$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: 93e9e6EMHCdYSDNA4LtsuOMGDQAj+WqRrkDyaETQxSg= Subject key identifier: 1F:BF:43:F6:87:9F:C2:9C:7F:73:1C:1D:00:25:CA:7C:67:FF:0A:4F Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 019C Signing time: Fri 25 Apr 2025 02:35:24 +0000 Manifest this update: Fri 25 Apr 2025 02:35:23 +0000 Manifest next update: Fri 02 May 2025 02:35:23 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: uB/Qg11OKllpCqxMp+N5pG3cXL5A92/ZASQW7Qgi2yg=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: Jr5/4E0BqvD6E+dU0waXVfsK7t56ulJ7qARG32utiNc=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: 5w8g5x+ok2twOTv8Pno7z7uYOa1KLIU/k+gb4VmjlK8=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: DST7aY8U7pn+fcW6ISk7J3CqqppEvOX29fKYTnqiYaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Apr 25 02:35:23 2025 GMT Not After : May 2 02:35:23 2025 GMT Subject: CN=680af4ec-f8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ba:18:a5:0c:b6:1e:0d:05:8f:92:ef:e2:d3: 23:b5:cf:be:09:83:28:0d:04:24:18:7e:32:a7:22: 15:4b:c8:5b:d8:27:1c:f9:2a:99:3b:a5:66:1d:84: 64:eb:ae:79:0e:7a:ea:c4:ea:f8:66:db:55:78:b2: 32:a5:cc:7c:9d:66:2c:81:f6:7f:3c:10:be:a1:66: b2:f9:71:f8:7b:86:0f:65:d2:0e:1f:1d:d9:ac:3a: 7e:f2:a9:26:63:45:b8:3c:aa:38:fb:73:ac:cd:9e: 47:21:f4:76:ca:5b:9d:a7:f9:bc:46:dc:44:e1:be: 06:2b:e7:dd:38:a8:07:15:6a:95:e2:7b:be:7a:35: 7a:51:70:1e:7b:1a:eb:1a:03:61:72:62:be:24:6d: 78:5f:97:0b:3c:41:87:21:7c:20:eb:7c:68:75:33: c7:3b:36:c4:9f:1d:a3:16:78:d3:53:c8:cc:d6:0f: fd:02:57:d3:30:a4:ad:96:dc:66:78:26:85:44:7c: b2:01:e7:72:b9:e9:2f:ce:02:d4:5b:d5:d5:c6:cd: f9:d1:e9:32:91:d7:b3:88:5b:60:56:a0:e9:06:c4: 32:f5:14:88:84:06:9c:3c:27:ee:7f:d3:71:9c:9f: f7:50:13:64:44:10:1a:0c:7e:33:a9:c6:55:ed:12: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:43:F6:87:9F:C2:9C:7F:73:1C:1D:00:25:CA:7C:67:FF:0A:4F X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:d5:b7:9e:2d:d1:a3:e3:e3:29:14:61:dc:47:c8:20:33: f8:b2:5c:a3:aa:15:50:17:0b:6b:ad:7d:0c:e8:4a:28:c9:56: 74:f4:07:3d:8b:fb:46:90:4f:00:2d:14:ff:fc:a0:9f:81:76: 4e:53:c9:64:7e:48:c3:6d:38:82:bb:91:5b:b8:41:2b:9f:1c: a0:e7:1c:bb:c6:2e:38:e2:ff:bc:8d:46:b0:19:85:c1:07:3c: ba:16:ae:e1:78:57:f3:03:41:d5:cb:5b:77:93:18:ae:c5:45: 36:1e:0e:9e:9c:ca:94:49:ca:ad:00:be:15:ea:e7:72:44:df: 6d:af:42:41:31:f2:5a:25:72:e3:27:bc:9b:28:12:5b:6b:fc: 7b:10:04:1e:31:1a:8c:60:c3:c9:4b:68:c2:58:f9:39:77:5c: d8:4a:25:72:47:fd:f0:1d:46:f1:f0:e6:27:81:74:d0:57:97: f0:13:2e:54:a5:46:af:33:81:d1:1f:27:9c:44:d8:30:76:8d: 0b:c4:f1:54:30:44:74:76:5e:6d:35:e0:18:11:6d:ab:0a:f4: 67:ff:9c:5f:91:2d:e4:93:80:ca:d7:ec:9b:f9:3d:6e:2c:9f: 4b:c6:ae:05:5e:bb:24:35:2b:ff:90:6c:a3:17:a0:be:74:6a: 61:8e:d8:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUwNDI1MDIzNTIzWhcNMjUwNTAyMDIzNTIzWjAYMRYwFAYD VQQDEw02ODBhZjRlYy1mOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlroYpQy2Hg0Fj5Lv4tMjtc++CYMoDQQkGH4ypyIVS8hb2Ccc+SqZO6VmHYRk 6655DnrqxOr4ZttVeLIypcx8nWYsgfZ/PBC+oWay+XH4e4YPZdIOHx3ZrDp+8qkm Y0W4PKo4+3OszZ5HIfR2yludp/m8RtxE4b4GK+fdOKgHFWqV4nu+ejV6UXAeexrr GgNhcmK+JG14X5cLPEGHIXwg63xodTPHOzbEnx2jFnjTU8jM1g/9AlfTMKStltxm eCaFRHyyAedyuekvzgLUW9XVxs350ekykdeziFtgVqDpBsQy9RSIhAacPCfuf9Nx nJ/3UBNkRBAaDH4zqcZV7RKD2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+/Q/aH n8Kcf3McHQAlynxn/wpPMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkrdW3ni3Ro+PjKRRh3EfIIDP4slyjqhVQFwtrrX0M6EooyVZ09Ac9 i/tGkE8ALRT//KCfgXZOU8lkfkjDbTiCu5FbuEErnxyg5xy7xi444v+8jUawGYXB Bzy6Fq7heFfzA0HVy1t3kxiuxUU2Hg6enMqUScqtAL4V6udyRN9tr0JBMfJaJXLj J7ybKBJba/x7EAQeMRqMYMPJS2jCWPk5d1zYSiVyR/3wHUbx8OYngXTQV5fwEy5U pUavM4HRHyecRNgwdo0LxPFUMER0dl5tNeAYEW2rCvRn/5xfkS3kk4DK1+yb+T1u LJ9Lxq4FXrskNSv/kGyjF6C+dGphjth7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:51 2025 by rpki-client