$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: wbSprC8YH34d4CtGu7KABn4gvFGozNPLYaRo4yNUT64= Subject key identifier: 6D:52:BD:5D:A1:B2:9D:A2:9B:2C:FB:06:20:F9:76:2F:C0:31:99:CB Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 049D Signing time: Sat 05 Apr 2025 00:03:44 +0000 Manifest this update: Sat 05 Apr 2025 00:03:43 +0000 Manifest next update: Sat 12 Apr 2025 00:03:43 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: dr2Mp0/4raG89B7I9ktbX9UyeEEmehiz2rixhl9CQNM=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E Validity Not Before: Apr 5 00:03:43 2025 GMT Not After : Apr 12 00:03:43 2025 GMT Subject: CN=67f0735f-8dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:ff:83:aa:5a:05:64:dc:fa:dc:26:8a:71: 30:08:d0:70:15:81:ff:21:22:c1:5a:3c:4b:87:e3: 97:83:d3:3a:58:8d:ac:8b:cc:63:47:e0:e0:b9:04: ed:cc:75:50:65:1c:97:74:5a:3e:47:47:6d:53:67: 51:c8:85:52:cf:bc:c2:d6:65:ad:17:3f:7f:67:dc: 7a:ef:30:81:27:ae:05:53:fa:8c:9c:f0:c0:bd:62: 1c:2f:15:ae:b9:6d:9a:15:75:32:2a:49:0c:f3:c7: 96:07:89:07:e2:98:d7:68:ad:b8:0d:78:5a:2c:b2: 6f:e8:88:d8:2f:af:c1:2b:bd:6f:83:3e:66:09:92: bc:9c:97:fe:2e:b6:1d:e7:76:a1:34:df:11:81:5d: 1d:8d:e9:0e:30:5b:d4:9f:a5:01:f1:df:27:7b:b7: fd:04:84:ca:87:07:41:3a:69:8e:94:d6:f6:2a:00: 33:bc:e1:4d:3f:9d:63:27:c2:9c:8d:4a:53:b3:08: 5b:e3:48:0b:61:72:09:fd:c2:9a:4b:ee:48:9f:51: 79:01:a1:80:b5:b0:53:5b:fa:eb:47:73:ee:10:1e: ee:96:b8:96:71:d6:c4:5c:ec:ee:c8:33:77:12:9a: fd:9c:b2:f9:f3:9f:92:cf:bc:11:af:30:04:0a:57: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:BD:5D:A1:B2:9D:A2:9B:2C:FB:06:20:F9:76:2F:C0:31:99:CB X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fb:a5:5a:2a:be:0a:19:e5:01:36:21:a0:1b:38:af:96:6c: 68:a6:1b:9e:92:c7:a8:92:6e:0a:fb:e4:bd:a5:67:bf:cd:53: bf:af:ee:e1:51:18:45:6e:89:4e:68:54:d6:44:f0:7b:3b:32: c1:66:e7:c2:8a:e5:06:70:6e:4b:26:ed:08:13:19:15:8c:9a: fb:7e:3f:5c:36:f4:f9:ca:99:fe:ce:0c:88:1d:27:7e:ff:9d: da:9c:cd:30:ae:31:0a:aa:a9:e4:aa:96:4a:28:70:68:46:fe: b9:17:18:10:7e:15:d3:7a:a4:53:ae:09:f2:92:4b:1a:ca:f1: 2c:9e:50:6c:00:f2:34:f5:b1:c4:6b:79:05:2f:55:af:5a:c1: 64:a6:64:13:0e:d5:49:1e:6d:39:45:99:15:81:b1:e8:6b:1c: 35:d7:85:ae:8b:08:ea:30:e0:9f:ff:a2:c0:e5:39:fd:32:14: 7c:50:35:0c:6d:8c:48:75:d2:5a:0c:78:16:c6:9b:3b:81:fc: c5:c1:61:14:1b:2d:34:cd:0f:1a:c5:fe:af:da:6c:30:11:5e: 6e:a0:69:48:12:ee:36:4e:d9:8d:68:74:2e:f1:cf:f6:68:f0: 91:d7:51:48:46:8c:73:b3:bd:a3:d2:76:16:89:e7:9c:76:c6: e2:68:2d:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjUwNDA1MDAwMzQzWhcNMjUwNDEyMDAwMzQzWjAYMRYwFAYD VQQDEw02N2YwNzM1Zi04ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI3/g6paBWTc+twminEwCNBwFYH/ISLBWjxLh+OXg9M6WI2si8xjR+DguQTt zHVQZRyXdFo+R0dtU2dRyIVSz7zC1mWtFz9/Z9x67zCBJ64FU/qMnPDAvWIcLxWu uW2aFXUyKkkM88eWB4kH4pjXaK24DXhaLLJv6IjYL6/BK71vgz5mCZK8nJf+LrYd 53ahNN8RgV0djekOMFvUn6UB8d8ne7f9BITKhwdBOmmOlNb2KgAzvOFNP51jJ8Kc jUpTswhb40gLYXIJ/cKaS+5In1F5AaGAtbBTW/rrR3PuEB7ulriWcdbEXOzuyDN3 Epr9nLL585+Sz7wRrzAECleeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1SvV2h sp2imyz7BiD5di/AMZnLMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS+6VaKr4KGeUBNiGgGzivlmxophuekseokm4K++S9pWe/zVO/r+7h URhFbolOaFTWRPB7OzLBZufCiuUGcG5LJu0IExkVjJr7fj9cNvT5ypn+zgyIHSd+ /53anM0wrjEKqqnkqpZKKHBoRv65FxgQfhXTeqRTrgnykksayvEsnlBsAPI09bHE a3kFL1WvWsFkpmQTDtVJHm05RZkVgbHoaxw114WuiwjqMOCf/6LA5Tn9MhR8UDUM bYxIddJaDHgWxps7gfzFwWEUGy00zQ8axf6v2mwwEV5uoGlIEu42TtmNaHQu8c/2 aPCR11FIRoxzs72j0nYWieecdsbiaC0K -----END CERTIFICATE-----Generated at Sun Apr 6 16:18:05 2025 by rpki-client