$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: yVdHA7ZOC8ijj2Im2ZwhABonNlpShU3/UcMGLzqODPQ= Subject key identifier: 26:99:73:59:2B:D4:B2:0D:0B:44:A0:A5:59:E2:43:2B:AA:EF:76:69 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 0189 Signing time: Sat 31 May 2025 03:32:44 +0000 Manifest this update: Sat 31 May 2025 03:32:43 +0000 Manifest next update: Sat 07 Jun 2025 03:32:43 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: nDLqlLw128enHPbWsNksrlCS0/2WGgJUfhw4LkaZ8X8=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: MfWpaMS6rRmOY6M0y/tJr6fftibzcsGmZcNhFWcJvTU=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 6poyajPR3BIFUtAmbqebq4DXNDPl9+dp2rS2zBsWMPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: May 31 03:32:43 2025 GMT Not After : Jun 7 03:32:43 2025 GMT Subject: CN=683a785c-d5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:10:ff:24:e6:35:40:bf:1f:3a:6a:71:1b:18: 90:e8:68:54:18:47:36:2c:61:ea:77:16:61:12:cc: 5d:ab:63:71:7b:af:48:4d:36:61:57:02:4e:5b:76: dc:f2:06:a1:57:4c:81:87:78:49:5f:fe:4f:a2:7f: f3:60:66:2d:ad:34:83:4f:44:75:ae:25:e9:e4:bd: 68:64:19:62:fa:8c:46:4f:01:ee:72:3c:be:27:61: 99:b8:9b:eb:f0:6e:84:6a:28:cd:d2:96:cd:43:3b: e4:ce:c2:1c:21:de:4f:d5:be:aa:c6:65:f7:c9:37: 24:fb:3f:e4:eb:3b:02:a1:80:36:7a:7a:d4:06:4b: 21:74:9c:75:8a:9b:1d:99:60:c2:78:95:bf:8c:93: 3e:d6:93:38:bd:9b:ad:46:e7:e5:2f:4e:19:b0:cf: 11:9c:e7:d1:85:40:88:b5:65:da:4d:82:89:72:04: d9:ed:ba:3d:cd:a9:12:41:2d:b7:55:ae:e0:ca:da: b4:93:56:b8:90:de:57:9b:b4:58:06:a1:c9:ce:ca: 7e:b8:62:e4:21:09:84:2c:81:73:fe:63:ba:61:91: 63:27:04:df:c2:27:f4:ee:02:12:cc:5c:4f:fb:fc: ad:29:f8:bf:c5:74:0e:f6:ce:10:b8:44:e2:e7:99: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:99:73:59:2B:D4:B2:0D:0B:44:A0:A5:59:E2:43:2B:AA:EF:76:69 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bf:0b:50:74:9e:5d:17:9e:62:d9:a5:82:38:97:ff:5a:fb: b7:22:3a:30:8b:4d:e6:3a:26:30:39:4a:a8:38:ac:94:80:f4: ad:1e:93:96:93:e3:f7:f2:c9:e9:3e:80:2c:07:8d:91:5d:2f: 5e:6b:e5:69:60:2d:56:72:60:ad:4e:cc:34:1e:12:5d:e8:4d: 3d:44:91:2c:18:ac:d4:01:cb:a7:55:ba:a5:7c:b0:8e:84:04: f2:2b:9f:92:d4:96:d5:f7:8d:e0:9b:03:a7:24:c2:87:12:1a: 0d:83:06:74:32:23:e6:24:dc:8a:4f:df:2c:2e:2e:b8:88:f7: 70:99:c9:28:79:90:d2:f8:21:74:32:c5:c7:6f:59:73:48:66: df:d8:84:bf:dc:77:a3:4b:2d:ef:30:d9:7c:e5:f2:50:63:d3: 24:9d:5d:97:5d:1f:69:da:d5:50:2d:71:fb:02:30:5a:5a:bc: 12:99:1f:91:2f:a4:d9:e9:e4:4c:c8:51:a9:f2:44:d3:79:66: 94:af:ee:c6:a2:e6:58:08:09:56:d9:e4:4e:54:2f:10:19:60: 6a:fc:f6:74:95:b7:92:56:d3:69:c8:ea:2c:7c:a3:8c:ff:8a: bb:e0:da:97:8e:cf:eb:58:42:18:f1:72:20:30:17:ce:65:04: 20:cf:f0:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwNTMxMDMzMjQzWhcNMjUwNjA3MDMzMjQzWjAYMRYwFAYD VQQDEw02ODNhNzg1Yy1kNWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hD/JOY1QL8fOmpxGxiQ6GhUGEc2LGHqdxZhEsxdq2Nxe69ITTZhVwJOW3bc 8gahV0yBh3hJX/5Pon/zYGYtrTSDT0R1riXp5L1oZBli+oxGTwHucjy+J2GZuJvr 8G6EaijN0pbNQzvkzsIcId5P1b6qxmX3yTck+z/k6zsCoYA2enrUBkshdJx1ipsd mWDCeJW/jJM+1pM4vZutRuflL04ZsM8RnOfRhUCItWXaTYKJcgTZ7bo9zakSQS23 Va7gytq0k1a4kN5Xm7RYBqHJzsp+uGLkIQmELIFz/mO6YZFjJwTfwif07gISzFxP +/ytKfi/xXQO9s4QuETi55mL0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaZc1kr 1LINC0SgpVniQyuq73ZpMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdvwtQdJ5dF55i2aWCOJf/Wvu3Ijowi03mOiYwOUqoOKyUgPStHpOW k+P38snpPoAsB42RXS9ea+VpYC1WcmCtTsw0HhJd6E09RJEsGKzUAcunVbqlfLCO hATyK5+S1JbV943gmwOnJMKHEhoNgwZ0MiPmJNyKT98sLi64iPdwmckoeZDS+CF0 MsXHb1lzSGbf2IS/3HejSy3vMNl85fJQY9MknV2XXR9p2tVQLXH7AjBaWrwSmR+R L6TZ6eRMyFGp8kTTeWaUr+7GouZYCAlW2eROVC8QGWBq/PZ0lbeSVtNpyOosfKOM /4q74NqXjs/rWEIY8XIgMBfOZQQgz/CD -----END CERTIFICATE-----Generated at Sat May 31 14:49:42 2025 by rpki-client