$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: pYkz29Mh8e7gg0gDpD9uBcRmojDghUr3MbFXd1BzwQ8= Subject key identifier: C4:2C:A7:BE:FD:6B:37:2A:CA:62:2F:40:E7:DC:86:A7:13:16:50:45 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0A8D Signing time: Sat 10 May 2025 19:20:11 +0000 Manifest this update: Sat 10 May 2025 19:20:11 +0000 Manifest next update: Sat 17 May 2025 19:20:11 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: OHN7bgpN+0ddkaCp7yQCSzl+obiZkI4u/gongehuZj4=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: TCYPp0B7wELGdVmkmZ/2o9IhPqXAxvWxV7x+iOfRhsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2708 (0xa94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: May 10 19:20:11 2025 GMT Not After : May 17 19:20:11 2025 GMT Subject: CN=681fa6eb-0738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:fa:cd:68:43:e0:69:3a:f8:2b:cc:64:20: 03:74:3d:3f:5d:59:72:a0:76:10:db:48:e8:11:e4: 34:29:ca:d6:d3:93:33:36:88:c1:41:d5:2c:b4:54: 70:03:ed:8d:12:7b:f6:64:fa:4a:f5:3d:2d:3b:e1: f2:eb:6f:d9:14:f6:d4:5f:f7:81:d7:b0:c1:63:92: 43:73:dc:09:51:62:31:9a:32:66:b7:19:af:67:fd: f8:0c:ba:3f:7e:72:6e:8d:c1:02:73:f7:5d:5d:4c: 22:0c:7b:15:1f:54:61:cb:d9:a6:be:fb:af:42:07: 82:57:8b:9c:65:a3:15:a4:a1:bb:8e:46:6d:c4:c2: 1f:b8:fd:71:a1:c0:93:7d:ca:b9:25:e8:d4:58:8a: 7d:ee:6b:80:96:c2:36:3a:37:c0:68:12:9f:ee:e4: f8:6e:aa:f8:7d:e9:3e:ff:e5:93:8d:92:33:60:f7: e7:a0:5a:1b:f8:d5:46:2a:88:d4:23:72:b8:63:5e: a0:35:39:ec:66:b0:c7:3f:7f:2c:b2:0b:af:e1:cf: 5c:f3:03:49:d5:50:62:14:21:ea:db:4d:85:b1:ee: d6:84:40:67:de:3c:dd:39:74:4c:d0:1c:b2:d3:28: 4e:8d:8c:45:cb:91:a3:e2:28:99:4a:11:7a:ae:28: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2C:A7:BE:FD:6B:37:2A:CA:62:2F:40:E7:DC:86:A7:13:16:50:45 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e3:a9:b2:2d:4d:aa:f6:ef:c7:4b:7d:19:b2:c1:fa:f1:e0: 64:f3:7b:7f:b0:42:d1:8c:2e:a4:a7:f8:1b:79:ce:f5:01:0a: 2a:3e:a3:01:6f:39:eb:e0:e0:5d:3a:23:a6:9f:e8:a7:01:76: 25:62:81:21:b4:d0:e8:44:48:e3:59:fc:7b:45:cf:6d:da:ce: 68:17:a6:ec:d4:de:39:01:6d:9a:a8:f6:e4:49:dc:f4:d3:ef: e9:aa:30:cd:24:5a:d2:8f:19:a1:38:53:67:4e:55:2f:20:18: e4:ce:72:65:76:db:02:69:41:80:d1:af:bb:ec:e7:5e:e0:8a: ad:7b:76:36:2e:ba:51:41:2b:d7:75:7a:17:6b:d3:50:a3:b5: 81:2b:d3:a4:89:14:bb:86:d0:97:ca:b7:d2:84:3c:36:24:17: 78:14:ca:4d:49:ad:11:95:a5:3c:d0:fa:8b:17:26:94:50:e1: 10:ff:a9:06:5f:2c:eb:0b:b8:6b:54:bb:18:ae:c2:29:64:e7: e2:15:8d:36:1a:fe:03:a0:b4:e2:51:1a:51:26:2c:1a:9a:0d: 0a:f9:f2:73:d0:58:c1:49:cb:e0:63:ae:69:a2:11:0d:52:66: 31:e8:b0:03:ff:dc:1f:bf:bd:41:a7:9c:31:79:58:57:33:cf: a2:8d:ed:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUwNTEwMTkyMDExWhcNMjUwNTE3MTkyMDExWjAYMRYwFAYD VQQDEw02ODFmYTZlYi0wNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwj6zWhD4Gk6+CvMZCADdD0/XVlyoHYQ20joEeQ0KcrW05MzNojBQdUstFRw A+2NEnv2ZPpK9T0tO+Hy62/ZFPbUX/eB17DBY5JDc9wJUWIxmjJmtxmvZ/34DLo/ fnJujcECc/ddXUwiDHsVH1Rhy9mmvvuvQgeCV4ucZaMVpKG7jkZtxMIfuP1xocCT fcq5JejUWIp97muAlsI2OjfAaBKf7uT4bqr4fek+/+WTjZIzYPfnoFob+NVGKojU I3K4Y16gNTnsZrDHP38ssguv4c9c8wNJ1VBiFCHq202Fse7WhEBn3jzdOXRM0Byy 0yhOjYxFy5Gj4iiZShF6rig62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQsp779 azcqymIvQOfchqcTFlBFMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs46myLU2q9u/HS30ZssH68eBk83t/sELRjC6kp/gbec71AQoqPqMB bznr4OBdOiOmn+inAXYlYoEhtNDoREjjWfx7Rc9t2s5oF6bs1N45AW2aqPbkSdz0 0+/pqjDNJFrSjxmhOFNnTlUvIBjkznJldtsCaUGA0a+77Ode4Iqte3Y2LrpRQSvX dXoXa9NQo7WBK9OkiRS7htCXyrfShDw2JBd4FMpNSa0RlaU80PqLFyaUUOEQ/6kG XyzrC7hrVLsYrsIpZOfiFY02Gv4DoLTiURpRJiwamg0K+fJz0FjBScvgY65pohEN UmYx6LAD/9wfv71Bp5wxeVhXM8+ije0b -----END CERTIFICATE-----Generated at Mon May 12 01:32:26 2025 by rpki-client