$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft File: CjScg-ftMh2jsISUxPjwv9u2L3o.mft (raw, json) Hash identifier: N73T1dM+vjXPa+FgvtKS+yf74J1r9V3+hQ4MCTDfApU= Subject key identifier: E8:E3:AA:84:62:01:63:68:2A:E5:33:77:39:AF:DC:C3:44:FE:01:7A Authority key identifier: 0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A Certificate issuer: /CN=A91342C5/serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft Manifest number: 0381 Signing time: Tue 13 May 2025 00:42:19 +0000 Manifest this update: Tue 13 May 2025 00:42:19 +0000 Manifest next update: Tue 20 May 2025 00:42:19 +0000 Files and hashes: 1: CjScg-ftMh2jsISUxPjwv9u2L3o.crl (hash: NiBcTogah9DYJ1oeqbOeF2ZZCb/uWTuJLvn8edROe28=) 2: E9F94792A5CC11EC85A86A1FC4F9AE02.roa (hash: ZjyoOMRqPpVlOIzkgXACfYtyr3NiZQkCHIzuQArj1yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=0A349C83E7ED321DA3B08494C4F8F0BFDBB62F7A Validity Not Before: May 13 00:42:19 2025 GMT Not After : May 20 00:42:19 2025 GMT Subject: CN=6822956b-5e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:0c:77:85:bb:9a:70:ee:fb:f3:e6:8b:00: d4:e5:85:da:c7:6b:17:df:0c:25:2e:77:30:8f:b0: a3:8c:30:44:85:84:42:f6:e1:70:e1:a0:8b:61:3f: 6c:08:a5:1a:93:49:52:09:fe:1e:40:01:25:e0:05: 5c:c7:86:eb:33:8d:9e:ee:c5:64:78:78:5c:2c:1c: 9a:82:73:c1:54:de:8f:1d:a9:bc:f9:87:d5:ed:4b: a9:31:f8:1c:82:70:4f:d0:31:6d:83:74:ff:26:92: c9:3c:6d:ea:6a:a7:5a:97:32:a1:ec:8f:ea:81:ae: b2:ef:a8:4d:6f:22:d9:c3:d7:f9:ec:29:d2:2f:19: 26:3f:c3:26:42:f3:0f:58:29:a0:0f:a2:68:ad:5e: 94:e1:a4:69:fc:14:2b:4b:f8:87:64:0a:78:39:75: 1b:b1:e2:ef:1e:68:c4:a0:ef:23:bb:c6:d5:05:b2: 13:80:2f:ee:ad:ca:d2:ea:31:32:72:47:f4:dd:3b: 8a:ab:30:d5:09:c5:92:95:b3:f9:15:19:62:24:7e: 95:9d:f9:ac:91:83:bd:45:b7:14:1c:03:2c:d4:08: e9:cc:a3:68:21:e7:2c:75:8c:75:51:b9:f1:25:42: d7:ef:dd:bc:12:1f:fa:40:d1:ec:4b:41:34:6b:44: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E3:AA:84:62:01:63:68:2A:E5:33:77:39:AF:DC:C3:44:FE:01:7A X509v3 Authority Key Identifier: keyid:0A:34:9C:83:E7:ED:32:1D:A3:B0:84:94:C4:F8:F0:BF:DB:B6:2F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CjScg-ftMh2jsISUxPjwv9u2L3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/292649CCA4E911ECAF3FB152C4F9AE02/CjScg-ftMh2jsISUxPjwv9u2L3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e7:3d:0d:72:5a:93:3b:2e:9f:3c:6c:bd:b5:9d:ab:5b:85: 00:a2:17:7a:65:c5:48:ab:f2:e3:de:24:cd:44:8b:79:b7:8a: 7a:55:42:c5:35:04:a1:d5:40:1e:28:ba:99:c4:14:fb:fe:3a: a3:e9:1f:59:69:76:7a:9c:6b:58:39:93:8c:47:94:d8:0d:a0: 21:12:de:36:71:7d:12:6b:4c:f7:fb:05:fb:aa:90:a4:eb:40: db:54:a3:4e:79:af:40:e1:58:4f:4d:f2:33:19:ba:26:81:c6: 41:92:b0:3a:30:2d:bd:33:fc:00:06:92:54:de:f8:80:19:e5: cc:33:88:db:72:81:11:61:c7:65:da:47:b4:fd:fc:6d:9d:5f: 74:a6:d0:97:34:81:3f:81:e9:40:70:5f:49:ab:d8:d9:3d:56: c7:ec:b5:04:8e:1a:33:99:5e:07:0a:69:bc:58:63:22:06:5e: 49:3d:6f:b8:3d:5a:91:69:97:a7:66:47:05:d8:4f:63:0e:77: 04:b8:26:83:99:bb:5e:1e:7f:9a:b3:2b:3c:dd:2d:d0:c7:8e: 50:58:12:19:e2:9f:67:b2:a8:12:a0:d1:f5:6f:92:00:d0:5f: c9:26:04:3f:49:b9:20:b1:d5:7a:1d:89:84:17:8e:f8:74:cc: 6d:37:ae:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDBBMzQ5QzgzRTdFRDMyMURBM0IwODQ5NEM0RjhGMEJG REJCNjJGN0EwHhcNMjUwNTEzMDA0MjE5WhcNMjUwNTIwMDA0MjE5WjAYMRYwFAYD VQQDEw02ODIyOTU2Yi01ZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWcMd4W7mnDu+/PmiwDU5YXax2sX3wwlLncwj7CjjDBEhYRC9uFw4aCLYT9s CKUak0lSCf4eQAEl4AVcx4brM42e7sVkeHhcLByagnPBVN6PHam8+YfV7UupMfgc gnBP0DFtg3T/JpLJPG3qaqdalzKh7I/qga6y76hNbyLZw9f57CnSLxkmP8MmQvMP WCmgD6JorV6U4aRp/BQrS/iHZAp4OXUbseLvHmjEoO8ju8bVBbITgC/urcrS6jEy ckf03TuKqzDVCcWSlbP5FRliJH6VnfmskYO9RbcUHAMs1AjpzKNoIecsdYx1Ubnx JULX7928Eh/6QNHsS0E0a0SJ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjjqoRi AWNoKuUzdzmv3MNE/gF6MB8GA1UdIwQYMBaAFAo0nIPn7TIdo7CElMT48L/bti96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8yOTI2NDlDQ0E0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1oMmpzSVNVeFBqd3Y5dTJM M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqU2NnLWZ0TWgyanNJU1V4UGp3djl1Mkwzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDJDNS8yOTI2NDlDQ0E0RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9DalNjZy1mdE1o MmpzSVNVeFBqd3Y5dTJMM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA85z0NclqTOy6fPGy9tZ2rW4UAohd6ZcVIq/Lj3iTNRIt5t4p6VULF NQSh1UAeKLqZxBT7/jqj6R9ZaXZ6nGtYOZOMR5TYDaAhEt42cX0Sa0z3+wX7qpCk 60DbVKNOea9A4VhPTfIzGbomgcZBkrA6MC29M/wABpJU3viAGeXMM4jbcoERYcdl 2ke0/fxtnV90ptCXNIE/gelAcF9Jq9jZPVbH7LUEjhozmV4HCmm8WGMiBl5JPW+4 PVqRaZenZkcF2E9jDncEuCaDmbteHn+asys83S3Qx45QWBIZ4p9nsqgSoNH1b5IA 0F/JJgQ/SbkgsdV6HYmEF474dMxtN65Y -----END CERTIFICATE-----Generated at Wed May 14 13:20:45 2025 by rpki-client