$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: xsDkp7SqxYf0LcGHS7GFg5EtEiOUtBIzaLOce+38k0k= Subject key identifier: 17:36:00:A8:F1:0A:A0:F4:9A:08:5E:98:3D:88:16:89:74:B2:4F:19 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0AF0 Signing time: Thu 24 Apr 2025 19:16:50 +0000 Manifest this update: Thu 24 Apr 2025 19:16:49 +0000 Manifest next update: Thu 01 May 2025 19:16:49 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: 6vNwAh20QQaZBXeri1dwdLPa8Aml6wWMMm1aCDhHs4U=) 2: FE836A62B19D11EC86ADF246C4F9AE02.roa (hash: GwwP8IDRreAQ5Nv9uamFq9DGquD+BWtdJPdVB793Iq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Apr 24 19:16:49 2025 GMT Not After : May 1 19:16:49 2025 GMT Subject: CN=680a8e21-6ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:bb:a7:4d:9c:04:94:ba:6b:ab:1e:44:a8: fa:8f:2e:34:9c:24:93:67:97:c6:b3:6e:36:ae:a4: 6f:95:00:4b:66:2b:6d:2b:02:b7:df:5a:ac:20:a1: eb:e2:cc:8c:b7:43:1c:ca:0c:8e:41:da:2e:20:71: 4a:65:67:57:09:fa:14:aa:4f:db:48:94:c4:dd:a5: 53:d9:86:fa:fa:31:69:07:b1:e6:dd:bc:19:3b:d4: 11:08:e0:5e:51:fc:91:05:6b:75:29:d9:33:0a:11: d2:f9:ad:5c:2b:41:5b:85:50:92:66:cc:4d:d8:f2: dd:b8:00:8a:35:81:76:84:35:2a:c5:7d:57:5f:cc: b4:e8:7d:7d:b6:2f:06:bf:a6:81:93:b3:c0:d8:e5: e8:0b:8d:a3:12:47:11:19:c3:69:02:12:6c:52:8f: ef:d7:19:65:6b:d2:85:42:26:c3:36:d9:96:41:6e: 99:9c:ea:22:6c:97:21:a6:3b:e1:a3:e0:f9:9e:a2: 8b:2a:8f:53:32:e8:d8:d7:8a:26:00:19:8d:50:4d: 8f:e7:f5:f0:c9:ea:6b:c6:f3:43:3a:5f:d2:2d:73: 16:75:10:b0:07:4e:90:27:c4:a0:4a:1f:22:36:de: e0:7e:9e:5f:df:c6:4a:97:ee:8c:08:03:5f:5c:0b: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:36:00:A8:F1:0A:A0:F4:9A:08:5E:98:3D:88:16:89:74:B2:4F:19 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:c2:2a:e8:2c:7c:cb:dd:10:0d:b5:a6:04:ce:65:fe:84: 10:98:73:0f:ff:90:f0:53:87:75:b4:62:08:a9:41:a5:9a:94: 3a:2f:67:ec:4c:c3:32:aa:88:ce:3b:7a:d4:6c:79:42:3a:97: e1:32:53:2c:f2:4b:67:61:53:73:50:03:1f:e3:ec:95:2b:d9: fd:82:cb:9a:d6:6f:2a:81:09:b2:3b:83:7e:1f:43:77:bb:ed: 60:eb:be:f3:6b:04:70:d0:75:57:49:72:cb:27:33:6f:0a:06: 1e:cc:61:5f:19:5d:fe:d1:42:a0:2a:df:9d:a9:bc:bc:7b:ef: a8:19:6d:c5:2a:9f:32:f1:e6:a3:fe:d2:90:a6:af:20:ac:46: 26:3e:bf:83:d2:c5:0c:f7:9a:23:53:6d:bb:67:3c:30:80:aa: ae:f0:a9:7f:1d:31:66:66:79:6f:d3:90:c1:42:2e:b7:b8:95: c4:6d:97:b3:4b:0f:87:5a:2c:fb:d7:1d:09:ec:74:8a:69:c5: ba:64:2d:d3:aa:7a:7c:93:b3:07:b9:3f:42:dc:c8:35:f6:0d: 76:b2:55:7f:b3:16:45:15:f4:59:05:75:e5:bc:4d:32:7a:d3: 8e:0d:11:6c:7a:d1:d0:1a:06:8f:51:5f:1a:1b:8f:d6:d5:d5: ba:b5:b7:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjUwNDI0MTkxNjQ5WhcNMjUwNTAxMTkxNjQ5WjAYMRYwFAYD VQQDEw02ODBhOGUyMS02ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw467p02cBJS6a6seRKj6jy40nCSTZ5fGs242rqRvlQBLZittKwK331qsIKHr 4syMt0McygyOQdouIHFKZWdXCfoUqk/bSJTE3aVT2Yb6+jFpB7Hm3bwZO9QRCOBe UfyRBWt1KdkzChHS+a1cK0FbhVCSZsxN2PLduACKNYF2hDUqxX1XX8y06H19ti8G v6aBk7PA2OXoC42jEkcRGcNpAhJsUo/v1xlla9KFQibDNtmWQW6ZnOoibJchpjvh o+D5nqKLKo9TMujY14omABmNUE2P5/XwyeprxvNDOl/SLXMWdRCwB06QJ8SgSh8i Nt7gfp5f38ZKl+6MCANfXAsOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc2AKjx CqD0mghemD2IFol0sk8ZMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBed8Iq6Cx8y90QDbWmBM5l/oQQmHMP/5DwU4d1tGIIqUGlmpQ6L2fs TMMyqojOO3rUbHlCOpfhMlMs8ktnYVNzUAMf4+yVK9n9gsua1m8qgQmyO4N+H0N3 u+1g677zawRw0HVXSXLLJzNvCgYezGFfGV3+0UKgKt+dqby8e++oGW3FKp8y8eaj /tKQpq8grEYmPr+D0sUM95ojU227ZzwwgKqu8Kl/HTFmZnlv05DBQi63uJXEbZez Sw+HWiz71x0J7HSKacW6ZC3Tqnp8k7MHuT9C3Mg19g12slV/sxZFFfRZBXXlvE0y etOODRFsetHQGgaPUV8aG4/W1dW6tbcr -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:33 2025 by rpki-client