$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: IFbhEdgt6oIAsGUheCvT19cBx7bce0J0S14NxNZZFoE= Subject key identifier: 13:E1:00:C3:51:C7:BC:25:C9:94:62:E7:78:5E:69:C3:EC:40:11:1B Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 0264 Signing time: Tue 15 Apr 2025 01:26:56 +0000 Manifest this update: Tue 15 Apr 2025 01:26:56 +0000 Manifest next update: Tue 22 Apr 2025 01:26:56 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: JWtwVA9aKHbdKWFbcJrOqwr0OZdCizxmEjaHoji8SNg=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Apr 15 01:26:56 2025 GMT Not After : Apr 22 01:26:56 2025 GMT Subject: CN=67fdb5e0-8006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:67:64:d8:04:14:c3:24:53:27:36:a3:d0: 41:1a:8f:b4:7a:28:e3:06:a5:b5:c1:37:7e:72:84: e6:f5:19:51:2e:0c:fc:1f:8c:4b:84:49:59:e2:8c: bc:28:cd:c8:1b:7b:ce:e5:29:ca:86:b9:a4:c4:c6: 30:ac:00:c0:6f:2a:0d:27:a0:9d:d7:a9:d3:07:6b: b1:f2:ea:04:a0:f5:e7:94:06:95:52:6f:e1:4c:f4: 53:fa:a9:04:e9:03:01:e8:1d:ab:ef:e7:54:92:72: 28:83:41:76:df:3d:0a:25:cb:e8:03:89:b9:1e:92: 22:af:39:0d:d9:53:cf:12:b1:45:49:49:0c:39:ea: fc:68:5f:47:92:d8:c4:1d:78:7f:83:8b:24:0f:6e: 65:93:01:9e:b7:7f:1c:0e:06:08:a7:21:14:b5:60: 55:b8:85:20:f0:97:85:f2:7e:e2:d4:31:23:44:7e: ba:a3:73:31:d4:e7:aa:7e:f0:62:cf:4b:43:9c:48: cf:ab:e8:60:fd:6c:fd:eb:fe:66:4f:86:e2:2a:12: 35:d0:62:1e:4e:1f:3b:21:c5:f8:d2:7d:9f:e0:05: 55:04:21:64:57:6f:34:f5:a7:fd:54:e3:4e:4d:62: fa:7c:1e:96:9e:2e:6d:f1:0e:72:e8:ee:26:85:14: 24:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E1:00:C3:51:C7:BC:25:C9:94:62:E7:78:5E:69:C3:EC:40:11:1B X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e4:bc:c6:1f:eb:37:c4:c1:b8:2e:0e:2d:3b:45:d8:4a:a5: aa:81:1b:ae:8e:ee:22:c0:08:0e:c0:93:38:db:24:94:8e:14: fa:e4:c3:fa:04:c1:42:20:34:0f:bd:df:a7:e0:a8:a2:c1:41: 65:07:f9:ab:76:9b:f7:af:f1:d6:79:72:a9:66:07:d3:ef:1c: 91:5f:2c:e6:58:45:ed:fd:e7:50:40:90:d0:66:7d:01:a2:57: ea:db:ab:5b:34:27:67:51:de:c5:9e:06:9b:30:d1:19:2b:4f: 68:9c:b6:c9:d8:2f:74:40:04:ad:ac:f0:dd:3a:62:ba:08:fb: c4:e7:7f:81:60:9f:08:d1:cd:84:e3:f8:ec:9f:3f:29:b8:d0: 1a:5f:8b:cd:15:02:60:88:3f:de:5f:97:dc:46:f7:0b:8f:ab: 15:97:c6:82:43:72:37:fa:2f:67:98:e3:a6:7e:bf:88:d2:83: 48:0e:b8:e2:83:5d:ab:7c:d8:f5:a4:f4:ec:3b:57:63:f5:1f: 54:e4:12:7f:f1:bb:89:5c:11:28:cd:bd:d3:c9:39:ed:9a:57: 85:04:5b:38:d4:e4:5c:b6:5b:27:52:5d:a6:3c:23:1f:1e:ef: dd:61:b1:70:a8:a9:e8:0d:c0:a6:8d:36:53:80:24:d4:9d:3d: 85:21:ae:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwNDE1MDEyNjU2WhcNMjUwNDIyMDEyNjU2WjAYMRYwFAYD VQQDEw02N2ZkYjVlMC04MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzVnZNgEFMMkUyc2o9BBGo+0eijjBqW1wTd+coTm9RlRLgz8H4xLhElZ4oy8 KM3IG3vO5SnKhrmkxMYwrADAbyoNJ6Cd16nTB2ux8uoEoPXnlAaVUm/hTPRT+qkE 6QMB6B2r7+dUknIog0F23z0KJcvoA4m5HpIirzkN2VPPErFFSUkMOer8aF9HktjE HXh/g4skD25lkwGet38cDgYIpyEUtWBVuIUg8JeF8n7i1DEjRH66o3Mx1OeqfvBi z0tDnEjPq+hg/Wz96/5mT4biKhI10GIeTh87IcX40n2f4AVVBCFkV2809af9VONO TWL6fB6Wni5t8Q5y6O4mhRQkIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPhAMNR x7wlyZRi53heacPsQBEbMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD5LzGH+s3xMG4Lg4tO0XYSqWqgRuuju4iwAgOwJM42ySUjhT65MP6 BMFCIDQPvd+n4KiiwUFlB/mrdpv3r/HWeXKpZgfT7xyRXyzmWEXt/edQQJDQZn0B olfq26tbNCdnUd7FngabMNEZK09onLbJ2C90QAStrPDdOmK6CPvE53+BYJ8I0c2E 4/jsnz8puNAaX4vNFQJgiD/eX5fcRvcLj6sVl8aCQ3I3+i9nmOOmfr+I0oNIDrji g12rfNj1pPTsO1dj9R9U5BJ/8buJXBEozb3TyTntmleFBFs41ORctlsnUl2mPCMf Hu/dYbFwqKnoDcCmjTZTgCTUnT2FIa4y -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:05 2025 by rpki-client