$ rpki-client -vvf rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft File: jLK71ktqd04WwQ_cplCnrcWzjXg.mft (raw, json) Hash identifier: JwWWBVM/hBWC+w5R6VxHqkBKGMbKCbCCY8OKSk/BVco= Subject key identifier: 10:C4:DE:6A:4F:6B:F0:27:8D:DF:C4:DE:8A:0B:FB:B8:98:2E:04:05 Authority key identifier: 8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 Certificate issuer: /CN=A914749C/serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Certificate serial: 1C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft Manifest number: 1BF2 Signing time: Mon 12 May 2025 16:10:22 +0000 Manifest this update: Mon 12 May 2025 16:10:22 +0000 Manifest next update: Mon 19 May 2025 16:10:22 +0000 Files and hashes: 1: jLK71ktqd04WwQ_cplCnrcWzjXg.crl (hash: vMa9PdzVubpfACf6/301pb15NC68Hn1i6X1XsYGqO4A=) 2: 433FBBECF1A511E6BE0A844EC4F9AE02.roa (hash: UTjSg2cr4EOymY78oxKDbnxxdk7LUhNg4mssHXCS3hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7178 (0x1c0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914749C, serialNumber=8CB2BBD64B6A774E16C10FDCA650A7ADC5B38D78 Validity Not Before: May 12 16:10:22 2025 GMT Not After : May 19 16:10:22 2025 GMT Subject: CN=68221d6e-2082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:77:bd:cd:b8:d5:68:ea:0e:84:bc:96:c6: 01:43:a3:18:14:72:1b:84:4c:9e:af:71:c8:65:57: d9:1c:8b:95:22:19:45:da:5a:fd:35:74:74:81:cd: 97:7a:50:37:bd:11:96:34:98:cd:ca:5a:0a:ff:d4: 7e:21:0a:7f:3f:44:5a:d7:3a:dd:66:02:1d:6c:85: 74:22:f9:3b:68:02:aa:f5:2c:2a:0e:db:18:43:c0: 35:d7:17:bd:13:c7:37:f3:1e:3e:c2:80:f7:b2:a5: 5b:27:de:07:76:2d:9d:f2:e9:59:c5:6b:08:f6:2d: 89:78:b2:fd:0f:2e:7d:fe:7b:a0:bc:74:ba:a7:23: f1:bf:90:63:ce:d7:ad:0c:7f:66:95:9b:87:84:58: 48:34:8d:8f:e4:98:72:87:d1:2f:8c:ce:43:6b:09: 31:83:bf:86:78:4a:8e:fb:91:3c:1c:9a:3e:49:44: 03:5f:29:1c:82:90:f8:30:3e:41:0d:16:ef:41:6b: 7d:72:de:dd:12:d6:0f:ed:48:d9:de:f3:86:9d:2c: 6a:c9:54:8e:8f:81:4b:f2:dd:88:91:d6:4a:59:45: 72:5a:0b:3f:1d:25:90:f2:32:bd:93:f7:f2:9b:95: 2b:16:14:07:e4:de:1e:c2:3d:e5:01:3b:cd:10:d6: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C4:DE:6A:4F:6B:F0:27:8D:DF:C4:DE:8A:0B:FB:B8:98:2E:04:05 X509v3 Authority Key Identifier: keyid:8C:B2:BB:D6:4B:6A:77:4E:16:C1:0F:DC:A6:50:A7:AD:C5:B3:8D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLK71ktqd04WwQ_cplCnrcWzjXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914749C/8D78E57EF1A211E69421B545C4F9AE02/jLK71ktqd04WwQ_cplCnrcWzjXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:47:1e:05:cc:87:39:7b:6b:f6:cd:f1:de:fe:c6:25:d5:c4: 21:96:24:41:45:91:56:ff:fc:03:01:7e:c6:81:7a:ab:64:18: 15:78:de:9f:a1:0c:c6:9e:22:9b:a7:75:12:25:ed:b3:52:a5: b2:0e:76:de:81:e5:42:80:9c:1b:85:3f:fd:8b:75:ed:47:41: b0:fd:8c:5c:04:63:22:b4:18:ec:1d:89:f9:3e:05:da:e7:0d: 45:e7:07:43:45:67:6e:04:42:be:86:6f:e1:dc:bb:9c:ff:8b: 83:3e:f8:c2:1d:44:bd:9a:de:36:ce:04:ea:5c:80:ba:24:cc: 58:3e:3d:63:bf:8e:b0:77:27:c6:33:db:f1:68:b7:41:10:c1: a3:d6:31:a7:82:fc:ac:d4:6f:d0:c1:25:f2:16:74:10:db:fb: 53:00:cd:fa:ca:b3:af:35:a8:3e:4b:e2:f1:b7:ba:31:9d:f2: 45:87:39:1e:7e:a8:b8:99:48:48:3e:74:d9:d7:bd:1f:e0:d3: 2c:bd:3a:dd:57:bb:b6:a0:39:d1:ae:7f:e3:11:4f:fc:16:ab: 29:09:ef:5b:43:5f:2c:46:2b:24:9a:8f:d7:db:b0:c0:8f:2b: 63:23:20:69:d0:29:90:8a:2f:d2:ad:37:1d:70:c0:b8:20:f8: 53:3d:33:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OUMxMTAvBgNVBAUTKDhDQjJCQkQ2NEI2QTc3NEUxNkMxMEZEQ0E2NTBBN0FE QzVCMzhENzgwHhcNMjUwNTEyMTYxMDIyWhcNMjUwNTE5MTYxMDIyWjAYMRYwFAYD VQQDEw02ODIyMWQ2ZS0yMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZ13vc241WjqDoS8lsYBQ6MYFHIbhEyer3HIZVfZHIuVIhlF2lr9NXR0gc2X elA3vRGWNJjNyloK/9R+IQp/P0Ra1zrdZgIdbIV0Ivk7aAKq9SwqDtsYQ8A11xe9 E8c38x4+woD3sqVbJ94Hdi2d8ulZxWsI9i2JeLL9Dy59/nugvHS6pyPxv5Bjztet DH9mlZuHhFhINI2P5Jhyh9EvjM5Dawkxg7+GeEqO+5E8HJo+SUQDXykcgpD4MD5B DRbvQWt9ct7dEtYP7UjZ3vOGnSxqyVSOj4FL8t2IkdZKWUVyWgs/HSWQ8jK9k/fy m5UrFhQH5N4ewj3lATvNENZyywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDE3mpP a/Anjd/E3ooL+7iYLgQFMB8GA1UdIwQYMBaAFIyyu9ZLandOFsEP3KZQp63Fs414 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5Qy84RDc4RTU3RUYx QTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQwNFd3UV9jcGxDbnJjV3pq WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMSzcxa3RxZDA0V3dRX2NwbENucmNXempYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5Qy84RDc4RTU3RUYxQTIxMUU2OTQyMUI1NDVDNEY5QUUwMi9qTEs3MWt0cWQw NFd3UV9jcGxDbnJjV3pqWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvRx4FzIc5e2v2zfHe/sYl1cQhliRBRZFW//wDAX7GgXqrZBgVeN6f oQzGniKbp3USJe2zUqWyDnbegeVCgJwbhT/9i3XtR0Gw/YxcBGMitBjsHYn5PgXa 5w1F5wdDRWduBEK+hm/h3Luc/4uDPvjCHUS9mt42zgTqXIC6JMxYPj1jv46wdyfG M9vxaLdBEMGj1jGngvys1G/QwSXyFnQQ2/tTAM36yrOvNag+S+Lxt7oxnfJFhzke fqi4mUhIPnTZ170f4NMsvTrdV7u2oDnRrn/jEU/8FqspCe9bQ18sRiskmo/X27DA jytjIyBp0CmQii/SrTcdcMC4IPhTPTOT -----END CERTIFICATE-----Generated at Wed May 14 16:38:31 2025 by rpki-client