$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft File: jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft (raw, json) Hash identifier: M0CQgTbgWRGDGIj3HxdMmxiNkm7qU5l/mRqyzswcPcw= Subject key identifier: B0:FC:96:37:D1:9F:16:67:CE:C1:F1:4C:8C:4A:7B:12:95:3D:F7:D1 Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft Manifest number: 03CE Signing time: Thu 03 Apr 2025 00:36:16 +0000 Manifest this update: Thu 03 Apr 2025 00:36:15 +0000 Manifest next update: Thu 10 Apr 2025 00:36:15 +0000 Files and hashes: 1: jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl (hash: DYZUUVFqASRcGFiCevMgsjvhOemp8yZVl+6Jz6gt7P4=) 2: D9470BFE7DC811ECB84BD174C4F9AE02.roa (hash: wmK7x3Sk5UopVQwNMRtsiduu1nPhJgBS/7n4gUWasIc=) 3: 84F58DCA7DCB11EC99806E25C4F9AE02.roa (hash: Gd7JCr1281wWWtBPVf/kwPfiC4gERpM54Kx0s/D+laI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265 Validity Not Before: Apr 3 00:36:15 2025 GMT Not After : Apr 10 00:36:15 2025 GMT Subject: CN=67edd800-0c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:d6:da:83:4d:64:1f:70:33:0e:9e:3a:db: 5c:65:2c:87:ad:54:4c:e6:7e:43:a5:6b:14:77:3a: 03:06:5e:09:9b:89:e1:78:dd:c7:9b:f2:6c:b7:31: 8f:bc:4c:08:20:7d:f2:70:e1:c1:41:e1:09:33:dc: 5a:36:97:35:21:76:f6:7d:e7:99:83:51:03:8c:00: 41:04:0c:cd:2d:ee:20:5a:a4:48:3d:66:83:67:39: 94:7c:df:66:b1:5e:9a:53:c6:73:83:9a:9e:a5:08: 7f:6a:23:ba:f7:a2:6a:b0:d2:43:4c:7f:25:c9:f2: c6:92:8e:68:ed:f3:5d:50:ca:0a:5d:c5:22:7e:c2: 39:b0:dd:00:5b:99:25:57:73:51:80:5f:03:65:bc: 4f:f8:ba:2c:79:68:76:00:2b:9f:fe:12:c0:07:d8: 7c:fa:8e:39:79:89:75:b5:ea:f2:b5:5f:b5:c2:0d: ae:56:ab:16:08:8d:a2:77:05:ad:63:f1:74:55:90: 6b:ae:63:5c:6b:bd:69:91:0c:85:9c:7d:03:01:44: a7:db:3d:a0:e9:aa:6f:39:e4:2d:cc:65:e2:c9:45: 7e:bd:52:90:0f:5e:37:c0:d6:5f:6b:34:31:46:4a: 72:b9:1a:08:d4:82:c2:ae:7d:5a:98:82:9c:1a:02: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FC:96:37:D1:9F:16:67:CE:C1:F1:4C:8C:4A:7B:12:95:3D:F7:D1 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:bb:51:aa:dc:9f:47:e2:22:21:4a:cc:94:9b:73:64:a4:cd: c4:1a:9e:1d:35:3a:9e:64:23:90:f4:9f:b1:22:9c:c8:40:d7: 16:e6:85:a1:fd:86:fe:84:04:d3:9b:13:8e:4b:a5:41:85:e6: 4d:ab:65:5b:95:5b:d4:cc:fb:17:47:0b:9d:35:c2:95:ab:2a: b4:d0:a6:cb:4f:5d:2d:1e:81:3c:9e:ee:44:9c:d1:8e:d5:5d: 7a:c6:ad:23:40:42:71:ee:51:27:63:83:b9:4c:a6:3d:46:1d: 17:22:5c:4a:d0:ea:42:f2:33:bf:2e:bf:6b:89:92:f7:ee:71: 50:fc:ab:28:c6:44:02:2f:94:e3:e1:d6:16:75:0e:1a:1f:29: f4:33:9a:8b:e2:8b:66:13:c2:56:1c:b7:8d:e4:4d:d4:a8:37: 51:08:d5:11:48:c1:f0:67:6c:15:e6:26:ef:23:a6:a1:11:9f: 5b:b2:ed:2d:70:64:fc:3d:3e:93:57:df:2a:51:15:2d:5f:30: 88:cf:07:6a:5e:40:38:d4:25:a6:24:76:91:1f:2a:e6:cd:f6: e3:75:5b:3d:6c:fa:30:d8:02:9f:8d:7e:40:12:67:97:db:66: 19:fa:b7:20:4d:9e:94:cb:6a:bf:1e:d1:3e:af:e2:8c:1e:91: b6:f2:01:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjUwNDAzMDAzNjE1WhcNMjUwNDEwMDAzNjE1WjAYMRYwFAYD VQQDEw02N2VkZDgwMC0wYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9/W2oNNZB9wMw6eOttcZSyHrVRM5n5DpWsUdzoDBl4Jm4nheN3Hm/JstzGP vEwIIH3ycOHBQeEJM9xaNpc1IXb2feeZg1EDjABBBAzNLe4gWqRIPWaDZzmUfN9m sV6aU8Zzg5qepQh/aiO696JqsNJDTH8lyfLGko5o7fNdUMoKXcUifsI5sN0AW5kl V3NRgF8DZbxP+LoseWh2ACuf/hLAB9h8+o45eYl1terytV+1wg2uVqsWCI2idwWt Y/F0VZBrrmNca71pkQyFnH0DAUSn2z2g6apvOeQtzGXiyUV+vVKQD143wNZfazQx RkpyuRoI1ILCrn1amIKcGgIw3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD8ljfR nxZnzsHxTIxKexKVPffRMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI2NS80Q0Q1RkUwRTdEQzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUda d25KOGhyU1pEenY2NkNBV0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnu1Gq3J9H4iIhSsyUm3NkpM3EGp4dNTqeZCOQ9J+xIpzIQNcW5oWh /Yb+hATTmxOOS6VBheZNq2VblVvUzPsXRwudNcKVqyq00KbLT10tHoE8nu5EnNGO 1V16xq0jQEJx7lEnY4O5TKY9Rh0XIlxK0OpC8jO/Lr9riZL37nFQ/KsoxkQCL5Tj 4dYWdQ4aHyn0M5qL4otmE8JWHLeN5E3UqDdRCNURSMHwZ2wV5ibvI6ahEZ9bsu0t cGT8PT6TV98qURUtXzCIzwdqXkA41CWmJHaRHyrmzfbjdVs9bPow2AKfjX5AEmeX 22YZ+rcgTZ6Uy2q/HtE+r+KMHpG28gEe -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:30 2025 by rpki-client