$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: icD17F3iRTCUgGAacVJLq/CYpBgThldampJaJBpoJgA= Subject key identifier: 16:B5:13:29:38:30:6F:E7:2B:C3:3D:E4:1A:C3:EB:22:02:8D:C3:08 Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 2449 Signing time: Thu 24 Apr 2025 16:21:26 +0000 Manifest this update: Thu 24 Apr 2025 16:21:25 +0000 Manifest next update: Thu 01 May 2025 16:21:25 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: 0LNWfyHuzR4tdLOIxP96uZpE8aUEh0AGMf5Y2Fpsv+Q=) 2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: YZRf5ygqs6yZScbkx1VpIvx3DqExks4rVOBFuDw10NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Validity Not Before: Apr 24 16:21:25 2025 GMT Not After : May 1 16:21:25 2025 GMT Subject: CN=680a6506-81d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:5f:1a:4c:f1:d8:b2:80:14:1e:c9:fc:17: 70:01:99:2e:1f:4f:75:93:09:63:8c:f7:b3:52:35: 6b:53:55:22:71:97:14:1e:74:ee:65:ae:b8:3a:8d: f3:a7:49:8a:30:e6:bb:c8:8e:42:d0:59:b2:a2:ad: 33:ff:a9:91:47:3b:dc:0b:35:51:a9:69:4f:53:29: be:e6:eb:61:a3:b7:5b:ed:4a:ff:08:d8:93:7b:de: 61:d1:51:29:87:e4:08:a6:ee:a0:4c:ba:cf:16:8b: af:e3:07:ea:0d:42:84:73:66:5d:91:a5:26:a8:1b: ef:20:dd:48:7b:af:24:8e:4b:12:39:67:e1:c6:a7: dc:e0:f3:7e:d8:e2:1e:ee:6f:5c:e6:26:07:7c:ed: 62:74:09:a0:02:bb:42:7d:8b:7a:3d:d5:33:ee:91: de:a3:76:c7:10:40:a5:a3:6b:a2:9e:16:f8:0b:f5: 77:77:b1:ad:fc:31:e3:b2:8b:c8:c9:5d:42:02:37: a7:87:df:d0:d2:fe:55:df:50:81:3f:e2:4c:52:04: 70:d1:89:2e:45:61:df:19:07:57:d6:ee:44:57:27: e4:04:b2:6e:18:65:98:f9:22:8b:4e:b6:e7:f4:05: 3c:c7:23:ce:04:0e:0d:04:49:55:fd:43:3c:67:60: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:13:29:38:30:6F:E7:2B:C3:3D:E4:1A:C3:EB:22:02:8D:C3:08 X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:fc:55:ca:e5:01:78:aa:29:bb:82:e1:c9:67:90:48:db:6d: 57:0d:5a:24:0a:e6:1b:c1:fd:12:3a:56:ac:a3:b3:1c:d0:62: c7:85:b6:6f:3d:e1:e2:47:3a:13:a0:18:da:f7:dc:7c:46:ee: 91:57:0a:c6:c7:73:c7:4e:57:f1:ac:e3:5b:9d:70:22:a8:30: 06:ea:3b:fb:50:52:28:6c:04:5a:c7:78:95:e2:8c:de:74:8b: 38:62:e0:ab:96:17:14:0a:71:3b:f6:2c:c1:ef:c5:6a:2d:9f: 74:fa:de:32:25:02:95:aa:9b:26:3d:f6:88:dd:cf:2a:35:6e: 77:89:53:d8:15:d0:8c:35:93:85:8b:d7:6a:4e:ff:b6:46:9d: 4b:1f:06:1a:a5:d3:53:8f:51:89:8e:78:a8:2c:b5:0d:35:c4: b5:33:4e:04:26:42:f6:89:c3:0a:58:bd:91:23:20:12:e4:0f: 2e:f6:97:6d:e8:e1:ed:55:3e:4e:c5:3c:f4:7f:8c:78:ea:74: 99:08:0e:08:29:6d:e6:2e:ae:4b:aa:18:a7:fa:51:80:de:65: cf:58:a5:be:fe:66:ae:a6:da:0d:69:01:15:e3:0f:26:e7:3f: a3:72:97:de:7c:4f:b1:4c:8a:f1:34:fc:b8:be:43:cc:eb:d7: 2a:fa:8b:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy RDYyN0JCODAeFw0yNTA0MjQxNjIxMjVaFw0yNTA1MDExNjIxMjVaMBgxFjAUBgNV BAMTDTY4MGE2NTA2LTgxZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAyF8aTPHYsoAUHsn8F3ABmS4fT3WTCWOM97NSNWtTVSJxlxQedO5lrrg6jfOn SYow5rvIjkLQWbKirTP/qZFHO9wLNVGpaU9TKb7m62Gjt1vtSv8I2JN73mHRUSmH 5Aim7qBMus8Wi6/jB+oNQoRzZl2RpSaoG+8g3Uh7rySOSxI5Z+HGp9zg837Y4h7u b1zmJgd87WJ0CaACu0J9i3o91TPukd6jdscQQKWja6KeFvgL9Xd3sa38MeOyi8jJ XUICN6eH39DS/lXfUIE/4kxSBHDRiS5FYd8ZB1fW7kRXJ+QEsm4YZZj5IotOtuf0 BTzHI84EDg0ESVX9QzxnYBj1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFrUTKTgw b+crwz3kGsPrIgKNwwgwHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3 UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKr8VcrlAXiqKbuC4clnkEjbbVcNWiQK5hvB/RI6VqyjsxzQYseFtm89 4eJHOhOgGNr33HxG7pFXCsbHc8dOV/Gs41udcCKoMAbqO/tQUihsBFrHeJXijN50 izhi4KuWFxQKcTv2LMHvxWotn3T63jIlApWqmyY99ojdzyo1bneJU9gV0Iw1k4WL 12pO/7ZGnUsfBhql01OPUYmOeKgstQ01xLUzTgQmQvaJwwpYvZEjIBLkDy72l23o 4e1VPk7FPPR/jHjqdJkIDggpbeYurkuqGKf6UYDeZc9Ypb7+Zq6m2g1pARXjDybn P6Nyl958T7FMivE0/Li+Q8zr1yr6i0k= -----END CERTIFICATE-----Generated at Sat Apr 26 08:34:36 2025 by rpki-client