$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: CRuC29sNiZsYTAMmKhOBKDLBZ+0J4VY+gGPJ4RSsMas= Subject key identifier: 75:3B:75:21:4A:5F:90:AF:F8:B8:97:56:EB:1A:83:13:E9:B6:93:E7 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: FE Signing time: Fri 11 Apr 2025 04:27:41 +0000 Manifest this update: Fri 11 Apr 2025 04:27:40 +0000 Manifest next update: Fri 18 Apr 2025 04:27:40 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: HjWIdQaqqF4Ysyk0JdToTwQzA6xwwnB0zcegSZinCxQ=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 04:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Apr 11 04:27:40 2025 GMT Not After : Apr 18 04:27:40 2025 GMT Subject: CN=67f89a3d-9336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:53:84:62:24:58:2c:ea:00:73:84:0f:e4: b9:de:38:1a:a7:46:89:a9:f0:ee:00:1f:c1:b4:89: 10:54:9f:e9:57:ea:2d:64:9f:f4:7a:56:da:04:9a: 50:ff:c9:58:8d:28:b9:63:60:7f:1c:7c:93:95:38: e2:7e:26:ff:61:c8:bf:f0:52:ab:a5:a8:f1:7b:b8: df:4f:e7:96:01:4f:90:c8:cb:fa:d3:9a:68:a6:7f: ba:fa:47:b1:be:c6:af:81:75:b3:04:bd:2b:f3:e7: f2:a4:4c:37:3f:51:bc:47:fd:e8:05:46:a6:b5:8c: 22:43:13:a3:78:f1:ce:27:d1:ee:dd:40:10:99:88: 00:17:12:c2:14:cd:bd:de:46:68:f2:a9:b0:f4:82: f1:93:39:87:b4:0c:ab:e8:bf:60:f9:a5:57:69:f2: 13:7a:f4:f8:40:1f:05:08:6c:13:0f:b7:46:78:15: 13:a7:22:aa:e9:48:8c:3a:f4:4f:6c:41:de:62:5f: e4:01:c4:12:1c:f6:3b:bf:1f:3d:f6:4a:f5:3e:dd: 46:bf:49:54:45:1e:9f:f3:71:b2:fa:92:62:47:93: 0c:f3:a5:3f:ab:1b:57:52:b3:78:47:2e:72:e2:d9: ed:07:59:ee:42:d2:cc:03:32:06:3a:04:ea:05:a2: cb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3B:75:21:4A:5F:90:AF:F8:B8:97:56:EB:1A:83:13:E9:B6:93:E7 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b8:d0:5f:c9:e4:e3:30:5a:5b:7f:30:67:36:7d:74:65:3f: ba:5e:44:85:98:ee:7f:15:e6:74:cf:7e:5d:7a:cd:f0:0a:48: d5:fe:bf:cf:c3:e1:83:4b:f8:09:3b:77:ab:c5:da:d5:fa:57: 9b:89:c1:7b:4d:68:98:a1:b8:f0:7c:5a:db:29:60:26:6c:3b: b1:5b:c2:d9:52:98:7a:ba:f1:a8:62:be:ac:dd:58:a6:d0:b0: 97:1d:99:f2:7d:c5:5f:4a:fd:14:d2:8b:ec:97:59:58:27:39: 92:90:38:8c:9a:33:5b:07:ea:cd:68:e5:4c:c9:5a:35:36:b2: 38:18:16:53:1a:9a:95:63:17:41:f6:65:69:2c:bd:b9:e1:55: a0:64:fd:bb:cc:f6:73:16:5d:ad:f2:02:75:10:f5:5d:03:66: d5:56:6d:f1:e1:b1:f5:94:2f:1d:e7:7a:98:e2:f9:ba:a0:57: 5e:6a:e5:81:7b:b8:0c:ac:e8:40:f0:87:9e:0e:8e:d6:a1:eb: f3:8e:04:e1:5b:80:a7:03:89:f8:07:81:ed:a3:c0:14:cf:ac: d4:6e:7e:33:96:1f:23:33:4e:0b:e6:4a:dc:6b:dd:40:3b:2c: 35:a9:39:bc:cd:28:e5:7f:71:94:06:59:d3:8c:30:fa:32:61: e3:7f:9b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNDExMDQyNzQwWhcNMjUwNDE4MDQyNzQwWjAYMRYwFAYD VQQDEw02N2Y4OWEzZC05MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VxThGIkWCzqAHOED+S53jgap0aJqfDuAB/BtIkQVJ/pV+otZJ/0elbaBJpQ /8lYjSi5Y2B/HHyTlTjifib/Yci/8FKrpajxe7jfT+eWAU+QyMv605popn+6+kex vsavgXWzBL0r8+fypEw3P1G8R/3oBUamtYwiQxOjePHOJ9Hu3UAQmYgAFxLCFM29 3kZo8qmw9ILxkzmHtAyr6L9g+aVXafITevT4QB8FCGwTD7dGeBUTpyKq6UiMOvRP bEHeYl/kAcQSHPY7vx899kr1Pt1Gv0lURR6f83Gy+pJiR5MM86U/qxtXUrN4Ry5y 4tntB1nuQtLMAzIGOgTqBaLLhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHU7dSFK X5Cv+LiXVusagxPptpPnMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYuNBfyeTjMFpbfzBnNn10ZT+6XkSFmO5/FeZ0z35des3wCkjV/r/P w+GDS/gJO3erxdrV+lebicF7TWiYobjwfFrbKWAmbDuxW8LZUph6uvGoYr6s3Vim 0LCXHZnyfcVfSv0U0ovsl1lYJzmSkDiMmjNbB+rNaOVMyVo1NrI4GBZTGpqVYxdB 9mVpLL254VWgZP27zPZzFl2t8gJ1EPVdA2bVVm3x4bH1lC8d53qY4vm6oFdeauWB e7gMrOhA8IeeDo7WoevzjgThW4CnA4n4B4Hto8AUz6zUbn4zlh8jM04L5krca91A Oyw1qTm8zSjlf3GUBlnTjDD6MmHjf5vK -----END CERTIFICATE-----Generated at Sat Apr 12 19:05:01 2025 by rpki-client