$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: hOO5Mak+0NFpraj2DF9assJxCJRRZdB9GCVjC35bWU4= Subject key identifier: 6C:85:A3:88:27:46:48:CE:C9:66:D1:59:2D:B9:E9:60:81:2E:0B:06 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 01AB Signing time: Tue 15 Apr 2025 02:17:47 +0000 Manifest this update: Tue 15 Apr 2025 02:17:47 +0000 Manifest next update: Tue 22 Apr 2025 02:17:47 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: DHZw+iF6y5sXPQEvg/uGDmpP3W6FJmpUgUCNE121qO0=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: AiUrlvDcYmkH6kDf7UBXGmz219nsjiQ9ojv7y2Lw3oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Apr 15 02:17:47 2025 GMT Not After : Apr 22 02:17:47 2025 GMT Subject: CN=67fdc1cb-768e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:27:05:be:c4:91:ae:26:37:91:fd:73:b6: 26:83:d7:1e:fd:a0:4b:85:ab:d6:e6:6a:56:fd:81: 35:eb:ee:f2:5f:00:d1:8d:88:b4:02:86:7f:a5:de: 57:54:91:2d:f1:f4:79:3e:db:55:f4:8a:d9:c5:27: 48:b0:16:88:92:27:74:1a:a0:51:4e:79:a7:11:1e: 26:52:13:da:51:db:0e:21:85:e6:e1:ac:b2:31:84: f1:71:93:5b:5f:35:16:73:87:d1:97:10:39:7e:e2: 63:fc:6a:35:73:2d:42:2d:55:fb:3b:7d:30:58:e9: 67:6d:ef:cf:61:ba:ae:90:14:81:12:a2:e6:16:4a: 98:f0:52:53:02:ad:d8:ca:c7:6d:09:ab:d0:39:ee: d9:fb:11:f7:c9:b7:b3:0d:8c:4a:1d:91:19:ce:11: 65:75:06:ae:ec:d8:51:dc:87:7a:ab:d6:22:af:20: 35:0e:06:19:ec:5b:1f:90:a2:ed:96:90:d7:19:44: 45:2c:2f:4c:5c:1d:07:d2:48:a9:d0:4e:2d:cf:82: f0:2c:00:44:71:fd:6a:1f:c6:60:05:f2:56:3a:f9: 51:7e:be:af:6f:39:0e:49:d6:ed:96:ea:99:69:de: 2d:a3:5e:03:90:3d:05:ba:05:61:e8:f5:75:5d:97: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:85:A3:88:27:46:48:CE:C9:66:D1:59:2D:B9:E9:60:81:2E:0B:06 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f0:0b:70:db:c4:e4:50:89:aa:6c:f6:02:5e:17:0f:a3:31: 75:0d:28:b1:fc:63:3a:1c:c7:79:89:a3:f1:62:be:31:8b:c7: 25:0c:da:fb:4b:41:f6:91:62:ec:9f:2a:c8:0f:e9:35:cb:57: 76:e1:2e:16:df:03:52:c1:ea:6a:f2:53:6a:68:14:77:9c:cc: e2:09:8e:e4:38:cf:1d:7a:e9:43:15:bf:b6:e2:87:4c:16:f0: cf:ff:c4:20:29:b3:b6:df:e5:01:00:d8:f7:92:8f:73:eb:69: 0d:d6:18:a6:08:f2:ac:33:ce:76:75:6c:d7:3c:87:a8:73:da: 68:05:3c:6e:64:6d:72:e7:1a:8e:e6:65:b6:1a:ec:4c:0c:01: 3a:a2:9b:94:ea:46:d5:a8:e3:69:90:dc:7b:6e:c5:93:ff:36: c7:d1:aa:2b:8f:61:a0:9d:51:7c:0e:09:68:2c:5e:e3:9d:95: ba:f5:88:2b:bf:e6:0b:31:43:8d:d9:7c:13:65:07:0f:1e:46: bd:f6:73:36:c9:01:66:43:50:4a:a0:51:da:d3:fa:99:cd:45: 05:0f:3d:ba:70:3a:0e:8d:28:00:9c:5d:39:e4:c0:a6:f2:ff: 66:58:26:e1:73:f8:69:8d:d1:fa:23:c1:6b:94:f3:42:22:b5: 8b:b0:55:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUwNDE1MDIxNzQ3WhcNMjUwNDIyMDIxNzQ3WjAYMRYwFAYD VQQDEw02N2ZkYzFjYi03NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBQnBb7Eka4mN5H9c7Ymg9ce/aBLhavW5mpW/YE16+7yXwDRjYi0AoZ/pd5X VJEt8fR5PttV9IrZxSdIsBaIkid0GqBRTnmnER4mUhPaUdsOIYXm4ayyMYTxcZNb XzUWc4fRlxA5fuJj/Go1cy1CLVX7O30wWOlnbe/PYbqukBSBEqLmFkqY8FJTAq3Y ysdtCavQOe7Z+xH3ybezDYxKHZEZzhFldQau7NhR3Id6q9YiryA1DgYZ7FsfkKLt lpDXGURFLC9MXB0H0kip0E4tz4LwLABEcf1qH8ZgBfJWOvlRfr6vbzkOSdbtluqZ ad4to14DkD0FugVh6PV1XZfOeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyFo4gn RkjOyWbRWS256WCBLgsGMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp8Atw28TkUImqbPYCXhcPozF1DSix/GM6HMd5iaPxYr4xi8clDNr7 S0H2kWLsnyrID+k1y1d24S4W3wNSwepq8lNqaBR3nMziCY7kOM8deulDFb+24odM FvDP/8QgKbO23+UBANj3ko9z62kN1himCPKsM852dWzXPIeoc9poBTxuZG1y5xqO 5mW2GuxMDAE6opuU6kbVqONpkNx7bsWT/zbH0aorj2GgnVF8DgloLF7jnZW69Ygr v+YLMUON2XwTZQcPHka99nM2yQFmQ1BKoFHa0/qZzUUFDz26cDoOjSgAnF055MCm 8v9mWCbhc/hpjdH6I8FrlPNCIrWLsFXF -----END CERTIFICATE-----Generated at Thu Apr 17 03:40:59 2025 by rpki-client