$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft File: jnhDSe8t33hXX9VMx47YxFyXbL8.mft (raw, json) Hash identifier: mapBCLm9N9STwzFBtW7NlCNOi7f/49kHYPfT32ECX1s= Subject key identifier: 21:93:A4:50:46:A9:A1:57:15:FC:7E:EC:CC:73:D7:DD:6E:00:18:9F Authority key identifier: 8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF Certificate issuer: /CN=A91C40D6/serialNumber=8E784349EF2DDF78575FD54CC78ED8C45C976CBF Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft Manifest number: 08FE Signing time: Wed 02 Apr 2025 20:24:31 +0000 Manifest this update: Wed 02 Apr 2025 20:24:31 +0000 Manifest next update: Wed 09 Apr 2025 20:24:31 +0000 Files and hashes: 1: jnhDSe8t33hXX9VMx47YxFyXbL8.crl (hash: Bm7o/Xc5lrno97Bb2/X+4emQMX8SXxLLmDJWYDxIEkg=) 2: A84D830AA54511EAA942C683C4F9AE02.roa (hash: LRUqK0HbwhlophByZnm497LSzITbbBMeAuaK57/ofL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6 Validity Not Before: Apr 2 20:24:31 2025 GMT Not After : Apr 9 20:24:31 2025 GMT Subject: CN=67ed9cff-fda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:4f:d4:f8:21:60:f4:85:f7:36:c1:b1:9f: 6a:5b:75:ae:18:47:21:83:1f:10:0e:73:76:f6:65: 64:7a:d9:fd:52:3f:ce:80:fc:77:2f:34:34:4f:0e: dd:9d:e2:e0:c4:86:a2:fc:23:50:96:a0:03:00:19: 4f:c4:4b:2b:0c:3b:56:cd:55:fa:6f:34:e6:3c:54: b8:00:67:15:60:0d:23:85:16:5a:86:76:9a:97:43: 9d:ce:c9:5f:7a:b0:d6:b6:24:6f:3d:0d:5e:c5:4c: f7:9e:c0:19:f5:cf:fc:8a:57:bf:4f:a3:84:be:4d: a3:30:a7:a7:a2:48:44:ef:3f:2c:b4:33:4b:0c:5a: 37:6e:11:fe:57:e2:05:0d:58:1d:e2:21:01:44:1f: 9a:02:6d:e4:11:40:56:4c:3d:f9:2f:0b:90:c4:e4: fd:bb:07:85:7b:0b:d4:1f:f3:78:a8:b3:fe:f9:b4: 01:ae:89:38:1d:ba:8d:76:29:06:97:e2:b0:01:c5: d2:44:61:4e:30:a9:10:a0:f3:35:06:e0:39:87:5f: 63:ec:e6:79:71:d5:4a:44:a8:51:63:55:4a:31:09: a6:52:26:f3:68:17:5d:8f:f0:61:54:16:32:f4:60: 76:01:b9:ec:3f:d9:99:db:18:87:27:0d:d2:92:41: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:A4:50:46:A9:A1:57:15:FC:7E:EC:CC:73:D7:DD:6E:00:18:9F X509v3 Authority Key Identifier: keyid:8E:78:43:49:EF:2D:DF:78:57:5F:D5:4C:C7:8E:D8:C4:5C:97:6C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnhDSe8t33hXX9VMx47YxFyXbL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/CA8E7F7EA54411EA94DA3683C4F9AE02/jnhDSe8t33hXX9VMx47YxFyXbL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:51:6a:22:db:a3:97:6a:bf:1a:5e:9a:dc:38:3a:b8:e1:67: 3a:c7:a2:c5:46:b8:a5:d8:82:cf:b5:73:97:c3:e3:41:15:36: f5:7a:42:ff:1b:08:ff:9c:56:09:9f:54:03:99:89:24:7c:48: 66:bc:66:86:db:70:c3:b2:3a:20:12:58:d3:ff:84:be:fb:c9: b2:10:e1:9b:14:e2:df:59:a6:ac:a1:46:0f:2b:bd:1d:81:51: c2:f1:7e:99:62:13:a1:82:03:a1:30:11:58:ca:42:77:1d:eb: c7:61:1a:7d:c5:71:f1:7e:19:2f:cf:12:42:89:62:56:04:62: 9e:b9:0d:8c:2a:b1:f8:74:17:98:85:20:47:f1:64:f8:32:1d: a8:12:38:da:81:f7:39:97:71:f7:5d:c9:f8:3e:35:a8:6f:c3: 25:e6:25:3a:ce:02:25:42:e9:04:4a:57:aa:97:5b:05:aa:1d: ab:43:7e:1b:48:6b:54:b5:e2:ae:79:43:96:27:c0:ee:06:16: 42:ff:29:b4:ba:66:68:b1:5c:b0:6e:dd:be:ab:28:98:92:c3: d6:fc:84:b5:33:66:1e:45:46:13:2e:6d:ba:ac:bb:b7:82:6a: f1:42:5e:a1:f1:c7:9e:5a:0d:e6:dc:4c:14:da:87:0c:ae:ba: ae:39:a1:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDhFNzg0MzQ5RUYyRERGNzg1NzVGRDU0Q0M3OEVEOEM0 NUM5NzZDQkYwHhcNMjUwNDAyMjAyNDMxWhcNMjUwNDA5MjAyNDMxWjAYMRYwFAYD VQQDEw02N2VkOWNmZi1mZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6BP1PghYPSF9zbBsZ9qW3WuGEchgx8QDnN29mVketn9Uj/OgPx3LzQ0Tw7d neLgxIai/CNQlqADABlPxEsrDDtWzVX6bzTmPFS4AGcVYA0jhRZahnaal0Odzslf erDWtiRvPQ1exUz3nsAZ9c/8ile/T6OEvk2jMKenokhE7z8stDNLDFo3bhH+V+IF DVgd4iEBRB+aAm3kEUBWTD35LwuQxOT9uweFewvUH/N4qLP++bQBrok4HbqNdikG l+KwAcXSRGFOMKkQoPM1BuA5h19j7OZ5cdVKRKhRY1VKMQmmUibzaBddj/BhVBYy 9GB2AbnsP9mZ2xiHJw3SkkHp5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGTpFBG qaFXFfx+7Mxz191uABifMB8GA1UdIwQYMBaAFI54Q0nvLd94V1/VTMeO2MRcl2y/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi9DQThFN0Y3RUE1 NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMzaFhYOVZNeDQ3WXhGeVhi TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puaERTZTh0MzNoWFg5Vk14NDdZeEZ5WGJMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi9DQThFN0Y3RUE1NDQxMUVBOTREQTM2ODNDNEY5QUUwMi9qbmhEU2U4dDMz aFhYOVZNeDQ3WXhGeVhiTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABUWoi26OXar8aXprcODq44Wc6x6LFRril2ILPtXOXw+NBFTb1ekL/ Gwj/nFYJn1QDmYkkfEhmvGaG23DDsjogEljT/4S++8myEOGbFOLfWaasoUYPK70d gVHC8X6ZYhOhggOhMBFYykJ3HevHYRp9xXHxfhkvzxJCiWJWBGKeuQ2MKrH4dBeY hSBH8WT4Mh2oEjjagfc5l3H3Xcn4PjWob8Ml5iU6zgIlQukESleql1sFqh2rQ34b SGtUteKueUOWJ8DuBhZC/ym0umZosVywbt2+qyiYksPW/IS1M2YeRUYTLm26rLu3 gmrxQl6h8ceeWg3m3EwU2ocMrrquOaEP -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:27 2025 by rpki-client