$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: OBIGww57MliDEJCXy6DYr/BO62O0HVXcaa3FScae0P4= Subject key identifier: 5F:8D:1E:12:99:34:6E:BF:FB:32:AD:ED:22:E4:6C:44:2B:CB:7A:7C Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 0675 Signing time: Sat 10 May 2025 21:55:15 +0000 Manifest this update: Sat 10 May 2025 21:55:14 +0000 Manifest next update: Sat 17 May 2025 21:55:14 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: r4MClvh6vVFS3Y6Atq6/JJ99jgY7ezPTsYLRYJY94hs=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: May 10 21:55:14 2025 GMT Not After : May 17 21:55:14 2025 GMT Subject: CN=681fcb42-0254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:66:54:1f:8d:83:55:6a:31:b3:a1:fa:00: 82:99:0a:2b:51:83:d4:36:bd:e6:71:36:2c:4a:30: 49:ea:b1:04:50:b4:b8:5d:3c:a6:fe:16:b6:cf:ef: 9f:43:b4:0b:4b:b7:46:85:81:2e:22:50:d4:67:f4: e2:38:e6:3c:d7:73:d4:83:f9:fd:ce:e1:40:d9:e6: d8:c5:b6:7f:1e:20:85:4c:13:d8:d5:79:14:48:5c: ab:79:f9:3a:b0:0d:f7:9c:e1:1b:d0:4b:00:9f:93: 6d:9c:a4:3d:2e:c8:2f:7c:33:3c:b2:92:db:25:32: d9:22:4e:e7:fc:ae:3f:3c:5a:87:f1:7f:34:84:f4: 2c:05:fb:ff:26:33:16:f5:7c:19:e8:07:a8:81:c8: 1d:13:39:fe:27:98:be:a8:6e:bc:4f:a0:12:15:70: 17:56:21:6c:49:4f:e4:70:db:9a:58:c3:47:69:fc: c8:f5:26:56:28:a8:f9:ea:42:f8:94:c5:ae:08:4f: a0:7a:6c:72:42:71:91:21:ed:2b:91:2a:ba:ba:29: 07:bf:5f:b5:19:80:95:8a:af:d4:4c:19:d9:0b:7b: 66:62:6c:03:23:ab:70:be:5c:81:0b:09:9d:ff:20: 75:15:15:36:e1:42:32:51:77:23:51:f9:8f:aa:ea: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:1E:12:99:34:6E:BF:FB:32:AD:ED:22:E4:6C:44:2B:CB:7A:7C X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:70:82:a8:40:3a:ce:fb:ed:98:5e:cd:34:20:aa:60:5f:f0: a9:82:42:fb:d9:8f:6a:c6:98:72:6c:6f:64:69:4a:33:ce:5b: 62:59:16:6b:4c:16:2d:82:03:f8:fe:64:a4:b4:a9:6e:46:a5: a3:30:b6:e0:5e:1c:60:b0:7c:66:f2:0a:52:fc:7b:8e:99:95: 91:e5:73:d2:ad:8a:f8:cb:d8:8e:3c:97:15:7f:53:5a:16:be: 98:2d:9e:c4:ca:75:d8:52:55:30:fe:07:4b:f2:64:5c:6e:01: 70:75:5f:db:91:6e:94:a3:94:cf:ef:95:f8:87:14:06:8f:d4: d1:ca:fd:15:e6:fa:59:46:dc:7d:4e:cd:1a:56:c8:c1:f6:a0: 83:35:bc:6c:65:b1:06:0b:64:2f:71:06:26:da:ce:32:28:09: 0c:0d:a0:d8:59:bc:8f:ce:ee:de:76:d2:37:12:84:c9:a2:2d: 0e:43:fc:fe:de:44:5d:74:9c:34:2f:00:e0:c9:ec:ae:59:17: 4b:14:76:43:3c:02:b9:27:ba:fc:1b:5e:92:b1:a4:8a:a5:19: 76:ad:87:f7:87:f9:e4:21:8d:52:a6:cd:11:9a:52:c1:2b:a3: e2:16:06:d9:44:7b:b7:67:01:99:03:cf:e9:e0:b2:82:0b:9c: 35:8e:65:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUwNTEwMjE1NTE0WhcNMjUwNTE3MjE1NTE0WjAYMRYwFAYD VQQDEw02ODFmY2I0Mi0wMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1BmVB+Ng1VqMbOh+gCCmQorUYPUNr3mcTYsSjBJ6rEEULS4XTym/ha2z++f Q7QLS7dGhYEuIlDUZ/TiOOY813PUg/n9zuFA2ebYxbZ/HiCFTBPY1XkUSFyrefk6 sA33nOEb0EsAn5NtnKQ9LsgvfDM8spLbJTLZIk7n/K4/PFqH8X80hPQsBfv/JjMW 9XwZ6AeogcgdEzn+J5i+qG68T6ASFXAXViFsSU/kcNuaWMNHafzI9SZWKKj56kL4 lMWuCE+gemxyQnGRIe0rkSq6uikHv1+1GYCViq/UTBnZC3tmYmwDI6twvlyBCwmd /yB1FRU24UIyUXcjUfmPqupS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+NHhKZ NG6/+zKt7SLkbEQry3p8MB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKcIKoQDrO++2YXs00IKpgX/CpgkL72Y9qxphybG9kaUozzltiWRZr TBYtggP4/mSktKluRqWjMLbgXhxgsHxm8gpS/HuOmZWR5XPSrYr4y9iOPJcVf1Na Fr6YLZ7EynXYUlUw/gdL8mRcbgFwdV/bkW6Uo5TP75X4hxQGj9TRyv0V5vpZRtx9 Ts0aVsjB9qCDNbxsZbEGC2QvcQYm2s4yKAkMDaDYWbyPzu7edtI3EoTJoi0OQ/z+ 3kRddJw0LwDgyeyuWRdLFHZDPAK5J7r8G16SsaSKpRl2rYf3h/nkIY1Sps0RmlLB K6PiFgbZRHu3ZwGZA8/p4LKCC5w1jmUT -----END CERTIFICATE-----Generated at Mon May 12 16:52:51 2025 by rpki-client