$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json) Hash identifier: lyueKOOoLRURfzYZD6OhSIaFB/i7dHvLQZVllfY8S3E= Subject key identifier: 61:AD:86:5B:54:9F:D7:57:E8:A4:67:0A:EB:0B:7E:27:BB:4D:3D:A4 Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Certificate serial: 0E0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft Manifest number: 0E00 Signing time: Wed 14 May 2025 17:57:36 +0000 Manifest this update: Wed 14 May 2025 17:57:35 +0000 Manifest next update: Wed 21 May 2025 17:57:35 +0000 Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: wPMPiEN/MPBvgOYIu+rXOxcCPu866bpQmNnGRMYmt9U=) 2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: 6yiyih3iYU5SXCZve8BQVAbNfjgN61udEXmY/BbF0dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3595 (0xe0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Validity Not Before: May 14 17:57:35 2025 GMT Not After : May 21 17:57:35 2025 GMT Subject: CN=6824d98f-e514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:8a:87:bc:74:ee:55:ce:94:fb:01:f1:eb: a8:e5:6b:4d:99:21:5d:3a:cd:a0:b9:c8:e3:96:28: bc:6f:48:b3:53:a5:8b:c2:5d:70:d8:5b:ea:f8:ce: 64:c8:25:bf:8f:41:22:11:c1:f1:41:10:29:45:d8: b0:21:38:db:af:70:b6:7a:d9:c0:05:27:ad:a6:ee: 77:2f:4b:28:d8:04:1b:36:e1:36:9a:05:70:b2:e5: 7d:fc:8d:02:ce:25:6b:c5:3f:b0:0a:f3:70:4c:75: 00:59:36:3f:2c:bf:58:55:e7:56:a4:1d:4d:b9:c4: d1:bf:c5:45:32:4e:4c:e1:3e:b8:0f:02:cd:d7:f7: 22:66:5e:8f:84:3b:b2:fe:5f:2b:3c:9c:7f:ce:85: a8:7b:ed:5f:52:f8:2c:88:2d:a4:3a:3d:36:af:85: 72:2e:51:df:a6:7a:d6:49:82:bb:8f:16:01:ca:c9: 70:35:b7:4a:b8:a5:d8:58:aa:3b:fa:19:be:12:2c: 61:b2:55:a9:f5:e5:b8:22:9a:10:55:9c:d3:77:ed: 49:2d:1d:c4:68:c4:32:64:6a:d4:23:c0:f4:ee:a3: 73:c6:7a:24:ac:3a:37:36:f6:c0:60:6c:05:ca:6d: 23:84:fb:ad:6e:34:09:1a:06:ee:00:2a:1e:45:84: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AD:86:5B:54:9F:D7:57:E8:A4:67:0A:EB:0B:7E:27:BB:4D:3D:A4 X509v3 Authority Key Identifier: keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:70:3d:ba:51:73:1e:e7:4c:a4:a8:c1:c6:8d:45:ad:bb:a9: 1b:76:63:84:2c:ca:5b:eb:0f:87:bc:d9:f0:6c:cd:8f:55:84: 83:e8:86:8e:11:62:15:1b:7d:88:9f:48:0d:34:80:50:41:56: 99:ef:c9:ca:34:82:c8:39:14:d7:34:fb:35:a1:4a:1f:27:72: 39:d3:ba:96:07:ab:07:39:99:63:77:fd:7e:bd:a8:8d:da:43: b4:b0:5b:2a:b8:a2:09:41:a3:ec:d0:ee:42:1d:7b:ed:99:44: 98:58:8b:c5:5d:a3:df:87:53:bf:e2:9d:d9:ff:b4:f8:2a:8f: b0:0c:a2:c1:a5:5e:77:55:31:4e:0f:2f:75:bd:15:45:f5:9b: 12:cd:1a:2d:2b:b7:34:0b:e9:ff:38:29:3c:0e:56:80:34:5e: 41:86:e1:87:87:8f:ca:fc:49:42:96:f1:55:bb:c0:b4:3b:fc: 2f:0c:56:cd:0d:14:ac:b6:fe:42:38:2f:cd:ba:61:1e:8c:78: 7c:51:9d:87:d1:04:ae:f6:47:44:bc:37:47:a1:39:73:20:e6: 16:02:80:3f:f9:5f:f6:24:b3:53:c4:02:3f:6e:ed:37:37:be: 15:f3:42:c1:f4:aa:25:16:93:b8:6a:ec:bd:15:be:a2:fe:02: 8f:24:07:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVGRDI5M0MyQTYz ODFCNUM0MjYwHhcNMjUwNTE0MTc1NzM1WhcNMjUwNTIxMTc1NzM1WjAYMRYwFAYD VQQDEw02ODI0ZDk4Zi1lNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAuKh7x07lXOlPsB8euo5WtNmSFdOs2gucjjlii8b0izU6WLwl1w2Fvq+M5k yCW/j0EiEcHxQRApRdiwITjbr3C2etnABSetpu53L0so2AQbNuE2mgVwsuV9/I0C ziVrxT+wCvNwTHUAWTY/LL9YVedWpB1NucTRv8VFMk5M4T64DwLN1/ciZl6PhDuy /l8rPJx/zoWoe+1fUvgsiC2kOj02r4VyLlHfpnrWSYK7jxYByslwNbdKuKXYWKo7 +hm+EixhslWp9eW4IpoQVZzTd+1JLR3EaMQyZGrUI8D07qNzxnokrDo3NvbAYGwF ym0jhPutbjQJGgbuACoeRYQSUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGthltU n9dX6KRnCusLfie7TT2kMB8GA1UdIwQYMBaAFCQ9kkN84jBQPlSO/Sk8KmOBtcQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNDNS8wMzY2RDdBRUFD RTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1GQS1WSTc5S1R3cVk0RzF4 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEMlNRM3ppTUZBLVZJNzlLVHdxWTRHMXhDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjNDNS8wMzY2RDdBRUFDRTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1G QS1WSTc5S1R3cVk0RzF4Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHcD26UXMe50ykqMHGjUWtu6kbdmOELMpb6w+HvNnwbM2PVYSD6IaO EWIVG32In0gNNIBQQVaZ78nKNILIORTXNPs1oUofJ3I507qWB6sHOZljd/1+vaiN 2kO0sFsquKIJQaPs0O5CHXvtmUSYWIvFXaPfh1O/4p3Z/7T4Ko+wDKLBpV53VTFO Dy91vRVF9ZsSzRotK7c0C+n/OCk8DlaANF5BhuGHh4/K/ElClvFVu8C0O/wvDFbN DRSstv5COC/NumEejHh8UZ2H0QSu9kdEvDdHoTlzIOYWAoA/+V/2JLNTxAI/bu03 N74V80LB9KolFpO4auy9Fb6i/gKPJAdv -----END CERTIFICATE-----Generated at Wed May 14 22:56:04 2025 by rpki-client