$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: f6Y+jfeDIPORDb+/QhZ3OWBE4TJN6TCja7BRIjWqNwU= Subject key identifier: 6B:DA:FA:2F:F5:A1:57:CD:9F:46:2B:0B:45:43:D2:AE:CB:A8:38:8E Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0AA0 Signing time: Fri 02 May 2025 16:51:15 +0000 Manifest this update: Fri 02 May 2025 16:51:15 +0000 Manifest next update: Fri 09 May 2025 16:51:15 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: u6bY+/ExaLeqBB2ji1IxaIHpAfnIRFJtNwQXCAo+sCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: May 2 16:51:15 2025 GMT Not After : May 9 16:51:15 2025 GMT Subject: CN=6814f803-c958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:c9:6d:bc:3d:70:2e:50:d1:9c:87:28:6e: aa:a2:09:66:6a:35:ce:c5:35:71:0c:11:40:ee:b9: 15:dd:ca:10:86:95:15:c8:26:4a:fb:09:c1:db:1c: ef:05:55:58:55:19:62:80:18:60:b3:2b:10:09:c1: 4e:2c:21:f9:f2:02:85:c4:12:ad:b4:f0:66:53:d9: 4e:44:1b:e7:15:4d:c7:25:01:29:ec:6b:49:45:5c: 68:b9:d2:8a:27:d7:11:56:ae:6a:a6:12:bc:bb:3d: ea:99:45:b5:2b:4c:82:a5:8e:6d:db:c6:c4:09:8c: 1a:d4:1f:4d:ec:23:b9:03:39:8d:79:11:f0:0d:f2: a2:19:03:d7:bc:98:de:4a:8a:89:3c:25:0e:98:80: 90:e3:cb:0e:2f:52:56:a2:3d:ff:68:c0:06:38:d7: 83:9c:61:16:a3:41:2d:a5:97:2e:9c:bc:4a:16:2f: 4e:2c:78:2e:41:83:39:07:88:60:af:99:1e:85:e2: 1c:14:31:aa:80:2d:de:d6:28:eb:72:0d:d0:f0:35: 13:a8:a5:1c:88:a4:7e:66:76:ef:56:0f:e1:16:cc: 48:c9:19:8e:29:35:e7:53:62:26:37:60:74:01:31: a3:c7:48:ef:7d:06:ce:e6:eb:61:a2:0c:9c:5f:71: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DA:FA:2F:F5:A1:57:CD:9F:46:2B:0B:45:43:D2:AE:CB:A8:38:8E X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:14:5e:47:eb:ef:29:3b:34:f5:6f:99:3a:59:31:f0:c2:30: 47:72:4c:17:a1:e1:35:bd:32:7e:80:16:f8:dd:6f:8b:1a:1f: 33:53:72:13:f6:32:a8:2e:01:ea:53:7e:27:bc:44:68:6b:c9: 1d:11:ec:1e:37:2f:3a:a4:0c:65:da:bf:91:44:7e:b3:b7:22: c2:16:cf:cc:e3:b4:4f:87:ea:fd:04:f6:3f:e6:d2:6a:67:98: 59:62:09:18:d4:bb:0b:f3:be:8b:41:26:aa:fa:a4:5b:f6:28: bb:48:c5:84:47:09:29:7e:e0:e2:cf:ba:55:dd:ed:e0:87:64: 7f:30:8f:55:bf:b5:34:19:9d:cb:16:90:4c:a5:83:03:00:ff: ee:fa:ef:0b:4b:e1:95:7b:c4:66:46:6b:2e:41:63:1a:90:d7: 4c:e2:19:e8:ee:90:42:4f:bb:15:68:df:7d:ca:58:a5:f8:ee: 74:fd:59:8d:35:e7:03:30:f3:fe:3d:b7:63:d9:ac:67:3d:85: a3:c3:7c:3c:a4:82:d4:52:37:7b:27:37:fd:af:2d:96:49:6e: 68:c4:94:ea:70:32:33:14:35:3e:3e:ee:4b:57:13:2c:65:33: 31:41:ed:0f:1a:88:b2:f1:40:fb:65:52:14:41:47:44:8f:54: a6:82:6f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUwNTAyMTY1MTE1WhcNMjUwNTA5MTY1MTE1WjAYMRYwFAYD VQQDEw02ODE0ZjgwMy1jOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq3Jbbw9cC5Q0ZyHKG6qoglmajXOxTVxDBFA7rkV3coQhpUVyCZK+wnB2xzv BVVYVRligBhgsysQCcFOLCH58gKFxBKttPBmU9lORBvnFU3HJQEp7GtJRVxoudKK J9cRVq5qphK8uz3qmUW1K0yCpY5t28bECYwa1B9N7CO5AzmNeRHwDfKiGQPXvJje SoqJPCUOmICQ48sOL1JWoj3/aMAGONeDnGEWo0EtpZcunLxKFi9OLHguQYM5B4hg r5keheIcFDGqgC3e1ijrcg3Q8DUTqKUciKR+ZnbvVg/hFsxIyRmOKTXnU2ImN2B0 ATGjx0jvfQbO5uthogycX3H6LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGva+i/1 oVfNn0YrC0VD0q7LqDiOMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBFF5H6+8pOzT1b5k6WTHwwjBHckwXoeE1vTJ+gBb43W+LGh8zU3IT 9jKoLgHqU34nvERoa8kdEeweNy86pAxl2r+RRH6ztyLCFs/M47RPh+r9BPY/5tJq Z5hZYgkY1LsL876LQSaq+qRb9ii7SMWERwkpfuDiz7pV3e3gh2R/MI9Vv7U0GZ3L FpBMpYMDAP/u+u8LS+GVe8RmRmsuQWMakNdM4hno7pBCT7sVaN99ylil+O50/VmN NecDMPP+Pbdj2axnPYWjw3w8pILUUjd7Jzf9ry2WSW5oxJTqcDIzFDU+Pu5LVxMs ZTMxQe0PGoiy8UD7ZVIUQUdEj1Smgm/r -----END CERTIFICATE-----Generated at Sat May 3 14:17:15 2025 by rpki-client