$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft File: JbYXi6T4b_C18lUXgJvfINlGjmk.mft (raw, json) Hash identifier: 1JL4njYWjxdwcR3hM6fHGgt6dO7IGCZzsHxn5DYGcDQ= Subject key identifier: F6:AD:A0:59:D3:5E:DD:A1:B2:D9:E8:C4:F0:18:FF:7E:C5:9E:DF:86 Authority key identifier: 25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 Certificate issuer: /CN=A9114B57/serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft Manifest number: 0656 Signing time: Fri 16 May 2025 22:45:08 +0000 Manifest this update: Fri 16 May 2025 22:45:08 +0000 Manifest next update: Fri 23 May 2025 22:45:08 +0000 Files and hashes: 1: JbYXi6T4b_C18lUXgJvfINlGjmk.crl (hash: YIO2QaJnKRP48zX3JP5RkdXtevEatbzSo9+qStSwNhI=) 2: A74155FC835911EBBAB4A13CC4F9AE02.roa (hash: IYSv1L8CrFfVZhb7vVnKxPTFDHznaeEotmtw/x51wYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114B57, serialNumber=25B6178BA4F86FF0B5F25517809BDF20D9468E69 Validity Not Before: May 16 22:45:08 2025 GMT Not After : May 23 22:45:08 2025 GMT Subject: CN=6827bff4-db7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:7b:cf:a7:39:0e:6f:6c:62:07:c7:26:74: 8b:bd:ba:c5:d2:36:40:18:aa:2b:1d:1c:36:cf:20: 8f:47:6a:8c:52:77:d7:26:30:68:d7:ed:8a:0c:ca: 95:97:af:4b:73:5d:ad:fc:5c:2c:61:26:37:a3:89: f7:0b:94:0d:a8:69:47:5c:37:33:31:31:e4:ee:43: fa:c3:02:5e:4c:cf:b1:29:37:93:c3:32:89:22:29: c3:1e:1c:80:ef:f0:53:c5:56:08:99:ef:71:70:a4: 59:61:9c:fa:eb:8c:64:25:78:42:1f:3b:98:cf:53: e8:19:fa:b0:54:92:0b:ad:68:3b:ad:91:a6:7f:fc: a0:61:27:c2:34:31:f8:aa:72:75:88:b8:53:a8:8a: 07:c3:dc:7c:95:50:93:52:71:3c:08:02:b5:e5:33: 52:d2:34:b6:9d:9c:34:74:12:9e:2c:30:9b:b9:ac: d6:38:02:90:d9:55:9c:34:05:ac:6d:69:22:97:54: 6e:59:ec:fa:1b:cd:1d:ce:a2:3c:71:72:d8:04:53: 59:dd:6d:e2:61:9d:3c:52:02:d8:19:46:e1:fb:52: 33:9a:21:ab:50:95:ae:ef:fc:db:98:dc:bc:a5:71: 18:52:a9:39:50:2d:70:94:ee:3e:3d:8f:87:fd:d4: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AD:A0:59:D3:5E:DD:A1:B2:D9:E8:C4:F0:18:FF:7E:C5:9E:DF:86 X509v3 Authority Key Identifier: keyid:25:B6:17:8B:A4:F8:6F:F0:B5:F2:55:17:80:9B:DF:20:D9:46:8E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbYXi6T4b_C18lUXgJvfINlGjmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B57/838C8916835811EBB6F0723CC4F9AE02/JbYXi6T4b_C18lUXgJvfINlGjmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6e:fe:29:96:86:57:21:9e:4c:b1:5a:05:64:64:83:91:0f: 3b:71:a4:fc:61:48:a1:91:51:35:72:04:32:d1:a4:0e:db:39: 34:a7:33:89:41:f1:b0:5b:2a:8b:a0:32:86:da:7e:8c:18:45: c8:cf:b7:5e:64:28:a3:96:d0:02:28:d2:ae:90:55:cf:ec:82: 21:c8:40:5a:6c:d9:8a:80:85:bc:e3:71:2b:2f:3f:4b:c9:71: 73:0f:97:62:61:15:7f:d5:9a:52:77:d5:77:f8:95:27:dc:16: d9:f8:1a:0a:c6:dc:63:4f:48:59:5d:38:fc:83:4d:2b:ad:7a: e8:7e:0b:e9:b9:06:49:20:8f:38:04:80:12:ea:b3:8e:2d:e8: 48:77:19:7e:0e:c5:b6:2b:c5:49:82:3e:32:88:47:e8:3f:fb: a7:4b:77:10:53:0e:fe:c0:75:fa:dc:d5:2a:c2:b7:a1:80:b1: 4f:b2:65:70:b6:73:53:4c:d5:12:5d:e8:27:a8:7c:6b:99:ee: c0:a0:08:d6:17:9d:0a:7c:86:3a:25:b8:98:6d:dd:13:81:fb: 6b:38:58:5a:57:7e:25:d3:1a:9a:8b:35:1a:ca:66:64:e4:cc: 20:67:81:17:a6:8e:3f:b4:23:37:87:0f:f7:96:31:ef:7d:64: 4a:4d:48:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRCNTcxMTAvBgNVBAUTKDI1QjYxNzhCQTRGODZGRjBCNUYyNTUxNzgwOUJERjIw RDk0NjhFNjkwHhcNMjUwNTE2MjI0NTA4WhcNMjUwNTIzMjI0NTA4WjAYMRYwFAYD VQQDEw02ODI3YmZmNC1kYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKF7z6c5Dm9sYgfHJnSLvbrF0jZAGKorHRw2zyCPR2qMUnfXJjBo1+2KDMqV l69Lc12t/FwsYSY3o4n3C5QNqGlHXDczMTHk7kP6wwJeTM+xKTeTwzKJIinDHhyA 7/BTxVYIme9xcKRZYZz664xkJXhCHzuYz1PoGfqwVJILrWg7rZGmf/ygYSfCNDH4 qnJ1iLhTqIoHw9x8lVCTUnE8CAK15TNS0jS2nZw0dBKeLDCbuazWOAKQ2VWcNAWs bWkil1RuWez6G80dzqI8cXLYBFNZ3W3iYZ08UgLYGUbh+1IzmiGrUJWu7/zbmNy8 pXEYUqk5UC1wlO4+PY+H/dRJRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPatoFnT Xt2hstnoxPAY/37Fnt+GMB8GA1UdIwQYMBaAFCW2F4uk+G/wtfJVF4Cb3yDZRo5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEI1Ny84MzhDODkxNjgz NTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJfQzE4bFVYZ0p2ZklObEdq bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0piWVhpNlQ0Yl9DMThsVVhnSnZmSU5sR2ptay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEI1Ny84MzhDODkxNjgzNTgxMUVCQjZGMDcyM0NDNEY5QUUwMi9KYllYaTZUNGJf QzE4bFVYZ0p2ZklObEdqbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCabv4ploZXIZ5MsVoFZGSDkQ87caT8YUihkVE1cgQy0aQO2zk0pzOJ QfGwWyqLoDKG2n6MGEXIz7deZCijltACKNKukFXP7IIhyEBabNmKgIW843ErLz9L yXFzD5diYRV/1ZpSd9V3+JUn3BbZ+BoKxtxjT0hZXTj8g00rrXrofgvpuQZJII84 BIAS6rOOLehIdxl+DsW2K8VJgj4yiEfoP/unS3cQUw7+wHX63NUqwrehgLFPsmVw tnNTTNUSXegnqHxrme7AoAjWF50KfIY6JbiYbd0TgftrOFhaV34l0xqaizUaymZk 5MwgZ4EXpo4/tCM3hw/3ljHvfWRKTUit -----END CERTIFICATE-----Generated at Sat May 17 02:06:16 2025 by rpki-client