$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json) Hash identifier: 6Qn39McqdJgQxINvD/fZA2gomU2jHB87xjjcM3gnT38= Subject key identifier: 9B:B4:1E:39:88:F6:33:40:65:30:1B:9A:A9:4C:CB:74:A2:F5:E8:43 Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:52:25 +0000 Manifest this update: Fri 25 Apr 2025 05:52:24 +0000 Manifest next update: Fri 02 May 2025 05:52:24 +0000 Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: vfXWe5/qlwKnJkOyUGfbvLOU+jTRrlRGYx0480vu9TE=) 2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: Apr 25 05:52:24 2025 GMT Not After : May 2 05:52:24 2025 GMT Subject: CN=680b2318-9ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:03:2d:82:73:49:68:85:59:06:4b:e8:28:95: ce:8d:26:35:82:8d:cd:ec:da:cd:dc:b7:6b:e6:7d: 35:71:0e:94:c0:c5:22:ed:bc:01:9e:73:88:ce:61: 6e:6e:48:ac:41:a7:ae:50:f7:b1:d7:a6:50:f7:7b: 66:34:62:fc:83:12:5d:15:33:80:ac:28:f1:85:14: 7a:aa:10:0f:3c:9e:00:3a:f2:04:5e:94:5d:4a:5f: b8:9b:f5:df:4d:98:ac:d0:85:f7:85:67:36:a6:a1: 72:53:db:92:f3:e3:8c:0a:11:ad:79:7b:12:30:92: 7d:89:ef:73:c7:85:42:70:88:b0:42:9c:cc:c9:ec: 74:60:af:8f:f6:62:6a:9d:f1:bb:5b:36:6e:16:dc: 55:68:27:0b:5b:34:7e:c4:2f:ca:7a:45:c5:23:9f: a3:e5:bd:1e:a0:a0:7a:cc:b1:fb:3e:3f:fe:ad:82: f3:59:5b:7b:b0:4b:cb:cc:0b:34:7f:75:84:5e:df: cf:0f:b5:0e:98:66:d6:5c:5d:59:34:92:fb:b2:f3: cf:c4:76:3c:90:00:c5:78:3b:77:0b:b1:7c:d2:09: 59:f4:36:9c:b1:10:66:c1:1b:59:a5:bc:db:b6:94: f6:1f:cc:15:37:4f:82:61:7b:81:0e:46:85:b4:c8: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:1E:39:88:F6:33:40:65:30:1B:9A:A9:4C:CB:74:A2:F5:E8:43 X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:fb:5b:04:03:f6:2e:06:e8:b2:80:5c:18:ea:7b:78:b0: 4a:15:41:c2:45:af:45:da:97:67:1f:b5:74:a3:d1:8f:bb:46: ab:ea:d4:46:5f:45:85:f5:82:ae:72:c3:03:a0:4c:07:9d:77: c1:11:b6:bc:48:4a:66:7b:ed:a4:e2:4e:db:73:6c:ed:b2:36: 98:ce:50:af:47:de:70:2d:19:1e:54:9b:05:b8:35:2b:bf:57: d8:8a:1d:2b:42:4b:a2:80:b0:c6:a6:0e:15:4d:d7:5a:49:df: 94:19:c4:5c:98:4b:22:5c:32:85:24:5e:42:11:2d:00:79:07: d5:ae:76:72:2a:ce:23:ad:a6:6c:4e:78:9a:8b:ce:b3:c8:7e: a5:eb:4b:27:5c:90:56:88:5e:f5:5a:a7:ae:86:93:29:ea:9d: 30:db:c2:78:cc:47:7c:09:a5:4c:e9:fa:0b:31:34:76:c5:e1: 1c:8f:f4:f5:40:04:1b:59:51:f2:d7:44:65:78:ea:16:c4:38: 8a:a9:d8:76:fc:96:08:33:34:2e:7d:6c:cd:a1:14:ec:dc:02: f1:9f:d4:c8:1b:12:9f:3e:a7:94:3f:a6:2a:8a:cf:e4:03:5d: 6a:2e:6c:d5:9d:1e:63:37:09:c5:72:e7:f8:eb:59:7b:90:12: 4c:f2:b3:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEEwNTExMC8GA1UEBRMoMjVBMEI4QjBDMTA0MTVGRDQwNkRCMjAzMjM2NjU5QzVG MTYzQUU0MzAeFw0yNTA0MjUwNTUyMjRaFw0yNTA1MDIwNTUyMjRaMBgxFjAUBgNV BAMTDTY4MGIyMzE4LTllYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoAy2Cc0lohVkGS+golc6NJjWCjc3s2s3ct2vmfTVxDpTAxSLtvAGec4jOYW5u SKxBp65Q97HXplD3e2Y0YvyDEl0VM4CsKPGFFHqqEA88ngA68gRelF1KX7ib9d9N mKzQhfeFZzamoXJT25Lz44wKEa15exIwkn2J73PHhUJwiLBCnMzJ7HRgr4/2Ymqd 8btbNm4W3FVoJwtbNH7EL8p6RcUjn6PlvR6goHrMsfs+P/6tgvNZW3uwS8vMCzR/ dYRe388PtQ6YZtZcXVk0kvuy88/EdjyQAMV4O3cLsXzSCVn0NpyxEGbBG1mlvNu2 lPYfzBU3T4Jhe4EORoW0yPeVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm7QeOYj2 M0BlMBuaqUzLdKL16EMwHwYDVR0jBBgwFoAUJaC4sMEEFf1AbbIDI2ZZxfFjrkMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQTA1L0RBNUQxRDYyN0M4 QTExRUY4RkFCNjkwOUM0RjlBRTAyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJr TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmFDNHNNRUVGZjFBYmJJREkyWlp4ZkZqcmtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QTA1L0RBNUQxRDYyN0M4QTExRUY4RkFCNjkwOUM0RjlBRTAyL0phQzRzTUVFRmYx QWJiSURJMlpaeGZGanJrTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACN2+1sEA/YuBuiygFwY6nt4sEoVQcJFr0Xal2cftXSj0Y+7Rqvq1EZf RYX1gq5ywwOgTAedd8ERtrxISmZ77aTiTttzbO2yNpjOUK9H3nAtGR5UmwW4NSu/ V9iKHStCS6KAsMamDhVN11pJ35QZxFyYSyJcMoUkXkIRLQB5B9WudnIqziOtpmxO eJqLzrPIfqXrSydckFaIXvVap66GkynqnTDbwnjMR3wJpUzp+gsxNHbF4RyP9PVA BBtZUfLXRGV46hbEOIqp2Hb8lggzNC59bM2hFOzcAvGf1MgbEp8+p5Q/piqKz+QD XWoubNWdHmM3CcVy5/jrWXuQEkzys3M= -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:18 2025 by rpki-client