$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: bpL6qGqGSq865HUSwDgg0kI2SIws65/0fxc5kZ7yT/I= Subject key identifier: 94:99:90:59:9C:E5:B2:DE:29:93:4D:CA:74:30:BA:CB:56:13:56:EE Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 0723 Signing time: Thu 24 Apr 2025 21:37:08 +0000 Manifest this update: Thu 24 Apr 2025 21:37:08 +0000 Manifest next update: Thu 01 May 2025 21:37:08 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: ah/rNzK5Zd7CHSNCUkO2tBoFaQhOwO8wOqCKUAFmM/k=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: pS+rknsKIRFZxced71y+WLIWbrwwq2gZOSPnZeQrMOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: Apr 24 21:37:08 2025 GMT Not After : May 1 21:37:08 2025 GMT Subject: CN=680aaf04-5b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:92:9c:4c:e0:51:0d:6b:3b:96:09:51:34: 46:ff:81:6c:92:e0:f5:9c:01:28:c3:7a:df:76:6b: c0:5a:28:57:ac:9c:e8:8f:2d:88:d2:c7:89:ea:4e: 56:f1:e4:1c:35:59:05:7d:b6:f1:da:a4:ae:60:d8: 54:44:d9:31:32:d0:4c:58:ca:55:f7:78:95:7f:b3: d6:03:65:9d:6a:48:12:cc:7c:ac:19:72:78:68:aa: 24:07:90:9b:db:b4:0d:76:dc:41:95:2c:e8:a2:00: 4f:cf:2e:77:72:d6:48:7f:b6:24:b3:7d:14:b0:ff: 72:d4:5b:fe:14:09:3c:67:23:09:81:fc:7a:04:22: 49:0a:3b:f3:e2:50:7b:b3:34:23:9f:c4:c6:fc:73: af:b3:16:14:af:32:43:4e:6c:ad:fb:90:f9:cd:40: e7:59:37:dc:3d:7d:54:af:c8:a6:b3:03:5a:18:a3: 2a:58:00:fa:c2:06:c3:c8:33:89:2f:68:70:f0:8c: 68:6e:ca:75:d5:8a:be:ae:17:3c:65:46:a5:aa:92: 66:34:df:d4:dd:44:54:55:fc:10:c7:44:ad:a9:c7: 9b:37:96:69:ed:84:29:2b:0e:37:c8:1b:ca:6e:90: ef:20:91:f6:e2:c5:38:11:a8:9b:b9:28:e4:56:d8: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:99:90:59:9C:E5:B2:DE:29:93:4D:CA:74:30:BA:CB:56:13:56:EE X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3b:7b:67:69:f0:97:b2:8f:ff:fe:65:da:66:8e:f0:88:f6: e3:11:65:91:d7:d3:df:f8:c4:d4:f6:3e:30:4c:61:29:a6:af: bf:18:01:d2:26:d1:b1:fe:91:7f:0f:e0:aa:77:2e:77:af:ec: 2d:53:b8:b0:86:b3:dc:0f:11:9d:5a:e7:88:b6:89:ed:f9:f2: 07:1c:85:81:84:5a:70:bf:10:bb:d3:d7:21:96:db:c5:40:a9: 9f:88:5f:a7:d1:61:21:bf:98:cc:fa:a3:b0:96:d3:98:2d:60: f1:30:f3:df:54:93:d5:db:15:b7:2d:e7:2d:41:46:68:bc:10: 03:9b:e1:ba:a4:7d:0c:52:32:72:77:be:a0:46:26:8b:b7:78: 14:ee:e5:d0:11:ae:ab:5b:b4:71:66:63:7d:9c:ef:10:a2:d0: d0:70:9e:2c:36:c8:c3:86:9b:12:ad:86:1e:67:7c:d9:c6:4f: fd:6b:18:7f:61:5c:83:d5:14:0c:c8:ac:3f:01:00:06:ad:18: 63:77:7d:50:e4:0b:27:33:f0:ff:e3:94:49:54:b6:1c:1f:8c: 5f:0f:31:94:3e:35:d9:0f:ea:be:6a:06:e2:59:7b:fc:21:71: f8:f4:79:31:75:55:05:08:19:94:7f:0c:74:3e:23:ab:98:bf: b8:a1:d6:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjUwNDI0MjEzNzA4WhcNMjUwNTAxMjEzNzA4WjAYMRYwFAYD VQQDEw02ODBhYWYwNC01YjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssWSnEzgUQ1rO5YJUTRG/4FskuD1nAEow3rfdmvAWihXrJzojy2I0seJ6k5W 8eQcNVkFfbbx2qSuYNhURNkxMtBMWMpV93iVf7PWA2WdakgSzHysGXJ4aKokB5Cb 27QNdtxBlSzoogBPzy53ctZIf7Yks30UsP9y1Fv+FAk8ZyMJgfx6BCJJCjvz4lB7 szQjn8TG/HOvsxYUrzJDTmyt+5D5zUDnWTfcPX1Ur8imswNaGKMqWAD6wgbDyDOJ L2hw8Ixobsp11Yq+rhc8ZUalqpJmNN/U3URUVfwQx0StqcebN5Zp7YQpKw43yBvK bpDvIJH24sU4EaibuSjkVtiqhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSZkFmc 5bLeKZNNynQwustWE1buMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6O3tnafCXso///mXaZo7wiPbjEWWR19Pf+MTU9j4wTGEppq+/GAHS JtGx/pF/D+Cqdy53r+wtU7iwhrPcDxGdWueItont+fIHHIWBhFpwvxC709chltvF QKmfiF+n0WEhv5jM+qOwltOYLWDxMPPfVJPV2xW3LectQUZovBADm+G6pH0MUjJy d76gRiaLt3gU7uXQEa6rW7RxZmN9nO8QotDQcJ4sNsjDhpsSrYYeZ3zZxk/9axh/ YVyD1RQMyKw/AQAGrRhjd31Q5AsnM/D/45RJVLYcH4xfDzGUPjXZD+q+agbiWXv8 IXH49HkxdVUFCBmUfwx0PiOrmL+4odaQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:48 2025 by rpki-client