$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json) Hash identifier: DovgrjG4w//ecY8HFHJrclZGWIaado2lzAjGzKkuHqc= Subject key identifier: 32:90:92:59:8A:BD:F7:4F:47:8A:55:FB:AC:FF:7C:C0:65:F4:93:2F Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft Manifest number: 18 Signing time: Fri 25 Apr 2025 07:00:09 +0000 Manifest this update: Fri 25 Apr 2025 07:00:08 +0000 Manifest next update: Fri 02 May 2025 07:00:08 +0000 Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: ciPe4MEYCkeI1QuL5sfuWU8Z6cu4uQQ9QRYWNOva+hU=) 2: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (hash: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=) 3: 4C559E64054B11F08646F910C4F9AE02.roa (hash: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: Apr 25 07:00:08 2025 GMT Not After : May 2 07:00:08 2025 GMT Subject: CN=680b32f8-aed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:00:45:b7:ea:3b:75:f7:d3:a5:69:df:86: 47:8d:b4:87:60:7f:46:42:fc:f0:98:d2:ad:32:1e: 01:99:56:07:e1:4f:67:11:2c:16:b8:4b:c1:4d:1a: 98:ae:eb:db:2f:be:4a:62:54:18:9a:0c:ce:5c:4f: fc:61:3a:35:d9:1c:e8:b5:4f:f3:9f:05:3f:ec:de: d3:25:d8:29:78:85:04:50:bc:4b:c4:d1:cf:af:a9: 90:70:7e:9a:44:54:a4:a5:c2:73:12:6f:d3:e7:34: f6:1b:c5:22:e6:a0:ca:bb:a8:83:fe:dd:12:50:e6: 12:00:25:da:ad:17:d3:df:05:54:08:e1:17:7b:10: bb:42:d2:e7:b8:b3:ae:a6:be:5a:ab:a2:2e:de:ef: 16:41:10:cb:ad:39:2a:56:d3:dd:4b:5a:b2:13:6f: 79:7f:54:90:a5:4e:fd:f0:ee:15:fc:34:3c:54:6a: ed:45:de:6b:57:09:ef:95:85:fe:ce:c1:09:83:6f: d1:d6:92:a3:80:cc:a3:09:5d:e6:38:32:06:39:47: 9b:3d:a3:09:95:08:22:1c:b8:2b:dd:db:13:4c:a1: 76:68:d6:84:fb:de:fc:48:52:34:f0:4c:6a:33:0a: 04:12:02:19:fd:cc:4f:cf:2c:e8:1a:d1:fe:2d:7f: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:92:59:8A:BD:F7:4F:47:8A:55:FB:AC:FF:7C:C0:65:F4:93:2F X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:23:c4:e8:e5:1d:46:fa:97:5b:4f:32:e6:12:a8:c4:b3:d0: 1a:40:c6:99:8f:8c:d1:64:09:21:72:33:f7:8f:c1:c3:08:43: c0:bd:04:b8:c7:77:a6:69:5f:92:25:9d:5f:8f:0a:e4:bc:ba: ae:b7:42:2d:a5:aa:60:41:0d:ad:44:07:8c:f6:78:ad:b6:db: 71:7d:4c:a4:34:5f:35:2a:70:f3:35:83:b4:38:39:bf:78:1f: 09:c2:76:b2:cd:dc:22:c5:81:38:64:93:f4:89:50:a5:bd:f0: 50:96:f0:82:f8:d7:af:46:b5:ab:25:3c:b8:e9:74:44:ae:38: a7:63:c7:59:3a:6d:78:ed:1d:1d:23:c3:a1:b3:5a:f1:ce:3f: 71:cb:0f:74:e0:5f:54:88:24:80:8b:0c:6f:b5:23:37:c2:2d: 0b:25:4a:40:de:f1:bd:05:8f:c7:f7:66:bf:51:38:81:92:50: f0:f1:5f:4d:99:09:9e:10:a4:c6:53:ea:95:59:62:67:c6:92: 9d:40:68:9f:d6:bb:a1:98:15:30:ed:76:9d:ff:4d:37:d6:c7: bd:7b:8c:25:bb:92:d5:a1:52:c2:e2:2f:53:df:ea:68:ac:32: 9d:97:a1:95:8c:c0:d1:12:d4:11:cc:dc:66:c9:1e:74:2e:02: 03:7c:af:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTA0MjUwNzAwMDhaFw0yNTA1MDIwNzAwMDhaMBgxFjAUBgNV BAMTDTY4MGIzMmY4LWFlZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9WgBFt+o7dffTpWnfhkeNtIdgf0ZC/PCY0q0yHgGZVgfhT2cRLBa4S8FNGpiu 69svvkpiVBiaDM5cT/xhOjXZHOi1T/OfBT/s3tMl2Cl4hQRQvEvE0c+vqZBwfppE VKSlwnMSb9PnNPYbxSLmoMq7qIP+3RJQ5hIAJdqtF9PfBVQI4Rd7ELtC0ue4s66m vlqroi7e7xZBEMutOSpW091LWrITb3l/VJClTv3w7hX8NDxUau1F3mtXCe+Vhf7O wQmDb9HWkqOAzKMJXeY4MgY5R5s9owmVCCIcuCvd2xNMoXZo1oT73vxIUjTwTGoz CgQSAhn9zE/PLOga0f4tf9b1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMpCSWYq9 909HilX7rP98wGX0ky8wHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTI3L0MxMDZEMzNDMDREQzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dS dkU0cjJ6Ymlqc0k4RHZyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFojxOjlHUb6l1tPMuYSqMSz0BpAxpmPjNFkCSFyM/ePwcMIQ8C9BLjH d6ZpX5IlnV+PCuS8uq63Qi2lqmBBDa1EB4z2eK2223F9TKQ0XzUqcPM1g7Q4Ob94 HwnCdrLN3CLFgThkk/SJUKW98FCW8IL4169GtaslPLjpdESuOKdjx1k6bXjtHR0j w6GzWvHOP3HLD3TgX1SIJICLDG+1IzfCLQslSkDe8b0Fj8f3Zr9ROIGSUPDxX02Z CZ4QpMZT6pVZYmfGkp1AaJ/Wu6GYFTDtdp3/TTfWx717jCW7ktWhUsLiL1Pf6mis Mp2XoZWMwNES1BHM3GbJHnQuAgN8r4M= -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:17 2025 by rpki-client