$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft File: J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json) Hash identifier: XKTJ8Y83NooiTbQIFRavOEHS5Xc9ckjPOXEIxMR+7Qo= Subject key identifier: DB:4B:48:91:DD:59:65:C5:D1:B8:FF:5C:E6:65:78:AF:EF:DA:66:47 Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 Certificate issuer: /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft Manifest number: 41 Signing time: Thu 03 Apr 2025 06:49:20 +0000 Manifest this update: Thu 03 Apr 2025 06:49:20 +0000 Manifest next update: Thu 10 Apr 2025 06:49:20 +0000 Files and hashes: 1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: e0547PMFIsiJ+uhpy0O0+XhuThw/b54sahqfzo2lQ50=) 2: 29084344D3CD11EF8A4E905AC4F9AE02.roa (hash: D4PagMQaqRoiI61uWZmtkYG+TkU8dPm/OsL26ameiEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 06:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B89AA Validity Not Before: Apr 3 06:49:20 2025 GMT Not After : Apr 10 06:49:20 2025 GMT Subject: CN=67ee2f70-d7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:58:7e:7d:04:57:d3:ee:af:de:19:ab:68: 32:96:12:b1:73:41:ae:26:8b:2a:c9:00:06:50:86: 46:c0:de:d3:c5:f3:22:42:46:6d:a7:75:8a:23:34: ba:11:26:0c:83:55:fb:23:eb:8f:3f:d1:8a:2d:98: a3:af:8c:2f:f7:cc:ac:cd:90:21:86:8e:31:1a:de: 07:ab:16:17:e2:70:ca:3e:6c:e2:19:d9:40:8b:4b: 1d:79:3a:36:5c:8d:17:f6:87:18:18:2b:2a:83:24: 2b:8a:c4:bc:f4:6a:08:44:08:70:1a:4c:f5:40:64: 72:32:6b:4a:e6:75:39:b5:bf:31:3a:57:62:ab:93: 56:73:bb:af:14:66:9b:2e:5f:f5:87:23:2d:3c:e4: 8f:18:ee:0e:79:ea:d7:74:a5:4b:a3:e2:60:cb:fd: 7e:d6:8f:b1:79:3d:4d:49:d0:04:dd:fc:87:73:3b: aa:91:a4:bc:38:71:ce:af:93:0b:c1:26:19:83:cf: 3c:01:8f:06:61:d7:94:cd:f2:b3:6d:ea:18:5b:c5: db:d1:1d:e5:a1:c2:49:ce:6b:44:de:c7:1d:cc:e2: 23:bd:5e:76:25:ed:d6:b5:af:34:13:76:ab:f9:3a: ef:59:1a:f2:e4:f8:d8:6c:67:d9:2f:e4:c8:2d:c3: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4B:48:91:DD:59:65:C5:D1:B8:FF:5C:E6:65:78:AF:EF:DA:66:47 X509v3 Authority Key Identifier: keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fa:14:97:7f:f4:86:f2:1e:20:c7:64:08:36:9b:d6:34:70: 9b:c9:4e:43:62:07:7b:18:38:ca:1c:d2:2e:14:a5:27:17:1a: 7d:93:2e:08:af:94:7b:b9:2e:48:6f:cf:b6:09:15:34:d5:6f: 44:5c:b3:8f:d2:ee:64:b7:c1:fd:56:80:dd:d5:0c:5e:7a:c5: fd:6e:58:56:a9:05:7a:9d:6c:b1:5f:de:74:b7:ae:82:da:c4: 6c:8a:fa:07:a7:5b:c5:74:6e:b6:d5:7a:1a:59:c3:a5:46:56: b0:0f:a0:3a:f2:fb:02:ba:52:29:2f:98:bb:47:3a:30:5d:02: 6d:fe:90:3a:09:ce:ca:bf:1f:ca:b0:5d:b7:f7:d3:e7:3c:35: 9d:9c:8b:3b:d2:79:43:45:30:b8:e6:ad:4b:df:8e:33:90:3d: 5f:1c:39:1d:df:0e:81:cd:63:0b:c1:20:7d:86:e1:d7:a0:a3: 7a:76:36:d4:3f:13:f2:f2:b6:fd:30:2a:75:9b:8e:96:9a:89: 33:66:22:af:80:55:01:d0:d7:b8:0b:bc:72:6c:10:c4:d7:46: f3:9f:be:e1:9d:62:6c:5f:6f:2d:39:0c:73:3a:87:7d:69:ab: 2b:d5:a0:a1:a5:62:b8:98:b2:9e:48:e1:d9:bb:bd:0d:99:6c: cb:11:cf:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODlBQTExMC8GA1UEBRMoMjc3RjEyMjQ0QTUwQkM2NTRFRTU2M0ZFNzM5RkU0RUI3 MTk5NjZCNjAeFw0yNTA0MDMwNjQ5MjBaFw0yNTA0MTAwNjQ5MjBaMBgxFjAUBgNV BAMTDTY3ZWUyZjcwLWQ3ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdT1h+fQRX0+6v3hmraDKWErFzQa4miyrJAAZQhkbA3tPF8yJCRm2ndYojNLoR JgyDVfsj648/0YotmKOvjC/3zKzNkCGGjjEa3gerFhficMo+bOIZ2UCLSx15OjZc jRf2hxgYKyqDJCuKxLz0aghECHAaTPVAZHIya0rmdTm1vzE6V2Krk1Zzu68UZpsu X/WHIy085I8Y7g556td0pUuj4mDL/X7Wj7F5PU1J0ATd/IdzO6qRpLw4cc6vkwvB JhmDzzwBjwZh15TN8rNt6hhbxdvRHeWhwknOa0Texx3M4iO9XnYl7da1rzQTdqv5 Ou9ZGvLk+NhsZ9kv5Mgtw9iXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU20tIkd1Z ZcXRuP9c5mV4r+/aZkcwHwYDVR0jBBgwFoAUJ38SJEpQvGVO5WP+c5/k63GZZrYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4OUFBLzg1RDBGMzQ2QkM2 MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdWTzVXUC1jNV9rNjNHWlpy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjM4U0pFcFF2R1ZPNVdQLWM1X2s2M0daWnJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 OUFBLzg1RDBGMzQ2QkM2MjExRUY5QTc4Mzc1MUM0RjlBRTAyL0ozOFNKRXBRdkdW TzVXUC1jNV9rNjNHWlpyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA36FJd/9IbyHiDHZAg2m9Y0cJvJTkNiB3sYOMoc0i4UpScXGn2TLgiv lHu5Lkhvz7YJFTTVb0Rcs4/S7mS3wf1WgN3VDF56xf1uWFapBXqdbLFf3nS3roLa xGyK+genW8V0brbVehpZw6VGVrAPoDry+wK6UikvmLtHOjBdAm3+kDoJzsq/H8qw Xbf30+c8NZ2cizvSeUNFMLjmrUvfjjOQPV8cOR3fDoHNYwvBIH2G4dego3p2NtQ/ E/Lytv0wKnWbjpaaiTNmIq+AVQHQ17gLvHJsEMTXRvOfvuGdYmxfby05DHM6h31p qyvVoKGlYriYsp5I4dm7vQ2ZbMsRz70= -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:06 2025 by rpki-client