$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft File: jNzleKI55Yzn_naDu0dp-dxVIro.mft (raw, json) Hash identifier: vAB2SrDBEys6fSBe/ovhlS15hHpGlnN3qBXWntXpNKI= Subject key identifier: D4:E7:4F:96:0D:01:5D:F1:90:BD:D7:9C:45:2F:E4:69:00:6A:F3:64 Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA Certificate issuer: /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft Manifest number: 0128 Signing time: Sat 31 May 2025 04:16:28 +0000 Manifest this update: Sat 31 May 2025 04:16:28 +0000 Manifest next update: Sat 07 Jun 2025 04:16:28 +0000 Files and hashes: 1: jNzleKI55Yzn_naDu0dp-dxVIro.crl (hash: I3PdSd0fuAp7Avm5dEXAicli8MZgjzZvGX0m7JRLyRY=) 2: DB6928E4635411EF8B6D364BC4F9AE02.roa (hash: v+Dp0K1hdXxl3OPWO8uxhWsiC5bQl5Ff5tXnCdcq4MU=) 3: DB0532B2635411EF8B6D364BC4F9AE02.roa (hash: aBvIA0eeQ14OUWSBauC6xUgN/Yota75Po8HtX8rLsaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2A5, serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA Validity Not Before: May 31 04:16:28 2025 GMT Not After : Jun 7 04:16:28 2025 GMT Subject: CN=683a829c-568d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:e2:77:c4:16:72:5a:3c:a1:89:44:6d:ca: c4:79:e4:71:e3:da:52:b0:b7:a5:7a:7e:a8:a5:8b: 0b:99:cd:78:f4:f0:ff:49:96:30:40:6a:4a:e0:1b: 05:e1:a3:a8:b4:c5:c3:fb:28:1d:b0:6d:3b:32:9b: c1:04:23:9d:e3:6d:26:41:82:26:4c:4c:1f:37:9e: 7b:ff:78:ce:5b:0f:5e:14:8f:b1:2e:d5:fb:59:03: 62:90:9e:5f:c7:ef:55:d0:89:2e:59:65:c8:9e:b9: 84:96:39:43:8e:a9:00:61:0c:d6:e8:d8:e4:18:9d: e1:98:16:62:33:15:62:a9:36:fa:41:1d:18:59:92: 2b:11:15:4d:be:16:a7:39:e1:d8:23:18:e3:90:47: 58:0e:38:8d:d2:17:9b:8d:8d:2b:e0:61:a9:03:23: d5:88:65:ef:65:ba:79:3d:ff:e0:6f:22:3f:5e:65: e6:fe:ba:52:42:ac:a9:3e:f0:64:fb:ee:50:6f:37: 11:fb:eb:76:e8:9d:fd:1c:e3:83:7a:82:8f:f4:7e: 0a:8e:2a:54:84:cf:62:59:d5:e5:40:2f:91:95:bd: 33:99:04:b3:8f:71:36:3a:d4:f0:aa:7a:e9:c9:4e: b6:cb:6c:50:15:3b:33:f1:4c:55:a1:b7:fe:6f:91: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E7:4F:96:0D:01:5D:F1:90:BD:D7:9C:45:2F:E4:69:00:6A:F3:64 X509v3 Authority Key Identifier: keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:fe:93:17:f9:d4:59:98:31:22:03:85:0b:ac:15:b0:d4: f9:7e:66:99:ba:94:7c:09:51:16:b6:54:08:18:da:b7:7c:6c: bf:b8:54:25:8b:b3:09:42:85:4b:23:a7:1d:fb:cd:7a:69:d7: ef:05:4c:94:95:6a:d7:b9:21:98:be:75:ce:57:39:24:80:b1: 7b:42:4d:40:93:07:53:c3:c9:11:70:0d:0b:46:ee:2f:a2:85: b3:bf:2c:89:e1:9e:da:e5:78:ea:4d:d5:cc:f3:71:6f:28:45: 71:e2:7c:dc:80:af:df:3a:3a:06:bf:9e:48:32:5b:9b:3c:70: f0:e5:64:3e:64:14:3d:d9:93:fd:d2:1f:08:88:5b:29:3b:95: 46:e5:56:28:5a:90:5e:ae:80:37:71:4e:da:55:cf:35:9e:ed: 2c:a6:63:0a:ca:05:19:93:0b:be:a4:da:d2:42:22:b9:86:97: d0:08:4d:6f:f3:51:2a:ed:1c:00:42:55:dd:b0:0b:38:46:1c: 45:74:fd:2c:b9:21:63:53:14:05:6a:b3:58:df:f3:2a:12:17: ff:a2:71:d0:26:05:8a:79:28:67:f9:19:52:9e:0a:2d:5a:35: e4:5a:31:f2:31:0f:8f:98:d6:98:15:be:29:fb:0a:b1:d6:9a: 61:b5:47:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQTUxMTAvBgNVBAUTKDhDRENFNTc4QTIzOUU1OENFN0ZFNzY4M0JCNDc2OUY5 REM1NTIyQkEwHhcNMjUwNTMxMDQxNjI4WhcNMjUwNjA3MDQxNjI4WjAYMRYwFAYD VQQDEw02ODNhODI5Yy01NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5bid8QWclo8oYlEbcrEeeRx49pSsLelen6opYsLmc149PD/SZYwQGpK4BsF 4aOotMXD+ygdsG07MpvBBCOd420mQYImTEwfN557/3jOWw9eFI+xLtX7WQNikJ5f x+9V0IkuWWXInrmEljlDjqkAYQzW6NjkGJ3hmBZiMxViqTb6QR0YWZIrERVNvhan OeHYIxjjkEdYDjiN0hebjY0r4GGpAyPViGXvZbp5Pf/gbyI/XmXm/rpSQqypPvBk ++5QbzcR++t26J39HOODeoKP9H4KjipUhM9iWdXlQC+Rlb0zmQSzj3E2OtTwqnrp yU62y2xQFTsz8UxVobf+b5HnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTnT5YN AV3xkL3XnEUv5GkAavNkMB8GA1UdIwQYMBaAFIzc5XiiOeWM5/52g7tHafncVSK6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBNS9BMUMwNEQwQTc2 Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZem5fbmFEdTBkcC1keFZJ cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOemxlS0k1NVl6bl9uYUR1MGRwLWR4Vklyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBNS9BMUMwNEQwQTc2Q0IxMUVFOTNGNTg3NDdDNEY5QUUwMi9qTnpsZUtJNTVZ em5fbmFEdTBkcC1keFZJcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw6P6TF/nUWZgxIgOFC6wVsNT5fmaZupR8CVEWtlQIGNq3fGy/uFQl i7MJQoVLI6cd+816adfvBUyUlWrXuSGYvnXOVzkkgLF7Qk1AkwdTw8kRcA0LRu4v ooWzvyyJ4Z7a5XjqTdXM83FvKEVx4nzcgK/fOjoGv55IMlubPHDw5WQ+ZBQ92ZP9 0h8IiFspO5VG5VYoWpBeroA3cU7aVc81nu0spmMKygUZkwu+pNrSQiK5hpfQCE1v 81Eq7RwAQlXdsAs4RhxFdP0suSFjUxQFarNY3/MqEhf/onHQJgWKeShn+RlSngot WjXkWjHyMQ+PmNaYFb4p+wqx1pphtUeo -----END CERTIFICATE-----Generated at Sat May 31 17:36:00 2025 by rpki-client