$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft File: JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft (raw, json) Hash identifier: TgQUSRumRry2Nk/BRdPNvXMUsEeFbN4/LRJRk5IVt8U= Subject key identifier: 67:E9:3B:0F:20:53:8A:70:02:3A:2A:C9:2B:5E:AE:AE:A3:F8:0E:30 Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 16DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft Manifest number: 16D3 Signing time: Wed 14 May 2025 16:44:36 +0000 Manifest this update: Wed 14 May 2025 16:44:36 +0000 Manifest next update: Wed 21 May 2025 16:44:36 +0000 Files and hashes: 1: JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl (hash: y5LGdWxORDZk0Q7VfPRaDiYbBP++RympWEWSFE3D3wg=) 2: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (hash: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5853 (0x16dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: May 14 16:44:36 2025 GMT Not After : May 21 16:44:36 2025 GMT Subject: CN=6824c874-5c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:4b:4b:12:5d:57:eb:10:9b:a2:3b:4d:ce: 2b:05:c2:ba:42:40:43:50:9f:46:42:83:92:fd:10: 5f:84:bc:d9:a6:c0:fb:12:3d:73:bc:27:f6:f0:ed: 09:62:35:22:81:1c:8c:1a:91:a4:8a:cd:b9:c6:54: 15:7e:b7:99:72:83:f7:9f:42:d1:8f:66:4f:bf:09: 45:e8:9a:78:ad:ff:e6:03:ce:29:8d:47:f9:1a:db: 25:62:cf:da:ff:ef:84:5d:93:3c:d2:77:84:54:bd: 60:ec:e9:82:fb:04:8b:ed:87:b4:67:63:10:18:b0: 2b:f1:8d:9e:33:70:34:89:0e:63:e9:03:60:65:27: ec:82:05:0b:54:d4:85:12:4e:01:31:b0:47:73:e9: 1f:44:f1:fe:ef:e6:ee:fc:e6:c9:34:8d:31:95:05: 0a:ab:51:4a:96:0a:6b:36:e9:24:24:f8:d9:c1:84: 57:fe:e1:6d:26:82:f5:6e:6c:b3:f6:37:3d:3c:3c: dd:4f:17:4e:a2:57:42:f2:07:70:0b:e7:80:7d:9c: 8c:56:84:88:81:8d:6f:41:6f:0c:43:b5:ee:9c:16: 67:2e:24:75:d8:c9:46:67:4f:9e:47:76:7c:90:82: 2f:ef:e7:1e:95:3f:26:2f:be:64:e2:96:0e:af:16: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E9:3B:0F:20:53:8A:70:02:3A:2A:C9:2B:5E:AE:AE:A3:F8:0E:30 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7f:07:13:40:19:56:89:04:a4:d9:a3:e6:1d:25:0e:63:31: 32:11:31:eb:1a:f4:72:af:53:71:79:90:9c:fd:09:17:f3:fe: a8:51:c1:a2:43:22:8f:b2:ce:10:7f:b7:26:10:aa:56:f3:bc: 5b:f2:ef:7e:0c:32:81:3e:7e:70:6c:35:0b:34:43:2b:82:6a: 8c:80:01:f3:8a:4a:16:4b:89:70:96:7d:16:94:b7:24:65:99: d8:a7:36:c0:cb:d0:e1:eb:25:61:61:3d:dc:be:98:ac:56:4b: 70:2d:aa:c9:89:d4:d4:78:ba:a0:ee:e2:c7:0f:4e:18:b9:c0: 0f:63:a1:30:76:83:5c:9d:a1:eb:28:db:db:5b:f9:63:fe:d6: 02:85:7f:0f:76:4d:89:77:76:69:9c:85:ad:80:de:0e:b7:22: 59:5c:45:06:22:73:d1:75:da:89:56:a7:76:2e:7e:44:34:fd: 98:12:e9:6a:33:78:48:44:76:e4:2f:b4:b1:2f:2a:61:f6:56: 33:b4:ee:f5:e4:43:2c:54:a6:10:b5:b4:f7:63:99:8c:c0:01: a5:eb:10:f5:9e:c1:ae:41:29:f2:4e:30:8c:c5:55:88:85:d1: e0:a1:bc:32:3d:00:cc:a5:1a:c0:b2:8a:ed:26:09:f0:f6:af: 7b:f8:28:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUwNTE0MTY0NDM2WhcNMjUwNTIxMTY0NDM2WjAYMRYwFAYD VQQDEw02ODI0Yzg3NC01YzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6alLSxJdV+sQm6I7Tc4rBcK6QkBDUJ9GQoOS/RBfhLzZpsD7Ej1zvCf28O0J YjUigRyMGpGkis25xlQVfreZcoP3n0LRj2ZPvwlF6Jp4rf/mA84pjUf5GtslYs/a /++EXZM80neEVL1g7OmC+wSL7Ye0Z2MQGLAr8Y2eM3A0iQ5j6QNgZSfsggULVNSF Ek4BMbBHc+kfRPH+7+bu/ObJNI0xlQUKq1FKlgprNukkJPjZwYRX/uFtJoL1bmyz 9jc9PDzdTxdOoldC8gdwC+eAfZyMVoSIgY1vQW8MQ7XunBZnLiR12MlGZ0+eR3Z8 kIIv7+celT8mL75k4pYOrxZZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfpOw8g U4pwAjoqySterq6j+A4wMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTAwOC9ERDg4QzNBRUYxRDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5 MEtPMDJoNFZXQU1jRFpKLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCafwcTQBlWiQSk2aPmHSUOYzEyETHrGvRyr1NxeZCc/QkX8/6oUcGi QyKPss4Qf7cmEKpW87xb8u9+DDKBPn5wbDULNEMrgmqMgAHzikoWS4lwln0WlLck ZZnYpzbAy9Dh6yVhYT3cvpisVktwLarJidTUeLqg7uLHD04YucAPY6EwdoNcnaHr KNvbW/lj/tYChX8Pdk2Jd3ZpnIWtgN4OtyJZXEUGInPRddqJVqd2Ln5ENP2YEulq M3hIRHbkL7SxLyph9lYztO715EMsVKYQtbT3Y5mMwAGl6xD1nsGuQSnyTjCMxVWI hdHgobwyPQDMpRrAsortJgnw9q97+Cg+ -----END CERTIFICATE-----Generated at Wed May 14 20:58:36 2025 by rpki-client