$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: GOeSzuL3D5dtGVa8gEr9v9UkE7k8kQCIpO0ow0ENcPU= Subject key identifier: 2D:59:7C:0A:33:01:0A:0C:58:6A:CE:22:4C:24:B5:95:67:42:34:2D Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 2456 Signing time: Mon 28 Apr 2025 16:54:36 +0000 Manifest this update: Mon 28 Apr 2025 16:54:35 +0000 Manifest next update: Mon 05 May 2025 16:54:35 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: yjf8JC8aE1ZM/IT9r04Bh+jrBLzTqsk5PBLpxzNWLpA=) 2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: ktQbvk1dYwtY6XHKjo1bzOppPwxVRxcNRlkE67hCNQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Validity Not Before: Apr 28 16:54:35 2025 GMT Not After : May 5 16:54:35 2025 GMT Subject: CN=680fb2cb-8e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:26:c2:e2:85:ed:f9:9f:50:79:5e:4a:79: 2e:4a:83:57:f0:31:d0:65:10:b6:db:2e:42:e8:4e: 75:ce:1d:51:af:0f:98:64:86:0e:d4:26:e4:10:65: 0d:4e:6b:50:38:ee:3b:4e:22:60:92:91:d2:1a:a9: 65:85:7d:54:16:b0:e8:88:4b:97:f9:05:51:47:51: c4:5c:76:1a:94:ef:77:c8:e8:49:c0:05:92:f6:36: 80:92:1b:d8:03:72:d4:57:da:55:b2:4b:3f:f5:8e: 8a:68:08:c2:ee:4c:9e:f9:e4:56:d9:a7:77:03:2b: 7e:4e:e8:5f:25:20:13:b5:44:56:9f:b7:31:56:1e: 29:fb:fc:50:8f:a6:26:8f:8a:2a:c8:a8:00:91:e1: c8:40:a3:ee:c9:b8:30:5d:a8:56:9b:aa:1c:e3:b7: bb:f0:d1:21:25:29:de:e8:d5:f1:54:2a:60:43:45: 0a:86:56:63:56:6f:6c:bc:8d:4e:2a:d6:99:e6:03: 3f:14:2f:96:83:0b:1f:ca:ee:9f:69:3d:84:ed:b9: 04:14:0d:ff:7d:ae:69:54:c7:8e:d6:68:6e:e3:59: 65:fe:58:43:0e:4d:6d:c5:d6:af:ed:3f:89:28:e7: 43:22:6b:95:18:3b:68:f1:64:18:b3:4f:3d:aa:46: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:7C:0A:33:01:0A:0C:58:6A:CE:22:4C:24:B5:95:67:42:34:2D X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c3:4f:c3:20:04:17:1b:f4:1f:e2:2a:39:bc:18:8b:3b:f4: f6:0b:e3:01:35:a4:19:72:59:98:db:d1:01:29:c3:ab:99:38: 59:8f:f6:f2:5f:61:8b:eb:cf:ab:1a:ae:e7:a9:a5:d8:2b:20: 72:cc:54:91:8d:b1:90:89:fb:d3:3e:62:4a:38:fd:b9:2c:bd: 8e:54:1a:6a:f1:9a:ca:65:48:ff:c0:95:9e:57:f0:c0:27:fc: 5c:dc:29:96:2d:1b:5f:b1:08:1d:13:4f:95:80:25:ef:17:62: e8:17:0c:9a:ee:58:ed:73:3a:51:fa:50:bf:86:f2:58:a2:94: db:98:65:b0:46:c3:a4:fa:d7:6b:e1:a1:37:c9:7b:68:27:aa: fa:5f:e6:13:cc:d5:97:a3:34:a6:96:a4:38:e2:b8:2c:8a:9d: 0d:5a:b3:bf:6a:68:84:2c:28:d5:fa:bc:d7:ac:da:c3:f4:41: 03:f6:b4:37:30:75:5d:4a:9d:15:9b:e1:95:25:92:2e:10:c5: 82:ea:f1:94:94:dc:da:cc:d7:0d:1c:e2:28:ff:5d:d5:c2:bd: 1a:36:a7:7e:aa:2a:eb:0a:1e:8a:54:73:fb:26:0b:e7:cb:45: 9b:48:e7:f1:f4:4c:58:57:fd:dc:5b:fa:10:5b:5a:5f:dd:fd: f2:59:8c:7e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy RDYyN0JCODAeFw0yNTA0MjgxNjU0MzVaFw0yNTA1MDUxNjU0MzVaMBgxFjAUBgNV BAMTDTY4MGZiMmNiLThlNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPHSbC4oXt+Z9QeV5KeS5Kg1fwMdBlELbbLkLoTnXOHVGvD5hkhg7UJuQQZQ1O a1A47jtOImCSkdIaqWWFfVQWsOiIS5f5BVFHUcRcdhqU73fI6EnABZL2NoCSG9gD ctRX2lWySz/1jopoCMLuTJ755FbZp3cDK35O6F8lIBO1RFaftzFWHin7/FCPpiaP iirIqACR4chAo+7JuDBdqFabqhzjt7vw0SElKd7o1fFUKmBDRQqGVmNWb2y8jU4q 1pnmAz8UL5aDCx/K7p9pPYTtuQQUDf99rmlUx47WaG7jWWX+WEMOTW3F1q/tP4ko 50Mia5UYO2jxZBizTz2qRipFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULVl8CjMB CgxYas4iTCS1lWdCNC0wHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3 UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3DT8MgBBcb9B/iKjm8GIs79PYL4wE1pBlyWZjb0QEpw6uZOFmP9vJf YYvrz6sarueppdgrIHLMVJGNsZCJ+9M+Yko4/bksvY5UGmrxmsplSP/AlZ5X8MAn /FzcKZYtG1+xCB0TT5WAJe8XYugXDJruWO1zOlH6UL+G8liilNuYZbBGw6T612vh oTfJe2gnqvpf5hPM1ZejNKaWpDjiuCyKnQ1as79qaIQsKNX6vNes2sP0QQP2tDcw dV1KnRWb4ZUlki4QxYLq8ZSU3NrM1w0c4ij/XdXCvRo2p36qKusKHopUc/smC+fL RZtI5/H0TFhX/dxb+hBbWl/d/fJZjH4= -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:21 2025 by rpki-client on console.sobornost.net