$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft File: JnQ7Hk4OkKGbJAwJNpecojdojfI.mft (raw, json) Hash identifier: /kXfPA6yQY7eVyMxYSPcqE9RNif9TtFG99Oy+xkS4gM= Subject key identifier: 2F:75:6C:51:55:D5:59:54:41:0D:BC:2F:B0:12:CA:46:6D:7F:BF:80 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 16BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft Manifest number: 169B Signing time: Thu 24 Apr 2025 16:42:36 +0000 Manifest this update: Thu 24 Apr 2025 16:42:35 +0000 Manifest next update: Thu 01 May 2025 16:42:35 +0000 Files and hashes: 1: JnQ7Hk4OkKGbJAwJNpecojdojfI.crl (hash: NrkkUcxawmDyU+gKBAq32VllCeY2IjsjILKzeVsnx38=) 2: DED757CC013811EF8A7E136EC4F9AE02.roa (hash: i/Bdlwtsw60KlWyTtnZoHMYWyMWkX8rBZXwz4SUYdDY=) 3: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (hash: x5fSlx3nNKz6ifMgnnFr+DL48Yd9QT9h8VtP+zrrY4c=) 4: AFB50D7A2AAD11EEA5D9705CC4F9AE02.roa (hash: 9PGVW+39KLlj0WI9eJ5OovuG1UvnRDi3eMzS7oZFC4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5822 (0x16be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Apr 24 16:42:35 2025 GMT Not After : May 1 16:42:35 2025 GMT Subject: CN=680a69fb-ebad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:97:4b:6e:ca:76:37:67:26:6f:a6:f2:a0: 83:39:fe:0f:05:8e:72:9c:82:13:04:61:d0:8c:19: 67:75:4c:74:e6:ac:d1:f3:0c:16:4b:58:e7:11:54: b8:22:66:7f:0d:1e:88:bd:1e:a8:31:a0:76:f6:4a: 79:92:e0:c4:79:7d:d1:62:ba:48:00:ba:e2:30:ce: 6b:99:8a:6a:46:2e:84:39:75:80:09:b5:47:83:77: c3:fd:45:8d:cb:0c:b0:5b:90:a0:22:21:81:a9:66: 50:3b:0f:ee:16:00:40:84:aa:89:c8:36:9b:47:14: 8d:af:93:cf:1b:41:88:6b:f9:5c:a1:f6:02:fa:83: b6:81:b2:c3:e5:08:81:6e:dc:12:34:84:bd:66:6c: c6:7e:28:2e:2d:f9:48:5a:c1:b8:0b:70:97:be:01: 17:1b:ca:83:23:2a:51:eb:0c:d6:a5:f1:56:e5:82: 87:e0:be:84:8f:20:df:30:9c:b2:ed:af:7e:91:29: fb:e2:f5:6a:97:1d:00:2c:3a:20:8c:64:c1:bc:5f: 51:b4:09:33:a2:e8:bb:4e:62:da:c5:0a:b9:e8:e3: 64:79:87:74:60:bd:ee:da:96:01:20:04:e2:b9:3c: 8b:3e:32:d5:a3:0e:a9:07:3f:b3:20:dd:bb:0c:76: 58:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:6C:51:55:D5:59:54:41:0D:BC:2F:B0:12:CA:46:6D:7F:BF:80 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:91:07:e3:8b:43:55:b2:a8:88:f1:ad:5c:a0:d9:cf:71:b7: 5d:f1:6b:68:aa:7f:cc:42:d5:48:d8:00:53:8f:67:52:7d:e3: 75:c8:0c:cd:4f:8c:08:65:91:af:96:c4:54:20:30:f6:2b:4c: 2b:12:07:41:2f:f2:90:1b:63:80:5a:cf:d1:5c:3e:b0:c1:de: 6b:a4:c8:4a:af:f1:e9:05:03:17:0b:09:c9:62:52:1a:ef:f5: 51:60:04:0f:44:d6:22:7a:35:2a:e4:7a:71:76:31:72:37:71: 7b:67:4d:3b:c2:64:ea:48:fe:fe:2b:2e:ea:71:83:e7:9f:a1: e2:93:5a:f3:2a:44:ec:8c:d3:08:8f:ec:13:db:bc:d2:26:cd: c4:f5:c0:9a:9c:05:be:38:a6:8e:e0:fe:d9:9a:8d:2f:18:8f: 00:e2:ec:b5:37:c8:0f:38:4e:a1:77:86:35:98:9b:49:a1:a8: 09:59:c0:e0:f0:15:bd:77:8f:76:20:c6:32:d7:81:bb:5a:0c: e9:0d:a6:fa:f9:17:94:5d:18:8b:ae:78:41:12:87:a2:e5:ec: 68:c4:d7:4e:6a:56:dc:1c:ef:97:95:c9:bc:ce:fd:dd:97:53: 4c:62:e6:47:58:b3:5f:05:bd:20:e6:83:1c:58:79:14:54:63: a7:c3:4d:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjUwNDI0MTY0MjM1WhcNMjUwNTAxMTY0MjM1WjAYMRYwFAYD VQQDEw02ODBhNjlmYi1lYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6uXS27KdjdnJm+m8qCDOf4PBY5ynIITBGHQjBlndUx05qzR8wwWS1jnEVS4 ImZ/DR6IvR6oMaB29kp5kuDEeX3RYrpIALriMM5rmYpqRi6EOXWACbVHg3fD/UWN ywywW5CgIiGBqWZQOw/uFgBAhKqJyDabRxSNr5PPG0GIa/lcofYC+oO2gbLD5QiB btwSNIS9ZmzGfiguLflIWsG4C3CXvgEXG8qDIypR6wzWpfFW5YKH4L6EjyDfMJyy 7a9+kSn74vVqlx0ALDogjGTBvF9RtAkzoui7TmLaxQq56ONkeYd0YL3u2pYBIATi uTyLPjLVow6pBz+zIN27DHZY8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC91bFFV 1VlUQQ28L7ASykZtf7+AMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80NEE2RkY2NDAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tL R2JKQXdKTnBlY29qZG9qZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUkQfji0NVsqiI8a1coNnPcbdd8Wtoqn/MQtVI2ABTj2dSfeN1yAzN T4wIZZGvlsRUIDD2K0wrEgdBL/KQG2OAWs/RXD6wwd5rpMhKr/HpBQMXCwnJYlIa 7/VRYAQPRNYiejUq5HpxdjFyN3F7Z007wmTqSP7+Ky7qcYPnn6Hik1rzKkTsjNMI j+wT27zSJs3E9cCanAW+OKaO4P7Zmo0vGI8A4uy1N8gPOE6hd4Y1mJtJoagJWcDg 8BW9d492IMYy14G7WgzpDab6+ReUXRiLrnhBEoei5exoxNdOalbcHO+Xlcm8zv3d l1NMYuZHWLNfBb0g5oMcWHkUVGOnw03Y -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:24 2025 by rpki-client