$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: PGPxq+lxk7rjOLjGZ2GVwLbvTHCOXM/zZR+2Y9zA+tg= Subject key identifier: 6B:D8:3B:35:7E:80:90:DE:EE:8E:85:F2:B4:C5:B5:67:2D:6A:9C:B8 Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 01A9 Signing time: Sun 27 Apr 2025 02:17:12 +0000 Manifest this update: Sun 27 Apr 2025 02:17:12 +0000 Manifest next update: Sun 04 May 2025 02:17:12 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: 64AW4b6dvj/+/hmgdmUYePlCBqANze8/NvufrhaGpUI=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Apr 27 02:17:12 2025 GMT Not After : May 4 02:17:12 2025 GMT Subject: CN=680d93a8-58ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:8e:06:8f:45:ea:d0:4b:fe:d1:37:d4:57: b0:93:f8:f4:02:59:50:dd:16:6e:99:cc:cd:9b:27: ef:31:e6:aa:1c:3e:b0:0b:70:fb:e0:f3:80:d1:11: a6:e1:73:a6:5e:d5:e7:bb:4d:e7:77:2f:34:fd:e0: 25:7f:72:b6:eb:20:7f:16:fe:1f:12:e3:29:51:8c: 9f:fd:57:8d:0f:c2:ea:95:b7:a8:d6:63:b7:2d:0f: 35:3c:e4:86:45:e5:b6:b0:d8:a3:c1:d4:2e:db:cc: 6a:72:af:e7:e1:41:33:c6:d2:f9:87:30:58:70:00: ba:90:96:e0:f8:94:d1:cf:ef:15:f4:00:1e:35:8c: cf:4d:99:46:3d:35:3f:38:58:b0:1c:8e:56:61:58: 2c:20:46:d5:69:d5:c1:0b:d4:b2:95:d5:bd:a5:a3: e5:57:5b:19:cc:49:3d:80:fb:0d:bc:08:50:e2:72: 71:01:58:e5:f6:6f:61:37:ea:d4:97:9f:eb:ba:e4: 61:dd:b7:4f:93:6f:2b:f0:f3:38:c9:a7:58:9a:ee: 91:98:96:84:d8:40:76:f4:36:5b:2f:45:e2:35:12: bb:15:fc:8d:f8:cc:f3:16:46:fe:5a:04:01:26:96: 09:d6:39:36:a9:84:0d:66:0a:4c:86:01:77:e1:54: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D8:3B:35:7E:80:90:DE:EE:8E:85:F2:B4:C5:B5:67:2D:6A:9C:B8 X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2e:e4:74:7f:d0:b4:ae:d6:e0:82:fe:b9:3c:b1:e2:42:10: bc:7c:5e:42:ad:2d:fa:c9:30:b5:47:c4:5e:4d:f8:eb:73:75: 4c:93:c8:18:02:85:57:aa:64:0c:a1:1d:98:08:0b:1f:43:ea: ba:7a:eb:af:a6:b3:38:2e:41:48:73:c5:fe:ff:87:01:5d:24: df:e1:e2:3e:27:43:11:78:67:68:11:d1:6c:7a:e1:53:7e:a7: c2:01:a6:4d:e9:b8:27:3a:6a:60:e8:72:45:88:87:8f:65:02: 8e:cd:0c:ee:ee:5b:00:14:05:5a:ea:b0:3c:7b:63:e9:97:73: 65:fb:72:50:2c:e8:7e:45:6e:1f:9f:d9:e1:8c:9a:c6:8e:8a: 8b:ee:8c:88:70:36:ed:c1:35:bf:e5:dc:aa:95:ff:2d:1a:7c: 96:cf:c4:8a:ea:65:81:3d:81:41:e7:e0:5b:68:68:ad:7a:21: ac:d5:b0:9a:b7:79:32:4c:72:6f:31:e3:3b:56:77:4c:c3:c1: 27:b1:b1:a7:70:04:20:21:8a:2e:52:02:00:3b:9c:07:24:06: e3:ad:1f:52:c6:ae:1c:3b:c4:7b:54:57:05:ed:b9:32:f4:ff: 25:31:c8:12:cf:0a:71:01:71:50:62:0b:a5:07:a6:c2:22:c7: 00:a5:db:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUwNDI3MDIxNzEyWhcNMjUwNTA0MDIxNzEyWjAYMRYwFAYD VQQDEw02ODBkOTNhOC01OGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAok2OBo9F6tBL/tE31Fewk/j0AllQ3RZumczNmyfvMeaqHD6wC3D74POA0RGm 4XOmXtXnu03ndy80/eAlf3K26yB/Fv4fEuMpUYyf/VeND8Lqlbeo1mO3LQ81POSG ReW2sNijwdQu28xqcq/n4UEzxtL5hzBYcAC6kJbg+JTRz+8V9AAeNYzPTZlGPTU/ OFiwHI5WYVgsIEbVadXBC9SyldW9paPlV1sZzEk9gPsNvAhQ4nJxAVjl9m9hN+rU l5/ruuRh3bdPk28r8PM4yadYmu6RmJaE2EB29DZbL0XiNRK7FfyN+MzzFkb+WgQB JpYJ1jk2qYQNZgpMhgF34VTa7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvYOzV+ gJDe7o6F8rTFtWctapy4MB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOLuR0f9C0rtbggv65PLHiQhC8fF5CrS36yTC1R8ReTfjrc3VMk8gY AoVXqmQMoR2YCAsfQ+q6euuvprM4LkFIc8X+/4cBXSTf4eI+J0MReGdoEdFseuFT fqfCAaZN6bgnOmpg6HJFiIePZQKOzQzu7lsAFAVa6rA8e2Ppl3Nl+3JQLOh+RW4f n9nhjJrGjoqL7oyIcDbtwTW/5dyqlf8tGnyWz8SK6mWBPYFB5+BbaGiteiGs1bCa t3kyTHJvMeM7VndMw8EnsbGncAQgIYouUgIAO5wHJAbjrR9Sxq4cO8R7VFcF7bky 9P8lMcgSzwpxAXFQYgulB6bCIscApduG -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net