$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft File: JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft (raw, json) Hash identifier: hbKPdKRIgtHXsGJym183zK0/0fRDmOFi+Otu/WHfVpk= Subject key identifier: 4B:C2:5B:85:C8:13:CE:A8:70:A6:B6:11:3D:5A:8D:41:A7:4F:83:8F Authority key identifier: 24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 Certificate issuer: /CN=A91B4D1F/serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft Manifest number: 0C53 Signing time: Sat 10 May 2025 18:08:37 +0000 Manifest this update: Sat 10 May 2025 18:08:37 +0000 Manifest next update: Sat 17 May 2025 18:08:37 +0000 Files and hashes: 1: JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl (hash: RWll/9rRK9UfFfvmLdpSi2vGvkUJUH173Frw86r6i1Q=) 2: 5AF669B4FFC811E9B70CA176C4F9AE02.roa (hash: uuWn9T24f2Om0t7b8gCBcBAECx+g28MfpKjTQARLOK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4D1F, serialNumber=24F8CA0BE08E1C61EC8F7B7A8A9C5CC53DD14534 Validity Not Before: May 10 18:08:37 2025 GMT Not After : May 17 18:08:37 2025 GMT Subject: CN=681f9625-0647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:3e:8c:93:4a:aa:8c:07:2d:86:f2:84:a8: 49:6d:14:0b:90:28:cd:11:c8:ed:e7:7f:00:c5:6e: 15:2d:6e:8f:e0:00:40:ae:72:c6:a7:00:58:0d:53: 06:ac:47:44:5c:2b:a8:98:79:4a:67:fd:af:5f:f5: 98:55:af:89:3c:6f:56:26:ed:d1:ce:d5:88:d1:83: 73:d2:f3:7a:a1:f2:22:77:43:9f:34:7d:ba:cd:45: 69:65:0a:14:ea:b9:02:64:9a:d5:24:f2:8c:dc:60: 77:56:cb:0f:f7:69:af:31:3b:c4:8b:a4:1c:88:b5: 50:54:ca:a3:64:a3:bf:d7:09:8b:6d:a7:7b:96:f3: f1:95:22:b0:98:ad:f2:c5:79:8d:b5:d0:50:11:2b: 4f:4a:54:d6:86:c9:f0:82:b6:7b:16:4c:3c:44:84: db:08:24:95:6a:48:0e:c2:9d:14:81:8d:ed:55:9a: 27:8e:26:87:b9:1c:3c:50:0b:8c:2c:b7:17:22:39: e0:3c:da:fb:d4:6a:13:05:23:d5:20:82:8a:0b:48: 51:44:90:6e:02:1c:d6:30:7b:bb:29:37:eb:b4:23: f5:4f:af:ac:5e:b8:27:5c:79:d6:01:f7:fc:f2:b5: 80:21:6c:2b:a4:ba:6b:bb:28:94:f0:77:7e:c8:8e: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:5B:85:C8:13:CE:A8:70:A6:B6:11:3D:5A:8D:41:A7:4F:83:8F X509v3 Authority Key Identifier: keyid:24:F8:CA:0B:E0:8E:1C:61:EC:8F:7B:7A:8A:9C:5C:C5:3D:D1:45:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPjKC-COHGHsj3t6ipxcxT3RRTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4D1F/B3342916FFC511E9A96CD070C4F9AE02/JPjKC-COHGHsj3t6ipxcxT3RRTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d5:35:bd:16:e8:34:1d:ef:78:f7:30:da:3d:b4:99:33:70: 04:58:0d:d3:ae:a2:ed:03:2e:83:15:73:e1:dd:3c:12:57:f5: 60:bf:37:b6:79:df:5c:50:b1:9f:b9:d7:ea:22:d4:34:b4:15: a2:50:9c:10:71:93:29:ca:db:66:92:6a:6f:20:50:f6:53:28: 0d:fb:24:f2:bb:16:7e:1e:a9:ea:af:b9:0f:0d:86:08:dc:cd: 7f:cc:29:f2:17:89:84:1c:06:ca:b2:e6:61:31:6c:71:a4:9f: 76:9c:f6:c2:b7:f4:8a:8f:d0:27:c7:e7:c6:07:ee:52:57:52: d6:63:9e:76:f3:8f:f0:14:09:f3:5b:96:77:d2:d4:46:fc:89: f9:0e:1c:f3:d3:bd:c1:4c:a8:71:94:78:fc:87:67:ae:38:ef: eb:69:eb:b3:b0:c5:02:f8:56:7c:73:55:28:74:c3:8f:18:16: 54:ee:3b:a1:f1:ec:5b:ed:d3:01:54:de:24:98:9e:5f:b8:1d: 02:31:ae:b1:54:40:62:9e:7a:e4:1e:0a:7f:8c:ed:6b:5f:71: 96:a5:64:57:63:d5:87:33:4c:43:aa:61:a3:13:c7:ac:3a:de: 83:3e:0e:e8:1c:39:96:25:e5:41:da:42:36:68:77:4a:4c:02: d8:ee:52:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjREMUYxMTAvBgNVBAUTKDI0RjhDQTBCRTA4RTFDNjFFQzhGN0I3QThBOUM1Q0M1 M0REMTQ1MzQwHhcNMjUwNTEwMTgwODM3WhcNMjUwNTE3MTgwODM3WjAYMRYwFAYD VQQDEw02ODFmOTYyNS0wNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvU+jJNKqowHLYbyhKhJbRQLkCjNEcjt538AxW4VLW6P4ABArnLGpwBYDVMG rEdEXCuomHlKZ/2vX/WYVa+JPG9WJu3RztWI0YNz0vN6ofIid0OfNH26zUVpZQoU 6rkCZJrVJPKM3GB3VssP92mvMTvEi6QciLVQVMqjZKO/1wmLbad7lvPxlSKwmK3y xXmNtdBQEStPSlTWhsnwgrZ7Fkw8RITbCCSVakgOwp0UgY3tVZonjiaHuRw8UAuM LLcXIjngPNr71GoTBSPVIIKKC0hRRJBuAhzWMHu7KTfrtCP1T6+sXrgnXHnWAff8 8rWAIWwrpLpruyiU8Hd+yI6EAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvCW4XI E86ocKa2ET1ajUGnT4OPMB8GA1UdIwQYMBaAFCT4ygvgjhxh7I97eoqcXMU90UU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEQxRi9CMzM0MjkxNkZG QzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hHSHNqM3Q2aXB4Y3hUM1JS VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQaktDLUNPSEdIc2ozdDZpcHhjeFQzUlJUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEQxRi9CMzM0MjkxNkZGQzUxMUU5QTk2Q0QwNzBDNEY5QUUwMi9KUGpLQy1DT0hH SHNqM3Q2aXB4Y3hUM1JSVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd1TW9Fug0He949zDaPbSZM3AEWA3TrqLtAy6DFXPh3TwSV/Vgvze2 ed9cULGfudfqItQ0tBWiUJwQcZMpyttmkmpvIFD2UygN+yTyuxZ+Hqnqr7kPDYYI 3M1/zCnyF4mEHAbKsuZhMWxxpJ92nPbCt/SKj9Anx+fGB+5SV1LWY55284/wFAnz W5Z30tRG/In5Dhzz073BTKhxlHj8h2euOO/raeuzsMUC+FZ8c1UodMOPGBZU7juh 8exb7dMBVN4kmJ5fuB0CMa6xVEBinnrkHgp/jO1rX3GWpWRXY9WHM0xDqmGjE8es Ot6DPg7oHDmWJeVB2kI2aHdKTALY7lLE -----END CERTIFICATE-----Generated at Mon May 12 04:16:09 2025 by rpki-client