$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json) Hash identifier: 6jUCysZPR4rv9XmMuVHIWRVweRuOstysMNCFGxdtXNw= Subject key identifier: B7:E2:C8:23:5F:34:68:38:A6:D0:65:12:AF:B0:29:D0:5C:B0:DA:90 Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 29CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft Manifest number: 29C2 Signing time: Mon 12 May 2025 15:34:39 +0000 Manifest this update: Mon 12 May 2025 15:34:39 +0000 Manifest next update: Mon 19 May 2025 15:34:39 +0000 Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: 5wD1qvvRZXmMlNivnvcPJGSk5eeX07niJAbPm7mcQ9w=) 2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: v8ikpVeIaeLPw7BPTH8hEvqeozL1b7cNZXyGxnhNLLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10699 (0x29cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: May 12 15:34:39 2025 GMT Not After : May 19 15:34:39 2025 GMT Subject: CN=6822150f-4b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:3f:57:23:e9:43:8d:f0:03:42:61:a7:27: 02:04:36:c8:48:2f:3d:65:b0:52:b8:29:39:55:a1: d3:32:53:9b:db:e8:66:0a:ec:ba:72:85:69:7e:57: d1:cd:8a:60:00:90:3c:98:3d:4f:b3:da:a7:6e:2f: 09:b4:c3:a7:aa:b8:76:cb:cb:5a:8a:39:47:e9:c5: f2:82:cf:fe:5c:4c:2a:ee:bb:19:2f:8e:a5:0e:63: e5:92:4b:40:b8:61:f9:60:ee:fe:b8:9d:e7:18:41: 17:08:aa:b3:66:76:50:5c:54:b5:44:60:3a:3f:1c: 0b:e7:b1:2d:e4:82:75:3e:7b:97:6d:30:fb:e9:32: 77:99:93:f4:cf:e5:ba:63:2c:3e:36:33:d8:e9:ff: b0:21:75:63:a9:51:48:ec:f6:70:67:7e:7f:16:81: 2f:99:6d:72:83:74:37:4c:9d:07:a5:8e:cb:9e:5c: 21:1b:0c:5f:67:57:aa:63:26:83:2b:d7:21:11:fb: da:46:5a:87:5e:13:c0:29:8b:3a:8a:9b:21:4e:78: 31:d3:f3:4d:f1:73:88:98:18:e4:f5:62:b7:d1:75: de:9b:4a:48:e3:ed:b4:7f:f4:4b:25:35:9f:d6:14: db:18:4c:0b:ee:35:a4:1f:44:2f:5a:6c:b5:7c:a8: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E2:C8:23:5F:34:68:38:A6:D0:65:12:AF:B0:29:D0:5C:B0:DA:90 X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:da:6d:7e:e2:ab:7b:46:16:78:02:8b:72:ae:85:fc:7a:db: 94:46:5d:c8:c4:af:09:f4:49:2e:2d:0e:1d:e2:76:34:72:33: 94:91:54:dd:41:91:6a:76:9c:a8:80:33:af:74:b9:31:1b:e3: 30:2b:12:0e:32:d0:0a:0a:dd:83:59:26:d2:64:4c:aa:f9:06: 0c:78:eb:6d:02:31:af:b5:9e:fc:92:5b:85:77:25:ab:fd:59: 35:37:2d:ed:61:03:ef:db:e8:55:48:b6:e3:8a:63:27:e7:1b: af:14:1f:33:c6:7e:42:2b:4d:db:dd:3e:25:31:79:be:bc:3d: da:f3:74:e9:05:4d:a5:42:36:05:73:06:36:9e:c8:51:51:b0: 6c:1e:19:f9:f4:2d:1e:c3:a1:c0:fe:f1:a3:eb:7f:00:9a:68: 2c:c8:27:64:2a:c0:57:53:f1:ea:5a:d7:a3:a6:be:41:5d:ac: ff:1d:56:5c:29:ae:a2:fb:ed:02:49:a2:79:0c:a9:0a:79:07: 40:87:64:da:e6:14:0e:59:37:97:5a:f0:67:97:cd:ee:b3:98: 9e:06:75:40:90:ec:ad:6d:96:ea:91:df:b1:2a:be:04:7d:18: ec:88:43:16:32:af:e0:a6:52:28:2f:08:81:bb:54:5c:6d:fe: 55:70:b0:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjUwNTEyMTUzNDM5WhcNMjUwNTE5MTUzNDM5WjAYMRYwFAYD VQQDEw02ODIyMTUwZi00YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPQ/VyPpQ43wA0JhpycCBDbISC89ZbBSuCk5VaHTMlOb2+hmCuy6coVpflfR zYpgAJA8mD1Ps9qnbi8JtMOnqrh2y8taijlH6cXygs/+XEwq7rsZL46lDmPlkktA uGH5YO7+uJ3nGEEXCKqzZnZQXFS1RGA6PxwL57Et5IJ1PnuXbTD76TJ3mZP0z+W6 Yyw+NjPY6f+wIXVjqVFI7PZwZ35/FoEvmW1yg3Q3TJ0HpY7LnlwhGwxfZ1eqYyaD K9chEfvaRlqHXhPAKYs6ipshTngx0/NN8XOImBjk9WK30XXem0pI4+20f/RLJTWf 1hTbGEwL7jWkH0QvWmy1fKhtAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfiyCNf NGg4ptBlEq+wKdBcsNqQMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp QTgyUlhOY2xlMTBkbUg2eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG2m1+4qt7RhZ4AotyroX8etuURl3IxK8J9EkuLQ4d4nY0cjOUkVTd QZFqdpyogDOvdLkxG+MwKxIOMtAKCt2DWSbSZEyq+QYMeOttAjGvtZ78kluFdyWr /Vk1Ny3tYQPv2+hVSLbjimMn5xuvFB8zxn5CK03b3T4lMXm+vD3a83TpBU2lQjYF cwY2nshRUbBsHhn59C0ew6HA/vGj638AmmgsyCdkKsBXU/HqWtejpr5BXaz/HVZc Ka6i++0CSaJ5DKkKeQdAh2Ta5hQOWTeXWvBnl83us5ieBnVAkOytbZbqkd+xKr4E fRjsiEMWMq/gplIoLwiBu1Rcbf5VcLCL -----END CERTIFICATE-----Generated at Tue May 13 21:45:53 2025 by rpki-client