$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: baH+d6oKula3loWMxYiuVabpJoYmTx8JhZeWqYZVlJg= Subject key identifier: 97:1B:8D:EC:AD:4F:56:E2:48:4E:25:17:FF:8C:B1:64:33:C8:48:70 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C14 Signing time: Thu 24 Apr 2025 18:34:30 +0000 Manifest this update: Thu 24 Apr 2025 18:34:29 +0000 Manifest next update: Thu 01 May 2025 18:34:29 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: /ap0vpTwIib7h/IPEbdZXRNjHLuB23AuE26yj1znPSo=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 1gxw5LanH6K05ytHQ24AFaIeR9aTp+NtUFQdmJYcVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Apr 24 18:34:29 2025 GMT Not After : May 1 18:34:29 2025 GMT Subject: CN=680a8436-5307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1c:34:ed:58:bf:ff:b4:e5:80:60:31:33:f8: 62:6e:9e:3e:2b:39:b2:85:34:7f:eb:bd:89:98:2b: 8c:35:96:a4:4c:6f:b3:16:72:ad:14:d2:dd:3f:1c: 38:ac:82:b8:45:8e:e5:a1:86:55:ad:68:fa:56:d0: 3d:74:f5:d1:fc:b5:c1:bb:e6:22:dc:cb:cb:af:6b: 9b:d7:e6:e9:0a:cf:31:13:23:11:42:ea:15:70:e1: ec:bb:0f:c1:43:93:18:3c:91:22:9b:de:c8:5d:be: 63:87:55:8b:73:17:bc:e1:07:2b:f7:e5:84:1e:fe: e0:5e:85:25:c4:b4:28:5c:62:db:86:5a:e8:19:a3: b3:ea:fe:a9:4f:a1:3c:2b:99:0c:43:98:35:9f:17: 7d:00:b2:56:bf:d8:31:df:c4:c6:44:0c:76:fd:3c: d3:f5:34:ab:b6:aa:38:b9:13:96:47:97:da:4c:30: f4:7c:7f:d7:51:83:5e:d2:2c:c5:ea:a2:0a:da:f6: e1:3d:3b:df:89:c3:ae:13:ed:f4:c6:50:ed:ac:cc: ba:91:34:38:ed:6a:64:54:c5:c1:81:a0:2b:5e:61: c2:d8:c2:b4:76:a7:d8:76:da:3f:ee:42:b5:f3:5e: 7d:77:9d:93:de:9c:bd:b3:9a:73:8d:88:a9:42:d3: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1B:8D:EC:AD:4F:56:E2:48:4E:25:17:FF:8C:B1:64:33:C8:48:70 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:15:1c:19:46:19:49:a8:7b:c5:f5:49:17:77:02:a6:c4:97: 35:2f:0f:12:d7:b6:79:9c:91:ad:41:22:f0:28:95:9d:d9:0c: 3c:b7:6d:1e:e4:90:fb:69:d4:eb:da:9e:51:97:bf:0a:e0:71: ab:8f:5e:32:7e:50:dd:83:bd:d8:0d:f2:e7:36:e8:43:cc:bd: b3:0d:05:9a:e3:bf:6f:dc:2d:1c:62:83:b6:43:7b:da:a4:9b: 5c:8a:51:11:d4:d0:fc:18:61:dd:c8:ec:98:ae:de:23:bd:c6: c4:5f:fa:22:0e:22:9d:4c:62:a5:96:be:81:b1:bf:28:28:7e: 9b:58:6d:04:8f:a5:37:8c:7e:6a:ac:3f:81:1e:7e:e8:e0:00: 22:f6:60:74:39:49:fc:0b:23:25:e1:17:9f:3d:5a:6c:bc:dd: 71:52:64:31:51:12:47:08:64:1e:75:21:e4:36:db:f4:7e:80: 0d:41:4e:1a:4e:91:40:51:41:ff:ce:81:21:83:24:21:c2:97: bd:1b:76:8f:5e:2c:ea:7b:98:71:86:a6:49:18:a6:54:75:83: bc:9d:a7:42:22:6c:37:1e:4f:e9:50:95:47:70:bf:ca:08:f5: 80:39:c8:0a:42:75:0c:57:a9:6a:ce:1b:1d:c1:ea:8c:63:35: 8f:65:ba:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwNDI0MTgzNDI5WhcNMjUwNTAxMTgzNDI5WjAYMRYwFAYD VQQDEw02ODBhODQzNi01MzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhw07Vi//7TlgGAxM/hibp4+KzmyhTR/672JmCuMNZakTG+zFnKtFNLdPxw4 rIK4RY7loYZVrWj6VtA9dPXR/LXBu+Yi3MvLr2ub1+bpCs8xEyMRQuoVcOHsuw/B Q5MYPJEim97IXb5jh1WLcxe84Qcr9+WEHv7gXoUlxLQoXGLbhlroGaOz6v6pT6E8 K5kMQ5g1nxd9ALJWv9gx38TGRAx2/TzT9TSrtqo4uROWR5faTDD0fH/XUYNe0izF 6qIK2vbhPTvficOuE+30xlDtrMy6kTQ47WpkVMXBgaArXmHC2MK0dqfYdto/7kK1 8159d52T3py9s5pzjYipQtMlsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcbjeyt T1biSE4lF/+MsWQzyEhwMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+FRwZRhlJqHvF9UkXdwKmxJc1Lw8S17Z5nJGtQSLwKJWd2Qw8t20e 5JD7adTr2p5Rl78K4HGrj14yflDdg73YDfLnNuhDzL2zDQWa479v3C0cYoO2Q3va pJtcilER1ND8GGHdyOyYrt4jvcbEX/oiDiKdTGKllr6Bsb8oKH6bWG0Ej6U3jH5q rD+BHn7o4AAi9mB0OUn8CyMl4RefPVpsvN1xUmQxURJHCGQedSHkNtv0foANQU4a TpFAUUH/zoEhgyQhwpe9G3aPXizqe5hxhqZJGKZUdYO8nadCImw3Hk/pUJVHcL/K CPWAOcgKQnUMV6lqzhsdweqMYzWPZboY -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:54 2025 by rpki-client