$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: xpl2ifvvAhG6XcnkQTZ+k6ZFrXIOiqML2idsbMe9uhU= Subject key identifier: AF:9F:AE:EA:41:BD:4A:44:49:FE:8E:53:EF:86:96:B0:86:F8:EA:1E Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 0165 Signing time: Mon 07 Apr 2025 02:55:06 +0000 Manifest this update: Mon 07 Apr 2025 02:55:06 +0000 Manifest next update: Mon 14 Apr 2025 02:55:06 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: 81gOKTVithyby4P3xKJCDHlkhnLJY0oenpjIA694g9c=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: IuA38A6PtfZ45s5efy6Fg7R/ojs8GeETi8rs0c/o4+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1 Validity Not Before: Apr 7 02:55:06 2025 GMT Not After : Apr 14 02:55:06 2025 GMT Subject: CN=67f33e8a-0d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:d7:3a:50:c1:24:9f:79:95:23:52:07:05: e4:e9:3e:b5:89:1d:f6:3a:1f:17:3c:e4:27:75:68: f0:7d:3b:7b:cb:af:38:e6:1d:19:91:e4:65:dd:92: 74:2d:db:33:0c:ef:97:50:bb:a1:ea:b0:83:0a:93: 61:16:5a:6b:7c:b6:b4:d1:ef:f5:7a:20:c9:fd:fc: 8b:a8:47:75:e0:8d:12:27:72:13:64:0c:39:43:35: 62:c4:50:88:76:ba:51:d1:68:87:84:7a:b3:f0:d1: dc:af:ce:0d:4f:4c:41:70:53:ca:8d:bb:ab:f5:19: 95:6d:e5:ce:24:27:57:95:38:1f:c7:79:ca:5d:9b: a5:5a:13:2d:55:41:4c:09:80:a4:2e:e5:eb:d2:76: 87:98:8d:6e:3f:ac:d9:11:49:96:90:c6:dd:c6:34: 0a:05:0f:e6:08:9b:d6:af:f5:4f:d3:e9:96:22:9d: f3:7e:8a:f4:27:6a:c9:42:89:dd:38:d6:0d:16:93: 98:54:39:93:31:db:96:66:02:ba:33:75:5a:15:39: 78:01:6c:aa:eb:50:fe:45:ee:ab:32:ce:42:31:c2: a3:1e:80:8f:cb:76:cc:90:fc:fb:89:e3:ab:1f:4e: d9:07:ae:a6:66:1b:a5:10:2b:7a:f8:2a:9d:a9:00: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9F:AE:EA:41:BD:4A:44:49:FE:8E:53:EF:86:96:B0:86:F8:EA:1E X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:95:3d:13:2d:a7:7e:e4:41:1f:c5:83:89:34:26:ed:ef:ef: 1e:f9:76:eb:28:fd:34:36:e4:6f:a1:f9:99:b2:c1:f6:d8:c1: 1a:65:e7:20:67:76:c2:46:80:01:a0:7f:ee:a7:58:58:85:7c: 88:d1:b5:21:7e:ea:da:4f:67:42:cb:c5:af:18:2b:3b:2d:17: c9:56:fd:d7:4f:98:54:a0:e5:79:7d:a8:ed:f4:23:58:59:66: b8:c6:a7:fb:47:82:5c:3e:3f:c7:11:72:83:ed:74:2f:fc:c9: 0f:6a:9e:8f:c2:e7:b0:16:e3:cf:13:4b:71:fa:85:66:b3:f7: e2:c5:c2:d4:43:15:51:13:a1:c4:7c:63:ad:63:16:ba:6a:d8: 0b:cb:8a:9d:1c:71:3b:d7:fe:eb:29:1e:d8:f8:cf:ed:51:90: 3e:64:10:22:f4:39:c1:0a:21:79:ac:69:ad:f4:a9:a9:23:36: 76:0d:c3:c0:c8:17:c1:a5:ec:6c:91:58:27:b4:48:36:1d:12: de:0c:15:75:75:54:4b:a0:63:f3:05:49:16:4d:1c:10:e3:75: 16:c8:4d:5a:d6:3f:7d:b1:97:8b:c1:48:00:45:fb:0c:fc:b1: c1:c8:61:77:a5:c6:8b:1f:29:8f:29:72:48:fd:80:d8:93:cb: 1f:31:4b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUwNDA3MDI1NTA2WhcNMjUwNDE0MDI1NTA2WjAYMRYwFAYD VQQDEw02N2YzM2U4YS0wZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/LXOlDBJJ95lSNSBwXk6T61iR32Oh8XPOQndWjwfTt7y6845h0ZkeRl3ZJ0 LdszDO+XULuh6rCDCpNhFlprfLa00e/1eiDJ/fyLqEd14I0SJ3ITZAw5QzVixFCI drpR0WiHhHqz8NHcr84NT0xBcFPKjbur9RmVbeXOJCdXlTgfx3nKXZulWhMtVUFM CYCkLuXr0naHmI1uP6zZEUmWkMbdxjQKBQ/mCJvWr/VP0+mWIp3zfor0J2rJQond ONYNFpOYVDmTMduWZgK6M3VaFTl4AWyq61D+Re6rMs5CMcKjHoCPy3bMkPz7ieOr H07ZB66mZhulECt6+CqdqQCFbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+frupB vUpESf6OU++GlrCG+OoeMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5lT0TLad+5EEfxYOJNCbt7+8e+XbrKP00NuRvofmZssH22MEaZecg Z3bCRoABoH/up1hYhXyI0bUhfuraT2dCy8WvGCs7LRfJVv3XT5hUoOV5fajt9CNY WWa4xqf7R4JcPj/HEXKD7XQv/MkPap6PwuewFuPPE0tx+oVms/fixcLUQxVRE6HE fGOtYxa6atgLy4qdHHE71/7rKR7Y+M/tUZA+ZBAi9DnBCiF5rGmt9KmpIzZ2DcPA yBfBpexskVgntEg2HRLeDBV1dVRLoGPzBUkWTRwQ43UWyE1a1j99sZeLwUgARfsM /LHByGF3pcaLHymPKXJI/YDYk8sfMUtY -----END CERTIFICATE-----Generated at Tue Apr 8 21:29:24 2025 by rpki-client