$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json) Hash identifier: ka04vnQbo1/gpMliwXLACL6FV5untyOXnJxjm1Mokhg= Subject key identifier: DE:A6:9D:A3:85:6D:D7:6D:87:CF:CA:75:5A:66:8B:E9:1C:B8:F8:7B Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 1A7D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft Manifest number: 1A76 Signing time: Fri 16 May 2025 15:56:07 +0000 Manifest this update: Fri 16 May 2025 15:56:06 +0000 Manifest next update: Fri 23 May 2025 15:56:06 +0000 Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: LPijwukrHKW+JI8dTyBU4VAyFMLLWVjw1rbNEsIT8pI=) 2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: EvR5gfpmDfAVmSaNBVyf31LRk9wTqTU6OTSsCqxA5UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6781 (0x1a7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: May 16 15:56:06 2025 GMT Not After : May 23 15:56:06 2025 GMT Subject: CN=68276016-accd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:ce:29:57:98:b1:85:67:a8:92:bb:f5:6a: b8:21:43:07:af:f8:bb:6d:fb:42:43:2d:c3:ee:86: 81:95:f6:f7:53:78:6a:2b:aa:aa:68:fb:05:fb:ab: c1:c9:5c:ce:e2:80:fb:66:f2:58:2d:80:18:f8:27: 43:d5:5a:19:e8:89:56:f7:95:ca:1c:c5:0b:60:a2: 88:87:1c:2c:a7:ef:70:47:5b:d6:51:59:ec:c2:84: 96:18:3d:83:3d:cb:a1:a9:29:dd:5f:39:5e:b5:11: f8:b1:de:bb:00:87:80:f0:4c:70:06:90:d8:cd:13: 50:32:a4:93:b2:7b:57:40:87:ef:7b:48:cc:4f:37: b1:9e:17:96:80:b5:92:9c:3f:e6:16:54:59:4e:4a: 9e:b1:53:27:02:98:bf:97:03:96:a6:dc:df:bb:db: ee:dd:bc:b2:24:4d:82:39:cf:ae:07:fd:9c:19:a1: e4:74:27:2b:95:4d:17:97:1f:43:2e:4d:ab:29:96: 52:19:39:e5:ad:49:9b:a6:d8:d5:eb:63:d2:48:70: 99:ee:6a:52:ec:82:08:df:5a:38:39:d6:a4:1f:3f: 29:ac:02:39:6c:3e:d5:9f:33:78:44:f1:d7:6f:af: 99:97:89:f9:14:8d:35:c3:95:fa:9a:af:eb:94:c6: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:9D:A3:85:6D:D7:6D:87:CF:CA:75:5A:66:8B:E9:1C:B8:F8:7B X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:46:bd:c0:a5:b8:66:ed:4f:41:4e:d7:68:67:db:1a:60:e4: fb:08:28:ad:f6:73:fe:db:d4:e9:ce:6f:0f:d7:8a:f4:b2:a0: f2:76:4e:85:90:c9:aa:81:9e:00:38:c1:8c:81:36:b8:50:e7: 30:92:ca:2e:6e:47:f3:d9:06:1a:46:7a:14:b6:e3:d5:77:b2: 94:af:a6:8a:d9:38:15:63:dd:79:aa:e9:30:0f:8d:cb:0e:85: 7e:81:fb:41:93:69:bb:4f:3e:de:9a:ea:50:30:6e:81:a2:82: 8c:68:75:85:29:31:31:8c:e7:35:44:97:46:67:0a:38:27:5f: 45:31:82:70:fc:9f:1e:27:75:89:69:8e:dc:eb:49:bb:48:6b: 39:44:68:a4:53:d4:dd:4e:4d:8e:68:2c:db:19:b7:d0:b6:f3: f7:5a:39:44:4d:29:54:da:b5:54:61:12:da:2c:dc:c7:9a:a8: f7:3b:6f:16:0b:65:b9:e7:66:33:ef:38:8a:0c:9f:6e:c9:8a: 50:4f:c8:48:49:2b:4c:21:f8:d8:99:5f:64:44:4e:d3:5f:48: 26:55:7e:0e:b3:86:09:f8:6d:ec:63:6d:2d:d3:23:6b:c9:5c: 7c:11:2e:22:67:fa:95:54:02:e7:2d:12:5d:26:e4:d1:57:16: 8f:bb:f2:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjUwNTE2MTU1NjA2WhcNMjUwNTIzMTU1NjA2WjAYMRYwFAYD VQQDEw02ODI3NjAxNi1hY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLjOKVeYsYVnqJK79Wq4IUMHr/i7bftCQy3D7oaBlfb3U3hqK6qqaPsF+6vB yVzO4oD7ZvJYLYAY+CdD1VoZ6IlW95XKHMULYKKIhxwsp+9wR1vWUVnswoSWGD2D PcuhqSndXzletRH4sd67AIeA8ExwBpDYzRNQMqSTsntXQIfve0jMTzexnheWgLWS nD/mFlRZTkqesVMnApi/lwOWptzfu9vu3byyJE2COc+uB/2cGaHkdCcrlU0Xlx9D Lk2rKZZSGTnlrUmbptjV62PSSHCZ7mpS7III31o4OdakHz8prAI5bD7VnzN4RPHX b6+Zl4n5FI01w5X6mq/rlMZP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6mnaOF bddth8/KdVpmi+kcuPh7MB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5 SjdoT3N0VW1jTW9YVDV4RHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQRr3Apbhm7U9BTtdoZ9saYOT7CCit9nP+29Tpzm8P14r0sqDydk6F kMmqgZ4AOMGMgTa4UOcwksoubkfz2QYaRnoUtuPVd7KUr6aK2TgVY915qukwD43L DoV+gftBk2m7Tz7emupQMG6BooKMaHWFKTExjOc1RJdGZwo4J19FMYJw/J8eJ3WJ aY7c60m7SGs5RGikU9TdTk2OaCzbGbfQtvP3WjlETSlU2rVUYRLaLNzHmqj3O28W C2W552Yz7ziKDJ9uyYpQT8hISStMIfjYmV9kRE7TX0gmVX4Os4YJ+G3sY20t0yNr yVx8ES4iZ/qVVALnLRJdJuTRVxaPu/J+ -----END CERTIFICATE-----Generated at Sun May 18 07:50:54 2025 by rpki-client