$ rpki-client -vvf rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft File: jo3VssEBuYOnmck4qg5AplH8vgc.mft (raw, json) Hash identifier: ZRd1IWnYDSWoAkz5zImfzpVpYIysXlLFDO7EFDeNeI8= Subject key identifier: 1E:76:58:78:8F:B0:A2:F9:76:FB:88:84:29:6A:2C:09:A0:72:BF:59 Authority key identifier: 8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 Certificate issuer: /CN=A9156334/serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft Manifest number: F1 Signing time: Thu 15 May 2025 04:41:25 +0000 Manifest this update: Thu 15 May 2025 04:41:24 +0000 Manifest next update: Thu 22 May 2025 04:41:24 +0000 Files and hashes: 1: jo3VssEBuYOnmck4qg5AplH8vgc.crl (hash: ll5xl/pgdgUflo+mkh2cSMSq4UWDK1UAJBUNtnAZ/Lg=) 2: F4E2989683AC11EF9F80F70FC4F9AE02.roa (hash: nZip0umQgQfNUVSJn6scZoNl7nqXBFARNgNZLe4qOTs=) 3: BFF632BAC8DA11EE9D90830EC4F9AE02.roa (hash: orqQypE5bc7gvUO4QzKhBPPdldDDB/JBoIJgb5EjBz0=) 4: B0C5F17CC8DA11EE9340650EC4F9AE02.roa (hash: 6lk7JsGwO4/wcTnuVTo0XHToPhtmgaBJiaipZQHj0o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156334, serialNumber=8E8DD5B2C101B983A799C938AA0E40A651FCBE07 Validity Not Before: May 15 04:41:24 2025 GMT Not After : May 22 04:41:24 2025 GMT Subject: CN=68257074-4648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0a:9b:bd:cc:38:b9:89:8d:9a:a2:65:b2:82: 9c:c1:9f:2a:ca:81:a9:ba:6b:bf:40:65:07:31:ac: 84:56:e2:5b:8f:b2:19:d1:e0:be:93:5a:7c:8b:33: 11:0d:33:a6:d5:bf:c1:49:68:b9:8f:9b:b3:17:a2: d6:92:c9:d8:06:1c:e2:d3:82:a0:1e:45:30:cc:2f: f3:86:77:9a:3b:cc:52:9c:b3:fc:c3:b6:a1:98:f4: e5:b2:58:be:45:e7:53:56:28:53:cd:1c:00:f9:5a: 89:62:52:16:d2:7e:d0:a9:4e:35:38:ac:a3:bd:2c: 47:5c:da:d7:04:2f:f5:be:8f:b2:52:e6:6a:8a:24: 70:16:d8:e0:7a:d4:d7:cd:f4:b7:c7:ab:9c:ca:10: f9:fe:4c:84:18:f4:54:b0:64:3a:10:9a:37:5f:3b: 7c:ea:f9:89:cd:95:b9:ea:e5:93:7a:21:3c:7a:31: 39:6c:25:f5:44:1c:76:31:36:09:dd:6d:e8:99:cf: d8:a0:d4:33:58:a6:56:fb:a6:2c:5f:b4:6b:1d:39: c6:9c:42:f0:d7:a5:35:1d:f9:12:63:89:5e:bb:96: 4b:b1:c4:5d:ae:2a:7b:e2:33:a1:ca:73:77:da:dd: 75:7e:09:4d:b8:2c:94:ab:95:58:0f:f6:6f:6a:e6: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:76:58:78:8F:B0:A2:F9:76:FB:88:84:29:6A:2C:09:A0:72:BF:59 X509v3 Authority Key Identifier: keyid:8E:8D:D5:B2:C1:01:B9:83:A7:99:C9:38:AA:0E:40:A6:51:FC:BE:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jo3VssEBuYOnmck4qg5AplH8vgc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156334/E7CDDFCEC8D811EE9F4AB96DC4F9AE02/jo3VssEBuYOnmck4qg5AplH8vgc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2f:48:4d:1b:00:f8:37:6c:c0:26:03:00:62:af:50:0a:29: c8:20:4c:be:24:61:11:f3:68:c3:45:03:8b:8f:af:ea:a9:ec: 05:25:d6:ef:ee:e5:b9:4c:8e:22:d4:6e:b4:0c:72:21:aa:de: 7a:dd:7d:29:b6:ae:50:91:be:64:33:f0:a5:e1:c8:84:7a:9d: dd:3c:1c:55:82:0d:38:24:47:bb:b0:9f:4a:a3:cf:9a:99:98: 8b:fa:85:d7:75:b0:36:b2:32:12:12:fa:7d:af:71:9c:a8:ec: 31:03:1b:ee:74:79:82:a1:e5:06:3f:9d:0a:38:03:db:69:79: 42:f8:2e:02:cf:4a:7c:f3:2e:9e:ee:23:c0:d4:0e:54:7f:7b: ef:78:68:fe:f3:3e:76:f5:20:dc:54:c0:6a:fd:b6:a5:a9:b3: 51:9b:98:a0:08:f1:e8:31:1b:33:43:8b:79:bf:f1:90:fa:c7: 16:0d:af:73:95:72:d0:ea:b6:41:b4:e6:78:48:26:5d:89:0d: 06:94:0d:5b:a1:0c:46:28:5d:0e:73:f6:b0:0b:2c:4e:a3:16: 14:a6:b0:2f:b7:04:13:55:6a:e5:d0:c2:3c:da:a2:da:b8:23: 7c:57:6f:29:25:9a:86:b3:79:c2:d4:5b:40:b9:2e:38:ee:fe: ff:68:61:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzMzQxMTAvBgNVBAUTKDhFOERENUIyQzEwMUI5ODNBNzk5QzkzOEFBMEU0MEE2 NTFGQ0JFMDcwHhcNMjUwNTE1MDQ0MTI0WhcNMjUwNTIyMDQ0MTI0WjAYMRYwFAYD VQQDEw02ODI1NzA3NC00NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgqbvcw4uYmNmqJlsoKcwZ8qyoGpumu/QGUHMayEVuJbj7IZ0eC+k1p8izMR DTOm1b/BSWi5j5uzF6LWksnYBhzi04KgHkUwzC/zhneaO8xSnLP8w7ahmPTlsli+ RedTVihTzRwA+VqJYlIW0n7QqU41OKyjvSxHXNrXBC/1vo+yUuZqiiRwFtjgetTX zfS3x6ucyhD5/kyEGPRUsGQ6EJo3Xzt86vmJzZW56uWTeiE8ejE5bCX1RBx2MTYJ 3W3omc/YoNQzWKZW+6YsX7RrHTnGnELw16U1HfkSY4leu5ZLscRdrip74jOhynN3 2t11fglNuCyUq5VYD/ZvaubSZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB52WHiP sKL5dvuIhClqLAmgcr9ZMB8GA1UdIwQYMBaAFI6N1bLBAbmDp5nJOKoOQKZR/L4H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjMzNC9FN0NEREZDRUM4 RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZT25tY2s0cWc1QXBsSDh2 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvM1Zzc0VCdVlPbm1jazRxZzVBcGxIOHZnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjMzNC9FN0NEREZDRUM4RDgxMUVFOUY0QUI5NkRDNEY5QUUwMi9qbzNWc3NFQnVZ T25tY2s0cWc1QXBsSDh2Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwL0hNGwD4N2zAJgMAYq9QCinIIEy+JGER82jDRQOLj6/qqewFJdbv 7uW5TI4i1G60DHIhqt563X0ptq5Qkb5kM/Cl4ciEep3dPBxVgg04JEe7sJ9Ko8+a mZiL+oXXdbA2sjISEvp9r3GcqOwxAxvudHmCoeUGP50KOAPbaXlC+C4Cz0p88y6e 7iPA1A5Uf3vveGj+8z529SDcVMBq/balqbNRm5igCPHoMRszQ4t5v/GQ+scWDa9z lXLQ6rZBtOZ4SCZdiQ0GlA1boQxGKF0Oc/awCyxOoxYUprAvtwQTVWrl0MI82qLa uCN8V28pJZqGs3nC1FtAuS447v7/aGFT -----END CERTIFICATE-----Generated at Fri May 16 17:46:27 2025 by rpki-client