$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: pNB7DA4Mp69B+78xLRRRLJQXmqRCUdqPPzy261JSkyU= Subject key identifier: 78:F8:AC:DF:D7:54:24:29:8B:B2:45:90:F9:B2:4C:02:1A:AF:BE:39 Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 06D6 Signing time: Sun 04 May 2025 21:48:04 +0000 Manifest this update: Sun 04 May 2025 21:48:03 +0000 Manifest next update: Sun 11 May 2025 21:48:03 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: vmUNrV6VdpdfeHzJkg8Zlk6RpBprRdRYkhXvhxICkSI=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: May 4 21:48:03 2025 GMT Not After : May 11 21:48:03 2025 GMT Subject: CN=6817e094-fd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:c6:ce:09:7d:96:f6:ad:e5:ac:1a:4b:23: e1:a3:7e:ab:12:52:bc:62:1a:16:74:ac:1f:af:c0: 3b:4b:ba:fe:94:37:d6:50:0d:cb:04:47:6a:d8:67: 41:d3:20:41:45:c5:3c:96:10:5e:2b:e8:c6:d0:56: 8f:f5:be:20:6c:c5:f2:ef:e4:1a:df:2a:59:7b:25: ae:f7:82:3f:4b:71:37:3b:96:b4:3a:5a:fe:0b:15: a6:52:94:7a:dd:7e:2b:94:b2:4c:ea:5a:7e:b0:be: f1:22:5a:06:ca:17:88:88:2c:7c:ad:f7:29:c9:ca: 45:a4:52:bd:c5:d0:61:15:1b:2b:03:5f:86:a4:a6: 99:04:c1:05:b9:87:3d:51:42:38:ce:32:a7:2c:45: 1e:3b:b9:39:41:55:10:59:3a:84:18:63:e5:41:85: f7:a6:31:87:2d:ec:ff:9e:b8:29:f5:b6:75:5c:ca: bd:1e:bf:ec:c3:93:61:e6:c3:1d:63:18:7c:74:98: 42:ba:de:ae:d9:7f:46:b3:5c:cc:66:79:e6:78:0b: e9:f1:82:c7:62:1b:b8:2c:26:4b:9a:77:2a:94:00: 2c:ad:93:96:87:94:a2:ef:c5:65:c0:0d:02:b0:5c: 02:90:fa:11:04:61:95:29:46:7e:02:33:6b:d4:7b: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F8:AC:DF:D7:54:24:29:8B:B2:45:90:F9:B2:4C:02:1A:AF:BE:39 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:47:1a:53:37:db:07:c4:ee:03:fd:7a:cc:60:10:d7:cb:c2: cc:e8:81:48:ad:f5:5e:25:83:12:b8:90:6a:96:dc:18:b6:3d: ad:3a:9a:cf:9f:36:3d:55:dc:7d:90:28:ee:2d:4d:db:4e:78: 50:a6:28:bf:48:46:97:3e:0f:10:68:4f:69:68:40:0b:ed:de: cd:df:cf:a3:22:e3:4a:fe:00:38:9e:df:ec:e7:8f:ba:c9:7d: a5:84:ef:97:2c:45:c3:57:3d:40:ee:e4:d9:4e:1b:24:f7:dc: 34:d3:2d:00:2f:4e:d2:e7:5a:94:eb:55:a9:07:b5:69:fa:11: 12:de:2c:bf:ef:8a:98:7d:52:97:aa:20:bf:4e:71:3b:d9:64: 54:4b:9a:97:66:e0:c3:3f:72:b3:ed:7d:7a:06:bb:67:08:db: b5:cc:90:75:9e:1b:ef:43:43:fc:c1:fc:28:ac:6a:4d:c4:52: 7b:9d:c5:6e:8d:31:cd:1a:c0:cd:3b:7a:2c:e9:3f:4a:2d:38: 34:cd:5a:71:d9:3b:ee:64:ad:02:04:f7:f6:8b:3d:a5:ee:ae: 95:25:5e:3d:b0:00:ba:46:09:3e:67:b9:29:ee:11:77:23:df: 8b:15:4d:fe:be:80:a7:8c:b8:0e:cf:75:60:59:63:08:af:3f: a1:40:94:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwNTA0MjE0ODAzWhcNMjUwNTExMjE0ODAzWjAYMRYwFAYD VQQDEw02ODE3ZTA5NC1mZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmHGzgl9lvat5awaSyPho36rElK8YhoWdKwfr8A7S7r+lDfWUA3LBEdq2GdB 0yBBRcU8lhBeK+jG0FaP9b4gbMXy7+Qa3ypZeyWu94I/S3E3O5a0Olr+CxWmUpR6 3X4rlLJM6lp+sL7xIloGyheIiCx8rfcpycpFpFK9xdBhFRsrA1+GpKaZBMEFuYc9 UUI4zjKnLEUeO7k5QVUQWTqEGGPlQYX3pjGHLez/nrgp9bZ1XMq9Hr/sw5Nh5sMd Yxh8dJhCut6u2X9Gs1zMZnnmeAvp8YLHYhu4LCZLmncqlAAsrZOWh5Si78VlwA0C sFwCkPoRBGGVKUZ+AjNr1HvtAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj4rN/X VCQpi7JFkPmyTAIar745MB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJRxpTN9sHxO4D/XrMYBDXy8LM6IFIrfVeJYMSuJBqltwYtj2tOprP nzY9Vdx9kCjuLU3bTnhQpii/SEaXPg8QaE9paEAL7d7N38+jIuNK/gA4nt/s54+6 yX2lhO+XLEXDVz1A7uTZThsk99w00y0AL07S51qU61WpB7Vp+hES3iy/74qYfVKX qiC/TnE72WRUS5qXZuDDP3Kz7X16BrtnCNu1zJB1nhvvQ0P8wfworGpNxFJ7ncVu jTHNGsDNO3os6T9KLTg0zVpx2TvuZK0CBPf2iz2l7q6VJV49sAC6Rgk+Z7kp7hF3 I9+LFU3+voCnjLgOz3VgWWMIrz+hQJS2 -----END CERTIFICATE-----Generated at Mon May 5 03:09:32 2025 by rpki-client