$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: MS40bb18NFDSVZTEX4DGW9GtKgblNoJGWL5u6F+nr9Y= Subject key identifier: 52:A0:A6:00:89:76:74:B6:53:86:1D:3D:C4:D9:A6:A3:6A:A0:05:3C Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 0135 Signing time: Thu 15 May 2025 03:58:34 +0000 Manifest this update: Thu 15 May 2025 03:58:33 +0000 Manifest next update: Thu 22 May 2025 03:58:33 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: BjkXDxkc83SNiEVJ2utlAFNSbG2loRGyTVv9/KuayxE=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: May 15 03:58:33 2025 GMT Not After : May 22 03:58:33 2025 GMT Subject: CN=6825666a-0ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:50:e0:6c:ef:fe:c9:06:e5:e8:d4:67:46: 03:06:d0:01:d8:13:47:13:e2:ca:1d:41:ee:19:b8: f1:05:dd:9d:dd:2c:96:6d:2b:d2:e1:21:5f:a3:f2: 80:96:47:47:62:3c:ad:4c:71:48:a9:c2:e0:8a:15: 05:4e:1f:a6:94:6a:5f:1f:2a:8b:d5:0f:cd:33:c5: 63:de:2b:69:e2:01:f7:84:21:f2:be:21:5b:54:b9: c5:d6:8c:24:91:d2:49:7b:d3:92:20:8f:7b:80:bb: 2b:54:7e:af:b5:b4:b4:eb:27:b3:29:3c:73:c2:70: fe:74:b5:38:ff:f2:f5:be:24:b5:37:97:ec:8e:64: 15:ad:4f:9d:84:58:06:a0:52:94:83:ca:69:60:63: 76:b0:c6:0e:34:7b:42:22:fd:5c:05:86:7d:be:fe: 33:bc:65:22:f2:ea:7b:d0:da:c4:10:7b:9b:d5:16: d0:21:15:61:83:ee:c9:11:4e:67:8f:00:4d:5b:4d: b3:63:79:a5:a8:43:f0:e0:43:da:79:28:94:55:3e: c2:f3:d3:b4:7e:9c:ea:ec:25:48:15:e1:6d:00:27: 55:f9:a5:c8:e0:15:a4:71:64:28:7d:e4:2b:55:4f: da:b2:d2:d8:ea:14:e8:9a:c1:76:0d:23:a7:67:ec: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A0:A6:00:89:76:74:B6:53:86:1D:3D:C4:D9:A6:A3:6A:A0:05:3C X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:59:cf:e9:5f:09:21:b3:6c:29:eb:6b:c5:ce:dd:9e:47:15: 97:08:68:07:62:4f:f6:f3:4f:d3:88:e9:b8:85:df:e6:e8:86: 84:50:1e:76:92:10:00:66:e1:77:a8:35:f7:28:1e:ce:75:bf: d5:ac:74:f6:6c:ff:85:18:c6:f5:b0:a7:ea:01:40:d3:0e:b4: ab:76:c7:07:40:07:57:de:9f:fb:6f:fe:4f:9b:e5:2c:e9:76: 59:28:19:c6:0f:0a:69:6b:b7:25:37:c5:06:32:58:31:01:6d: 4a:d1:25:e1:99:c1:d7:04:1a:28:71:82:6d:48:1a:ab:ef:94: 15:0c:8d:9e:e8:ba:bd:c9:64:7f:ec:2b:ba:60:52:ef:40:6d: 48:28:f4:df:66:11:4e:d5:eb:15:34:77:e4:4e:21:33:80:cb: 68:8a:1e:2d:79:cf:63:ee:21:80:79:a8:5f:7e:58:dc:f6:7a: c1:7e:bb:cf:c4:b3:12:b4:b0:84:ca:e7:f1:3f:3c:26:28:f8: e8:86:d7:32:5e:cf:a2:5c:b6:b7:db:3a:d8:e3:4b:79:15:b5: b6:65:55:f5:3c:42:ee:45:7b:05:15:e1:74:bc:9d:ef:43:81: 3a:9c:4f:ff:8c:ab:4e:85:97:84:13:36:0c:8c:f1:29:fe:52: 69:3d:49:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwNTE1MDM1ODMzWhcNMjUwNTIyMDM1ODMzWjAYMRYwFAYD VQQDEw02ODI1NjY2YS0wZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa1Q4Gzv/skG5ejUZ0YDBtAB2BNHE+LKHUHuGbjxBd2d3SyWbSvS4SFfo/KA lkdHYjytTHFIqcLgihUFTh+mlGpfHyqL1Q/NM8Vj3itp4gH3hCHyviFbVLnF1owk kdJJe9OSII97gLsrVH6vtbS06yezKTxzwnD+dLU4//L1viS1N5fsjmQVrU+dhFgG oFKUg8ppYGN2sMYONHtCIv1cBYZ9vv4zvGUi8up70NrEEHub1RbQIRVhg+7JEU5n jwBNW02zY3mlqEPw4EPaeSiUVT7C89O0fpzq7CVIFeFtACdV+aXI4BWkcWQofeQr VU/astLY6hTomsF2DSOnZ+wqRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKgpgCJ dnS2U4YdPcTZpqNqoAU8MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLWc/pXwkhs2wp62vFzt2eRxWXCGgHYk/280/TiOm4hd/m6IaEUB52 khAAZuF3qDX3KB7Odb/VrHT2bP+FGMb1sKfqAUDTDrSrdscHQAdX3p/7b/5Pm+Us 6XZZKBnGDwppa7clN8UGMlgxAW1K0SXhmcHXBBoocYJtSBqr75QVDI2e6Lq9yWR/ 7Cu6YFLvQG1IKPTfZhFO1esVNHfkTiEzgMtoih4tec9j7iGAeahffljc9nrBfrvP xLMStLCEyufxPzwmKPjohtcyXs+iXLa32zrY40t5FbW2ZVX1PELuRXsFFeF0vJ3v Q4E6nE//jKtOhZeEEzYMjPEp/lJpPUl8 -----END CERTIFICATE-----Generated at Thu May 15 16:47:36 2025 by rpki-client