$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: 9GSsvxxAMiTZXjzidhHN71VdR0eLT2rYsWpe8FCWF7M= Subject key identifier: 0A:7F:A5:36:40:AA:D1:A6:F6:73:51:D0:B9:3B:1D:5D:F3:07:19:B1 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 0277 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 0272 Signing time: Tue 13 May 2025 01:31:37 +0000 Manifest this update: Tue 13 May 2025 01:31:37 +0000 Manifest next update: Tue 20 May 2025 01:31:37 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: icSeyu20FdsWl/6Mh60nQRiYMp+Um7c1rUJwuAZUohs=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: 2uGJsNmTSbFLXz0NOaLE4ri/vtQdlsBjdpDRs3IdYUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 631 (0x277) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: May 13 01:31:37 2025 GMT Not After : May 20 01:31:37 2025 GMT Subject: CN=6822a0f9-d00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:66:53:a3:5b:26:55:51:e3:76:a8:75:50: a6:19:e8:4a:97:cd:7a:59:5e:ac:5a:a4:be:bf:85: 70:7d:c8:79:1d:7f:90:27:d5:00:06:f2:da:f6:52: a7:fd:6f:cc:db:99:c4:f0:7f:5c:4d:99:42:b8:53: e1:37:45:02:b4:13:ff:18:02:93:96:79:24:f2:7e: 47:70:2a:99:39:35:dc:da:23:ab:04:da:d8:4c:45: ad:bb:47:13:1f:52:a8:41:62:84:8c:e5:44:1d:5c: d3:fb:91:e3:fc:51:33:35:ce:79:3d:33:ec:03:88: e5:42:14:31:94:b7:f6:8c:1b:2b:d6:0d:6f:86:bf: 1e:11:a0:c9:c2:22:38:52:65:4d:59:36:80:11:88: 8b:59:4a:71:b1:c6:15:65:dd:da:5b:49:41:b6:3b: 26:56:62:3d:de:db:f3:c6:13:cd:21:12:9d:6b:38: a8:f8:9b:66:d6:9c:03:74:c1:a2:20:fc:5e:68:b9: 4b:75:67:69:66:de:d3:72:8c:24:62:ac:96:99:17: 4c:3b:a4:23:cf:c9:78:d3:a7:72:24:e6:da:c2:c5: d3:a5:51:6e:91:69:4b:f9:16:ac:25:c8:61:7b:c9: 84:d6:6d:4f:09:1c:70:b6:d2:84:90:36:28:ee:fa: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7F:A5:36:40:AA:D1:A6:F6:73:51:D0:B9:3B:1D:5D:F3:07:19:B1 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e1:e7:f5:16:cc:e6:cc:31:6b:ab:9f:32:a2:e7:e1:74:f5: 22:3c:6c:59:7a:93:66:22:3c:c8:29:bf:f4:71:b4:a7:23:ad: f5:f1:b8:3a:9c:ac:7c:a0:20:65:8b:5d:4e:bf:55:fe:6a:6d: 5b:02:cf:a4:46:56:fd:5a:17:d7:cb:4b:eb:34:de:75:6a:06: 36:af:4c:f1:4d:7b:5b:de:84:17:82:e0:3b:4a:fb:61:24:71: 20:20:d7:4f:64:4b:3c:ef:78:ce:9b:e6:24:47:8f:e7:ea:40: 39:8d:ae:3f:d3:78:81:ab:af:4f:34:b5:5b:53:1e:e7:96:5e: 50:53:84:42:18:02:9f:4c:62:56:ba:47:13:81:d2:8f:f5:14: 9b:7b:f2:e0:15:f1:3c:28:5c:17:6c:7d:24:7c:51:ee:5d:6e: b9:e3:bc:87:a0:9f:1d:34:d5:57:49:50:c5:40:98:46:41:e2: 59:e0:89:96:cc:b7:b0:31:41:3d:63:ff:70:14:ef:5f:45:08: 39:8f:c1:14:25:a6:38:51:18:13:95:1f:65:9c:5d:6f:07:39: e9:7b:2c:12:f8:52:de:78:4b:34:83:91:11:ad:5f:02:3d:a4: 29:af:c8:cb:31:e6:dd:0a:97:4e:15:c3:32:e2:3e:76:e1:4a: 6c:c5:76:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUwNTEzMDEzMTM3WhcNMjUwNTIwMDEzMTM3WjAYMRYwFAYD VQQDEw02ODIyYTBmOS1kMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVBmU6NbJlVR43aodVCmGehKl816WV6sWqS+v4Vwfch5HX+QJ9UABvLa9lKn /W/M25nE8H9cTZlCuFPhN0UCtBP/GAKTlnkk8n5HcCqZOTXc2iOrBNrYTEWtu0cT H1KoQWKEjOVEHVzT+5Hj/FEzNc55PTPsA4jlQhQxlLf2jBsr1g1vhr8eEaDJwiI4 UmVNWTaAEYiLWUpxscYVZd3aW0lBtjsmVmI93tvzxhPNIRKdazio+Jtm1pwDdMGi IPxeaLlLdWdpZt7TcowkYqyWmRdMO6Qjz8l406dyJObawsXTpVFukWlL+RasJchh e8mE1m1PCRxwttKEkDYo7voa1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp/pTZA qtGm9nNR0Lk7HV3zBxmxMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB74ef1FszmzDFrq58youfhdPUiPGxZepNmIjzIKb/0cbSnI6318bg6 nKx8oCBli11Ov1X+am1bAs+kRlb9WhfXy0vrNN51agY2r0zxTXtb3oQXguA7Svth JHEgINdPZEs873jOm+YkR4/n6kA5ja4/03iBq69PNLVbUx7nll5QU4RCGAKfTGJW ukcTgdKP9RSbe/LgFfE8KFwXbH0kfFHuXW6547yHoJ8dNNVXSVDFQJhGQeJZ4ImW zLewMUE9Y/9wFO9fRQg5j8EUJaY4URgTlR9lnF1vBznpeywS+FLeeEs0g5ERrV8C PaQpr8jLMebdCpdOFcMy4j524UpsxXb1 -----END CERTIFICATE-----Generated at Tue May 13 12:27:05 2025 by rpki-client