$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft File: Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft (raw, json) Hash identifier: vfrV7Ao0WgAftYN8j5Xn563VP3ATVKY4HVF7WY68W0U= Subject key identifier: 9D:76:93:0E:DC:94:14:11:31:94:31:4A:63:C2:A3:72:92:4B:BE:3E Authority key identifier: 25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 Certificate issuer: /CN=A91D4325/serialNumber=25FD5AC999B0395E6C0EBD561E1B1B88E0D60763 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft Manifest number: 0649 Signing time: Wed 02 Apr 2025 22:31:38 +0000 Manifest this update: Wed 02 Apr 2025 22:31:38 +0000 Manifest next update: Wed 09 Apr 2025 22:31:38 +0000 Files and hashes: 1: Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl (hash: DAI6IrKoOXQyKl97i0EU1zalIOsh9mLqJbG3k4FVGBI=) 2: CE6FBAEE813111EBA15FAC34C4F9AE02.roa (hash: aM+7gCUGE+qk8+F9OXTcC/AfNjJw372IOJzcraxEznU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4325 Validity Not Before: Apr 2 22:31:38 2025 GMT Not After : Apr 9 22:31:38 2025 GMT Subject: CN=67edbaca-2188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:c7:83:39:ec:ae:4d:66:3d:47:52:c4:6c: dc:e5:ac:bc:3b:72:46:42:e1:4f:b1:56:de:ae:07: ef:8c:14:0f:23:1a:7d:7f:d4:ca:3e:9e:0d:5e:36: b9:bc:59:d8:8b:b9:7e:64:28:7a:df:55:25:91:ad: 32:22:7f:1f:5e:3c:96:9f:9f:45:d0:ea:a0:07:3b: d0:34:92:52:9b:c3:ea:8d:14:f1:13:80:f6:eb:cb: 68:f3:40:f1:a5:45:39:15:75:7e:47:e5:07:f7:d1: 1c:72:eb:8a:42:f2:ad:53:17:8a:e1:c1:26:1b:ac: 4a:16:d2:66:5f:44:67:0d:da:7f:88:0f:65:64:d3: b7:e7:a5:e3:de:13:4f:5e:4a:7e:96:16:a5:b6:be: a7:24:a9:de:3a:9b:d5:c6:8b:9d:67:25:c3:83:8d: 55:f8:38:68:36:7a:85:fa:c9:69:e5:01:5c:e8:22: d0:3e:4b:ce:63:44:f8:9c:88:e1:99:5e:7f:5f:87: b1:8c:7d:55:9a:f4:73:14:d6:2f:33:08:92:43:ff: 6d:29:b8:d5:77:fd:56:5d:20:94:89:16:b8:6e:73: af:a8:93:e9:5f:c8:03:3b:09:3a:50:5a:72:47:2e: 8a:f6:15:23:2c:53:09:e6:0d:86:e3:7f:d1:c3:be: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:76:93:0E:DC:94:14:11:31:94:31:4A:63:C2:A3:72:92:4B:BE:3E X509v3 Authority Key Identifier: keyid:25:FD:5A:C9:99:B0:39:5E:6C:0E:BD:56:1E:1B:1B:88:E0:D6:07:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jf1ayZmwOV5sDr1WHhsbiODWB2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4325/ED8565E8812F11EB94D38132C4F9AE02/Jf1ayZmwOV5sDr1WHhsbiODWB2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:75:20:3d:f6:97:c1:ba:45:89:b5:81:d2:b2:84:a3:a4:55: 6b:e7:a2:5a:71:0e:06:50:31:74:a0:31:6d:f8:80:55:26:4d: 59:9d:27:a0:2e:64:82:c9:f3:69:16:2b:4a:35:15:4d:6c:98: e4:d6:4c:ed:45:76:09:41:b4:3c:2f:69:71:97:69:e6:d4:72: f4:62:ae:0d:de:3c:a7:25:b6:0d:9c:07:82:29:27:4a:b9:3a: 66:26:af:f8:af:51:be:33:1f:a1:ce:22:5e:98:27:af:85:31: 15:23:27:77:6f:d5:cd:ab:7e:87:6e:d6:d5:8f:51:35:d6:b1: 44:72:1b:f0:a8:0f:1c:7a:b3:9d:53:b6:7b:88:02:a9:8e:6b: 37:e3:cb:45:2a:96:49:7a:fd:f1:fe:98:d6:63:7d:fc:94:19: 03:a4:cd:a0:1a:7b:c0:13:3b:d5:41:e1:c6:41:1d:39:fd:07: b9:33:c9:46:cc:fe:23:f0:d3:9c:e3:bc:76:6b:36:20:0c:d0: 97:ce:e3:49:40:de:54:7c:e2:29:e4:45:d0:9b:9b:78:5c:16: 28:73:ce:14:a5:6a:d6:17:f2:2f:96:6a:ff:cd:a4:c0:8b:77: 1f:86:fd:68:ff:09:3b:bd:13:cc:94:3d:ea:2a:4d:04:c4:0c: 58:96:0b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzMjUxMTAvBgNVBAUTKDI1RkQ1QUM5OTlCMDM5NUU2QzBFQkQ1NjFFMUIxQjg4 RTBENjA3NjMwHhcNMjUwNDAyMjIzMTM4WhcNMjUwNDA5MjIzMTM4WjAYMRYwFAYD VQQDEw02N2VkYmFjYS0yMTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZTHgznsrk1mPUdSxGzc5ay8O3JGQuFPsVbergfvjBQPIxp9f9TKPp4NXja5 vFnYi7l+ZCh631Ulka0yIn8fXjyWn59F0OqgBzvQNJJSm8PqjRTxE4D268to80Dx pUU5FXV+R+UH99EccuuKQvKtUxeK4cEmG6xKFtJmX0RnDdp/iA9lZNO356Xj3hNP Xkp+lhaltr6nJKneOpvVxoudZyXDg41V+DhoNnqF+slp5QFc6CLQPkvOY0T4nIjh mV5/X4exjH1VmvRzFNYvMwiSQ/9tKbjVd/1WXSCUiRa4bnOvqJPpX8gDOwk6UFpy Ry6K9hUjLFMJ5g2G43/Rw77mIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ12kw7c lBQRMZQxSmPCo3KSS74+MB8GA1UdIwQYMBaAFCX9WsmZsDlebA69Vh4bG4jg1gdj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDMyNS9FRDg1NjVFODgx MkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09WNXNEcjFXSGhzYmlPRFdC Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmMWF5Wm13T1Y1c0RyMVdIaHNiaU9EV0IyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDMyNS9FRDg1NjVFODgxMkYxMUVCOTREMzgxMzJDNEY5QUUwMi9KZjFheVptd09W NXNEcjFXSGhzYmlPRFdCMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwdSA99pfBukWJtYHSsoSjpFVr56JacQ4GUDF0oDFt+IBVJk1ZnSeg LmSCyfNpFitKNRVNbJjk1kztRXYJQbQ8L2lxl2nm1HL0Yq4N3jynJbYNnAeCKSdK uTpmJq/4r1G+Mx+hziJemCevhTEVIyd3b9XNq36HbtbVj1E11rFEchvwqA8cerOd U7Z7iAKpjms348tFKpZJev3x/pjWY338lBkDpM2gGnvAEzvVQeHGQR05/Qe5M8lG zP4j8NOc47x2azYgDNCXzuNJQN5UfOIp5EXQm5t4XBYoc84UpWrWF/Ivlmr/zaTA i3cfhv1o/wk7vRPMlD3qKk0ExAxYlgsC -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:36 2025 by rpki-client