$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: RrRWT7HSXGruwDz4bjtyDrM0vx9bA8OOUsk3pRHZhss= Subject key identifier: 80:74:06:03:E4:4F:96:A0:A9:6D:FD:AE:AF:BC:F4:CF:7D:C0:99:C6 Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 1767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 1758 Signing time: Thu 24 Apr 2025 16:37:38 +0000 Manifest this update: Thu 24 Apr 2025 16:37:38 +0000 Manifest next update: Thu 01 May 2025 16:37:38 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: co6y24lu1uHQC/qRiw0CBBQOTTazOM3/aZuFnY9C/+k=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: HaGuDMDdtzMMm3o6+XeqS8/R5NYbXvco+c9bwnRUeLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5991 (0x1767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: Apr 24 16:37:38 2025 GMT Not After : May 1 16:37:38 2025 GMT Subject: CN=680a68d2-a15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fb:85:88:80:cb:cd:d5:4c:74:5d:cf:cb:25: 32:ac:5e:5d:0d:1c:52:c6:93:3a:3d:68:c2:d6:59: 9a:ff:a9:29:5e:c3:f8:11:e9:91:36:f3:43:bf:7f: 10:57:9c:6b:ad:c5:cd:68:98:17:48:65:4c:03:62: 77:77:06:0f:e8:71:7b:bd:9c:d9:c1:bf:62:6f:f1: 4e:ce:bd:8f:1e:9a:f2:b0:6c:b8:23:37:14:7c:70: 73:21:17:ae:eb:fb:2f:e3:7e:c1:e5:af:1d:b5:54: 3d:db:26:88:ac:7f:45:bd:7b:6a:1e:56:4e:b8:6b: 3d:57:67:fc:80:4d:49:b7:f8:f2:3c:dc:98:c5:68: 14:60:bd:f0:ff:bf:1b:d2:ec:b0:7d:da:b9:3a:21: e0:c1:9d:3b:83:c7:df:2f:55:73:09:c2:f7:3f:c5: 5f:48:a4:31:11:2d:e8:ed:9e:c4:58:45:e0:44:58: f0:2f:d0:4a:4c:6b:6d:45:e8:40:c2:6d:dd:49:62: e2:15:6f:57:44:bb:52:1a:f8:09:0b:ec:6b:bc:c7: 03:58:95:86:23:b0:71:2a:6c:31:09:61:1c:27:a2: 11:9f:8c:e9:f1:49:7f:6d:ec:b7:09:2a:71:84:09: 9b:e4:40:24:3f:a0:ea:e4:4e:de:a9:7c:dc:f0:ad: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:74:06:03:E4:4F:96:A0:A9:6D:FD:AE:AF:BC:F4:CF:7D:C0:99:C6 X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c5:e1:3d:8c:a6:6f:8f:87:8b:b3:51:3c:65:66:a6:7d:3e: da:36:27:de:f0:98:c5:28:b6:a7:6c:77:9d:15:bc:49:cc:22: 94:2d:2c:96:29:56:62:a1:61:19:2f:b6:f1:38:3c:b6:aa:62: 51:9e:4f:03:6f:ce:93:8e:f8:9f:b8:2e:e0:21:40:62:d1:83: ab:ad:1a:63:81:43:f3:58:5e:92:ea:89:fe:76:e8:e6:9a:19: d5:c0:d2:36:72:04:44:d6:3a:01:71:7e:ff:4d:57:4b:5f:31: 05:b1:3a:28:3f:b4:22:ac:51:b4:d8:20:9c:83:ac:4e:4b:bf: 7a:00:d9:3f:ec:6f:54:b0:c5:5e:ce:ae:23:c1:94:ff:81:8e: 29:e1:f7:91:00:9c:86:39:58:07:b7:f9:c9:2e:39:16:99:33: a9:a3:74:d3:88:12:bd:8c:6f:50:f3:f2:68:78:02:71:d2:0a: 48:97:2e:f2:42:45:e8:84:e8:95:c0:46:c3:c8:fa:cc:47:9a: 03:4f:12:1c:c6:52:43:35:42:68:7a:fa:f4:dc:c0:91:05:89: 58:eb:a2:98:30:89:6c:87:ef:83:2e:2f:9c:0f:2f:fa:e6:80: ff:fc:e5:37:b7:1c:0a:2f:85:4a:bb:7b:26:1c:f6:21:f1:89: 0b:b1:a7:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjUwNDI0MTYzNzM4WhcNMjUwNTAxMTYzNzM4WjAYMRYwFAYD VQQDEw02ODBhNjhkMi1hMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/uFiIDLzdVMdF3PyyUyrF5dDRxSxpM6PWjC1lma/6kpXsP4EemRNvNDv38Q V5xrrcXNaJgXSGVMA2J3dwYP6HF7vZzZwb9ib/FOzr2PHprysGy4IzcUfHBzIReu 6/sv437B5a8dtVQ92yaIrH9FvXtqHlZOuGs9V2f8gE1Jt/jyPNyYxWgUYL3w/78b 0uywfdq5OiHgwZ07g8ffL1VzCcL3P8VfSKQxES3o7Z7EWEXgRFjwL9BKTGttRehA wm3dSWLiFW9XRLtSGvgJC+xrvMcDWJWGI7BxKmwxCWEcJ6IRn4zp8Ul/bey3CSpx hAmb5EAkP6Dq5E7eqXzc8K1KjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB0BgPk T5agqW39rq+89M99wJnGMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnxeE9jKZvj4eLs1E8ZWamfT7aNife8JjFKLanbHedFbxJzCKULSyW KVZioWEZL7bxODy2qmJRnk8Db86TjvifuC7gIUBi0YOrrRpjgUPzWF6S6on+dujm mhnVwNI2cgRE1joBcX7/TVdLXzEFsTooP7QirFG02CCcg6xOS796ANk/7G9UsMVe zq4jwZT/gY4p4feRAJyGOVgHt/nJLjkWmTOpo3TTiBK9jG9Q8/JoeAJx0gpIly7y QkXohOiVwEbDyPrMR5oDTxIcxlJDNUJoevr03MCRBYlY66KYMIlsh++DLi+cDy/6 5oD//OU3txwKL4VKu3smHPYh8YkLsadY -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:04 2025 by rpki-client