$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json) Hash identifier: C0wKshvdhedVpn+9fHLrT5925Htmwl3RVIMAVGsJlj0= Subject key identifier: 5B:64:81:D3:C0:9F:77:E1:DA:A5:3D:02:33:66:98:6D:74:6D:E6:D7 Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft Manifest number: CD Signing time: Fri 25 Apr 2025 04:45:03 +0000 Manifest this update: Fri 25 Apr 2025 04:45:02 +0000 Manifest next update: Fri 02 May 2025 04:45:02 +0000 Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: ww5DBYe+B/FP7fOk1vbHSslDPLAahobVFIiLFaacO8c=) 2: 5A32E8DAE79111EE972FC923C4F9AE02.roa (hash: mY/bcg2+Nm0bHgEr5ZTRXdk5A4XIUo9DciT4aIgm6Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: Apr 25 04:45:02 2025 GMT Not After : May 2 04:45:02 2025 GMT Subject: CN=680b134e-e89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:eb:3a:47:4b:23:ee:1b:ed:ad:c4:de:aa: 39:4e:dc:ae:4e:ca:9e:08:82:3c:84:fb:81:d9:a7: ab:40:98:13:24:9a:c7:7c:e0:15:9b:06:f3:3a:1a: 7a:93:e5:81:e0:13:2f:2d:9d:5a:d0:ee:28:1d:06: c4:3c:54:3e:ef:ac:e1:4c:5d:5e:a2:67:52:6c:96: d4:bc:05:c4:75:dd:f4:3b:14:57:be:4e:0d:cd:bd: 75:e6:c5:33:61:f1:e7:ec:6b:ac:77:8c:6a:ca:09: fd:8b:08:2e:a5:51:6c:59:d2:54:08:b2:41:a2:9d: 4e:37:d9:15:99:10:a4:4c:a8:c1:3f:d9:ac:c0:6b: a1:33:52:2d:ba:3c:aa:17:ae:6a:53:3e:cd:28:8f: 62:e0:77:6f:e7:01:97:e6:48:2d:c2:ea:8f:f0:6d: 25:fd:91:91:08:91:19:af:bf:3c:55:eb:09:50:10: c0:d9:5a:be:23:31:3a:30:45:dc:54:1b:fe:49:e6: 2a:24:e0:b1:43:b1:50:c7:64:53:b3:da:5e:f7:37: a3:7f:c4:a8:d0:56:af:59:71:76:42:73:0b:f9:1b: e6:7f:74:4d:e7:19:0a:5e:28:5b:5a:86:1b:34:26: 0f:28:61:83:85:56:1d:8b:89:e0:e8:aa:e6:dd:fc: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:81:D3:C0:9F:77:E1:DA:A5:3D:02:33:66:98:6D:74:6D:E6:D7 X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:25:db:57:17:ef:a8:b0:5f:1d:f6:5d:72:24:f0:3e:6c:07: ea:0d:49:99:3a:ca:92:3b:f5:45:f5:8e:40:6f:5d:34:9d:42: 32:44:7e:1d:66:5f:da:04:ff:a9:e5:71:ad:c3:0e:aa:5e:c9: 6a:04:ee:02:1a:49:b9:ed:5b:6c:12:e9:31:a6:fa:ee:f8:60: 66:e4:1c:ef:a2:3e:5a:e3:4f:0a:e5:55:df:1b:9d:b7:b6:b3: 6b:d2:3f:11:b6:65:fb:14:e3:f7:4a:f1:11:35:f4:27:0d:24: 43:4f:5f:2c:c4:37:e8:91:e2:51:fd:a4:8d:9e:3b:3f:85:c7: 04:50:10:11:5f:4c:6b:f2:b2:f8:b1:dd:2b:d0:1e:6a:c2:c9: 84:a9:76:71:a1:87:1c:65:5d:0d:8a:a4:d0:ad:3c:26:3d:53: f9:b5:1e:21:df:ad:0e:7f:a0:91:79:4a:c6:d2:3d:9f:e3:ff: 15:68:3e:ab:c6:fd:21:5d:56:04:57:b3:b3:71:48:cb:13:18: 04:42:1f:08:73:8a:88:3d:bd:8f:0a:49:c7:b7:f3:1c:c0:4a: 17:dd:30:0b:61:2e:b1:57:69:46:02:af:da:2c:9a:e7:6f:5d: 64:ef:73:b8:d3:d8:09:f9:0a:3e:1a:3b:ff:66:0f:a8:0a:41: 15:28:1a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz NzVFODEzREIwHhcNMjUwNDI1MDQ0NTAyWhcNMjUwNTAyMDQ0NTAyWjAYMRYwFAYD VQQDEw02ODBiMTM0ZS1lODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmHrOkdLI+4b7a3E3qo5TtyuTsqeCII8hPuB2aerQJgTJJrHfOAVmwbzOhp6 k+WB4BMvLZ1a0O4oHQbEPFQ+76zhTF1eomdSbJbUvAXEdd30OxRXvk4Nzb115sUz YfHn7Gusd4xqygn9iwgupVFsWdJUCLJBop1ON9kVmRCkTKjBP9mswGuhM1Itujyq F65qUz7NKI9i4Hdv5wGX5kgtwuqP8G0l/ZGRCJEZr788VesJUBDA2Vq+IzE6MEXc VBv+SeYqJOCxQ7FQx2RTs9pe9zejf8So0FavWXF2QnML+Rvmf3RN5xkKXihbWoYb NCYPKGGDhVYdi4ng6Krm3fzeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtkgdPA n3fh2qU9AjNmmG10bebXMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5 dHhMX0IzM2dTUWczWG9FOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSJdtXF++osF8d9l1yJPA+bAfqDUmZOsqSO/VF9Y5Ab100nUIyRH4d Zl/aBP+p5XGtww6qXslqBO4CGkm57VtsEukxpvru+GBm5Bzvoj5a408K5VXfG523 trNr0j8RtmX7FOP3SvERNfQnDSRDT18sxDfokeJR/aSNnjs/hccEUBARX0xr8rL4 sd0r0B5qwsmEqXZxoYccZV0NiqTQrTwmPVP5tR4h360Of6CReUrG0j2f4/8VaD6r xv0hXVYEV7OzcUjLExgEQh8Ic4qIPb2PCknHt/McwEoX3TALYS6xV2lGAq/aLJrn b11k73O409gJ+Qo+Gjv/Zg+oCkEVKBrl -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:53 2025 by rpki-client