$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: rAvlrEpAD+Ijaycdw/15mEeHih7MRg/A+YEtCpSD/WU= Subject key identifier: 5E:C4:3D:CC:42:5F:C6:10:7B:9A:31:DD:13:48:87:A1:98:3E:05:FB Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C1F Signing time: Mon 12 May 2025 18:29:28 +0000 Manifest this update: Mon 12 May 2025 18:29:27 +0000 Manifest next update: Mon 19 May 2025 18:29:27 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: 81unaxA8DSai+lD9SK6zx+mnVenYyEdJXY8D1JdNSyU=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: Q0U2adFevjF3UeWXP2WSO1nQxz6BphgLKsQxsX/j3xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3118 (0xc2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: May 12 18:29:27 2025 GMT Not After : May 19 18:29:27 2025 GMT Subject: CN=68223e07-d0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:7a:b9:e7:92:9e:2c:33:bb:87:dd:e3:79: ab:35:58:1a:cc:a2:16:f3:1e:d1:aa:46:a6:35:21: 58:65:28:e9:66:97:8d:29:e7:14:0f:d4:62:c7:48: 2a:f9:e3:78:cf:0d:df:5d:4a:d9:3f:81:73:10:da: 17:bf:44:d7:68:78:88:b8:a9:23:cf:99:1a:c5:5f: db:ec:25:0d:6a:83:6d:9d:e0:94:45:02:1a:9b:2b: c2:68:6f:8b:e1:81:bc:26:8e:cd:87:e8:b5:30:9d: f2:e9:16:83:3c:4e:58:c2:1d:db:86:58:64:05:37: 6c:8e:9e:1a:eb:9e:eb:a9:ea:f7:72:7b:45:e2:4e: 54:5e:79:19:d1:d0:7d:d2:f0:c0:08:ae:b6:9a:af: 7b:df:31:24:32:4a:0a:33:cb:98:b4:e4:cd:4f:18: 63:09:83:d1:a9:9e:a1:96:03:86:8d:01:09:6c:27: d0:a9:1b:96:59:44:c5:66:7a:a0:08:74:ce:aa:f1: aa:1b:ec:a0:7c:89:74:8f:2e:3c:a1:4e:88:94:12: 42:95:ea:bb:40:e5:d1:9d:0c:3e:d5:00:05:40:7e: 63:67:12:67:b5:ea:6f:d7:b3:47:88:ef:5b:d0:05: df:97:8e:04:f6:9c:8f:5f:e6:1d:66:69:51:fe:f2: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C4:3D:CC:42:5F:C6:10:7B:9A:31:DD:13:48:87:A1:98:3E:05:FB X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:05:91:82:74:23:87:87:fd:69:1c:0b:65:29:5d:fd:0f:04: 50:9c:8f:37:f3:09:c7:54:89:db:cc:7b:08:cb:b2:22:d0:70: 68:be:80:e3:17:74:4d:4e:a5:c2:cf:52:00:d7:b1:99:3f:e2: 0c:cd:23:9b:73:be:f9:d7:f3:0f:58:e8:f7:c4:47:89:74:05: de:cc:81:93:36:84:74:01:06:87:fe:d9:7d:d6:72:d9:52:cb: b1:8e:b9:f9:52:7b:aa:f2:00:22:8a:35:37:04:ca:d0:87:14: 87:f5:5f:64:8f:d2:83:9b:9c:7c:4f:48:d8:d1:cd:0d:21:93: 4a:8b:b7:86:3f:2c:a4:9f:33:32:6a:3c:34:8b:9c:33:2f:e5: 71:1c:09:0d:5d:97:46:38:28:83:3b:20:de:2a:73:b5:70:35: 05:63:0d:f8:75:23:45:46:90:04:0b:c7:77:a0:1d:9b:fa:23: 6a:05:92:12:c9:14:ce:b0:8a:4d:00:f7:70:47:09:e7:6e:13: da:5c:3b:ef:8b:92:d6:90:e5:1b:07:f8:36:41:c1:f3:a9:6f: 37:86:e2:7a:7f:e8:70:2a:46:35:06:36:e4:04:e7:6f:3d:1b: 3b:4e:77:e9:bc:07:d5:01:7f:c5:5d:cf:5c:d7:a5:ee:c7:dc: fa:5f:09:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwNTEyMTgyOTI3WhcNMjUwNTE5MTgyOTI3WjAYMRYwFAYD VQQDEw02ODIyM2UwNy1kMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllF6ueeSniwzu4fd43mrNVgazKIW8x7RqkamNSFYZSjpZpeNKecUD9Rix0gq +eN4zw3fXUrZP4FzENoXv0TXaHiIuKkjz5kaxV/b7CUNaoNtneCURQIamyvCaG+L 4YG8Jo7Nh+i1MJ3y6RaDPE5Ywh3bhlhkBTdsjp4a657rqer3cntF4k5UXnkZ0dB9 0vDACK62mq973zEkMkoKM8uYtOTNTxhjCYPRqZ6hlgOGjQEJbCfQqRuWWUTFZnqg CHTOqvGqG+ygfIl0jy48oU6IlBJCleq7QOXRnQw+1QAFQH5jZxJntepv17NHiO9b 0AXfl44E9pyPX+YdZmlR/vIdaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7EPcxC X8YQe5ox3RNIh6GYPgX7MB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmBZGCdCOHh/1pHAtlKV39DwRQnI838wnHVInbzHsIy7Ii0HBovoDj F3RNTqXCz1IA17GZP+IMzSObc7751/MPWOj3xEeJdAXezIGTNoR0AQaH/tl91nLZ Usuxjrn5Unuq8gAiijU3BMrQhxSH9V9kj9KDm5x8T0jY0c0NIZNKi7eGPyyknzMy ajw0i5wzL+VxHAkNXZdGOCiDOyDeKnO1cDUFYw34dSNFRpAEC8d3oB2b+iNqBZIS yRTOsIpNAPdwRwnnbhPaXDvvi5LWkOUbB/g2QcHzqW83huJ6f+hwKkY1BjbkBOdv PRs7TnfpvAfVAX/FXc9c16Xux9z6Xwmf -----END CERTIFICATE-----Generated at Wed May 14 05:07:03 2025 by rpki-client