$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: JZ3jE65PxnBdAzQy24Jr+IKGI93/jKdrLs5h9Z9qAIE= Subject key identifier: DE:1D:FC:56:73:74:3B:8F:7A:68:3A:5D:4E:2B:68:31:26:89:B2:6F Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: FA Signing time: Sun 11 May 2025 04:02:10 +0000 Manifest this update: Sun 11 May 2025 04:02:10 +0000 Manifest next update: Sun 18 May 2025 04:02:10 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: N8GBcD6Vlvg2vdD5W41RWez8A0H2WaeVj4q7smRvM54=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: May 11 04:02:10 2025 GMT Not After : May 18 04:02:10 2025 GMT Subject: CN=68202142-87c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:0f:57:bb:ca:dd:b1:2d:b1:e2:8e:1f:8b: a4:71:7a:6e:ab:4c:84:47:4f:f6:d4:df:d3:38:aa: 9a:69:89:eb:12:58:45:35:05:1f:96:fd:de:48:26: 36:da:3f:d5:ad:e2:54:bb:f2:de:25:e5:9d:3c:0b: 5a:c2:a8:8e:22:87:92:12:64:ed:f3:23:55:bf:eb: 7e:6a:8f:f7:a6:9d:f6:95:57:f8:8b:a7:98:42:49: e6:ee:5d:29:0c:f4:91:21:f6:62:e4:fa:e1:30:de: 29:75:89:53:f8:c7:65:73:46:6f:c8:c0:eb:36:b8: d3:bf:73:52:2c:99:be:8f:88:02:e4:5e:ed:a3:6a: ee:44:c0:67:43:10:8c:c8:81:31:9e:51:b2:7d:8a: b2:f0:c3:83:8d:a7:05:ce:ce:cf:cc:ce:fd:51:e7: 33:50:7d:7b:64:6e:81:b2:11:28:6e:67:7a:23:ed: f4:64:6c:c1:c4:35:a3:88:85:17:80:19:3b:5f:59: 28:cc:08:e8:fe:e2:75:2c:c3:e4:91:22:15:0f:ab: 11:29:b6:b7:e2:51:ec:fb:00:04:f7:fd:78:39:75: 84:fb:58:ef:66:6c:77:61:e1:9e:26:f6:e8:2e:39: b9:ce:dc:38:ce:de:e0:42:e3:ab:cc:87:33:5a:c2: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1D:FC:56:73:74:3B:8F:7A:68:3A:5D:4E:2B:68:31:26:89:B2:6F X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e8:7c:46:3a:4b:0f:54:fd:6a:83:15:94:d8:b9:29:5c:9c: 01:05:c8:f2:f9:4d:e2:16:c1:1a:6e:89:04:39:87:5c:dc:3a: 18:0d:c7:f8:e8:e2:6d:d1:6e:94:58:ba:49:8c:55:84:74:46: fb:86:be:d5:15:cb:1e:54:02:31:e4:af:a0:04:c2:9d:6d:3c: f7:e8:27:ce:18:18:4f:20:d5:10:65:70:df:6c:59:01:64:73: 28:f0:e7:46:1e:8c:bc:60:06:9c:13:55:f8:0f:ef:84:c6:06: 89:69:1d:99:b5:5e:dd:74:fa:90:7d:32:3e:7a:c8:49:90:0e: 7d:21:28:73:ed:bb:e5:9a:15:b3:cc:c8:a7:cd:0c:c7:c7:9f: c3:69:8c:dc:b3:00:bf:dd:c3:c6:f2:88:05:d3:cd:e6:13:a3: 31:09:52:cc:48:d0:9a:b3:a7:88:b2:56:46:ca:ba:75:b1:5e: 89:9f:8a:10:98:f2:3e:da:3a:53:16:fa:bb:14:2e:0a:a6:70: dc:bc:1f:4d:af:23:03:cc:d1:36:c0:c3:f2:b0:36:99:a0:ff: b5:8a:3e:8b:7e:30:4e:6b:25:c1:26:90:8a:5a:a3:bc:d8:51: 81:59:42:ac:6f:63:cd:41:fc:6a:1a:25:be:7a:91:1c:b7:20: 37:54:f4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUwNTExMDQwMjEwWhcNMjUwNTE4MDQwMjEwWjAYMRYwFAYD VQQDEw02ODIwMjE0Mi04N2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVIPV7vK3bEtseKOH4ukcXpuq0yER0/21N/TOKqaaYnrElhFNQUflv3eSCY2 2j/VreJUu/LeJeWdPAtawqiOIoeSEmTt8yNVv+t+ao/3pp32lVf4i6eYQknm7l0p DPSRIfZi5PrhMN4pdYlT+Mdlc0ZvyMDrNrjTv3NSLJm+j4gC5F7to2ruRMBnQxCM yIExnlGyfYqy8MODjacFzs7PzM79UeczUH17ZG6BshEobmd6I+30ZGzBxDWjiIUX gBk7X1kozAjo/uJ1LMPkkSIVD6sRKba34lHs+wAE9/14OXWE+1jvZmx3YeGeJvbo Ljm5ztw4zt7gQuOrzIczWsJBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4d/FZz dDuPemg6XU4raDEmibJvMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD6HxGOksPVP1qgxWU2LkpXJwBBcjy+U3iFsEabokEOYdc3DoYDcf4 6OJt0W6UWLpJjFWEdEb7hr7VFcseVAIx5K+gBMKdbTz36CfOGBhPINUQZXDfbFkB ZHMo8OdGHoy8YAacE1X4D++ExgaJaR2ZtV7ddPqQfTI+eshJkA59IShz7bvlmhWz zMinzQzHx5/DaYzcswC/3cPG8ogF083mE6MxCVLMSNCas6eIslZGyrp1sV6Jn4oQ mPI+2jpTFvq7FC4KpnDcvB9NryMDzNE2wMPysDaZoP+1ij6LfjBOayXBJpCKWqO8 2FGBWUKsb2PNQfxqGiW+epEctyA3VPQo -----END CERTIFICATE-----Generated at Sun May 11 19:05:23 2025 by rpki-client