$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft File: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft (raw, json) Hash identifier: LvN9xqVuQdTHhpGeVoJpv/jQc3yrd8svHzYo1miFLY0= Subject key identifier: FA:83:EE:16:0C:89:E8:7C:9E:4E:83:3D:C8:B6:6F:5A:51:19:D5:BD Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft Manifest number: 01A1 Signing time: Mon 05 May 2025 02:43:06 +0000 Manifest this update: Mon 05 May 2025 02:43:05 +0000 Manifest next update: Mon 12 May 2025 02:43:05 +0000 Files and hashes: 1: 75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl (hash: 1D73ssISasJt4E01iVVsDm4b42isbs5Q/J8LjtPOOng=) 2: 267FE3681C4B11F082276911C4F9AE02.roa (hash: IwAZrjoyGmsUGmE4JOsWaeHq5fs6QvEAYA+JnsGMyLo=) 3: F0405FAA173E11F0886E164DC4F9AE02.roa (hash: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=) 4: E0A8B344173E11F093E0F04CC4F9AE02.roa (hash: baZGvTyIaF8PILI14dVTbXunLuwY6sMo3vWHfxxLvRw=) 5: B8CCCFC8FE4711EF9822D46AC4F9AE02.roa (hash: OMFUXP/cctAoz4Xum6QNfmkgufq2udvA4e2an/c9gCg=) 6: 1A6C2ADE173F11F08E4D594DC4F9AE02.roa (hash: lfkr3wnF/gd810FZkIOk1rPPX3nFh2BPUr1atDdR1QQ=) 7: 6B2903E61C4B11F09DCEDB11C4F9AE02.roa (hash: /jkIGuU72p12nz6+bmqYXQjGUP7RRNXyE9lz7PQstzA=) 8: 19CBA44C173F11F08E4D594DC4F9AE02.roa (hash: fGTHrD4EoaVLUBeDI8+wRQTcKC/emxbBQTiRlGHrOYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: May 5 02:43:05 2025 GMT Not After : May 12 02:43:05 2025 GMT Subject: CN=681825b9-865a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:3c:eb:3e:30:dc:95:dd:fc:67:39:19:60: e4:3d:36:de:a6:b6:88:95:35:d5:45:9e:50:75:2a: de:97:49:5a:7a:7c:bc:ca:43:dc:a2:6d:97:e8:83: 6f:1d:68:2b:14:af:d7:d8:ff:2f:1b:87:d5:71:1e: 77:0a:d1:54:0c:bd:94:73:f7:53:e3:33:d1:e4:e9: 26:bc:e5:bc:ef:45:18:d4:6b:85:0c:0e:ca:15:39: de:be:76:7f:4c:66:f5:13:1e:f5:9c:7a:02:15:30: a6:5d:d8:2c:68:9f:56:1e:a7:e5:d2:9c:2a:2b:f9: 63:77:7a:0f:18:b1:90:1f:ef:16:32:e6:7a:ac:84: 30:fc:32:74:23:bb:c6:39:8b:de:9d:cc:90:f1:f9: fb:1f:47:8a:32:5d:3b:03:a1:ea:ff:43:06:b9:1b: 56:f5:e0:96:b8:a9:f7:6b:a5:7e:66:6c:b6:e4:6a: 26:94:d3:7a:74:0a:21:b1:26:4b:fe:3f:ad:55:11: 6f:05:f1:ae:10:3c:c6:53:b2:1d:52:15:59:92:0b: 85:c2:32:b6:25:a9:29:c1:09:5e:3d:13:5d:fa:43: 28:98:61:a6:40:23:b1:ba:60:4f:9f:96:2a:a3:93: 2a:7a:ba:a4:a8:b4:d1:14:31:57:7a:c9:e0:b4:42: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:EE:16:0C:89:E8:7C:9E:4E:83:3D:C8:B6:6F:5A:51:19:D5:BD X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:ab:b0:f1:eb:5b:5b:9a:13:dd:75:00:24:45:ea:b3:0f:99: d7:63:a0:2d:90:e6:38:cb:5b:c6:ef:f1:20:f0:29:2e:f8:d2: 9a:e2:ba:3c:8e:c8:56:cd:b9:06:e2:f4:56:41:1f:a0:64:a1: 9b:2b:9d:60:fa:c8:0a:01:09:82:63:01:45:64:2d:e9:f9:d5: f4:22:92:45:33:61:6d:1c:9e:41:d4:c5:7e:ac:31:68:6a:68: aa:a4:46:eb:9d:ac:59:bf:f5:8c:b4:b8:1b:44:b2:77:4a:7f: 5d:54:39:aa:2c:27:e5:dd:69:c7:ae:da:a6:e8:2c:56:85:7d: 5f:4a:0f:0c:40:35:1f:e1:22:1b:85:19:70:a7:bb:54:ad:ec: 93:4d:43:cb:f0:a0:19:ec:4d:1f:2e:f4:77:23:41:e8:5b:94: 6b:bc:8d:9d:64:ee:3d:40:4e:c9:b7:97:3c:10:2a:6f:8b:de: 9b:92:ca:ee:e1:31:50:c6:94:46:09:b1:df:eb:c1:93:60:83: 66:5a:ce:d8:7e:c6:95:70:3b:9a:b4:b6:af:60:7b:f1:b2:5c: 0e:d6:b5:e5:11:6e:57:8c:b5:bd:4e:8f:a9:50:e1:70:84:09: d5:30:4f:b3:ae:db:f1:33:37:4e:87:b4:bd:ac:76:91:63:64: 20:14:66:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwNTA1MDI0MzA1WhcNMjUwNTEyMDI0MzA1WjAYMRYwFAYD VQQDEw02ODE4MjViOS04NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEo86z4w3JXd/Gc5GWDkPTbepraIlTXVRZ5QdSrel0laeny8ykPcom2X6INv HWgrFK/X2P8vG4fVcR53CtFUDL2Uc/dT4zPR5OkmvOW870UY1GuFDA7KFTnevnZ/ TGb1Ex71nHoCFTCmXdgsaJ9WHqfl0pwqK/ljd3oPGLGQH+8WMuZ6rIQw/DJ0I7vG OYvencyQ8fn7H0eKMl07A6Hq/0MGuRtW9eCWuKn3a6V+Zmy25GomlNN6dAohsSZL /j+tVRFvBfGuEDzGU7IdUhVZkguFwjK2JakpwQlePRNd+kMomGGmQCOxumBPn5Yq o5MqerqkqLTRFDFXesngtELTwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqD7hYM ieh8nk6DPci2b1pRGdW9MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0M4Ny9FNzgyODU0RUVGMEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1 dDhUZzBFbk1ybklvNG8tMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3q7Dx61tbmhPddQAkReqzD5nXY6AtkOY4y1vG7/Eg8Cku+NKa4ro8 jshWzbkG4vRWQR+gZKGbK51g+sgKAQmCYwFFZC3p+dX0IpJFM2FtHJ5B1MV+rDFo amiqpEbrnaxZv/WMtLgbRLJ3Sn9dVDmqLCfl3WnHrtqm6CxWhX1fSg8MQDUf4SIb hRlwp7tUreyTTUPL8KAZ7E0fLvR3I0HoW5RrvI2dZO49QE7Jt5c8ECpvi96bksru 4TFQxpRGCbHf68GTYINmWs7YfsaVcDuatLavYHvxslwO1rXlEW5XjLW9To+pUOFw hAnVME+zrtvxMzdOh7S9rHaRY2QgFGbU -----END CERTIFICATE-----Generated at Mon May 5 09:58:32 2025 by rpki-client