$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft File: Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json) Hash identifier: Py0xv34kUvenqQjT2Fk8mj9/rRAQByKNZucbCIW8LHE= Subject key identifier: 9D:45:07:C5:B1:18:41:25:3E:37:9F:00:57:B9:39:73:FE:E2:B8:EF Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 Certificate issuer: /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft Manifest number: 0C4C Signing time: Fri 16 May 2025 18:38:09 +0000 Manifest this update: Fri 16 May 2025 18:38:09 +0000 Manifest next update: Fri 23 May 2025 18:38:09 +0000 Files and hashes: 1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: 90kAYzQmvcmsi9tC0/uK5ZASRniGGX6VGT4f1i1zYvs=) 2: 72156EA8155311EDB5B4C084C4F9AE02.roa (hash: L3QtLlUYOp97S+0J2ZEUAV9V2aNzWM2GyLPcyzG+Vzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734 Validity Not Before: May 16 18:38:09 2025 GMT Not After : May 23 18:38:09 2025 GMT Subject: CN=68278611-1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:55:2e:2c:94:45:e4:b5:5c:ed:d8:c3:8e: f7:f6:3d:2d:52:cf:73:e1:ba:1d:53:13:50:d4:a5: 80:cc:01:aa:5a:16:70:2c:4e:ca:a3:7a:f2:3d:2e: 99:ad:d2:66:2d:e5:28:74:15:2d:cb:a4:3d:3f:33: 7c:2c:76:89:ff:46:09:e7:3e:83:39:ed:42:4b:33: 70:bc:99:9d:fa:90:6e:8e:9b:f1:95:1b:fe:f6:64: 5d:b2:75:37:6f:52:6d:06:88:cf:ee:9a:13:85:01: 4f:41:31:90:3b:c9:62:1e:a2:58:87:dd:d2:0e:ea: d4:53:9c:22:fb:17:7d:54:37:96:c2:cb:37:6a:92: 98:ef:9e:f9:5f:1b:29:13:f0:8b:17:ca:c7:f8:c7: 07:a2:88:56:bc:15:5c:52:c1:89:74:3b:cc:53:37: ce:71:55:c0:48:5b:66:be:ae:7d:ca:b9:46:d3:ea: 66:3b:3e:32:39:5e:d8:d8:be:a1:0e:f7:66:38:fb: 31:91:91:bd:28:9d:e8:a9:fe:4d:04:04:01:4d:c4: 76:a2:46:e8:6e:e4:8f:72:c0:8c:1e:90:c2:e7:0a: 58:6a:38:f6:87:24:84:f1:91:56:2f:bb:d7:59:64: 6f:92:d1:98:10:98:08:4d:57:aa:27:7f:bc:ab:d7: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:07:C5:B1:18:41:25:3E:37:9F:00:57:B9:39:73:FE:E2:B8:EF X509v3 Authority Key Identifier: keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a2:85:8e:5a:5b:65:44:d3:8a:ee:53:28:4b:2d:49:62:de: 2a:71:f9:e2:b9:cd:69:9c:c2:f7:38:b8:89:d2:14:bf:59:a9: 37:6e:7d:10:e0:5c:af:f3:1b:56:f1:87:43:7b:20:c6:c8:86: e6:c1:db:62:a2:7f:58:9d:97:9f:3c:d7:46:41:99:5a:c1:56: 4f:a1:ee:8e:54:ff:92:9c:a8:84:40:4b:d9:5f:99:3c:3e:35: 93:37:55:a7:9b:30:cc:5d:18:6e:ee:77:fa:52:38:5f:72:24: 67:60:3c:a5:d6:10:d5:02:09:31:65:ee:7d:27:21:a0:fb:38: 7e:2b:c9:27:c0:fc:b4:b5:02:08:58:c8:46:6c:15:55:5a:be: a5:d8:8c:90:6a:cb:a5:4d:6a:fe:94:f7:66:38:ec:15:a1:2d: 93:25:38:b7:d5:63:b3:da:8b:15:e4:3a:8d:2e:6c:7b:e3:43: 7e:ae:3f:85:67:b6:98:56:37:51:f5:02:e7:da:6f:ca:61:5b: a7:4e:33:4d:10:99:1d:87:85:dd:1f:85:75:9c:f2:1e:14:60: 67:32:64:fb:8c:63:f5:64:5f:2b:2a:66:d6:9d:03:b6:c4:5a: 91:1f:4a:f4:22:fa:42:bc:00:a8:2d:de:3d:84:33:8b:b7:49: c0:6b:fc:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxQkUxMTAvBgNVBAUTKDBBMzdFQzkxRTgyN0UxNjlDODYyQjQ0Q0Q4NzZCMUQz NzY0MTM3MzQwHhcNMjUwNTE2MTgzODA5WhcNMjUwNTIzMTgzODA5WjAYMRYwFAYD VQQDEw02ODI3ODYxMS0xNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHZVLiyUReS1XO3Yw4739j0tUs9z4bodUxNQ1KWAzAGqWhZwLE7Ko3ryPS6Z rdJmLeUodBUty6Q9PzN8LHaJ/0YJ5z6DOe1CSzNwvJmd+pBujpvxlRv+9mRdsnU3 b1JtBojP7poThQFPQTGQO8liHqJYh93SDurUU5wi+xd9VDeWwss3apKY7575Xxsp E/CLF8rH+McHoohWvBVcUsGJdDvMUzfOcVXASFtmvq59yrlG0+pmOz4yOV7Y2L6h DvdmOPsxkZG9KJ3oqf5NBAQBTcR2okbobuSPcsCMHpDC5wpYajj2hySE8ZFWL7vX WWRvktGYEJgITVeqJ3+8q9e/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1FB8Wx GEElPjefAFe5OXP+4rjvMB8GA1UdIwQYMBaAFAo37JHoJ+FpyGK0TNh2sdN2QTc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFCRS9FMUVBQkYwQTA0 ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRXbklZclJNMkhheDAzWkJO elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqZnNrZWduNFduSVlyUk0ySGF4MDNaQk56US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFCRS9FMUVBQkYwQTA0ODMxMUVBODAyOEJFMkZDNEY5QUUwMi9DamZza2VnbjRX bklZclJNMkhheDAzWkJOelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuooWOWltlRNOK7lMoSy1JYt4qcfniuc1pnML3OLiJ0hS/Wak3bn0Q 4Fyv8xtW8YdDeyDGyIbmwdtion9YnZefPNdGQZlawVZPoe6OVP+SnKiEQEvZX5k8 PjWTN1WnmzDMXRhu7nf6UjhfciRnYDyl1hDVAgkxZe59JyGg+zh+K8knwPy0tQII WMhGbBVVWr6l2IyQasulTWr+lPdmOOwVoS2TJTi31WOz2osV5DqNLmx740N+rj+F Z7aYVjdR9QLn2m/KYVunTjNNEJkdh4XdH4V1nPIeFGBnMmT7jGP1ZF8rKmbWnQO2 xFqRH0r0IvpCvACoLd49hDOLt0nAa/yW -----END CERTIFICATE-----Generated at Sat May 17 01:03:06 2025 by rpki-client