$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: Yp4hS7ms6mXjFEZQ08ARAGv/V9sfU8pqTYua/rAdcVM= Subject key identifier: C7:75:35:25:34:95:0B:4A:49:0D:31:49:F1:C2:B2:8D:EC:45:C6:44 Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 0176 Signing time: Sun 11 May 2025 02:41:22 +0000 Manifest this update: Sun 11 May 2025 02:41:21 +0000 Manifest next update: Sun 18 May 2025 02:41:21 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: cCAab6bLz3JblGYPID284Fe8GymhkeZBOImTuSSlzlg=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: IuA38A6PtfZ45s5efy6Fg7R/ojs8GeETi8rs0c/o4+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: May 11 02:41:21 2025 GMT Not After : May 18 02:41:21 2025 GMT Subject: CN=68200e51-18a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:0f:63:82:13:9f:28:b7:3e:c4:fc:c1:e5: c2:aa:b6:cb:06:ac:82:b9:dd:90:cf:34:10:cd:82: 18:24:5e:69:e7:22:de:aa:8f:08:d8:db:59:bb:2e: 75:3a:65:c2:ea:eb:f7:ef:5b:49:b9:6e:d3:5e:63: ef:12:37:e3:f3:88:38:24:fb:f2:93:f4:03:a8:08: 4d:4f:9f:42:42:06:50:8b:65:b7:71:bb:7b:c2:2c: a6:0f:f1:0f:3c:2c:6d:04:44:a2:6b:a0:db:40:cc: 62:12:ec:97:6c:47:e8:3b:d4:3d:ca:7f:96:38:87: d2:a3:9b:84:ae:6c:77:18:fa:ec:18:45:cd:99:5f: b7:e6:1e:c7:cc:86:c7:24:98:40:9e:20:1a:76:ef: ff:22:f7:e7:e6:32:aa:f6:57:4a:2c:7a:78:90:83: e0:40:d1:35:08:cf:9f:37:e7:a1:7d:af:c1:1d:4f: c9:66:4a:0d:73:ed:ca:a3:93:8b:09:0c:ad:67:26: ff:8a:44:95:05:8a:cc:88:cb:80:e4:8f:92:22:50: d8:61:05:20:ba:23:74:d7:33:b6:d3:72:32:f0:64: dd:fd:62:ec:8d:27:cd:e3:e1:d5:3f:8c:91:f9:df: dc:79:a7:b5:24:40:b7:5f:21:50:12:21:f4:15:46: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:75:35:25:34:95:0B:4A:49:0D:31:49:F1:C2:B2:8D:EC:45:C6:44 X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:71:f1:a2:23:c4:53:32:27:ff:3e:87:22:ca:10:2b:9f:bf: fa:5f:e0:1c:88:eb:f7:75:fb:c0:3d:07:aa:dd:2f:6d:78:f9: be:b4:87:e2:4d:4b:85:2b:30:2d:30:c7:9c:d2:ca:58:9a:56: fd:8f:60:04:65:56:43:d0:ab:56:4a:7e:91:0a:a9:96:56:1c: 52:41:e1:e0:97:51:8a:64:9f:2d:22:7d:1c:ff:ed:7b:81:bb: 6e:d1:71:ce:18:c8:68:fa:93:bc:93:bd:d3:a0:1b:ff:a4:54: 31:3b:4b:09:d6:34:ed:59:2e:be:9e:84:d0:98:93:b0:e2:8e: fb:3b:66:af:a7:88:ad:bc:0c:ee:c5:4a:b6:29:81:a9:2a:97: f3:6a:c6:98:ff:3a:3b:aa:b7:db:17:d8:b2:73:33:cb:53:9b: 8d:8f:19:d9:bd:ed:cf:53:1d:33:4b:b2:43:30:86:18:e3:b7: 70:ae:a7:6d:29:0d:db:35:2a:6a:9c:45:52:0d:6a:2c:4a:28: 2d:2c:c5:2b:f4:fc:40:22:38:5d:8e:76:2f:17:8d:34:24:5f: 39:66:74:43:e5:1c:f9:1a:df:41:d9:b1:da:06:08:26:2b:b3: d4:a1:22:d0:d9:3c:08:fb:b8:e5:6f:82:0c:e0:2c:59:1a:d4: 90:fc:84:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUwNTExMDI0MTIxWhcNMjUwNTE4MDI0MTIxWjAYMRYwFAYD VQQDEw02ODIwMGU1MS0xOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKIPY4ITnyi3PsT8weXCqrbLBqyCud2QzzQQzYIYJF5p5yLeqo8I2NtZuy51 OmXC6uv371tJuW7TXmPvEjfj84g4JPvyk/QDqAhNT59CQgZQi2W3cbt7wiymD/EP PCxtBESia6DbQMxiEuyXbEfoO9Q9yn+WOIfSo5uErmx3GPrsGEXNmV+35h7HzIbH JJhAniAadu//Ivfn5jKq9ldKLHp4kIPgQNE1CM+fN+ehfa/BHU/JZkoNc+3Ko5OL CQytZyb/ikSVBYrMiMuA5I+SIlDYYQUguiN01zO203Iy8GTd/WLsjSfN4+HVP4yR +d/ceae1JEC3XyFQEiH0FUbsEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd1NSU0 lQtKSQ0xSfHCso3sRcZEMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLcfGiI8RTMif/PociyhArn7/6X+AciOv3dfvAPQeq3S9tePm+tIfi TUuFKzAtMMec0spYmlb9j2AEZVZD0KtWSn6RCqmWVhxSQeHgl1GKZJ8tIn0c/+17 gbtu0XHOGMho+pO8k73ToBv/pFQxO0sJ1jTtWS6+noTQmJOw4o77O2avp4itvAzu xUq2KYGpKpfzasaY/zo7qrfbF9iyczPLU5uNjxnZve3PUx0zS7JDMIYY47dwrqdt KQ3bNSpqnEVSDWosSigtLMUr9PxAIjhdjnYvF400JF85ZnRD5Rz5Gt9B2bHaBggm K7PUoSLQ2TwI+7jlb4IM4CxZGtSQ/IS7 -----END CERTIFICATE-----Generated at Tue May 13 02:07:49 2025 by rpki-client