$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft File: JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft (raw, json) Hash identifier: LrdX1nFdEwzfoQ43e7xafVk52QR+/DI8/d05ejLmt1g= Subject key identifier: B5:05:80:21:34:06:CC:A5:98:4D:65:BD:58:2F:AF:07:C0:C0:94:97 Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 Certificate issuer: /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft Manifest number: C3 Signing time: Sat 29 Mar 2025 05:13:04 +0000 Manifest this update: Sat 29 Mar 2025 05:13:03 +0000 Manifest next update: Sat 05 Apr 2025 05:13:03 +0000 Files and hashes: 1: JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl (hash: g+nYw2Tsbcf9+D6Y105a7O0SGTX3/ZgGyEVX1u9nPU8=) 2: DC23F5180E1611EF91DF311EC4F9AE02.roa (hash: PDtdUX6JrHo4d5GjgXXthgA5sLxtJKv9u0i8nv/vqsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB86D Validity Not Before: Mar 29 05:13:03 2025 GMT Not After : Apr 5 05:13:03 2025 GMT Subject: CN=67e78160-be4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:00:50:fa:18:0d:e9:79:14:ce:e5:24:f6: 9e:99:9c:d5:02:fd:75:86:e7:2a:b1:73:c9:ec:7e: 7e:cf:c9:00:42:ae:60:48:a6:44:94:f4:43:09:f5: cb:d9:90:f2:29:74:e3:df:19:62:bf:2d:78:4f:d6: f4:2d:37:2b:6b:59:d4:33:b0:71:b7:b3:cb:c7:c6: 4c:9c:a6:cd:27:b8:45:a3:da:c4:81:02:0b:90:6d: e2:55:2a:65:23:c7:20:4b:b2:41:9c:74:dd:4c:7f: a0:c7:aa:c3:0b:a9:99:0e:ff:b8:0a:7c:5e:44:a4: 14:e4:e5:6b:d2:86:2c:55:76:da:c7:4b:28:76:c8: 0f:72:9e:48:ea:0d:8a:6a:65:75:38:28:2f:96:c9: 42:fc:db:7b:78:ea:52:b4:98:ca:c4:27:df:65:73: 63:51:f9:75:5f:0a:1a:d7:8b:7a:a4:15:b4:d3:72: 34:79:d7:59:8c:6a:2b:eb:05:9d:5a:eb:8e:ed:1a: c4:dd:bb:17:a5:f3:d7:f2:d6:10:8a:6d:1c:53:c8: ce:58:bd:02:bb:ca:86:fb:96:df:ed:61:90:3f:0e: 18:ce:d9:9a:f1:14:0a:dc:99:fe:aa:18:eb:0e:1f: 18:88:cd:29:d9:84:ce:b7:1c:d1:c9:23:8f:76:ba: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:05:80:21:34:06:CC:A5:98:4D:65:BD:58:2F:AF:07:C0:C0:94:97 X509v3 Authority Key Identifier: keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7a:17:36:d6:df:9e:ca:e0:9d:f2:44:1b:ef:86:77:a7:71: 69:7d:b5:ed:f0:7d:bc:f0:85:00:42:11:86:88:5c:84:f1:f0: 3c:39:d3:a9:63:c9:44:15:7d:56:6f:f8:b6:4d:bd:7c:80:87: 6f:ed:51:d3:c4:23:70:86:28:b5:48:8a:1a:f0:08:47:b6:1e: d1:65:8b:4e:23:38:b7:b5:1c:ff:c6:83:07:86:26:73:21:c6: 2b:7f:93:6f:0d:7e:44:22:fe:11:01:3d:c5:68:76:38:20:15: 3f:5a:c6:5c:f0:42:88:3d:41:60:24:67:74:f7:da:fa:43:5f: b7:45:39:1f:ef:95:ef:f4:71:7b:2c:92:0b:12:ea:0b:93:63: e7:6f:58:78:54:fb:b9:a3:ca:55:82:03:a4:33:fd:77:9f:2a: b2:7c:a8:4c:85:23:82:c1:19:1a:61:bc:2e:51:4a:08:ea:3e: a8:04:b2:ac:94:7b:38:51:8a:fc:04:7f:0a:46:f3:a4:5d:43: f2:30:4b:6c:3c:c9:0d:9f:9f:25:08:29:2a:fb:f6:9a:b9:b9: 6d:89:0b:77:da:f5:8a:05:61:15:73:44:fb:b3:75:1a:22:45: dd:9f:fb:94:53:e2:47:e5:73:e2:05:b3:bb:2f:da:8f:45:3c: 21:9b:18:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw MEJENjhFMzIwHhcNMjUwMzI5MDUxMzAzWhcNMjUwNDA1MDUxMzAzWjAYMRYwFAYD VQQDEw02N2U3ODE2MC1iZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XMAUPoYDel5FM7lJPaemZzVAv11hucqsXPJ7H5+z8kAQq5gSKZElPRDCfXL 2ZDyKXTj3xlivy14T9b0LTcra1nUM7Bxt7PLx8ZMnKbNJ7hFo9rEgQILkG3iVSpl I8cgS7JBnHTdTH+gx6rDC6mZDv+4CnxeRKQU5OVr0oYsVXbax0sodsgPcp5I6g2K amV1OCgvlslC/Nt7eOpStJjKxCffZXNjUfl1Xwoa14t6pBW003I0eddZjGor6wWd WuuO7RrE3bsXpfPX8tYQim0cU8jOWL0Cu8qG+5bf7WGQPw4Yztma8RQK3Jn+qhjr Dh8YiM0p2YTOtxzRySOPdrqp5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUFgCE0 BsylmE1lvVgvrwfAwJSXMB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1 M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjg2RC82RjA1ODIwRUU1M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RF MXNseUJrNlJ4cThBdldqakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIehc21t+eyuCd8kQb74Z3p3FpfbXt8H288IUAQhGGiFyE8fA8OdOp Y8lEFX1Wb/i2Tb18gIdv7VHTxCNwhii1SIoa8AhHth7RZYtOIzi3tRz/xoMHhiZz IcYrf5NvDX5EIv4RAT3FaHY4IBU/WsZc8EKIPUFgJGd099r6Q1+3RTkf75Xv9HF7 LJILEuoLk2Pnb1h4VPu5o8pVggOkM/13nyqyfKhMhSOCwRkaYbwuUUoI6j6oBLKs lHs4UYr8BH8KRvOkXUPyMEtsPMkNn58lCCkq+/aaubltiQt32vWKBWEVc0T7s3Ua IkXdn/uUU+JH5XPiBbO7L9qPRTwhmxjc -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:35 2025 by rpki-client