$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft File: _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json) Hash identifier: rg0mi6pLCIqWHlp40HJeTXx2b1txBnGDJxOAKxTjB+s= Subject key identifier: 5B:EF:2A:CB:16:83:AB:E1:4A:62:DA:92:BB:FB:59:0C:39:2A:6E:E0 Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Certificate serial: 1774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft Manifest number: 1764 Signing time: Wed 14 May 2025 16:41:02 +0000 Manifest this update: Wed 14 May 2025 16:41:01 +0000 Manifest next update: Wed 21 May 2025 16:41:01 +0000 Files and hashes: 1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: Bm2gl9ES3AXiX5vZH3zDfyoDptTNpPGEgsYzyCMsHtE=) 2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6004 (0x1774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B Validity Not Before: May 14 16:41:01 2025 GMT Not After : May 21 16:41:01 2025 GMT Subject: CN=6824c79d-a68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:02:3a:42:b1:ce:90:ca:e7:e4:0d:94:72:c0: 1c:f3:9c:46:60:02:6b:7d:68:eb:f1:4d:11:a7:15: c5:60:b1:1e:ed:84:35:8e:33:f1:d3:04:9b:5a:3c: 04:70:ea:22:02:35:ee:d4:f6:8a:f4:a6:50:fc:a6: 5b:6e:9c:20:33:ba:f8:c8:03:5f:6e:0e:d9:70:ea: eb:2d:61:61:f2:f3:1e:c1:ba:42:86:d5:7e:85:f0: 09:15:ca:26:76:4f:2d:2f:41:76:de:e2:38:bd:4e: fa:3b:bf:5e:31:27:cb:5b:f0:da:f6:a9:2b:8f:d2: 02:d4:6b:0a:b1:a7:1a:ff:ff:08:8c:ad:5e:90:bb: f2:f6:1e:b6:66:c2:cd:19:1b:03:7b:bb:4b:46:24: 24:03:f7:68:81:69:d0:83:f4:84:e0:13:2a:b8:81: 31:fd:cb:c9:a3:e9:03:49:32:0b:7c:c7:7c:61:53: 23:15:87:5c:0c:97:d3:53:63:ae:82:92:5d:80:e6: 62:05:48:a0:b2:b3:6d:b7:06:c1:af:7b:db:93:9c: 52:3e:76:4f:8d:63:87:e3:6c:53:07:c2:d0:00:42: 2b:c8:99:b3:13:8f:ee:29:81:07:7b:04:2c:fd:b1: 8a:c4:5d:65:2e:83:3f:37:c7:a7:ba:f6:8c:d2:d0: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EF:2A:CB:16:83:AB:E1:4A:62:DA:92:BB:FB:59:0C:39:2A:6E:E0 X509v3 Authority Key Identifier: keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a6:cd:b8:c5:d1:a8:ff:ce:35:a9:27:13:f8:48:53:49:80: 93:d3:67:41:d1:c3:b3:8f:8c:15:f5:d8:0d:66:41:8b:d7:aa: f8:fb:a6:f2:87:81:17:04:d1:ba:30:68:43:58:11:50:f9:a6: b7:a6:3f:12:01:d3:be:0e:b1:bd:06:a0:31:e4:c4:b1:70:49: 89:aa:20:4d:0a:d3:41:01:1f:e0:5c:5f:72:fa:cc:85:7d:60: e3:35:64:65:4d:85:12:48:69:b6:92:fc:35:33:a8:57:c9:48: 2e:d2:58:f7:fa:7a:10:4e:a6:41:d8:eb:f8:6a:82:9f:8f:3f: b2:f4:d3:88:44:23:cc:94:bc:e2:cd:55:89:37:bf:a3:de:e9: 48:b8:93:27:61:83:6d:f1:57:e9:04:91:54:e0:85:c5:cc:77: 0c:a2:19:1e:72:fc:fb:1e:3f:46:26:32:ee:3f:16:24:37:c9: 03:bc:e5:16:d1:f0:cc:4b:8f:fa:7b:11:14:94:67:df:b8:0e: bd:76:c2:2b:24:6b:94:64:2f:3e:ea:bb:ea:66:73:07:b2:f5: c4:ea:94:8c:31:db:7c:2b:cb:5c:e0:2d:da:35:47:66:ae:4a: fe:6b:c0:f0:8b:e1:06:21:2c:68:bb:5f:a3:fc:d7:98:e8:d9: 11:d4:6d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy MjdGNEU4N0IwHhcNMjUwNTE0MTY0MTAxWhcNMjUwNTIxMTY0MTAxWjAYMRYwFAYD VQQDEw02ODI0Yzc5ZC1hNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QI6QrHOkMrn5A2UcsAc85xGYAJrfWjr8U0RpxXFYLEe7YQ1jjPx0wSbWjwE cOoiAjXu1PaK9KZQ/KZbbpwgM7r4yANfbg7ZcOrrLWFh8vMewbpChtV+hfAJFcom dk8tL0F23uI4vU76O79eMSfLW/Da9qkrj9IC1GsKsaca//8IjK1ekLvy9h62ZsLN GRsDe7tLRiQkA/dogWnQg/SE4BMquIEx/cvJo+kDSTILfMd8YVMjFYdcDJfTU2Ou gpJdgOZiBUigsrNttwbBr3vbk5xSPnZPjWOH42xTB8LQAEIryJmzE4/uKYEHewQs /bGKxF1lLoM/N8enuvaM0tDIcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvvKssW g6vhSmLakrv7WQw5Km7gMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1 RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5 aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLps24xdGo/841qScT+EhTSYCT02dB0cOzj4wV9dgNZkGL16r4+6by h4EXBNG6MGhDWBFQ+aa3pj8SAdO+DrG9BqAx5MSxcEmJqiBNCtNBAR/gXF9y+syF fWDjNWRlTYUSSGm2kvw1M6hXyUgu0lj3+noQTqZB2Ov4aoKfjz+y9NOIRCPMlLzi zVWJN7+j3ulIuJMnYYNt8VfpBJFU4IXFzHcMohkecvz7Hj9GJjLuPxYkN8kDvOUW 0fDMS4/6exEUlGffuA69dsIrJGuUZC8+6rvqZnMHsvXE6pSMMdt8K8tc4C3aNUdm rkr+a8Dwi+EGISxou1+j/NeY6NkR1G0a -----END CERTIFICATE-----Generated at Thu May 15 08:05:36 2025 by rpki-client