$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: e2wiaJsZzS1JS6jBT6OYDfc7JCTssXl5ep3u3QDKR4o= Subject key identifier: 27:22:F5:F8:14:23:65:3E:2F:A6:D3:70:E9:34:71:72:A2:0C:C3:0D Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 072E Signing time: Fri 16 May 2025 22:03:39 +0000 Manifest this update: Fri 16 May 2025 22:03:38 +0000 Manifest next update: Fri 23 May 2025 22:03:38 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: cro274zIlEzzMnJTAmk3pX7ZY3vC7l6/MrzayZ/skBA=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: pS+rknsKIRFZxced71y+WLIWbrwwq2gZOSPnZeQrMOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: May 16 22:03:38 2025 GMT Not After : May 23 22:03:38 2025 GMT Subject: CN=6827b63b-7ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:90:ce:86:8c:95:c2:1e:eb:ec:8b:9d:70: f8:92:e3:f6:4e:71:34:56:f7:a2:01:ba:0a:c8:18: 80:66:3e:f4:0e:a5:ad:36:bf:73:e8:6a:61:56:55: 2c:9e:a5:4a:58:b3:01:81:4a:0d:a7:a6:fc:3c:a4: 48:5d:6e:3f:22:7b:a8:c1:2b:f8:41:6f:2f:ba:d7: 05:77:55:fe:29:d1:1b:e3:87:79:d5:3d:fa:e2:79: 2f:d8:38:06:dc:39:82:83:62:bb:d6:80:c5:c2:90: 26:ca:49:ec:a6:74:cf:05:40:c0:c4:6b:37:0f:8d: a6:f2:e4:94:4e:a8:01:c2:d3:cd:08:4b:e0:72:0d: 74:77:c4:e4:d1:86:b3:a9:61:45:b8:a1:b0:9a:af: 6b:28:69:4c:80:ed:0f:d8:64:0a:fb:dc:0a:a8:04: f8:3b:47:28:8e:5a:9a:7e:53:da:c5:e3:01:65:36: e7:4e:3f:1f:c5:57:68:0f:46:ce:a5:75:1f:6e:d7: a2:97:69:68:83:37:c4:11:49:1c:18:d3:4a:b9:b8: ae:f3:a5:bd:e4:47:be:98:34:3b:de:b1:fe:52:90: 39:29:f6:28:2d:ae:2d:a5:61:b0:ca:52:6e:22:5f: 50:25:4f:fd:fc:76:3c:f8:d6:8a:80:82:ed:a2:51: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:22:F5:F8:14:23:65:3E:2F:A6:D3:70:E9:34:71:72:A2:0C:C3:0D X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:09:e2:c6:64:fa:1a:09:ca:c3:a6:17:b1:93:90:7c:a3:f1: 12:0b:be:79:fa:b0:33:8e:68:d8:3b:d2:fb:02:04:80:5d:00: f2:f4:52:ee:86:54:e3:bb:dc:8e:2b:98:24:22:05:7d:c3:8f: 06:d5:36:9f:f8:58:a0:93:2f:c2:52:ab:3a:47:d1:83:e4:04: 68:42:4a:8f:68:87:8a:1b:3b:98:2f:f7:db:57:a4:0e:a9:ed: 49:1b:bf:39:49:3c:fe:9a:db:35:51:61:cc:e4:58:05:8c:80: e4:09:b5:36:77:43:06:6a:d2:70:0e:b6:e6:d7:44:25:f0:fc: 34:9a:a4:eb:7d:ae:ac:a3:dc:6c:f4:32:5f:e7:b0:42:17:bc: be:43:df:a6:f1:fa:d3:0a:f2:4d:28:03:5f:22:14:b4:ee:6f: 11:32:30:76:bc:b9:3c:7a:c7:6e:ed:4c:d5:85:7d:e2:76:f0: 70:72:a3:38:c4:ef:31:53:89:14:2b:94:74:83:e8:f5:e1:51: 5f:0d:70:2e:d8:8e:fb:fa:df:61:02:e4:b7:22:23:81:07:94: 17:48:24:ef:bc:f0:9f:dc:d0:3a:e0:46:00:d1:12:42:25:5a: f4:ae:02:90:1b:d5:97:5a:26:f4:91:f9:68:70:92:30:58:79: 9b:e1:3d:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjUwNTE2MjIwMzM4WhcNMjUwNTIzMjIwMzM4WjAYMRYwFAYD VQQDEw02ODI3YjYzYi03ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVaQzoaMlcIe6+yLnXD4kuP2TnE0VveiAboKyBiAZj70DqWtNr9z6GphVlUs nqVKWLMBgUoNp6b8PKRIXW4/InuowSv4QW8vutcFd1X+KdEb44d51T364nkv2DgG 3DmCg2K71oDFwpAmyknspnTPBUDAxGs3D42m8uSUTqgBwtPNCEvgcg10d8Tk0Yaz qWFFuKGwmq9rKGlMgO0P2GQK+9wKqAT4O0cojlqaflPaxeMBZTbnTj8fxVdoD0bO pXUfbteil2logzfEEUkcGNNKubiu86W95Ee+mDQ73rH+UpA5KfYoLa4tpWGwylJu Il9QJU/9/HY8+NaKgILtolHznQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCci9fgU I2U+L6bTcOk0cXKiDMMNMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxCeLGZPoaCcrDphexk5B8o/ESC755+rAzjmjYO9L7AgSAXQDy9FLu hlTju9yOK5gkIgV9w48G1Taf+Figky/CUqs6R9GD5ARoQkqPaIeKGzuYL/fbV6QO qe1JG785STz+mts1UWHM5FgFjIDkCbU2d0MGatJwDrbm10Ql8Pw0mqTrfa6so9xs 9DJf57BCF7y+Q9+m8frTCvJNKANfIhS07m8RMjB2vLk8esdu7UzVhX3idvBwcqM4 xO8xU4kUK5R0g+j14VFfDXAu2I77+t9hAuS3IiOBB5QXSCTvvPCf3NA64EYA0RJC JVr0rgKQG9WXWib0kflocJIwWHmb4T21 -----END CERTIFICATE-----Generated at Sat May 17 02:09:59 2025 by rpki-client