$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft File: jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json) Hash identifier: TVKRVkKgBz/iCbrzIYY4+mv/3fuKhbq2j/oj7OLpTiA= Subject key identifier: 17:43:08:59:CC:6A:ED:4B:87:2A:9A:A2:36:8D:03:54:CC:CB:BB:B3 Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C Certificate issuer: /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft Manifest number: 96 Signing time: Wed 07 May 2025 05:28:08 +0000 Manifest this update: Wed 07 May 2025 05:28:07 +0000 Manifest next update: Wed 14 May 2025 05:28:07 +0000 Files and hashes: 1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: MYcu6m7fThBA7pdO0D+OXpi4RgrKSwcjrpinNDz3684=) 2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: sQnDZ28ShoG2UHrLE3jAaWJSXhAZi6W2QAWeAKQ2Dy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C Validity Not Before: May 7 05:28:07 2025 GMT Not After : May 14 05:28:07 2025 GMT Subject: CN=681aef67-bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:81:c6:27:c2:b5:ce:66:c5:25:ee:4b:98: 39:3c:73:a8:ab:d6:86:98:be:97:e8:91:99:44:6c: 05:d1:25:be:1e:08:52:ee:ac:ca:c3:44:ea:38:e1: 95:48:ad:14:17:a5:74:e3:1a:bc:74:46:f2:53:7e: c7:5c:b1:30:77:9e:0a:24:79:35:8d:98:2a:e4:c8: a8:da:2a:0c:b2:eb:f5:c5:dc:e5:9a:fc:70:e0:4d: 01:03:95:4c:76:4e:f9:a9:d3:13:25:bf:7e:b1:56: 17:6f:11:90:dd:00:b1:86:97:97:36:31:65:26:d5: 0e:cf:d9:a4:8d:3a:4e:93:02:ef:b5:9e:24:a3:45: 7c:47:58:43:b4:eb:12:53:41:b9:1c:be:c3:4e:16: 6f:3c:99:2b:70:d6:cf:24:f1:03:0d:85:21:91:54: 7a:ba:53:aa:de:62:12:d3:dd:8f:1b:33:82:1c:ee: 31:0a:9a:40:ec:20:8f:bf:eb:f4:66:74:87:c8:76: a5:32:7e:55:13:9b:fa:38:89:1f:45:c1:f2:d9:18: 1e:44:db:7d:3e:db:2b:a9:35:19:e6:ec:96:87:b0: ad:8c:47:26:ac:6f:86:8a:ca:1f:2c:5d:d2:a8:b2: da:54:fc:80:26:e4:e0:5f:c9:60:a7:b1:d1:d8:95: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:08:59:CC:6A:ED:4B:87:2A:9A:A2:36:8D:03:54:CC:CB:BB:B3 X509v3 Authority Key Identifier: keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:be:d9:fa:20:b2:49:29:9c:05:26:38:e8:62:a9:18:27:c9: e6:27:1c:4c:7a:9d:7c:c1:f5:1b:fd:00:92:81:bc:25:c4:0c: 96:67:0e:1d:11:83:3c:13:e2:11:9a:2d:98:e4:cb:57:1e:2d: e8:9c:6e:ed:03:05:08:8e:05:6f:cb:c5:7a:c6:3e:e6:c2:f9: f1:6e:26:9c:08:f5:d3:3e:b4:bd:d4:5f:2f:14:48:19:73:ba: 85:1c:19:2f:ce:e0:05:2a:59:05:9c:36:f1:89:36:81:78:a0: d7:bd:e5:59:1d:b6:6a:31:46:60:4f:3c:0a:14:29:c7:f5:70: 89:1e:72:c5:3e:b3:ab:13:96:86:19:b9:b0:7a:9c:4d:83:c6: 16:40:0c:62:a1:2f:60:52:98:e2:28:a1:bb:f7:32:44:43:3c: 06:3f:e2:4b:85:5b:c8:1c:ff:91:23:bd:6f:c7:ba:8e:d5:d8: 50:55:9d:ce:95:c3:ac:fb:5b:72:56:40:fd:b6:75:9c:d6:2a: f7:8e:ab:74:8b:eb:76:cd:da:56:15:bc:72:6e:ff:80:5d:c5: 52:47:f5:25:bb:5b:d5:3a:e1:48:0a:e2:97:b8:b2:f6:5d:b3: f7:40:c2:5d:96:eb:d8:7b:16:2f:29:5b:15:3c:42:ce:0d:94: 0e:51:44:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3 NTdGMUU4MEMwHhcNMjUwNTA3MDUyODA3WhcNMjUwNTE0MDUyODA3WjAYMRYwFAYD VQQDEw02ODFhZWY2Ny1iZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/aBxifCtc5mxSXuS5g5PHOoq9aGmL6X6JGZRGwF0SW+HghS7qzKw0TqOOGV SK0UF6V04xq8dEbyU37HXLEwd54KJHk1jZgq5Mio2ioMsuv1xdzlmvxw4E0BA5VM dk75qdMTJb9+sVYXbxGQ3QCxhpeXNjFlJtUOz9mkjTpOkwLvtZ4ko0V8R1hDtOsS U0G5HL7DThZvPJkrcNbPJPEDDYUhkVR6ulOq3mIS092PGzOCHO4xCppA7CCPv+v0 ZnSHyHalMn5VE5v6OIkfRcHy2RgeRNt9PtsrqTUZ5uyWh7CtjEcmrG+GisofLF3S qLLaVPyAJuTgX8lgp7HR2JWhJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdDCFnM au1LhyqaojaNA1TMy7uzMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1 QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2 QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0 U1ZXQ2FpY29vekIxZng2QXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmvtn6ILJJKZwFJjjoYqkYJ8nmJxxMep18wfUb/QCSgbwlxAyWZw4d EYM8E+IRmi2Y5MtXHi3onG7tAwUIjgVvy8V6xj7mwvnxbiacCPXTPrS91F8vFEgZ c7qFHBkvzuAFKlkFnDbxiTaBeKDXveVZHbZqMUZgTzwKFCnH9XCJHnLFPrOrE5aG GbmwepxNg8YWQAxioS9gUpjiKKG79zJEQzwGP+JLhVvIHP+RI71vx7qO1dhQVZ3O lcOs+1tyVkD9tnWc1ir3jqt0i+t2zdpWFbxybv+AXcVSR/Ulu1vVOuFICuKXuLL2 XbP3QMJdluvYexYvKVsVPELODZQOUURK -----END CERTIFICATE-----Generated at Thu May 8 23:28:52 2025 by rpki-client