$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: bgcPqpwkoNWUVERs5+3JI/7ml2dI76eolNhVJfVzu3g= Subject key identifier: 2A:19:EC:04:F5:57:06:FC:C7:C7:B0:21:6B:EC:CD:45:AB:50:DB:52 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0116 Signing time: Sat 31 May 2025 04:33:32 +0000 Manifest this update: Sat 31 May 2025 04:33:32 +0000 Manifest next update: Sat 07 Jun 2025 04:33:32 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: XXhxuH3ErgHbbj5uHRV7oQPou09Z3da7Agn9mJmArPo=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: May 31 04:33:32 2025 GMT Not After : Jun 7 04:33:32 2025 GMT Subject: CN=683a869c-4a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:d6:35:7c:b2:fc:8c:eb:8d:00:fa:30:4e: 0f:ba:13:44:e7:a5:6a:97:d6:36:e0:ea:b8:27:be: ba:16:67:77:0a:6a:dc:d5:d0:50:0e:fd:e4:24:4a: 8a:4e:89:13:4f:ab:f8:35:fb:c1:1e:4c:a8:c5:ab: 27:28:30:6b:b4:c9:56:4a:ff:db:48:ee:c1:b2:fa: 07:42:e5:64:18:b0:b9:20:23:bb:ba:90:5a:3d:11: 42:c6:b2:f4:ba:fc:21:5a:fd:57:ae:d8:5f:e9:56: 50:6c:f7:ec:23:5d:38:fb:76:60:38:36:61:32:d1: 9b:89:49:6e:6a:e0:59:4e:28:c8:82:14:7d:90:62: db:31:48:88:d9:73:70:36:76:90:c2:1b:ff:c4:3c: d8:fe:6f:5b:62:8e:51:aa:06:2e:be:41:eb:92:71: df:33:42:83:39:01:c5:33:f2:41:72:6a:64:37:0c: f7:a1:51:fb:97:6b:39:fd:77:a5:2b:23:51:d6:d9: a5:f4:bd:97:d6:00:84:91:d8:90:2e:04:24:93:fd: a3:38:2d:51:ba:1f:9d:3c:2a:a4:e0:2c:fa:04:7d: 47:5d:55:78:50:99:82:d5:9e:4f:d8:46:5f:ef:fd: fc:86:02:da:47:2c:cc:35:a5:16:b1:05:88:7a:33: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:19:EC:04:F5:57:06:FC:C7:C7:B0:21:6B:EC:CD:45:AB:50:DB:52 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:b4:cc:fd:b0:6d:f2:a9:19:77:6e:b6:ae:9a:b0:e1:3a:6e: 7c:59:42:9e:1b:68:e0:cc:63:37:fd:03:f2:98:6d:73:2a:e7: 66:9e:f9:49:1b:0a:8c:af:60:ea:23:fd:cd:76:71:03:49:5b: e2:d7:3a:08:a0:be:4d:b6:b6:77:ba:c2:71:e0:c3:4c:e1:c2: bd:23:04:c5:1d:83:60:69:e9:0c:5e:db:62:2c:5f:44:ea:1a: 1a:fd:eb:43:1d:c6:8c:70:97:f7:9d:52:49:f0:f6:39:79:54: 83:1a:08:a0:cf:60:cf:5f:e8:be:27:28:9f:ae:15:7b:33:56: 86:fa:d5:08:77:2e:98:82:0d:a9:d2:eb:11:57:7b:ef:00:e2: f4:72:76:33:d8:f2:0f:1f:da:ac:ba:0a:e0:b3:1c:7b:a9:49: a3:54:ae:cd:95:2c:72:fe:f4:cf:98:5d:18:88:15:54:33:1d: 91:46:b8:6b:d9:4a:78:79:40:49:8c:8e:83:31:d7:39:2f:f6: 97:6e:18:77:bb:14:d7:14:fe:d1:ae:0e:2b:b1:13:8d:da:37: 78:4f:a8:b8:de:31:9d:d2:1e:6a:14:f9:85:23:de:97:00:17: d8:75:c6:bf:ff:4c:7e:d4:e2:5f:80:cd:ef:9d:20:01:3a:1b: d5:0a:56:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNTMxMDQzMzMyWhcNMjUwNjA3MDQzMzMyWjAYMRYwFAYD VQQDEw02ODNhODY5Yy00YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotXWNXyy/IzrjQD6ME4PuhNE56Vql9Y24Oq4J766Fmd3Cmrc1dBQDv3kJEqK TokTT6v4NfvBHkyoxasnKDBrtMlWSv/bSO7BsvoHQuVkGLC5ICO7upBaPRFCxrL0 uvwhWv1Xrthf6VZQbPfsI104+3ZgODZhMtGbiUluauBZTijIghR9kGLbMUiI2XNw NnaQwhv/xDzY/m9bYo5RqgYuvkHrknHfM0KDOQHFM/JBcmpkNwz3oVH7l2s5/Xel KyNR1tml9L2X1gCEkdiQLgQkk/2jOC1Ruh+dPCqk4Cz6BH1HXVV4UJmC1Z5P2EZf 7/38hgLaRyzMNaUWsQWIejONuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoZ7AT1 Vwb8x8ewIWvszUWrUNtSMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCotMz9sG3yqRl3braumrDhOm58WUKeG2jgzGM3/QPymG1zKudmnvlJ GwqMr2DqI/3NdnEDSVvi1zoIoL5NtrZ3usJx4MNM4cK9IwTFHYNgaekMXttiLF9E 6hoa/etDHcaMcJf3nVJJ8PY5eVSDGgigz2DPX+i+JyifrhV7M1aG+tUIdy6Ygg2p 0usRV3vvAOL0cnYz2PIPH9qsugrgsxx7qUmjVK7NlSxy/vTPmF0YiBVUMx2RRrhr 2Up4eUBJjI6DMdc5L/aXbhh3uxTXFP7Rrg4rsRON2jd4T6i43jGd0h5qFPmFI96X ABfYdca//0x+1OJfgM3vnSABOhvVClbL -----END CERTIFICATE-----Generated at Sat May 31 16:40:38 2025 by rpki-client