$ rpki-client -vvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft File: J-T9QcOzZMXkROYutxgZklg5M2k.mft (raw, json) Hash identifier: 6lLsegO2lkPVLFb6259MTwzqSl36cj8bO6iisdaRqB4= Subject key identifier: 59:70:4E:5B:53:22:76:04:78:38:3A:3C:FC:13:2B:3C:59:84:B6:17 Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Certificate serial: 0751 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft Manifest number: 0747 Signing time: Thu 24 Apr 2025 21:29:47 +0000 Manifest this update: Thu 24 Apr 2025 21:29:47 +0000 Manifest next update: Thu 01 May 2025 21:29:47 +0000 Files and hashes: 1: J-T9QcOzZMXkROYutxgZklg5M2k.crl (hash: paxMACeHkpOrS/5nHFCtJTrS4niLttTUlxY1u2UrNBM=) 2: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (hash: gOeA95IoTDT+oKmI8jFxYBNTdxSgbCw9gAyz2psvCzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1873 (0x751) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111274, serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Validity Not Before: Apr 24 21:29:47 2025 GMT Not After : May 1 21:29:47 2025 GMT Subject: CN=680aad4b-9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ce:ec:55:8a:cb:a9:c3:e7:54:a5:ea:21:bf: fa:92:e0:4b:95:63:d7:c5:6f:76:c4:2d:e0:7a:df: 63:41:14:ee:39:f5:18:d0:91:d8:2b:45:8f:f0:67: b4:ac:89:44:69:29:2b:8d:94:64:42:09:e5:1c:62: 7a:79:06:9f:0b:36:11:77:74:61:af:4d:94:c8:79: 96:a8:c2:e3:17:4b:9c:ec:84:e5:c9:dc:da:ce:5a: 30:0c:1a:5a:27:e3:a9:18:00:b2:01:0e:ad:e8:4c: 73:33:f8:b3:7f:7d:5d:7a:29:bd:fb:e4:8f:9f:eb: d4:5d:d3:17:86:0b:00:f0:c9:5d:e5:58:90:af:37: a2:14:18:61:ae:96:b0:f0:73:60:0c:9b:b8:6e:c5: 74:fa:5d:22:94:b6:07:96:26:df:a9:08:45:81:79: b0:6e:f3:a1:0f:3e:ec:d4:72:b9:d2:11:3c:be:18: f1:32:ac:04:71:a0:9e:d4:32:eb:55:ae:99:17:2f: 02:09:8b:05:97:35:2d:e3:41:de:a8:83:6c:9d:76: 21:21:f8:0c:85:cf:60:2d:1a:97:bb:a5:87:22:68: 7c:da:cd:46:fd:57:5b:14:95:59:72:d5:22:e3:03: d0:a0:49:0a:d7:45:83:71:23:28:9a:33:10:1e:99: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:70:4E:5B:53:22:76:04:78:38:3A:3C:FC:13:2B:3C:59:84:B6:17 X509v3 Authority Key Identifier: keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e5:70:5b:1e:a7:cf:37:6e:a2:d0:d8:c2:17:2d:b2:b1:a2: 0f:b5:7c:d0:2c:9d:4b:f1:7c:0d:09:fe:47:07:d6:b8:9a:6a: b1:6d:aa:5a:e7:db:9d:ac:54:d9:a5:7f:28:e0:1a:8f:7e:58: 6d:d4:17:c0:80:c9:fe:59:66:8d:fc:c7:d8:4c:20:03:8f:95: be:0a:8b:19:ad:8a:16:80:82:ec:7e:23:0e:2f:e8:6f:25:1a: ba:b1:61:13:d1:ab:25:0d:a0:f1:53:28:dc:07:00:72:59:0e: ef:e4:d0:ba:08:20:f5:09:0b:73:71:a3:03:66:5b:e2:14:89: c1:cf:f0:06:73:b9:5f:6e:b5:5e:82:13:af:7e:5c:5d:1b:10: 24:18:37:a8:81:61:3d:85:c6:83:50:4b:09:02:3e:5b:23:7b: 75:a6:cf:af:b5:65:d9:ab:55:6a:95:6a:37:91:12:ad:e7:7e: 53:88:d9:33:29:e7:6c:48:8a:cc:91:1b:f4:53:b6:df:95:cf: c9:2e:92:ea:fa:c6:08:07:b7:b2:1e:6a:2c:1c:64:48:bf:26: 16:2c:f1:85:32:b4:15:0a:b3:48:90:56:e8:70:e7:22:7f:59: af:8e:96:94:da:f4:c5:9f:72:34:a1:33:a6:e1:4b:81:43:06: ff:11:24:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyNzQxMTAvBgNVBAUTKDI3RTRGRDQxQzNCMzY0QzVFNDQ0RTYyRUI3MTgxOTky NTgzOTMzNjkwHhcNMjUwNDI0MjEyOTQ3WhcNMjUwNTAxMjEyOTQ3WjAYMRYwFAYD VQQDEw02ODBhYWQ0Yi05Yjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA687sVYrLqcPnVKXqIb/6kuBLlWPXxW92xC3get9jQRTuOfUY0JHYK0WP8Ge0 rIlEaSkrjZRkQgnlHGJ6eQafCzYRd3Rhr02UyHmWqMLjF0uc7ITlydzazlowDBpa J+OpGACyAQ6t6ExzM/izf31deim9++SPn+vUXdMXhgsA8Mld5ViQrzeiFBhhrpaw 8HNgDJu4bsV0+l0ilLYHlibfqQhFgXmwbvOhDz7s1HK50hE8vhjxMqwEcaCe1DLr Va6ZFy8CCYsFlzUt40HeqINsnXYhIfgMhc9gLRqXu6WHImh82s1G/VdbFJVZctUi 4wPQoEkK10WDcSMomjMQHpkmzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlwTltT InYEeDg6PPwTKzxZhLYXMB8GA1UdIwQYMBaAFCfk/UHDs2TF5ETmLrcYGZJYOTNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTI3NC9DQjM3REFERTI0 MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpNWGtST1l1dHhnWmtsZzVN MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otVDlRY096Wk1Ya1JPWXV0eGdaa2xnNU0yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTI3NC9DQjM3REFERTI0MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpN WGtST1l1dHhnWmtsZzVNMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB25XBbHqfPN26i0NjCFy2ysaIPtXzQLJ1L8XwNCf5HB9a4mmqxbapa 59udrFTZpX8o4BqPflht1BfAgMn+WWaN/MfYTCADj5W+CosZrYoWgILsfiMOL+hv JRq6sWET0aslDaDxUyjcBwByWQ7v5NC6CCD1CQtzcaMDZlviFInBz/AGc7lfbrVe ghOvflxdGxAkGDeogWE9hcaDUEsJAj5bI3t1ps+vtWXZq1VqlWo3kRKt535TiNkz KedsSIrMkRv0U7bflc/JLpLq+sYIB7eyHmosHGRIvyYWLPGFMrQVCrNIkFbocOci f1mvjpaU2vTFn3I0oTOm4UuBQwb/ESRn -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:18 2025 by rpki-client