$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft File: JVGQBwigMUB5W6G6mx3a_PQXyT8.mft (raw, json) Hash identifier: /DlQZJTQXT9W9NbVxb8XOz7eNKUPOL3hXgv9P1O1nxM= Subject key identifier: 61:9B:B4:DE:98:B4:6F:21:E2:48:6A:EB:80:4F:5F:69:9C:6F:D6:22 Authority key identifier: 25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F Certificate issuer: /CN=A91F5868/serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft Manifest number: 0C84 Signing time: Mon 14 Apr 2025 18:07:07 +0000 Manifest this update: Mon 14 Apr 2025 18:07:06 +0000 Manifest next update: Mon 21 Apr 2025 18:07:06 +0000 Files and hashes: 1: JVGQBwigMUB5W6G6mx3a_PQXyT8.crl (hash: 6O4yz3zEBIX0YydAJmjtA4QxOO7MXBIEPF6n7O7K9z8=) 2: E098C4B6F3FE11E9BB4E931AC4F9AE02.roa (hash: V73FrlCjTxW3+OFN4WSdzYBtRymf106sXN4X73EoNpI=) 3: 9EB49D14D17411EFA96F8E19C4F9AE02.roa (hash: 70+Nv3dW1TlRVjSfYz9QWyUrypqW/MlYCw/LOgFBLs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5868, serialNumber=2551900708A03140795BA1BA9B1DDAFCF417C93F Validity Not Before: Apr 14 18:07:06 2025 GMT Not After : Apr 21 18:07:06 2025 GMT Subject: CN=67fd4ecb-8d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:26:47:93:d8:91:24:88:8f:1a:70:67:62: 51:92:0c:5f:17:05:72:56:97:7f:d0:eb:63:25:c1: dd:8c:83:e3:1b:88:46:e7:84:9f:ed:45:01:4b:86: d2:90:a9:c9:44:9a:de:8d:40:31:74:aa:41:86:a2: a3:ce:58:d0:85:0c:e5:9d:58:e5:47:53:c2:42:50: c5:54:3f:24:15:85:7a:dc:5d:48:d6:dc:77:23:f3: 7a:0d:96:ee:18:c7:aa:7e:9a:84:de:7d:84:a6:a3: 44:dd:05:b0:68:18:47:a6:6c:9b:22:3d:10:2d:e7: ed:a6:ca:e0:b7:f5:c7:28:43:09:fd:c9:c8:44:43: a5:1a:08:13:4b:25:c7:e8:43:81:cd:0c:38:77:78: a6:fd:ab:02:ad:8b:aa:ea:fd:32:f1:52:57:96:03: 95:00:f5:cc:92:c3:7b:3c:bc:81:d6:37:05:1c:c7: f1:78:b4:fe:bf:3d:01:da:4e:45:9d:2e:25:56:4e: 15:b8:b7:d0:33:6c:ca:33:51:e9:dd:cf:98:62:79: 97:43:53:02:bd:46:5c:e1:e0:e8:0a:fb:1a:fd:ce: 11:d7:94:2e:7c:dc:54:2b:51:93:21:c0:ea:15:10: 1c:0a:29:43:08:cd:b5:4c:a1:7e:53:f5:71:27:95: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:B4:DE:98:B4:6F:21:E2:48:6A:EB:80:4F:5F:69:9C:6F:D6:22 X509v3 Authority Key Identifier: keyid:25:51:90:07:08:A0:31:40:79:5B:A1:BA:9B:1D:DA:FC:F4:17:C9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVGQBwigMUB5W6G6mx3a_PQXyT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5868/065AC22CF3FE11E99B695F19C4F9AE02/JVGQBwigMUB5W6G6mx3a_PQXyT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a2:11:3c:a2:53:54:e2:87:59:15:16:82:32:92:d7:47:92: 35:6d:37:39:6e:7e:a8:0c:03:52:05:5f:76:12:ea:62:b1:1a: ad:0d:b2:d7:f4:bf:74:eb:cf:5c:a2:6a:b0:a8:14:5b:39:7d: cb:91:c4:88:ae:56:3b:60:a9:96:a8:f1:0b:03:8a:8b:a8:31: 52:2e:1c:8b:8e:ae:a2:11:c6:9d:32:1e:26:ea:fb:23:48:e7: 68:d2:c7:2a:94:49:62:dd:56:08:f5:87:1f:a2:6a:b8:37:72: 44:55:70:54:9e:68:37:9f:be:c6:8c:be:e3:3b:8e:a5:78:9a: 0f:66:13:67:17:2d:9f:51:a5:16:46:9f:55:a3:af:19:a2:95: 3d:85:8f:c0:1c:51:21:75:f3:2e:4a:18:d3:4b:48:ca:db:0a: 5b:cd:b9:65:3d:0f:df:94:b6:6f:e1:32:f5:6d:fa:3c:ac:a4: 63:92:9d:ca:52:c7:cb:90:2c:9c:e2:2b:c0:29:4f:ad:63:46: b8:68:a6:69:0a:1e:97:b1:6d:99:2e:b9:44:22:40:d1:7f:91: 81:00:70:64:4e:5b:79:3e:e3:8c:fa:64:c5:ad:8d:b2:01:c2: a7:ac:62:2a:be:f1:b5:5a:e4:40:38:d3:72:62:98:6a:cf:4b: ad:b1:74:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4NjgxMTAvBgNVBAUTKDI1NTE5MDA3MDhBMDMxNDA3OTVCQTFCQTlCMUREQUZD RjQxN0M5M0YwHhcNMjUwNDE0MTgwNzA2WhcNMjUwNDIxMTgwNzA2WjAYMRYwFAYD VQQDEw02N2ZkNGVjYi04ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru8mR5PYkSSIjxpwZ2JRkgxfFwVyVpd/0OtjJcHdjIPjG4hG54Sf7UUBS4bS kKnJRJrejUAxdKpBhqKjzljQhQzlnVjlR1PCQlDFVD8kFYV63F1I1tx3I/N6DZbu GMeqfpqE3n2EpqNE3QWwaBhHpmybIj0QLeftpsrgt/XHKEMJ/cnIREOlGggTSyXH 6EOBzQw4d3im/asCrYuq6v0y8VJXlgOVAPXMksN7PLyB1jcFHMfxeLT+vz0B2k5F nS4lVk4VuLfQM2zKM1Hp3c+YYnmXQ1MCvUZc4eDoCvsa/c4R15QufNxUK1GTIcDq FRAcCilDCM21TKF+U/VxJ5VXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGbtN6Y tG8h4khq64BPX2mcb9YiMB8GA1UdIwQYMBaAFCVRkAcIoDFAeVuhupsd2vz0F8k/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTg2OC8wNjVBQzIyQ0Yz RkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01VQjVXNkc2bXgzYV9QUVh5 VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWR1FCd2lnTVVCNVc2RzZteDNhX1BRWHlUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTg2OC8wNjVBQzIyQ0YzRkUxMUU5OUI2OTVGMTlDNEY5QUUwMi9KVkdRQndpZ01V QjVXNkc2bXgzYV9QUVh5VDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCohE8olNU4odZFRaCMpLXR5I1bTc5bn6oDANSBV92EupisRqtDbLX 9L90689comqwqBRbOX3LkcSIrlY7YKmWqPELA4qLqDFSLhyLjq6iEcadMh4m6vsj SOdo0scqlEli3VYI9Ycfomq4N3JEVXBUnmg3n77GjL7jO46leJoPZhNnFy2fUaUW Rp9Vo68ZopU9hY/AHFEhdfMuShjTS0jK2wpbzbllPQ/flLZv4TL1bfo8rKRjkp3K UsfLkCyc4ivAKU+tY0a4aKZpCh6XsW2ZLrlEIkDRf5GBAHBkTlt5PuOM+mTFrY2y AcKnrGIqvvG1WuRAONNyYphqz0utsXQK -----END CERTIFICATE-----Generated at Wed Apr 16 19:08:28 2025 by rpki-client