$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json) Hash identifier: 7SOYLiSl2lkQVhSYd+IJJJFPZiCIOzcbzj/SPp7jxa0= Subject key identifier: 9C:15:0E:E6:F6:34:C6:5F:A3:B0:35:51:BC:D5:A6:DC:3D:24:A6:E1 Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft Manifest number: 0118 Signing time: Fri 11 Apr 2025 04:09:58 +0000 Manifest this update: Fri 11 Apr 2025 04:09:57 +0000 Manifest next update: Fri 18 Apr 2025 04:09:57 +0000 Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: 4OxxA5zdiIldzCCPIPb23KDbKNM+lFURLALfuzLRTBA=) 2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: 0uSx3t0sR7mDLL0tE9/KLBX+RXK70BKf32W+7mKLwxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Validity Not Before: Apr 11 04:09:57 2025 GMT Not After : Apr 18 04:09:57 2025 GMT Subject: CN=67f89616-6630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:64:56:d6:65:63:c8:96:89:78:30:20:7f: 07:40:82:5d:10:63:e3:11:11:34:b7:aa:3e:a8:78: 52:bc:50:52:5b:3f:33:0d:55:06:7a:a0:d3:88:7d: e6:ff:84:e7:5d:1a:1a:26:80:5e:77:12:06:ac:a8: 91:54:91:10:b7:fc:c3:61:cf:63:be:36:01:45:2f: 80:d9:e2:b3:53:05:93:53:b5:1e:56:00:17:57:87: 91:39:1a:fb:da:f8:5a:37:ef:97:df:62:5e:ff:58: d6:2b:b6:74:a0:f1:ef:64:7d:9c:13:40:46:e7:d0: f7:73:b2:02:57:5f:b9:fe:16:3e:7f:f6:0f:4e:8f: 80:73:93:ba:24:5b:2c:63:64:ce:17:0f:ef:7c:46: 7a:0c:d4:f2:14:8f:d0:92:a2:a1:ad:90:15:75:81: ef:aa:67:2c:7d:fc:46:a0:0a:eb:ae:f7:b7:20:5d: 74:48:32:96:3e:61:16:5e:21:db:ac:60:3a:07:08: ff:6e:2d:3c:a0:d8:d8:e3:b6:de:d0:5b:4b:9c:0e: 38:1c:13:61:28:3c:c3:aa:9e:d3:9c:7d:b1:ef:df: 3c:a3:29:5f:84:e7:07:dd:40:74:83:c9:c3:0b:af: 44:d1:9a:c4:27:a3:ed:d4:f9:d3:17:d9:a4:6d:de: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:15:0E:E6:F6:34:C6:5F:A3:B0:35:51:BC:D5:A6:DC:3D:24:A6:E1 X509v3 Authority Key Identifier: keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:95:88:cb:fb:0b:d9:87:21:ed:5f:94:ce:34:12:9c:ab:3f: 2d:72:69:92:06:f7:69:d1:34:44:6c:d9:19:a2:52:43:bd:90: 8c:8d:ce:f4:2f:9f:2a:40:a3:f4:a2:fb:b1:b2:1f:8c:53:5b: 1d:d5:2a:4c:30:87:2e:e3:8c:61:6f:e0:d1:6d:a8:eb:45:11: 55:12:5f:8f:ea:c4:21:10:35:4d:60:a7:84:7b:19:ab:8b:97: 7b:1d:7d:e2:c9:dc:1e:93:56:d4:99:86:1f:f7:fa:22:8b:fb: 15:cd:c0:0a:df:9e:07:b1:ff:9d:60:4f:5d:3a:95:e3:af:eb: 49:9d:d4:4b:bd:39:63:8e:d3:c1:6c:4b:7e:9a:a1:82:a2:c9: 11:01:26:b0:f9:2c:18:e2:18:37:0f:46:d9:fa:95:2b:0f:45: 5f:cd:cd:cb:40:8f:f7:05:4f:2f:21:3e:d4:73:74:12:d7:72: 6f:34:23:27:12:01:fd:14:8c:a1:91:bf:52:11:0a:e0:f1:1b: 78:24:24:d9:30:8f:0e:dd:91:ca:fc:00:8a:5b:bb:d7:b2:e6: bd:33:c8:95:93:33:6e:79:38:39:5c:b8:3e:18:ea:ea:11:ce: 2d:fd:c7:e1:02:39:76:b4:51:46:e0:97:56:d9:ad:df:a0:16: 1f:16:12:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNDgxMTAvBgNVBAUTKDI2MTU5NkI1NTZFOTJDMTJEMkVCQzhERDhCMjVDRkI4 NzU4RTA3OEMwHhcNMjUwNDExMDQwOTU3WhcNMjUwNDE4MDQwOTU3WjAYMRYwFAYD VQQDEw02N2Y4OTYxNi02NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41BkVtZlY8iWiXgwIH8HQIJdEGPjERE0t6o+qHhSvFBSWz8zDVUGeqDTiH3m /4TnXRoaJoBedxIGrKiRVJEQt/zDYc9jvjYBRS+A2eKzUwWTU7UeVgAXV4eRORr7 2vhaN++X32Je/1jWK7Z0oPHvZH2cE0BG59D3c7ICV1+5/hY+f/YPTo+Ac5O6JFss Y2TOFw/vfEZ6DNTyFI/QkqKhrZAVdYHvqmcsffxGoArrrve3IF10SDKWPmEWXiHb rGA6Bwj/bi08oNjY47be0FtLnA44HBNhKDzDqp7TnH2x7988oylfhOcH3UB0g8nD C69E0ZrEJ6Pt1PnTF9mkbd6/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwVDub2 NMZfo7A1UbzVptw9JKbhMB8GA1UdIwQYMBaAFCYVlrVW6SwS0uvI3Yslz7h1jgeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0OC9EQkJEODFGRTc1 M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExCTFM2OGpkaXlYUHVIV09C NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poV1d0VmJwTEJMUzY4amRpeVhQdUhXT0I0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0OC9EQkJEODFGRTc1M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExC TFM2OGpkaXlYUHVIV09CNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAolYjL+wvZhyHtX5TONBKcqz8tcmmSBvdp0TREbNkZolJDvZCMjc70 L58qQKP0ovuxsh+MU1sd1SpMMIcu44xhb+DRbajrRRFVEl+P6sQhEDVNYKeEexmr i5d7HX3iydwek1bUmYYf9/oii/sVzcAK354Hsf+dYE9dOpXjr+tJndRLvTljjtPB bEt+mqGCoskRASaw+SwY4hg3D0bZ+pUrD0Vfzc3LQI/3BU8vIT7Uc3QS13JvNCMn EgH9FIyhkb9SEQrg8Rt4JCTZMI8O3ZHK/ACKW7vXsua9M8iVkzNueTg5XLg+GOrq Ec4t/cfhAjl2tFFG4JdW2a3foBYfFhK4 -----END CERTIFICATE-----Generated at Sun Apr 13 01:43:40 2025 by rpki-client