$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json) Hash identifier: EaovhAoDQOpx0Hr0pGECpWy4SD2C9VAsGJPkfAYTG8E= Subject key identifier: FD:6B:2B:25:73:77:64:43:23:1E:8B:49:21:D7:C5:CE:A6:54:63:6B Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft Manifest number: 1F Signing time: Fri 25 Apr 2025 07:01:03 +0000 Manifest this update: Fri 25 Apr 2025 07:01:02 +0000 Manifest next update: Fri 02 May 2025 07:01:02 +0000 Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: 9nb+/qZ7jGYc1QlX4Qd9Vindk7ejZEZ6SNssGEKJg+4=) 2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: 2g0YcwmcNYvF1yQbVU8JT3MVONcEq3Lo2nc0de/dtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Validity Not Before: Apr 25 07:01:02 2025 GMT Not After : May 2 07:01:02 2025 GMT Subject: CN=680b332e-fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:74:7b:04:74:4b:53:4a:e8:90:17:e2:65: d9:ab:cf:08:a5:33:fc:1a:d0:ab:85:9a:c0:e6:bd: 96:c6:6a:75:7c:71:0a:28:4f:a4:b7:3c:7f:67:bd: 8e:99:43:4a:cf:ef:06:9f:03:2a:0b:5a:8b:51:d1: 9e:d2:2e:d4:88:06:f6:3b:6f:62:29:35:34:c4:85: 4f:1b:b0:24:90:c6:9b:d0:4b:30:38:82:78:82:84: 4e:31:ce:15:9e:b1:83:f3:d1:f2:22:01:f8:19:63: 90:73:44:c1:8b:0f:5e:09:2d:58:b9:aa:e0:aa:7f: c3:6a:45:3f:bc:1a:54:3f:92:75:ae:df:a4:a8:f5: 86:16:22:6a:ce:91:67:46:4d:0a:f5:44:be:58:b6: a7:ca:ab:81:81:e3:d1:79:02:2c:86:e2:2d:5b:16: 58:d7:22:12:4a:7d:f0:af:ec:9a:76:04:f9:11:c9: 34:a8:2e:a8:f3:22:5d:88:97:ff:56:8f:01:11:20: 52:16:46:ed:17:92:42:0a:54:68:ea:08:43:78:d2: d2:67:d9:e9:c2:c1:a4:be:6d:4a:a2:b6:d5:09:98: a5:ad:8d:50:a7:7e:eb:40:a0:57:f0:f8:bc:04:9e: e8:67:b0:68:eb:b0:83:b1:ce:99:e9:5a:c0:71:d5: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6B:2B:25:73:77:64:43:23:1E:8B:49:21:D7:C5:CE:A6:54:63:6B X509v3 Authority Key Identifier: keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:71:ca:27:62:dd:4c:b9:06:42:b2:65:54:5f:80:ea:bc:69: f2:98:87:a6:88:18:8d:fe:9f:28:ed:8f:2f:55:f9:87:10:1e: 23:f3:8a:25:fa:3b:5c:b5:dd:c8:4f:64:99:68:39:e5:68:56: a6:67:0a:42:6c:2e:45:26:36:06:3a:4c:aa:08:79:3a:d3:38: 29:16:6a:73:48:1f:41:e3:91:dd:ad:28:f1:b7:74:95:04:be: a8:da:d0:7e:d1:ef:9c:53:25:49:e4:b1:d7:d1:d4:aa:9f:2e: 49:52:23:bd:78:d8:d3:4f:15:7c:5b:44:a2:fa:e6:4d:cf:7a: 5c:4a:12:32:63:ce:1e:0e:9c:2d:41:57:61:91:4c:8c:9c:0e: 4f:f8:df:56:d2:b2:73:a7:f3:c1:8b:72:8a:c6:5d:fd:af:e7: ae:1c:0e:59:ce:d6:0a:b8:30:01:56:67:47:3c:80:a9:85:37: 9d:06:ba:90:8a:31:7e:68:9d:67:00:34:81:a6:4e:5f:df:0a: bd:84:fa:57:4a:4b:e0:a4:1a:63:bd:4c:78:35:c9:b0:85:d6: 89:f4:d4:a3:b2:b6:97:8f:5d:eb:08:19:3b:13:4d:83:2f:12: a9:2f:ce:6a:41:8a:89:29:ab:b1:16:53:41:74:e4:f3:df:6b: b1:d4:04:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE1NzExMC8GA1UEBRMoMjYyRUMyMEQzMkJDMTMyRDdEMjA0QzM0NDgyMjI5Nzky NDIxQ0Y3MDAeFw0yNTA0MjUwNzAxMDJaFw0yNTA1MDIwNzAxMDJaMBgxFjAUBgNV BAMTDTY4MGIzMzJlLWZjODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9gHR7BHRLU0rokBfiZdmrzwilM/wa0KuFmsDmvZbGanV8cQooT6S3PH9nvY6Z Q0rP7wafAyoLWotR0Z7SLtSIBvY7b2IpNTTEhU8bsCSQxpvQSzA4gniChE4xzhWe sYPz0fIiAfgZY5BzRMGLD14JLVi5quCqf8NqRT+8GlQ/knWu36So9YYWImrOkWdG TQr1RL5YtqfKq4GB49F5AiyG4i1bFljXIhJKffCv7Jp2BPkRyTSoLqjzIl2Il/9W jwERIFIWRu0XkkIKVGjqCEN40tJn2enCwaS+bUqittUJmKWtjVCnfutAoFfw+LwE nuhnsGjrsIOxzpnpWsBx1TmPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/WsrJXN3 ZEMjHotJIdfFzqZUY2swHwYDVR0jBBgwFoAUJi7CDTK8Ey19IEw0SCIpeSQhz3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTU3LzA2QjJCOEUyMDcy NjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHoz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmk3Q0RUSzhFeTE5SUV3MFNDSXBlU1FoejNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTU3LzA2QjJCOEUyMDcyNjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkx OUlFdzBTQ0lwZVNRaHozQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlxyidi3Uy5BkKyZVRfgOq8afKYh6aIGI3+nyjtjy9V+YcQHiPziiX6 O1y13chPZJloOeVoVqZnCkJsLkUmNgY6TKoIeTrTOCkWanNIH0Hjkd2tKPG3dJUE vqja0H7R75xTJUnksdfR1KqfLklSI7142NNPFXxbRKL65k3PelxKEjJjzh4OnC1B V2GRTIycDk/431bSsnOn88GLcorGXf2v564cDlnO1gq4MAFWZ0c8gKmFN50GupCK MX5onWcANIGmTl/fCr2E+ldKS+CkGmO9THg1ybCF1on01KOytpePXesIGTsTTYMv EqkvzmpBiokpq7EWU0F05PPfa7HUBDA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:11 2025 by rpki-client