$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json) Hash identifier: pS0ByU1SpptCDx8jrKcdITs4hLMsET40s2zVaBMRkXA= Subject key identifier: 4B:C2:62:9D:19:41:2D:05:FC:5E:C6:FA:71:A8:39:08:39:E4:FD:E5 Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft Manifest number: 0129 Signing time: Fri 25 Apr 2025 03:41:13 +0000 Manifest this update: Fri 25 Apr 2025 03:41:12 +0000 Manifest next update: Fri 02 May 2025 03:41:12 +0000 Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: hN2iwnQ8K9OW9PLa3mvXUbrUeHmX8aqDZY+JgK++QHk=) 2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: elKim0+kuVj5n91meyvY+LXLxWJNR5sixE2vqJMQIt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Validity Not Before: Apr 25 03:41:12 2025 GMT Not After : May 2 03:41:12 2025 GMT Subject: CN=680b0459-b952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c2:2e:3f:68:76:6a:7b:0c:48:c6:8b:0e:df: 50:ee:a4:1c:48:78:de:c7:b4:18:44:d3:2f:1d:5e: f6:4c:98:40:ff:d8:24:d8:77:db:8c:f5:34:c8:b8: 05:a7:71:53:42:f4:cb:0f:1d:fe:df:4f:47:a2:41: d5:ae:f3:15:58:8e:24:2e:f4:3c:19:ae:8b:e1:df: 84:90:33:3a:9d:9e:5d:00:9e:ae:a8:64:27:29:e0: 67:95:82:43:8c:5b:39:e6:2e:e2:72:08:2e:ef:81: 41:8d:a4:24:9b:ab:ee:dd:0e:bb:17:40:b5:c0:7a: f4:1d:61:1c:d7:ec:46:1c:55:61:70:eb:23:a1:84: ce:65:88:f9:82:16:78:01:bc:b6:79:f7:0f:ad:25: a2:25:74:f2:6b:eb:7a:cc:ab:68:25:1a:1d:f1:d4: 1b:40:ca:c8:d9:86:0c:66:73:a6:9b:71:41:2d:39: be:a5:3d:fd:c0:ce:91:ff:c2:55:79:4d:14:8b:20: 82:20:c5:8a:21:62:1c:a9:6f:56:ed:8e:b7:af:62: ac:d1:f6:9b:e2:c3:0a:5a:eb:d9:9b:9f:6b:87:e9: 81:a4:0f:e9:84:55:bb:86:ab:3e:fd:2e:50:a8:80: 54:5f:5f:1b:c5:61:3e:eb:94:69:49:b6:6a:7d:53: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:62:9D:19:41:2D:05:FC:5E:C6:FA:71:A8:39:08:39:E4:FD:E5 X509v3 Authority Key Identifier: keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0d:34:3e:95:5e:b3:a4:e8:09:31:bf:d1:66:c1:e8:c4:b6: 13:94:e2:31:29:cc:b3:7b:80:0d:33:28:5e:ec:0c:e9:51:85: dd:7b:48:08:9b:7b:6f:53:2b:af:e3:9e:64:83:5c:e0:e7:55: ac:d3:16:95:48:8b:f2:fd:09:7d:73:a5:15:3c:14:9f:93:ef: 77:79:81:09:30:64:fb:e9:a7:52:0d:37:c9:1e:13:98:ad:ae: e7:f9:27:39:8c:f0:0e:ad:20:6f:e6:6c:cf:94:43:89:aa:ee: 52:97:72:c8:53:a7:3d:ff:07:ac:6b:43:87:1e:7c:7e:e6:0b: d2:f1:46:d5:0e:4e:2c:da:9e:f1:52:ca:d0:c4:f9:b1:da:ed: df:63:d8:f3:29:2b:c6:b3:24:b3:9a:15:24:87:f2:5a:ff:b4: c3:fc:2a:15:0c:79:34:da:8f:82:17:a6:1d:47:ce:6a:27:50: 65:ec:8e:e5:d6:44:ea:b5:a4:33:2b:72:29:8d:4f:91:f4:9f: 50:9d:0c:7d:e9:8a:e4:87:77:62:64:2c:e2:d7:91:0b:3f:60: 4c:00:07:f6:ca:e2:29:38:e4:8d:7e:6e:15:96:c1:ba:00:f5: ba:0d:e0:61:91:56:14:e4:b3:26:db:30:60:46:d3:e5:03:4f: 0b:27:78:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MTExMTAvBgNVBAUTKDI1OTY5RTczQTk4RDk5RjQyRUFDODk0MjZDNkI5NDkz Qzg1RDMzMUEwHhcNMjUwNDI1MDM0MTEyWhcNMjUwNTAyMDM0MTEyWjAYMRYwFAYD VQQDEw02ODBiMDQ1OS1iOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cIuP2h2ansMSMaLDt9Q7qQcSHjex7QYRNMvHV72TJhA/9gk2HfbjPU0yLgF p3FTQvTLDx3+309HokHVrvMVWI4kLvQ8Ga6L4d+EkDM6nZ5dAJ6uqGQnKeBnlYJD jFs55i7icggu74FBjaQkm6vu3Q67F0C1wHr0HWEc1+xGHFVhcOsjoYTOZYj5ghZ4 Aby2efcPrSWiJXTya+t6zKtoJRod8dQbQMrI2YYMZnOmm3FBLTm+pT39wM6R/8JV eU0UiyCCIMWKIWIcqW9W7Y63r2Ks0fab4sMKWuvZm59rh+mBpA/phFW7hqs+/S5Q qIBUX18bxWE+65RpSbZqfVPc7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvCYp0Z QS0F/F7G+nGoOQg55P3lMB8GA1UdIwQYMBaAFCWWnnOpjZn0LqyJQmxrlJPIXTMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkxMS9CQzA5NTNBNjU5 NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1mUXVySWxDYkd1VWs4aGRN eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYWVjNm1ObWZRdXJJbENiR3VVazhoZE14by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkxMS9CQzA5NTNBNjU5NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1m UXVySWxDYkd1VWs4aGRNeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZDTQ+lV6zpOgJMb/RZsHoxLYTlOIxKcyze4ANMyhe7AzpUYXde0gI m3tvUyuv455kg1zg51Ws0xaVSIvy/Ql9c6UVPBSfk+93eYEJMGT76adSDTfJHhOY ra7n+Sc5jPAOrSBv5mzPlEOJqu5Sl3LIU6c9/wesa0OHHnx+5gvS8UbVDk4s2p7x UsrQxPmx2u3fY9jzKSvGsySzmhUkh/Ja/7TD/CoVDHk02o+CF6YdR85qJ1Bl7I7l 1kTqtaQzK3IpjU+R9J9QnQx96Yrkh3diZCzi15ELP2BMAAf2yuIpOOSNfm4VlsG6 APW6DeBhkVYU5LMm2zBgRtPlA08LJ3g2 -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:42 2025 by rpki-client