$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft File: J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json) Hash identifier: zaZqvFgrckzI7kxSbwBpo7ObitdOFcHrHn/B+4a6pGc= Subject key identifier: 56:0F:98:A2:BA:34:48:91:C9:F1:8F:28:1F:61:71:2C:CD:49:56:4E Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB Certificate issuer: /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft Manifest number: 0644 Signing time: Thu 24 Apr 2025 22:21:29 +0000 Manifest this update: Thu 24 Apr 2025 22:21:28 +0000 Manifest next update: Thu 01 May 2025 22:21:28 +0000 Files and hashes: 1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: y4nL28OjkfPbm2FGAuOUtxV54Fm0fGh1l6nG3GOL65c=) 2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: U3xUizSTWdJYMjLLq4qIbC/HRkla7mf9lgp0wntQ29I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB Validity Not Before: Apr 24 22:21:28 2025 GMT Not After : May 1 22:21:28 2025 GMT Subject: CN=680ab968-fde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:70:40:19:75:1d:32:20:27:c9:53:a3:e1: a3:4e:4e:cf:d4:ef:29:ce:83:59:f7:09:66:0c:61: 71:52:96:66:f9:15:00:9e:8e:e7:e6:c9:38:3c:1e: cc:a5:b9:15:89:7c:6e:39:13:1c:60:8f:89:91:e8: 72:bf:49:88:e2:5f:e1:92:0c:a6:40:a9:8e:76:01: b3:75:7c:29:a3:3f:56:c4:c0:a1:36:e9:7d:d6:76: 50:1e:ac:34:97:99:64:0e:2a:f9:70:ef:a9:57:47: f4:30:73:6f:ca:04:df:3e:ee:00:09:6c:c6:67:84: 74:80:72:3f:8f:ae:eb:8a:f9:17:9a:f9:49:fc:62: 08:29:18:35:a0:db:31:74:1c:2f:9e:c1:e3:54:14: 61:31:c1:76:6b:c4:1e:7a:ae:3d:f0:de:7e:db:70: 98:12:82:a0:2a:b1:8c:fc:7c:91:82:c1:5e:95:1c: 9d:0b:2e:0d:9f:4c:e1:29:a1:ee:45:ac:ce:04:80: 43:ff:99:90:a1:08:68:64:7b:0a:4c:70:47:60:55: 93:53:e3:c8:83:9a:0f:47:3b:7b:36:88:76:e5:22: 3c:70:14:6a:df:ae:a0:d0:65:84:af:a6:11:b8:ab: 0e:e3:7a:08:95:bb:67:ce:7f:da:e3:03:ea:72:05: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0F:98:A2:BA:34:48:91:C9:F1:8F:28:1F:61:71:2C:CD:49:56:4E X509v3 Authority Key Identifier: keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3a:6a:90:db:09:7a:ea:b5:fd:34:93:56:d8:be:b8:a8:2f: 10:a6:a5:28:31:ad:44:b7:00:1a:3e:f2:c0:27:b2:37:7b:7a: a7:07:ef:7f:32:40:7d:1f:49:39:41:c6:a5:a5:c9:0a:f5:87: e1:9f:25:96:66:02:f7:1d:bd:ba:23:ce:25:a7:12:fe:3d:9c: 4c:65:d7:c7:fb:7b:03:88:a4:7f:ae:74:e0:84:f5:9d:9a:44: b8:eb:15:f4:4a:ff:c5:71:18:81:30:5e:2b:8d:89:87:91:b6: 69:a6:15:7e:7b:1f:21:65:4d:5c:d2:df:4f:ea:f5:e2:8e:bb: dc:55:92:88:ab:89:d4:d6:a9:f6:d6:e8:66:98:87:d3:f8:e1: 99:26:00:1c:95:2f:a8:4e:84:98:b7:06:f0:ec:f4:52:9c:1d: 32:e0:c9:b4:ab:73:41:35:36:0d:3e:77:90:f5:9e:c8:e2:e0: 76:ae:b8:bf:57:15:e2:af:fc:2c:c2:53:13:1a:16:48:79:92: 41:0b:be:91:65:fc:2b:32:9d:8f:6c:1c:7b:c2:a7:b9:53:5b: 8f:34:fa:8b:52:29:76:3c:6a:5d:1c:0f:e7:ac:06:85:a9:ea: b7:4f:59:d1:98:ab:4c:64:8b:82:de:be:5b:94:bc:84:78:be: 0b:0f:0d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjExMTAvBgNVBAUTKDI3OTI5NTlCMjVGQkY5RUJEQzkzMzlCQTlDN0QzNTU1 NzI2OTY5QUIwHhcNMjUwNDI0MjIyMTI4WhcNMjUwNTAxMjIyMTI4WjAYMRYwFAYD VQQDEw02ODBhYjk2OC1mZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOdwQBl1HTIgJ8lTo+GjTk7P1O8pzoNZ9wlmDGFxUpZm+RUAno7n5sk4PB7M pbkViXxuORMcYI+Jkehyv0mI4l/hkgymQKmOdgGzdXwpoz9WxMChNul91nZQHqw0 l5lkDir5cO+pV0f0MHNvygTfPu4ACWzGZ4R0gHI/j67rivkXmvlJ/GIIKRg1oNsx dBwvnsHjVBRhMcF2a8Qeeq498N5+23CYEoKgKrGM/HyRgsFelRydCy4Nn0zhKaHu RazOBIBD/5mQoQhoZHsKTHBHYFWTU+PIg5oPRzt7Noh25SI8cBRq366g0GWEr6YR uKsO43oIlbtnzn/a4wPqcgWnDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYPmKK6 NEiRyfGPKB9hcSzNSVZOMB8GA1UdIwQYMBaAFCeSlZsl+/nr3JM5upx9NVVyaWmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2MS85MEI2RjcyRTg2 QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1ldmNrem02bkgwMVZYSnBh YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o1S1ZteVg3LWV2Y2t6bTZuSDAxVlhKcGFhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2MS85MEI2RjcyRTg2QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1l dmNrem02bkgwMVZYSnBhYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQOmqQ2wl66rX9NJNW2L64qC8QpqUoMa1EtwAaPvLAJ7I3e3qnB+9/ MkB9H0k5QcalpckK9YfhnyWWZgL3Hb26I84lpxL+PZxMZdfH+3sDiKR/rnTghPWd mkS46xX0Sv/FcRiBMF4rjYmHkbZpphV+ex8hZU1c0t9P6vXijrvcVZKIq4nU1qn2 1uhmmIfT+OGZJgAclS+oToSYtwbw7PRSnB0y4Mm0q3NBNTYNPneQ9Z7I4uB2rri/ VxXir/wswlMTGhZIeZJBC76RZfwrMp2PbBx7wqe5U1uPNPqLUil2PGpdHA/nrAaF qeq3T1nRmKtMZIuC3r5blLyEeL4LDw2O -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:33 2025 by rpki-client