$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: SjpOTQ1vcA9zzJijy256GEjf8ynSUClnpwOFD9sX7SY= Subject key identifier: 9A:04:A6:76:E6:46:BD:FA:20:91:D0:A4:7C:38:A0:DA:22:E7:FE:4F Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 2473 Signing time: Mon 12 May 2025 16:17:47 +0000 Manifest this update: Mon 12 May 2025 16:17:47 +0000 Manifest next update: Mon 19 May 2025 16:17:47 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: W+a+GL0CEJNYPWMOZxBQxAJslnY5WKtrvixF4CWFLYY=) 2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: ktQbvk1dYwtY6XHKjo1bzOppPwxVRxcNRlkE67hCNQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Validity Not Before: May 12 16:17:47 2025 GMT Not After : May 19 16:17:47 2025 GMT Subject: CN=68221f2b-6004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:e4:c9:6c:6c:3c:5a:8e:0d:18:4c:42:65: b7:33:22:67:36:07:be:51:9f:4f:da:05:40:bc:dd: 36:1b:48:53:ee:78:97:62:ad:d3:d6:91:bc:c2:ea: 14:e7:0f:6f:ed:b0:bf:2c:d1:c9:7e:32:4e:40:20: 3a:b0:4e:d1:11:c5:ad:54:12:f6:a4:6e:93:ae:0e: 51:04:be:a9:c1:68:98:10:68:f5:2e:39:a4:57:42: d6:62:b6:dd:8d:71:27:f8:6e:47:01:f8:ba:60:ff: e7:14:4b:6f:c3:da:82:94:c8:fe:3a:02:59:50:e9: ab:b4:74:04:ba:44:c5:7a:4f:b7:c7:9f:b2:5f:f6: 70:27:a9:27:89:ba:d6:5b:9b:b3:9f:68:19:6f:0f: 71:54:78:70:49:15:29:82:b0:1e:05:c5:72:24:33: a4:0f:f5:ac:96:74:bc:6b:c4:1c:57:18:ed:23:6c: 75:bb:c9:20:50:55:ae:0d:f2:05:00:53:ea:75:71: 6f:0e:b4:2b:34:9b:7a:fe:6a:6e:2d:7e:70:93:0c: 30:83:c3:39:02:29:ab:c9:57:30:8c:43:6c:32:63: 3c:3f:25:46:05:e9:53:1a:13:16:01:34:c8:04:f4: 4d:d5:08:cb:3b:48:40:5f:c5:ef:6f:d1:26:43:37: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:04:A6:76:E6:46:BD:FA:20:91:D0:A4:7C:38:A0:DA:22:E7:FE:4F X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b0:60:8f:a3:71:24:c7:63:04:8f:65:7e:cf:d3:8d:66:92: fd:81:dc:a3:41:0a:be:37:e5:e9:e6:b9:2c:8e:49:ee:5c:7e: fc:48:80:90:1c:51:32:d5:57:a3:9a:c6:76:0d:de:bb:36:41: 02:69:15:c6:92:57:31:cc:a6:0e:85:ad:98:f5:52:e8:9e:40: 96:56:bb:71:0a:71:f8:c6:3c:92:0a:f9:00:1b:74:6a:c8:8e: 6f:60:0a:bb:2b:bf:ab:55:f1:d3:e5:9c:f7:95:74:78:d9:73: f9:87:68:e5:9c:4c:72:c1:8b:33:30:69:7c:7a:11:89:8e:b2: 4d:4c:00:64:26:a6:7c:52:42:7a:c9:22:f2:74:88:9e:f9:a9: fa:7c:0f:32:80:ce:48:0f:b5:8c:61:27:99:d5:98:5f:65:22: a2:4b:1c:77:c3:41:97:ec:ca:9a:e3:52:aa:87:20:90:0f:f8: 0f:07:cb:a5:d1:56:aa:dd:fb:63:d0:00:38:74:f6:11:e9:85: f6:a5:c4:d6:47:64:51:6c:40:ee:8b:4e:67:be:d7:16:a3:a6: ce:1b:8f:ff:50:10:b5:21:80:12:5f:48:9c:27:db:cd:26:88: 66:41:de:29:57:52:ff:05:55:cf:c5:29:b5:c3:80:a9:11:42: bc:cf:48:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy RDYyN0JCODAeFw0yNTA1MTIxNjE3NDdaFw0yNTA1MTkxNjE3NDdaMBgxFjAUBgNV BAMTDTY4MjIxZjJiLTYwMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkFeTJbGw8Wo4NGExCZbczImc2B75Rn0/aBUC83TYbSFPueJdirdPWkbzC6hTn D2/tsL8s0cl+Mk5AIDqwTtERxa1UEvakbpOuDlEEvqnBaJgQaPUuOaRXQtZitt2N cSf4bkcB+Lpg/+cUS2/D2oKUyP46AllQ6au0dAS6RMV6T7fHn7Jf9nAnqSeJutZb m7OfaBlvD3FUeHBJFSmCsB4FxXIkM6QP9ayWdLxrxBxXGO0jbHW7ySBQVa4N8gUA U+p1cW8OtCs0m3r+am4tfnCTDDCDwzkCKavJVzCMQ2wyYzw/JUYF6VMaExYBNMgE 9E3VCMs7SEBfxe9v0SZDN3LBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmgSmduZG vfogkdCkfDig2iLn/k8wHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3 UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALGwYI+jcSTHYwSPZX7P041mkv2B3KNBCr435enmuSyOSe5cfvxIgJAc UTLVV6OaxnYN3rs2QQJpFcaSVzHMpg6FrZj1UuieQJZWu3EKcfjGPJIK+QAbdGrI jm9gCrsrv6tV8dPlnPeVdHjZc/mHaOWcTHLBizMwaXx6EYmOsk1MAGQmpnxSQnrJ IvJ0iJ75qfp8DzKAzkgPtYxhJ5nVmF9lIqJLHHfDQZfsyprjUqqHIJAP+A8Hy6XR Vqrd+2PQADh09hHphfalxNZHZFFsQO6LTme+1xajps4bj/9QELUhgBJfSJwn280m iGZB3ilXUv8FVc/FKbXDgKkRQrzPSNE= -----END CERTIFICATE-----Generated at Tue May 13 19:39:10 2025 by rpki-client