$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json) Hash identifier: Y0A45mwMPx99ZwEsAL1ezrscgRIC0eGpVZeyEI3ihh0= Subject key identifier: D5:CE:67:23:93:43:6B:4F:E4:A3:0E:45:55:DB:21:EC:48:1A:BF:0A Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft Manifest number: 31 Signing time: Sun 15 Jun 2025 06:47:53 +0000 Manifest this update: Sun 15 Jun 2025 06:47:53 +0000 Manifest next update: Sun 22 Jun 2025 06:47:53 +0000 Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: h3l1dQTwd3HwtEPICoUIf34GrRb+gCQ+V/L9/fQ/Rlo=) 2: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (hash: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=) 3: 4C559E64054B11F08646F910C4F9AE02.roa (hash: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: Jun 15 06:47:53 2025 GMT Not After : Jun 22 06:47:53 2025 GMT Subject: CN=684e6c99-578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:cb:17:38:ae:44:82:a7:f0:e2:a9:ec:cf: ed:c7:4c:18:f6:3a:0c:8c:e0:06:f3:ac:c8:49:69: 81:11:23:28:c7:bc:7c:9d:91:35:66:4b:bb:1c:44: 9e:e3:aa:a5:92:2c:70:ba:0e:62:48:98:4f:0a:bd: 3b:fe:05:e4:fb:a9:07:8d:9f:e5:80:f7:18:fa:61: c0:73:7a:24:12:be:8f:c1:14:64:cd:27:c9:95:31: bd:4d:e3:51:41:1d:60:a7:ec:a5:58:ab:34:d8:c4: cd:af:b6:f7:86:76:95:3b:40:c0:f6:73:19:42:17: 21:31:e6:f6:84:61:b1:72:05:4e:33:5b:ac:99:08: a3:2d:09:55:33:5c:7c:c7:cf:39:c4:bd:b7:94:74: b2:ad:21:ce:2b:4b:a6:87:11:1d:89:cc:d8:3d:8b: 7c:64:53:20:1e:5a:31:09:1c:d9:47:66:13:31:7a: 59:47:eb:73:90:44:ae:c5:49:3a:67:90:3a:a2:b7: f8:5e:55:bb:bb:8b:07:c6:d9:4e:33:5d:e2:58:0c: 58:70:9f:5d:43:1c:a7:6b:3b:2d:a2:cb:a4:d7:94: 3a:6f:a2:cb:c7:d8:90:98:28:86:40:20:65:fe:12: 4f:7b:ea:f3:5c:cc:74:8b:31:06:23:fa:59:74:40: c2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CE:67:23:93:43:6B:4F:E4:A3:0E:45:55:DB:21:EC:48:1A:BF:0A X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f9:50:ab:56:e9:53:19:1b:fa:72:fc:08:46:9f:9d:91:8f: 39:1f:27:21:a6:29:c9:52:af:10:85:37:a0:0b:7b:8f:41:7f: 30:7d:9d:44:64:75:7c:3b:53:21:d1:88:aa:36:d9:51:00:81: 65:37:64:22:41:c9:c5:19:74:5d:7c:e1:68:ed:77:e0:39:a0: c3:33:84:d8:c5:8d:d0:18:3e:73:44:12:4b:59:78:c7:d3:bd: 0a:a6:8f:aa:c7:76:06:2d:64:ac:be:45:79:ff:e4:bb:0c:a7: 35:73:17:2d:b9:87:0b:bd:5a:6a:53:1f:ab:01:31:95:57:28: 48:cd:78:f0:34:11:4b:2a:eb:b7:94:49:2c:07:b8:4c:f2:3e: 91:01:84:95:a9:4d:a2:eb:77:60:3a:29:43:71:ee:60:03:73: 4e:9a:cb:9e:66:a5:6b:8e:09:5c:62:3a:0b:25:7a:b0:f6:6e: 48:a9:fa:5b:8c:74:d4:8a:5d:af:be:d7:1f:22:7c:46:6e:c1: b0:90:ac:70:8e:5b:52:ca:55:19:ba:a2:dd:fa:00:c6:73:3b: c1:e4:00:48:50:82:62:9e:94:63:a7:7e:b7:90:dc:fc:40:91: f3:ff:80:21:21:39:2a:d1:30:91:ff:ac:d5:aa:17:cd:fe:b0: 8c:66:f0:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTA2MTUwNjQ3NTNaFw0yNTA2MjIwNjQ3NTNaMBgxFjAUBgNV BAMTDTY4NGU2Yzk5LTU3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEFMsXOK5Egqfw4qnsz+3HTBj2OgyM4AbzrMhJaYERIyjHvHydkTVmS7scRJ7j qqWSLHC6DmJImE8KvTv+BeT7qQeNn+WA9xj6YcBzeiQSvo/BFGTNJ8mVMb1N41FB HWCn7KVYqzTYxM2vtveGdpU7QMD2cxlCFyEx5vaEYbFyBU4zW6yZCKMtCVUzXHzH zznEvbeUdLKtIc4rS6aHER2JzNg9i3xkUyAeWjEJHNlHZhMxellH63OQRK7FSTpn kDqit/heVbu7iwfG2U4zXeJYDFhwn11DHKdrOy2iy6TXlDpvosvH2JCYKIZAIGX+ Ek976vNczHSLMQYj+ll0QMJPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1c5nI5ND a0/kow5FVdsh7EgavwowHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTI3L0MxMDZEMzNDMDREQzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dS dkU0cjJ6Ymlqc0k4RHZyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJP5UKtW6VMZG/py/AhGn52RjzkfJyGmKclSrxCFN6ALe49BfzB9nURk dXw7UyHRiKo22VEAgWU3ZCJBycUZdF184Wjtd+A5oMMzhNjFjdAYPnNEEktZeMfT vQqmj6rHdgYtZKy+RXn/5LsMpzVzFy25hwu9WmpTH6sBMZVXKEjNePA0EUsq67eU SSwHuEzyPpEBhJWpTaLrd2A6KUNx7mADc06ay55mpWuOCVxiOgslerD2bkip+luM dNSKXa++1x8ifEZuwbCQrHCOW1LKVRm6ot36AMZzO8HkAEhQgmKelGOnfreQ3PxA kfP/gCEhOSrRMJH/rNWqF83+sIxm8MI= -----END CERTIFICATE-----Generated at Mon Jun 16 16:12:42 2025 by rpki-client