$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: 3qC9X5vZlqRG81Za0m9Hx5e0Kmk03G/nqPAuMP2pNQk= Subject key identifier: 43:63:7F:19:60:85:6B:52:4B:9D:E9:F1:F4:6B:7B:B3:EE:F8:54:51 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 010D Signing time: Sun 11 May 2025 03:52:58 +0000 Manifest this update: Sun 11 May 2025 03:52:58 +0000 Manifest next update: Sun 18 May 2025 03:52:58 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: NIqkz5Buwmh5xccpeYDZKHo57n2nkIF0Ar52Kq+HI8g=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: J89e6WIiuXyGUhaavTtLjhezBogmJw6cNJ1cVc7a2VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: May 11 03:52:58 2025 GMT Not After : May 18 03:52:58 2025 GMT Subject: CN=68201f1a-2af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:0a:7e:7a:c9:0c:07:32:88:d8:6e:1f:62: 27:81:10:78:71:1b:d2:fd:23:89:f4:30:5f:6b:ff: 81:32:77:20:bf:01:3f:ae:f4:57:a0:6c:26:db:90: b5:75:0a:8b:e3:26:c2:ae:a6:89:3e:90:15:01:f5: 9d:95:10:80:1d:03:6b:0c:8c:be:0f:b1:40:22:25: e8:5b:b5:3b:16:3f:11:ea:00:fb:53:d6:6b:31:6c: f2:00:a9:5e:08:66:f6:2f:cb:5a:2f:5d:fc:93:ee: 43:3e:ff:4b:2b:d8:90:38:fb:eb:9d:4e:21:9c:7f: 64:16:72:8f:36:c3:b8:56:76:d7:ae:58:01:1a:d8: 39:a7:50:22:b8:0a:1a:6e:04:fe:c5:c2:14:7a:2c: e1:61:3f:2d:79:d3:85:6c:19:83:34:b0:59:70:2a: 2e:d3:c9:06:f3:70:82:e3:24:56:86:ac:e7:14:07: 15:06:9a:1d:d7:2c:c4:76:40:7e:62:cd:dc:6e:2b: 8e:f7:22:43:4e:12:6a:29:20:88:a1:2b:7d:e6:42: 7a:f2:fe:aa:d4:d9:6f:cb:fc:cd:18:db:b7:e3:d8: 38:b1:16:cc:a8:8f:10:88:d3:5b:c8:b6:59:41:6f: 3b:b9:bf:ba:43:e2:c4:91:20:ce:39:71:f3:e4:a7: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:63:7F:19:60:85:6B:52:4B:9D:E9:F1:F4:6B:7B:B3:EE:F8:54:51 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:19:32:8f:0b:22:df:ef:db:cc:ac:6e:fe:48:5f:37:55: 49:d3:03:14:89:ba:71:ea:c5:a6:1a:36:45:32:12:60:e3:97: 01:83:f0:4e:07:6f:eb:cd:0c:9e:67:5d:e7:3b:57:39:ea:f2: e8:52:4a:d7:08:14:32:29:17:05:8a:54:5a:34:d9:df:c8:ee: b9:bb:2a:ed:9d:a6:f8:01:ff:77:19:fa:7e:cf:c7:9c:90:fd: 8d:eb:f7:20:7c:cc:e5:37:3b:d9:04:22:4a:5d:43:05:e1:52: 14:b0:e3:32:90:64:36:19:39:e3:fc:5f:e1:72:53:7f:2f:93: 64:79:13:f5:82:ec:8b:a6:8f:7d:32:48:bf:fc:3f:cb:60:63: 95:d6:98:c2:49:7b:9f:98:50:96:4b:6a:e9:2a:f5:84:0c:70: e1:1a:2d:da:fa:3a:cc:60:6b:eb:7e:a1:19:0c:aa:f3:51:3a: 2f:d8:b2:56:c7:9a:1e:58:88:b7:e4:5a:55:13:e5:cb:b9:d1: eb:a1:c8:1a:ae:ee:9f:bd:a9:81:55:fa:b0:a8:5a:15:d5:52: a2:64:64:b7:a8:0f:3c:e6:2e:69:a9:38:ea:82:31:e2:f1:2a: 5a:de:a9:40:db:a8:7f:0c:e5:be:2b:c8:28:67:41:ec:49:2c: e5:73:25:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUwNTExMDM1MjU4WhcNMjUwNTE4MDM1MjU4WjAYMRYwFAYD VQQDEw02ODIwMWYxYS0yYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliQKfnrJDAcyiNhuH2IngRB4cRvS/SOJ9DBfa/+BMncgvwE/rvRXoGwm25C1 dQqL4ybCrqaJPpAVAfWdlRCAHQNrDIy+D7FAIiXoW7U7Fj8R6gD7U9ZrMWzyAKle CGb2L8taL138k+5DPv9LK9iQOPvrnU4hnH9kFnKPNsO4VnbXrlgBGtg5p1AiuAoa bgT+xcIUeizhYT8tedOFbBmDNLBZcCou08kG83CC4yRWhqznFAcVBpod1yzEdkB+ Ys3cbiuO9yJDThJqKSCIoSt95kJ68v6q1Nlvy/zNGNu349g4sRbMqI8QiNNbyLZZ QW87ub+6Q+LEkSDOOXHz5KcQdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENjfxlg hWtSS53p8fRre7Pu+FRRMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAynxkyjwsi3+/bzKxu/khfN1VJ0wMUibpx6sWmGjZFMhJg45cBg/BO B2/rzQyeZ13nO1c56vLoUkrXCBQyKRcFilRaNNnfyO65uyrtnab4Af93Gfp+z8ec kP2N6/cgfMzlNzvZBCJKXUMF4VIUsOMykGQ2GTnj/F/hclN/L5NkeRP1guyLpo99 Mki//D/LYGOV1pjCSXufmFCWS2rpKvWEDHDhGi3a+jrMYGvrfqEZDKrzUTov2LJW x5oeWIi35FpVE+XLudHrocgaru6fvamBVfqwqFoV1VKiZGS3qA885i5pqTjqgjHi 8Spa3qlA26h/DOW+K8goZ0HsSSzlcyX4 -----END CERTIFICATE-----Generated at Sun May 11 21:58:20 2025 by rpki-client