$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json) Hash identifier: 5apbjLDKII7hFQuoux4ecm4NdS903XnkCnrStSamMAM= Subject key identifier: 4A:4C:A8:D7:B1:FC:6C:DC:7A:EE:F9:52:A4:72:17:82:77:16:CE:DF Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2F03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft Manifest number: 2EF0 Signing time: Fri 04 Apr 2025 15:32:28 +0000 Manifest this update: Fri 04 Apr 2025 15:32:28 +0000 Manifest next update: Fri 11 Apr 2025 15:32:28 +0000 Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: hQZKTr82heiqjORrX2RjKji+8b2tEcyhuakTFx0XYrM=) 2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12035 (0x2f03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8 Validity Not Before: Apr 4 15:32:28 2025 GMT Not After : Apr 11 15:32:28 2025 GMT Subject: CN=67effb8c-bb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:76:5e:84:e6:ac:ca:8e:0a:e7:94:de:7e: b3:12:46:af:1a:e9:7c:42:38:52:09:65:e6:83:c4: 16:d0:06:9d:c3:f1:5a:5d:60:53:cd:5b:5c:f8:66: ad:7e:27:0d:16:1c:4e:07:81:2a:d9:50:7c:72:3a: e8:68:51:7c:d6:52:b5:b9:7a:f7:e5:e2:40:3f:ee: 0a:e0:0d:23:58:b6:bd:67:c8:83:39:69:1c:cd:45: 20:18:d1:10:50:34:d7:41:21:d5:9e:11:52:a2:5b: 3e:59:48:f8:0d:b4:50:e8:29:99:4f:6d:51:2f:6f: de:5a:ac:b3:2f:93:b3:f5:04:81:53:6f:75:0e:73: 9a:94:7a:a4:3b:7a:a8:f7:dc:37:b4:bb:12:43:5a: 01:9b:63:83:44:d9:94:54:ee:cc:62:be:95:45:f9: d7:51:92:f0:6c:95:c3:ce:ad:db:cc:71:58:0f:29: 61:b7:e3:bc:79:31:c8:d2:9b:94:3e:64:06:f3:f3: 9d:da:43:8b:12:a5:e4:c3:cc:a2:5a:7b:5e:c0:5d: 31:24:9a:d9:45:9c:a6:d8:85:e5:0f:59:2c:5e:46: ce:49:72:02:fd:b2:0d:55:1d:f5:70:53:57:c0:65: b4:e0:18:48:ac:cf:5e:00:d9:5a:52:35:32:47:eb: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:A8:D7:B1:FC:6C:DC:7A:EE:F9:52:A4:72:17:82:77:16:CE:DF X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:0c:8d:69:c2:70:c1:74:14:36:d4:fe:5b:15:4b:8c:40:71: 53:91:40:d4:19:82:3c:68:b8:f0:b1:61:fb:f7:fb:08:6a:df: 73:0f:07:95:a5:ba:d5:be:35:cf:f6:f9:75:92:5e:20:a0:97: d8:dc:59:4f:89:be:85:74:bf:56:b3:e6:e0:75:24:19:58:55: d6:2d:a7:cd:b3:73:79:28:c3:62:2b:7d:64:db:3c:0f:b0:4a: e8:aa:59:71:87:53:20:fc:4c:c6:51:f1:a4:56:f8:12:d0:cf: fe:37:4a:c5:a2:cf:a9:11:18:8f:aa:a9:c1:6a:bc:a5:00:07: 37:f4:8e:8d:1c:39:64:1e:d8:d6:fe:54:81:12:64:42:1b:32: 29:df:8d:d5:9f:55:c4:69:15:31:c6:f3:04:ca:a1:fc:0e:cd: 74:bd:5e:97:21:a5:5c:e1:73:54:b3:11:ce:db:ba:58:28:ef: 62:a9:84:7f:73:94:3b:07:cb:c9:da:25:82:18:68:fe:06:a0: 9b:ad:0e:98:4e:01:40:21:f2:93:73:84:68:d6:b4:aa:37:fd: 88:b1:7d:70:4e:31:05:ba:db:14:bb:9e:00:61:20:d8:2d:40: 2a:8e:c0:47:b3:c2:d8:b1:35:00:33:3d:fc:b4:d0:a0:6d:27: 94:ed:89:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjUwNDA0MTUzMjI4WhcNMjUwNDExMTUzMjI4WjAYMRYwFAYD VQQDEw02N2VmZmI4Yy1iYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKR2XoTmrMqOCueU3n6zEkavGul8QjhSCWXmg8QW0Aadw/FaXWBTzVtc+Gat ficNFhxOB4Eq2VB8cjroaFF81lK1uXr35eJAP+4K4A0jWLa9Z8iDOWkczUUgGNEQ UDTXQSHVnhFSols+WUj4DbRQ6CmZT21RL2/eWqyzL5Oz9QSBU291DnOalHqkO3qo 99w3tLsSQ1oBm2ODRNmUVO7MYr6VRfnXUZLwbJXDzq3bzHFYDylht+O8eTHI0puU PmQG8/Od2kOLEqXkw8yiWntewF0xJJrZRZym2IXlD1ksXkbOSXIC/bINVR31cFNX wGW04BhIrM9eANlaUjUyR+ujkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpMqNex /Gzceu75UqRyF4J3Fs7fMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxDI1pwnDBdBQ21P5bFUuMQHFTkUDUGYI8aLjwsWH79/sIat9zDweV pbrVvjXP9vl1kl4goJfY3FlPib6FdL9Ws+bgdSQZWFXWLafNs3N5KMNiK31k2zwP sEroqllxh1Mg/EzGUfGkVvgS0M/+N0rFos+pERiPqqnBarylAAc39I6NHDlkHtjW /lSBEmRCGzIp343Vn1XEaRUxxvMEyqH8Ds10vV6XIaVc4XNUsxHO27pYKO9iqYR/ c5Q7B8vJ2iWCGGj+BqCbrQ6YTgFAIfKTc4Ro1rSqN/2IsX1wTjEFutsUu54AYSDY LUAqjsBHs8LYsTUAMz38tNCgbSeU7Yli -----END CERTIFICATE-----Generated at Sat Apr 5 12:53:56 2025 by rpki-client