$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: xLachwZZ4Z9dBVmFSyVtwbIXEfNslsgr4vwV1H0kbIA= Subject key identifier: 3B:9B:4A:F5:8D:78:EC:DE:36:AE:CE:F4:AB:71:34:AF:FE:5E:32:F8 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C31 Signing time: Sat 10 May 2025 18:23:27 +0000 Manifest this update: Sat 10 May 2025 18:23:26 +0000 Manifest next update: Sat 17 May 2025 18:23:26 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: SlVrL0qqRwCaSvbjS/+s1k68zN+aRGfz1/6/DGIb7Fo=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: Ze8Yanp+k5PHmh85OnFiLG44bNuhfOzahNgejKqhDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: May 10 18:23:26 2025 GMT Not After : May 17 18:23:26 2025 GMT Subject: CN=681f999e-9c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:4e:0b:2b:1b:bd:5e:11:f3:e7:d1:1b:ef: 3f:66:43:80:cc:39:ff:7c:d6:6c:98:b8:7d:84:b0: e2:30:86:e0:49:51:72:92:f1:35:45:a8:66:12:ca: e8:38:19:ab:7f:b9:e5:3f:d9:a0:36:29:b9:a3:db: 81:e7:ba:43:68:f6:84:fc:70:11:c0:74:88:3a:30: 2a:65:3e:a4:1a:59:ea:3b:80:f4:24:ba:8a:6d:75: e0:29:6c:f2:18:9f:8c:3d:de:64:8a:bd:0b:2f:df: ab:f8:43:b6:56:db:44:6c:2f:e9:40:24:eb:bc:92: fd:2a:4f:e9:44:d5:40:db:fa:a3:d3:bb:14:d1:42: 56:05:5a:31:70:20:6a:39:3e:46:99:d0:5d:f3:aa: 80:39:ec:91:e6:67:bc:be:63:45:21:4a:d1:53:b5: fe:ea:99:ac:d9:eb:3d:08:ba:70:61:41:f9:a0:6c: 9e:26:22:f3:7d:53:9a:a3:f9:d4:ba:4a:26:13:53: 7f:bb:85:e8:b7:72:a2:f5:28:d1:95:e2:af:16:5f: 89:db:c2:d0:47:a4:11:d3:f6:6a:b1:c9:00:84:a9: 96:a0:8c:55:d0:af:e6:5b:a6:c3:6a:7a:4a:8a:21: 3d:03:a5:a3:3d:12:c7:f2:0f:41:53:5f:89:71:2c: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9B:4A:F5:8D:78:EC:DE:36:AE:CE:F4:AB:71:34:AF:FE:5E:32:F8 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cf:cd:cc:cf:9d:37:6e:2f:90:b1:e8:aa:47:0e:7d:72:1d: 12:aa:5a:8b:a4:f6:16:b2:17:73:d0:17:d3:34:03:34:eb:8c: 0e:21:b9:fe:f6:b5:be:33:6f:f7:67:3c:36:b9:3f:9b:30:82: 31:9a:8c:da:a5:0f:af:11:f8:68:af:c5:2c:92:5f:98:db:ac: ab:f4:c9:4d:9a:e0:d1:38:ab:ff:f9:e8:5c:ad:b8:54:8e:8f: 20:14:88:48:00:01:4c:91:64:9b:37:51:18:c4:b2:9f:70:7d: b4:94:23:c5:9d:14:f6:3e:79:b3:f9:9f:df:4b:f3:a1:19:ae: c7:f4:20:3d:78:43:a9:94:ce:0e:47:2a:eb:c2:18:5a:9f:9e: 1d:94:ab:f7:d7:cb:e1:28:fc:78:04:01:05:80:51:06:a8:db: 77:cc:e9:65:da:6c:ed:0e:86:26:c9:4f:62:7c:d6:16:9b:c3: 60:e7:84:8e:26:25:c8:69:be:86:80:a7:32:e7:67:ba:43:b0: 03:d1:ec:19:b4:fd:76:5b:49:2e:e7:78:4d:e5:ff:4b:06:c1: 04:6f:4e:19:eb:d0:fb:f1:74:e3:59:59:a7:7d:ce:1c:a2:63: 00:f4:8b:ea:f2:24:91:c3:7e:c4:a6:93:23:06:72:ae:33:25: 1e:4d:bb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUwNTEwMTgyMzI2WhcNMjUwNTE3MTgyMzI2WjAYMRYwFAYD VQQDEw02ODFmOTk5ZS05Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyFOCysbvV4R8+fRG+8/ZkOAzDn/fNZsmLh9hLDiMIbgSVFykvE1RahmEsro OBmrf7nlP9mgNim5o9uB57pDaPaE/HARwHSIOjAqZT6kGlnqO4D0JLqKbXXgKWzy GJ+MPd5kir0LL9+r+EO2VttEbC/pQCTrvJL9Kk/pRNVA2/qj07sU0UJWBVoxcCBq OT5GmdBd86qAOeyR5me8vmNFIUrRU7X+6pms2es9CLpwYUH5oGyeJiLzfVOao/nU ukomE1N/u4Xot3Ki9SjRleKvFl+J28LQR6QR0/ZqsckAhKmWoIxV0K/mW6bDanpK iiE9A6WjPRLH8g9BU1+JcSwmeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDubSvWN eOzeNq7O9KtxNK/+XjL4MB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/z83Mz503bi+QseiqRw59ch0SqlqLpPYWshdz0BfTNAM064wOIbn+ 9rW+M2/3Zzw2uT+bMIIxmozapQ+vEfhor8Uskl+Y26yr9MlNmuDROKv/+ehcrbhU jo8gFIhIAAFMkWSbN1EYxLKfcH20lCPFnRT2Pnmz+Z/fS/OhGa7H9CA9eEOplM4O Ryrrwhhan54dlKv318vhKPx4BAEFgFEGqNt3zOll2mztDoYmyU9ifNYWm8Ng54SO JiXIab6GgKcy52e6Q7AD0ewZtP12W0ku53hN5f9LBsEEb04Z69D78XTjWVmnfc4c omMA9Ivq8iSRw37EppMjBnKuMyUeTbuW -----END CERTIFICATE-----Generated at Sun May 11 13:47:08 2025 by rpki-client