$ rpki-client -vvf rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft File: J-T9QcOzZMXkROYutxgZklg5M2k.mft (raw, json) Hash identifier: YE9Ptn+LLk/KRRc6gjvtHFbKijFYud6xmdbcdDB9S6Y= Subject key identifier: 4C:CA:1B:62:61:8F:1E:98:93:93:5C:D2:7F:0C:80:8F:B3:17:95:D6 Authority key identifier: 27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 Certificate issuer: /CN=A9111274/serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft Manifest number: 074F Signing time: Sat 10 May 2025 21:18:31 +0000 Manifest this update: Sat 10 May 2025 21:18:31 +0000 Manifest next update: Sat 17 May 2025 21:18:31 +0000 Files and hashes: 1: J-T9QcOzZMXkROYutxgZklg5M2k.crl (hash: EVJdIQXBc2USwYHdMqa1dTDm3NSZ1j8tagSvBjh4qpk=) 2: 92B90AE2A1C711ED8701EE35C4F9AE02.roa (hash: gOeA95IoTDT+oKmI8jFxYBNTdxSgbCw9gAyz2psvCzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111274, serialNumber=27E4FD41C3B364C5E444E62EB718199258393369 Validity Not Before: May 10 21:18:31 2025 GMT Not After : May 17 21:18:31 2025 GMT Subject: CN=681fc2a7-62ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:9e:50:2f:11:e9:76:51:bd:06:e4:64:b7: 39:d2:4a:e0:a2:56:5a:75:13:a5:72:3e:40:18:71: a0:85:f0:52:53:fb:a6:1b:95:ff:91:79:6e:d9:19: ba:bb:11:d0:84:2d:de:de:84:ca:6e:cd:17:da:19: 9a:4a:bb:98:d9:9e:63:59:fb:4c:5c:e5:5f:0f:e7: 4e:29:54:25:33:ef:1c:26:2c:8b:ac:46:3b:9b:cc: f7:5d:c5:2d:41:ca:4d:a8:98:df:b0:ba:81:47:53: 57:ea:28:8b:9d:91:53:2e:f6:74:f8:44:26:48:8e: 1b:01:e8:65:12:75:84:10:41:1c:8a:d3:f6:52:b5: 78:67:d1:3f:06:8b:d4:7a:bd:41:0e:3b:fd:d5:7c: 3d:7b:5a:a9:1a:45:78:15:1e:89:d9:e3:92:b4:73: f8:19:18:8b:07:26:c0:2e:6b:85:64:6f:50:42:cf: d1:76:60:d4:b1:37:48:7c:de:f4:11:02:eb:df:73: 39:c6:17:d5:ed:23:88:1e:41:49:e6:ba:e7:07:d8: 80:a2:77:f0:ad:02:5f:21:1a:01:1f:b4:29:74:a8: 62:90:86:6f:57:c0:3c:fd:d9:5d:be:27:f7:09:8f: d3:8b:13:67:5a:a8:18:f0:61:37:c7:bb:fa:7c:fe: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CA:1B:62:61:8F:1E:98:93:93:5C:D2:7F:0C:80:8F:B3:17:95:D6 X509v3 Authority Key Identifier: keyid:27:E4:FD:41:C3:B3:64:C5:E4:44:E6:2E:B7:18:19:92:58:39:33:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-T9QcOzZMXkROYutxgZklg5M2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111274/CB37DADE243711EBB9F1E423C4F9AE02/J-T9QcOzZMXkROYutxgZklg5M2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f4:f4:39:2d:a6:94:90:ce:97:b2:69:48:9d:df:9b:25:1c: 11:b6:07:cc:a1:d9:81:76:ec:b2:bd:fb:a4:2b:40:51:0d:24: 36:b8:2f:c6:c7:33:a6:b5:79:8e:15:03:b2:05:5a:02:bf:48: 3f:7e:fb:92:d3:d2:e5:37:a1:12:ad:01:f5:1f:15:cc:b7:72: dd:27:b0:fb:ce:97:34:a9:15:21:46:35:8f:0f:11:ce:e1:36: 78:65:b3:0c:71:d1:e1:a8:d3:db:6d:1f:42:ae:12:bd:d2:fc: 4a:37:be:be:28:c3:2c:77:8a:85:13:3f:fa:bc:9d:36:fc:39: ee:c9:7b:e0:75:64:a1:1f:d9:86:80:84:f2:5e:a6:83:34:01: 11:01:c8:bd:bd:f0:c8:9b:53:d8:2a:41:72:5f:65:68:9a:54: 1d:c2:75:e7:9a:df:54:3e:74:de:d7:38:53:83:86:70:2d:1f: 16:62:60:6b:86:6a:1e:d9:61:b2:db:ec:2f:b8:db:27:64:df: 02:a3:fe:a5:d9:2f:33:05:59:3e:75:a8:e6:ca:6b:45:cf:fd: db:48:4c:d1:78:c3:d9:0c:06:8c:7e:4b:02:19:b3:6f:99:a9: 07:93:5a:0f:8f:db:98:51:81:6c:5a:31:0f:25:c7:0c:48:fb: 2d:4a:7c:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyNzQxMTAvBgNVBAUTKDI3RTRGRDQxQzNCMzY0QzVFNDQ0RTYyRUI3MTgxOTky NTgzOTMzNjkwHhcNMjUwNTEwMjExODMxWhcNMjUwNTE3MjExODMxWjAYMRYwFAYD VQQDEw02ODFmYzJhNy02MmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3GeUC8R6XZRvQbkZLc50krgolZadROlcj5AGHGghfBSU/umG5X/kXlu2Rm6 uxHQhC3e3oTKbs0X2hmaSruY2Z5jWftMXOVfD+dOKVQlM+8cJiyLrEY7m8z3XcUt QcpNqJjfsLqBR1NX6iiLnZFTLvZ0+EQmSI4bAehlEnWEEEEcitP2UrV4Z9E/BovU er1BDjv91Xw9e1qpGkV4FR6J2eOStHP4GRiLBybALmuFZG9QQs/RdmDUsTdIfN70 EQLr33M5xhfV7SOIHkFJ5rrnB9iAonfwrQJfIRoBH7QpdKhikIZvV8A8/dldvif3 CY/TixNnWqgY8GE3x7v6fP7LNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzKG2Jh jx6Yk5Nc0n8MgI+zF5XWMB8GA1UdIwQYMBaAFCfk/UHDs2TF5ETmLrcYGZJYOTNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTI3NC9DQjM3REFERTI0 MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpNWGtST1l1dHhnWmtsZzVN MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otVDlRY096Wk1Ya1JPWXV0eGdaa2xnNU0yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTI3NC9DQjM3REFERTI0MzcxMUVCQjlGMUU0MjNDNEY5QUUwMi9KLVQ5UWNPelpN WGtST1l1dHhnWmtsZzVNMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9PQ5LaaUkM6XsmlInd+bJRwRtgfModmBduyyvfukK0BRDSQ2uC/G xzOmtXmOFQOyBVoCv0g/fvuS09LlN6ESrQH1HxXMt3LdJ7D7zpc0qRUhRjWPDxHO 4TZ4ZbMMcdHhqNPbbR9CrhK90vxKN76+KMMsd4qFEz/6vJ02/DnuyXvgdWShH9mG gITyXqaDNAERAci9vfDIm1PYKkFyX2VomlQdwnXnmt9UPnTe1zhTg4ZwLR8WYmBr hmoe2WGy2+wvuNsnZN8Co/6l2S8zBVk+dajmymtFz/3bSEzReMPZDAaMfksCGbNv makHk1oPj9uYUYFsWjEPJccMSPstSnzt -----END CERTIFICATE-----Generated at Mon May 12 15:54:36 2025 by rpki-client