$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft File: CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json) Hash identifier: DbnPkAqwUKnUIxHFldZ1t+VWb08lNf21or2opWWDQis= Subject key identifier: 30:99:08:CA:E6:75:26:F3:82:54:BA:3A:43:40:AE:7E:56:15:99:8A Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft Manifest number: 0A27 Signing time: Wed 14 May 2025 19:56:30 +0000 Manifest this update: Wed 14 May 2025 19:56:30 +0000 Manifest next update: Wed 21 May 2025 19:56:30 +0000 Files and hashes: 1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: 1X2Cz2jdB4NZ81o3yVOXnchVcw7WSnLKzTCt7eYbtNQ=) 2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: ZBqZrZzLa2IT8UIY6w09sQHwLL5zrRzqV4vns9/3wIc=) 3: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: hSui0ebWc4lkxLtGfFPvwezZYPnLWYoUQ7IH9/TNQXs=) 4: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: RxQekEsAzfRoaXQlF9gfuPb3rEYz9GMB9M+EsFimH7E=) 5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: t7QLTmlrwRSdzxwkZ3ICKVh+ifH3BRpvn3KoSgjF9OI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: May 14 19:56:30 2025 GMT Not After : May 21 19:56:30 2025 GMT Subject: CN=6824f56e-8311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:85:57:cb:87:04:8a:a9:26:d2:86:ec:39: 3d:d2:1b:5f:d8:a6:16:7b:06:f1:9d:75:92:a6:ae: eb:4e:10:72:f1:19:d3:97:e4:85:97:d6:a8:5b:d3: c6:36:19:c1:3a:f7:47:3f:07:7d:26:0f:c0:a6:cf: f7:1b:0c:4b:60:1b:7e:61:8e:65:fe:1e:97:d2:96: bf:44:8b:59:c6:f1:4c:6c:79:fd:bb:e6:a1:be:d4: cb:cc:c3:0a:2e:7b:6e:f3:3d:8b:c1:84:63:46:17: 68:d7:94:16:fa:0b:c0:4f:b1:1b:07:0b:41:8b:37: e8:65:67:4c:6d:14:af:b4:0d:6e:b7:2b:99:62:06: 33:5e:74:c9:c7:11:60:2c:a1:db:bd:cf:c9:5f:f4: 75:f3:be:55:2b:33:c8:34:75:90:cd:a6:fe:66:2d: b6:88:45:fb:79:d2:27:2c:da:79:fe:6c:af:00:c7: 9f:f4:fc:69:fa:fe:cb:4d:49:91:2c:d2:f4:f2:60: 7d:6d:66:94:07:5c:05:b0:fd:11:bb:8b:5b:98:29: 35:a1:78:c5:01:8d:7f:ec:2d:ea:23:2e:35:80:bb: ba:01:68:c8:76:58:dd:18:94:77:10:83:02:00:07: ab:e5:c9:d6:08:e9:54:95:51:93:47:36:89:ba:61: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:99:08:CA:E6:75:26:F3:82:54:BA:3A:43:40:AE:7E:56:15:99:8A X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b7:fa:c0:11:60:6f:05:5d:15:06:49:a3:d6:36:d8:61:f0: 0e:a2:ff:c0:a1:fa:7b:35:79:eb:66:a6:7b:3c:6b:bc:10:bd: aa:92:f9:00:66:3c:cb:0d:b5:3b:70:77:6a:b1:5b:1a:32:ff: 91:36:c1:22:30:9c:98:cb:68:09:44:5f:a2:cc:c6:6f:87:57: 10:9a:29:5e:52:c5:50:ad:a0:cf:f6:8a:10:08:a4:b0:5e:4d: d7:43:8b:40:0f:51:5c:13:14:1e:d4:eb:42:99:75:35:67:87: 86:b8:64:36:37:92:a2:7a:b8:96:df:01:71:54:ba:4f:8e:0a: 74:41:96:55:c2:3f:be:e0:75:b0:dc:e6:73:b5:07:23:46:60: 89:24:ec:4b:c9:bc:46:f1:df:ca:ab:ac:4c:59:b8:3c:7a:c5: 70:df:32:69:dd:8a:b3:e8:a5:93:04:45:82:9c:d2:a2:4b:5b: 4a:84:30:a3:c0:f2:4e:64:5e:31:26:ee:d2:21:58:d0:f2:c7: e2:52:3f:8c:79:5a:93:69:3b:c9:3c:09:39:8f:37:9d:8a:1e: 1e:f4:e6:ee:93:c5:36:ac:fa:24:a1:4a:1e:1d:f7:4a:0f:67: ec:4a:1d:7d:8d:c0:43:80:f8:f4:44:ac:07:b7:7e:8c:87:69: e9:ba:c3:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUwNTE0MTk1NjMwWhcNMjUwNTIxMTk1NjMwWjAYMRYwFAYD VQQDEw02ODI0ZjU2ZS04MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9uFV8uHBIqpJtKG7Dk90htf2KYWewbxnXWSpq7rThBy8RnTl+SFl9aoW9PG NhnBOvdHPwd9Jg/Aps/3GwxLYBt+YY5l/h6X0pa/RItZxvFMbHn9u+ahvtTLzMMK Lntu8z2LwYRjRhdo15QW+gvAT7EbBwtBizfoZWdMbRSvtA1utyuZYgYzXnTJxxFg LKHbvc/JX/R1875VKzPINHWQzab+Zi22iEX7edInLNp5/myvAMef9Pxp+v7LTUmR LNL08mB9bWaUB1wFsP0Ru4tbmCk1oXjFAY1/7C3qIy41gLu6AWjIdljdGJR3EIMC AAer5cnWCOlUlVGTRzaJumEO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCZCMrm dSbzglS6OkNArn5WFZmKMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY SDg2QmZHUlNQNE1xTnBGNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABt/rAEWBvBV0VBkmj1jbYYfAOov/Aofp7NXnrZqZ7PGu8EL2qkvkA ZjzLDbU7cHdqsVsaMv+RNsEiMJyYy2gJRF+izMZvh1cQmileUsVQraDP9ooQCKSw Xk3XQ4tAD1FcExQe1OtCmXU1Z4eGuGQ2N5KieriW3wFxVLpPjgp0QZZVwj++4HWw 3OZztQcjRmCJJOxLybxG8d/Kq6xMWbg8esVw3zJp3Yqz6KWTBEWCnNKiS1tKhDCj wPJOZF4xJu7SIVjQ8sfiUj+MeVqTaTvJPAk5jzedih4e9Obuk8U2rPokoUoeHfdK D2fsSh19jcBDgPj0RKwHt36Mh2npusNG -----END CERTIFICATE-----Generated at Wed May 14 22:04:01 2025 by rpki-client