$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft File: jeHQtWEwmAuDkA-3j62mcN4uCmU.mft (raw, json) Hash identifier: X8qqwgFywbYuMh5iJ4UcltSOAb6UqD2c4oJjmfrj/sM= Subject key identifier: 10:4B:70:9F:66:FD:96:CF:87:22:67:70:C4:C6:10:2A:D5:DF:88:1B Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft Manifest number: 0CF6 Signing time: Fri 30 May 2025 18:17:05 +0000 Manifest this update: Fri 30 May 2025 18:17:05 +0000 Manifest next update: Fri 06 Jun 2025 18:17:05 +0000 Files and hashes: 1: jeHQtWEwmAuDkA-3j62mcN4uCmU.crl (hash: rA31/W7YQzLb48LNYpi09/sr5BAp58t0Bb1BPsnIkik=) 2: 72B84162E2A411E9A300492AC4F9AE02.roa (hash: QrHwkCxaqX0D4CMUIb/gJ2hugEkme/UAAaAoVbq7U4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: May 30 18:17:05 2025 GMT Not After : Jun 6 18:17:05 2025 GMT Subject: CN=6839f621-d16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5a:44:2c:e7:e8:39:c7:c0:1c:a9:d2:e9:98: 06:25:08:a9:16:cd:e2:86:2e:bd:de:c7:4d:5c:6f: 36:f5:bc:0a:5f:0b:32:2f:0d:c7:b0:35:7d:e2:85: f7:9c:63:b4:60:34:87:07:54:27:62:7d:3c:ad:9c: b0:44:b6:27:54:37:de:72:e4:11:c0:8f:6b:85:fe: 47:b9:f1:7d:85:62:46:8b:2b:1b:95:1c:0c:60:c3: ab:31:6c:78:f1:61:04:be:39:f8:6f:3c:0e:73:36: ae:1b:9a:fe:dc:03:14:29:88:65:be:b1:ba:46:d1: 97:98:c0:17:bd:32:e4:b3:2a:7e:10:d2:31:04:d3: a9:82:e9:35:30:a4:25:e1:46:e0:34:4b:08:27:20: ba:3d:e8:9d:4f:da:d2:fc:f2:7a:c8:55:59:e2:0a: 7f:29:15:6f:70:75:22:3b:cb:1f:90:f3:e2:d1:f6: 10:01:5b:36:b7:57:19:9a:5c:f1:01:b2:40:c7:e3: ac:e6:1e:6f:d1:44:c5:4c:75:4e:f0:9a:bd:8c:51: b5:e4:d7:fc:04:18:66:2a:8f:1c:52:b5:77:62:e7: 46:d1:08:b4:a3:32:b8:93:89:63:87:fb:f5:27:32: 0c:b0:7c:46:a9:33:e0:1c:0a:be:53:7f:b4:14:cc: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:70:9F:66:FD:96:CF:87:22:67:70:C4:C6:10:2A:D5:DF:88:1B X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b2:1a:be:56:5b:ec:f3:59:c6:e1:b3:04:66:66:53:6c:76: 2c:9f:08:8e:a1:d2:9d:a4:2f:1c:c7:e7:42:40:8f:b3:0c:cf: 94:0e:ed:59:9c:5d:1a:c7:6c:19:18:cc:00:4e:8e:82:b4:b0: 41:54:9f:6a:1f:8e:72:18:cf:3a:6b:77:79:6e:2b:25:6a:73: 39:53:41:6c:f5:b5:3d:6b:0d:8e:ae:ce:23:83:26:6c:fa:a0: 97:1c:5c:b9:99:41:a0:4f:d6:2e:41:ee:9f:2d:e9:8c:f0:d8: b6:a1:ca:8a:f4:1f:8b:91:fa:ef:bb:46:86:a8:dc:a4:7b:dc: a0:8b:fa:f8:fe:6a:01:db:5a:ee:fd:dd:0d:74:88:b2:0a:3a: 78:8f:fc:d9:26:6c:16:6c:0a:62:16:0c:e0:df:80:b8:e8:60: 1d:85:4e:3b:75:a6:46:a1:e4:5b:66:16:6d:1f:4c:05:4f:1d: 8f:bd:ef:46:81:4a:9f:ac:c5:8c:08:1c:19:2d:19:51:a3:08: a5:71:2a:99:31:23:69:11:e3:9a:a5:37:3c:10:3c:a1:99:6d: 97:87:e0:0f:16:33:fd:d5:bb:07:6a:3d:12:0a:97:ca:02:9b: 11:4f:96:4c:df:04:43:15:0d:39:27:4f:d9:29:76:a5:e7:45: 81:b5:d2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjUwNTMwMTgxNzA1WhcNMjUwNjA2MTgxNzA1WjAYMRYwFAYD VQQDEw02ODM5ZjYyMS1kMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1pELOfoOcfAHKnS6ZgGJQipFs3ihi693sdNXG829bwKXwsyLw3HsDV94oX3 nGO0YDSHB1QnYn08rZywRLYnVDfecuQRwI9rhf5HufF9hWJGiysblRwMYMOrMWx4 8WEEvjn4bzwOczauG5r+3AMUKYhlvrG6RtGXmMAXvTLksyp+ENIxBNOpguk1MKQl 4UbgNEsIJyC6PeidT9rS/PJ6yFVZ4gp/KRVvcHUiO8sfkPPi0fYQAVs2t1cZmlzx AbJAx+Os5h5v0UTFTHVO8Jq9jFG15Nf8BBhmKo8cUrV3YudG0Qi0ozK4k4ljh/v1 JzIMsHxGqTPgHAq+U3+0FMwEBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBLcJ9m /ZbPhyJncMTGECrV34gbMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODFFMC83NjFBN0VBQ0UyQTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21B dURrQS0zajYybWNONHVDbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHshq+Vlvs81nG4bMEZmZTbHYsnwiOodKdpC8cx+dCQI+zDM+UDu1Z nF0ax2wZGMwATo6CtLBBVJ9qH45yGM86a3d5bislanM5U0Fs9bU9aw2Ors4jgyZs +qCXHFy5mUGgT9YuQe6fLemM8Ni2ocqK9B+Lkfrvu0aGqNyke9ygi/r4/moB21ru /d0NdIiyCjp4j/zZJmwWbApiFgzg34C46GAdhU47daZGoeRbZhZtH0wFTx2Pve9G gUqfrMWMCBwZLRlRowilcSqZMSNpEeOapTc8EDyhmW2Xh+APFjP91bsHaj0SCpfK ApsRT5ZM3wRDFQ05J0/ZKXal50WBtdIn -----END CERTIFICATE-----Generated at Sat May 31 17:49:34 2025 by rpki-client