:08:b0:3c:98:6e:64:6b:e1:d2:3b: cf:6d:a2:d1:dc:c4:bf:54:de:2c:7d:a5:f7:20:da: 0d:71:c2:c7:50:4d:8e:0b:e0:c8:c4:dd:1e:8f:40: 54:96:2a:36:ec:32:10:f8:e7:d3:62:00:a1:d7:40: 53:b3:95:92:d1:38:73:a6:65:94:dc:65:cb:e1:5c: f9:00:16:8a:c9:3c:dd:ad:37:5d:73:45:c3:97:01: c9:ec:9b:28:06:8c:55:54:1c:33:7c:c2:f6:41:75: 45:ad:b2:b5:96:c9:15:57:a9:9b:cb:53:ca:b1:7a: 4c:b0:d9:3e:30:77:0a:23:af:32:5e:31:94:df:e6: 7f:ee:4d:40:89:d6:12:e4:3f:ab:1b:b2:88:37:70: 7b:e9:31:05:ec:dd:51:1d:ba:bf:d5:c2:6e:6b:c4: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:CB:10:1B:31:08:73:92:24:7F:0E:D1:ED:26:A5:9A:D0:A1:AC X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:44:55:29:d1:1d:f9:2d:b4:ce:84:f7:e7:1d:ed:15:34:03: f3:7b:34:99:e8:7d:78:d6:4c:a4:60:2c:90:d1:01:33:9c:4b: 49:e7:42:ce:3c:9f:4e:1e:f0:a3:da:3e:68:35:7d:92:84:67: ca:f5:ec:20:75:87:91:64:eb:87:00:6e:8e:90:5c:d3:b7:2b: 45:a4:b2:12:4e:f7:ee:8b:55:21:f4:88:d2:8a:7b:84:0b:65: b2:8f:6e:95:e6:97:ec:71:d4:34:2c:bb:f8:52:5b:4a:2a:a1: b6:e6:20:d9:fe:6e:65:dd:57:8b:7c:e0:1c:2e:d3:28:ea:5b: 21:ed:2a:e4:44:17:28:60:3c:60:52:db:de:ef:c8:09:38:21: 75:df:9f:9e:fa:d9:28:13:59:7c:b3:a1:3a:64:c5:87:68:e8: 27:e3:d7:8b:c0:f3:e4:87:05:46:5f:81:bc:3a:8e:fb:c3:22: e4:c3:3b:bf:26:01:5c:e0:99:19:db:80:f6:11:65:8c:a2:fb: 33:11:4d:e1:88:15:d5:2a:92:00:4a:9b:6c:cd:15:d8:ba:20: 26:24:3a:54:55:c0:bf:91:a6:a2:92:70:aa:11:ee:83:d0:1d: a7:01:04:1d:87:4c:bd:0a:76:95:c5:4a:0e:72:7f:20:95:48: a4:05:65:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUwNDIwMTkxMTA3WhcNMjUwNDI3MTkxMTA3WjAYMRYwFAYD VQQDEw02ODA1NDZjYy1iOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrnv+1n5T7ZEgOQIDU2Os03tAcph4sUvkE9p706swdur8jP8lMCuLyDjc+7H 8G+HamVfO/7j+jvIRWTk2TSq5EVjxDoWb9l9nTkj1yY4iFCO+rgt4OZg68XQf4el tAiwPJhuZGvh0jvPbaLR3MS/VN4sfaX3INoNccLHUE2OC+DIxN0ej0BUlio27DIQ +OfTYgCh10BTs5WS0ThzpmWU3GXL4Vz5ABaKyTzdrTddc0XDlwHJ7JsoBoxVVBwz fML2QXVFrbK1lskVV6mby1PKsXpMsNk+MHcKI68yXjGU3+Z/7k1AidYS5D+rG7KI N3B76TEF7N1RHbq/1cJua8Rh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIu1yxAb MQhzkiR/DtHtJqWa0KGsMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbRFUp0R35LbTOhPfnHe0VNAPzezSZ6H141kykYCyQ0QEznEtJ50LO PJ9OHvCj2j5oNX2ShGfK9ewgdYeRZOuHAG6OkFzTtytFpLISTvfui1Uh9IjSinuE C2Wyj26V5pfscdQ0LLv4UltKKqG25iDZ/m5l3VeLfOAcLtMo6lsh7SrkRBcoYDxg Utve78gJOCF135+e+tkoE1l8s6E6ZMWHaOgn49eLwPPkhwVGX4G8Oo77wyLkwzu/ JgFc4JkZ24D2EWWMovszEU3hiBXVKpIASptszRXYuiAmJDpUVcC/kaaiknCqEe6D 0B2nAQQdh0y9CnaVxUoOcn8glUikBWXL -----END CERTIFICATE-----Generated at Tue Apr 22 01:48:39 2025 by rpki-client