$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft File: JCI9DH0QHbetfjy43bFwYpNlyu4.mft (raw, json) Hash identifier: 1STEHUSOgX6TLnaw5gYJDf6KfUdCg1IiupdKsUZLDaY= Subject key identifier: 25:23:B9:E3:34:7A:DA:0C:F2:32:88:2C:69:36:B5:D9:59:12:53:E3 Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft Manifest number: 0179 Signing time: Fri 25 Apr 2025 02:59:49 +0000 Manifest this update: Fri 25 Apr 2025 02:59:49 +0000 Manifest next update: Fri 02 May 2025 02:59:49 +0000 Files and hashes: 1: JCI9DH0QHbetfjy43bFwYpNlyu4.crl (hash: qzP16qQqLAV7id6Zz/23DB99udBBYPYR7KGZCmGIRQ8=) 2: EDDDD55C252E11EEB91A8941C4F9AE02.roa (hash: FVltAYipOD9ESgI+qOY0I+92Q4+raVRl2aTMJVFkTA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE24, serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE Validity Not Before: Apr 25 02:59:49 2025 GMT Not After : May 2 02:59:49 2025 GMT Subject: CN=680afaa5-290b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:b0:f7:33:b3:3d:d4:30:d1:20:16:f3:ec: d1:8f:05:42:b7:ea:bd:ce:b3:6b:e5:c8:ea:64:60: da:09:86:9e:42:1f:c8:2f:5b:51:8b:03:80:c6:45: 42:4b:61:5c:df:85:96:bc:30:75:66:e2:c9:b5:26: e0:70:f0:8f:05:d3:a1:79:cb:c1:ca:0d:93:40:24: e8:1a:06:2d:18:79:98:77:9e:11:e7:88:26:e3:4e: 98:d5:e4:77:87:82:31:b0:d2:4f:33:92:86:59:0f: f2:02:9a:ca:e5:0a:d1:17:02:93:b5:2f:f0:8a:37: ca:63:22:15:65:df:53:c5:c2:ff:8d:31:a3:05:c6: dc:93:8d:d4:e8:4a:76:f0:96:ca:70:e1:ca:3f:18: 5d:ee:2b:c1:c3:ed:c5:b5:b1:7d:b7:31:6b:09:c2: 6c:e2:71:59:1c:49:20:72:d2:b6:2a:bf:ae:34:69: 8a:65:3a:bf:2c:21:e9:cf:5c:85:37:bd:c1:c0:f5: 43:f1:fd:93:4c:69:44:58:99:65:da:97:23:cd:97: 4d:92:ed:35:54:13:3b:78:f8:98:13:26:65:87:70: d1:ba:dc:f0:23:a8:e2:63:03:06:c2:23:21:25:92: 6a:33:cf:ec:b4:2b:bb:e1:90:a7:aa:2e:b7:46:c5: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:B9:E3:34:7A:DA:0C:F2:32:88:2C:69:36:B5:D9:59:12:53:E3 X509v3 Authority Key Identifier: keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:90:fb:b3:de:98:61:a8:1c:70:9b:88:89:2b:23:97:59:d8: 95:c3:bd:f3:75:b8:48:58:08:6e:5f:b4:c2:50:27:ca:58:75: 45:a9:1e:8d:43:1d:54:e9:63:62:bd:3a:0c:97:34:b2:f7:32: f7:a7:f9:26:82:79:72:12:0f:56:d8:90:05:21:75:bb:9b:9d: 0e:4a:f0:4f:38:6e:fa:6a:43:c7:77:17:72:9c:c0:91:6e:e8: 20:b5:de:13:e7:79:1b:3f:a6:a2:d0:4a:71:28:05:17:13:93: bc:cd:c7:2b:93:73:c9:8a:ae:68:56:6c:4c:24:0e:42:30:91: e3:e7:ea:cd:13:98:bb:6f:85:13:59:41:33:4e:b2:e4:2f:e1: 9e:24:2a:61:82:a1:83:ad:35:36:9c:6f:35:2d:42:09:5c:0a: 1f:1a:76:84:10:84:8d:1c:34:3c:31:8d:10:f1:2c:33:f5:bd: 6e:6c:48:20:6f:d7:00:6e:fb:be:04:19:db:2c:e0:83:63:cc: 03:d6:e0:3e:a7:90:a9:b6:26:5f:13:5d:a0:3e:0d:db:0a:bc: 6a:5b:4d:9c:20:67:dc:88:d8:95:f2:13:7e:ee:35:bb:88:7b: e7:b3:15:9b:76:51:f7:cf:07:23:90:6d:4e:f9:7c:59:36:12: 54:50:12:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFMjQxMTAvBgNVBAUTKDI0MjIzRDBDN0QxMDFEQjdBRDdFM0NCOEREQjE3MDYy OTM2NUNBRUUwHhcNMjUwNDI1MDI1OTQ5WhcNMjUwNTAyMDI1OTQ5WjAYMRYwFAYD VQQDEw02ODBhZmFhNS0yOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kyw9zOzPdQw0SAW8+zRjwVCt+q9zrNr5cjqZGDaCYaeQh/IL1tRiwOAxkVC S2Fc34WWvDB1ZuLJtSbgcPCPBdOhecvByg2TQCToGgYtGHmYd54R54gm406Y1eR3 h4IxsNJPM5KGWQ/yAprK5QrRFwKTtS/wijfKYyIVZd9TxcL/jTGjBcbck43U6Ep2 8JbKcOHKPxhd7ivBw+3FtbF9tzFrCcJs4nFZHEkgctK2Kr+uNGmKZTq/LCHpz1yF N73BwPVD8f2TTGlEWJll2pcjzZdNku01VBM7ePiYEyZlh3DRutzwI6jiYwMGwiMh JZJqM8/stCu74ZCnqi63RsWVhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUjueM0 etoM8jKILGk2tdlZElPjMB8GA1UdIwQYMBaAFCQiPQx9EB23rX48uN2xcGKTZcru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUUyNC9GMkY2NzVGRUYz RkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhiZXRmank0M2JGd1lwTmx5 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDSTlESDBRSGJldGZqeTQzYkZ3WXBObHl1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUUyNC9GMkY2NzVGRUYzRkYxMUVEOTUyRDc0MUNDNEY5QUUwMi9KQ0k5REgwUUhi ZXRmank0M2JGd1lwTmx5dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0kPuz3phhqBxwm4iJKyOXWdiVw73zdbhIWAhuX7TCUCfKWHVFqR6N Qx1U6WNivToMlzSy9zL3p/kmgnlyEg9W2JAFIXW7m50OSvBPOG76akPHdxdynMCR buggtd4T53kbP6ai0EpxKAUXE5O8zccrk3PJiq5oVmxMJA5CMJHj5+rNE5i7b4UT WUEzTrLkL+GeJCphgqGDrTU2nG81LUIJXAofGnaEEISNHDQ8MY0Q8Swz9b1ubEgg b9cAbvu+BBnbLOCDY8wD1uA+p5CptiZfE12gPg3bCrxqW02cIGfciNiV8hN+7jW7 iHvnsxWbdlH3zwcjkG1O+XxZNhJUUBIQ -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:06 2025 by rpki-client