$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json) Hash identifier: RIHXyRYpKI/89+oMwD6CcPfUO0EjgaA3c2pUziu+hnQ= Subject key identifier: 9C:90:76:03:57:7B:07:14:50:15:8E:ED:A1:54:23:73:D4:4C:32:7F Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft Manifest number: 1015 Signing time: Thu 08 May 2025 18:20:36 +0000 Manifest this update: Thu 08 May 2025 18:20:36 +0000 Manifest next update: Thu 15 May 2025 18:20:36 +0000 Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: F0suZHQfww46oMDedeon9jK1wl9Ym9x68vYiMSxqGmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 18:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Validity Not Before: May 8 18:20:36 2025 GMT Not After : May 15 18:20:36 2025 GMT Subject: CN=681cf5f4-c5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:d4:5d:b6:24:5d:d0:91:e9:87:79:3f:06: 18:28:e3:fb:f3:91:7c:9d:4d:0f:89:ee:e0:a1:db: c0:b6:d6:d5:21:a7:1f:c4:7b:0e:e1:ed:67:96:c8: 62:1b:94:c5:f0:d6:4b:65:c8:9a:9e:ef:13:5c:3a: 46:16:d6:4f:5e:15:34:69:d3:bf:b5:85:ff:07:19: 89:9a:72:62:49:82:8a:e8:da:8f:93:69:73:8d:ce: 91:07:95:6c:8f:58:aa:ff:1e:aa:87:e0:d3:9f:70: 93:48:1b:ac:d6:c1:1e:4e:59:d7:15:1f:df:8d:9a: b1:c5:7e:b4:b0:e0:74:01:f7:59:8b:2b:80:22:ad: a1:0e:9b:9f:72:e2:cb:1a:f8:1b:fd:34:7e:52:6e: bc:4f:ea:f1:a6:39:95:58:f3:0e:a7:de:8b:c4:0f: 4a:b8:60:cd:04:e2:28:3b:7b:ea:2b:74:5b:9d:81: 3d:eb:d8:e4:d0:76:2f:1f:4b:9f:e8:9b:1c:5b:23: 0b:d8:05:d2:c2:52:5e:f3:64:b7:bc:2c:db:8e:85: 2f:ce:f1:a2:eb:b1:64:23:fe:f1:6c:30:57:20:7f: 70:e1:44:77:ed:2a:8b:38:29:b8:b0:da:da:a6:eb: 02:17:a5:ba:ab:2e:a0:03:8e:82:85:b9:55:3c:57: 3f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:90:76:03:57:7B:07:14:50:15:8E:ED:A1:54:23:73:D4:4C:32:7F X509v3 Authority Key Identifier: keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:4f:d6:40:8e:2c:4d:50:59:fa:fd:ee:df:ad:79:9d:13:13: 34:f5:ca:08:c9:80:e1:2b:d9:67:3d:e9:05:57:79:11:02:98: d9:81:72:00:6f:97:cd:3b:e6:39:3b:e5:d7:45:21:ed:43:0c: ba:1f:66:01:cc:c1:4b:5b:81:cb:81:ff:87:79:fa:2a:5f:e5: ce:f6:a6:72:ef:48:5d:43:d0:36:f6:e8:6a:b5:c5:9b:b7:46: c7:d8:b9:2b:46:52:b1:49:6b:e8:9c:34:e4:82:96:bd:e7:58: ed:0d:70:8e:b2:b9:56:8c:ab:34:44:f5:80:d3:2f:b4:4d:0c: 08:7d:a8:c0:b2:ab:66:b2:12:78:0f:93:77:69:88:40:d2:33: 94:3b:46:fd:11:aa:f5:9a:c8:74:bc:95:00:7c:92:36:5d:ed: 19:4d:a8:9d:2b:d1:d9:09:83:14:10:32:07:73:fa:e0:79:5e: 08:ca:97:6a:43:d9:ae:fd:37:b3:f4:91:64:db:eb:95:81:3c: c8:b6:d4:5b:1c:d6:85:b4:25:48:98:84:bf:88:36:8a:2c:25: 67:87:96:c0:0f:52:ce:81:63:58:cb:e3:ab:de:ef:9a:ae:80: be:c5:45:3e:d1:30:ad:05:b1:cd:c1:f2:03:08:b5:2d:c4:f7: ba:3b:44:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKDI0REFBN0E5QkFDNjU0OEQ4QUM2Q0QxMDU4MUM0QjdC RkQwNzY0NjUwHhcNMjUwNTA4MTgyMDM2WhcNMjUwNTE1MTgyMDM2WjAYMRYwFAYD VQQDEw02ODFjZjVmNC1jNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIDUXbYkXdCR6Yd5PwYYKOP785F8nU0Pie7godvAttbVIacfxHsO4e1nlshi G5TF8NZLZcianu8TXDpGFtZPXhU0adO/tYX/BxmJmnJiSYKK6NqPk2lzjc6RB5Vs j1iq/x6qh+DTn3CTSBus1sEeTlnXFR/fjZqxxX60sOB0AfdZiyuAIq2hDpufcuLL Gvgb/TR+Um68T+rxpjmVWPMOp96LxA9KuGDNBOIoO3vqK3RbnYE969jk0HYvH0uf 6JscWyML2AXSwlJe82S3vCzbjoUvzvGi67FkI/7xbDBXIH9w4UR37SqLOCm4sNra pusCF6W6qy6gA46ChblVPFc/zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyQdgNX ewcUUBWO7aFUI3PUTDJ/MB8GA1UdIwQYMBaAFCTap6m6xlSNisbNEFgcS3v9B2Rl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJMkt4czBRV0J4TGVfMEha R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcW5xYnJHVkkyS3hzMFFXQnhMZV8wSFpHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJ Mkt4czBRV0J4TGVfMEhaR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1T9ZAjixNUFn6/e7frXmdExM09coIyYDhK9lnPekFV3kRApjZgXIA b5fNO+Y5O+XXRSHtQwy6H2YBzMFLW4HLgf+HefoqX+XO9qZy70hdQ9A29uhqtcWb t0bH2LkrRlKxSWvonDTkgpa951jtDXCOsrlWjKs0RPWA0y+0TQwIfajAsqtmshJ4 D5N3aYhA0jOUO0b9Ear1msh0vJUAfJI2Xe0ZTaidK9HZCYMUEDIHc/rgeV4Iypdq Q9mu/Tez9JFk2+uVgTzIttRbHNaFtCVImIS/iDaKLCVnh5bAD1LOgWNYy+Or3u+a roC+xUU+0TCtBbHNwfIDCLUtxPe6O0Sy -----END CERTIFICATE-----Generated at Fri May 9 03:35:45 2025 by rpki-client