$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: t/NXurMGEeU9yi7hvuXb93DEiBekIT+4CKwFzMKDexA= Subject key identifier: 3C:D6:D3:74:78:08:AE:53:3F:00:F0:57:9C:AA:1D:89:0B:DB:96:15 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 0482 Signing time: Thu 24 Apr 2025 23:49:56 +0000 Manifest this update: Thu 24 Apr 2025 23:49:56 +0000 Manifest next update: Thu 01 May 2025 23:49:56 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: LsbmCyCXWT978tjR3zlfSJeDQtNYZGTvdrVqCOE6/lQ=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: Apr 24 23:49:56 2025 GMT Not After : May 1 23:49:56 2025 GMT Subject: CN=680ace24-cf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:83:71:df:a5:54:03:d1:c7:03:f3:1f:73: 67:06:62:5f:6e:f9:c9:dd:98:46:7c:b0:a5:22:fc: e4:26:84:1f:ac:12:d4:3e:73:cf:2f:92:ad:13:6d: 71:33:02:6e:54:cc:44:12:49:56:62:e8:fd:f3:a0: 36:3c:c6:4c:88:d3:56:6d:29:cb:4a:1c:7d:76:a1: f6:b2:eb:e6:ae:68:89:ec:aa:d0:8f:32:58:03:21: 4c:40:80:bc:5c:46:11:75:f0:0c:a0:81:57:5d:19: f2:53:a7:be:a7:74:01:d8:c9:70:01:ae:89:ee:c5: d8:29:3a:15:17:03:77:96:16:ed:e7:72:2e:d1:82: 65:43:ee:2c:1b:dd:b1:c4:7a:77:5b:80:57:e6:0c: 9c:db:aa:6f:62:29:2b:70:00:32:b6:6f:a2:02:e7: 0c:23:c5:49:a3:ad:ae:65:44:1a:f8:30:eb:c4:5a: b8:b3:6d:4f:f4:f3:c1:84:8f:45:b0:60:91:57:5f: aa:34:68:c1:dd:04:65:71:ff:a9:60:ad:cb:be:1d: dd:6c:6c:80:46:65:77:95:52:12:24:ed:42:9f:53: 2a:b2:ee:0f:16:8d:22:13:a8:40:da:0a:52:df:51: 35:ea:c7:e0:b0:36:bc:4d:d6:7e:5b:c7:3a:16:00: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D6:D3:74:78:08:AE:53:3F:00:F0:57:9C:AA:1D:89:0B:DB:96:15 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b6:83:21:61:37:b4:dd:86:a5:1d:b9:5c:83:28:33:f2:19: dd:48:92:15:6c:48:51:3b:6e:09:cc:02:1b:8d:22:18:ee:3a: 8b:84:e2:bf:c2:46:b8:10:ab:0e:e3:2b:7b:59:b6:f3:d8:39: 11:60:f4:4c:6b:ed:c1:16:80:a5:c2:54:3d:b2:42:b3:29:93: e4:23:16:69:67:e9:fb:eb:d4:48:6f:a7:9d:15:da:eb:c4:7e: 08:70:5a:6f:e9:42:c0:25:2a:81:6e:5b:f8:37:b5:31:59:60: 0a:9d:2b:c4:56:82:58:54:a0:01:32:37:2a:6c:28:3e:81:96: ce:6f:50:fd:66:63:1c:7e:f2:f6:5d:83:f1:23:00:12:79:f6: d4:01:ad:52:0e:c1:22:f9:7b:91:42:08:be:86:9f:59:67:2a: aa:16:7e:aa:2a:da:93:d0:42:3b:dd:34:37:bf:ad:aa:c8:5a: f3:ca:6e:77:5e:ca:12:e0:8b:12:1d:63:72:62:ed:97:fa:6e: be:60:6a:28:83:fd:33:48:95:7d:50:c3:53:89:8c:03:c2:81: bd:df:0d:b8:df:fd:c2:44:15:2e:11:48:8f:e3:ad:b6:e7:75: 7d:88:59:15:47:13:d5:0a:11:e3:64:bd:7b:e2:5f:cd:7f:ba: db:4d:0b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjUwNDI0MjM0OTU2WhcNMjUwNTAxMjM0OTU2WjAYMRYwFAYD VQQDEw02ODBhY2UyNC1jZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRKDcd+lVAPRxwPzH3NnBmJfbvnJ3ZhGfLClIvzkJoQfrBLUPnPPL5KtE21x MwJuVMxEEklWYuj986A2PMZMiNNWbSnLShx9dqH2suvmrmiJ7KrQjzJYAyFMQIC8 XEYRdfAMoIFXXRnyU6e+p3QB2MlwAa6J7sXYKToVFwN3lhbt53Iu0YJlQ+4sG92x xHp3W4BX5gyc26pvYikrcAAytm+iAucMI8VJo62uZUQa+DDrxFq4s21P9PPBhI9F sGCRV1+qNGjB3QRlcf+pYK3Lvh3dbGyARmV3lVISJO1Cn1Mqsu4PFo0iE6hA2gpS 31E16sfgsDa8TdZ+W8c6FgBI+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzW03R4 CK5TPwDwV5yqHYkL25YVMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhtoMhYTe03YalHblcgygz8hndSJIVbEhRO24JzAIbjSIY7jqLhOK/ wka4EKsO4yt7Wbbz2DkRYPRMa+3BFoClwlQ9skKzKZPkIxZpZ+n769RIb6edFdrr xH4IcFpv6ULAJSqBblv4N7UxWWAKnSvEVoJYVKABMjcqbCg+gZbOb1D9ZmMcfvL2 XYPxIwASefbUAa1SDsEi+XuRQgi+hp9ZZyqqFn6qKtqT0EI73TQ3v62qyFrzym53 XsoS4IsSHWNyYu2X+m6+YGoog/0zSJV9UMNTiYwDwoG93w243/3CRBUuEUiP4622 53V9iFkVRxPVChHjZL174l/Nf7rbTQs0 -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:34 2025 by rpki-client