$ rpki-client -vvf rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft File: JLddtbfhQhLSg1_VqoX5droQ9rE.mft (raw, json) Hash identifier: IdB58XNj3LhwaTOkEPeDFt3vcgm8cfTNyms18++Qn8M= Subject key identifier: 63:0A:DF:52:A8:23:FD:57:D3:5C:34:05:AE:0A:A6:D4:08:55:7B:20 Authority key identifier: 24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 Certificate issuer: /CN=A9166488/serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft Manifest number: 048C Signing time: Thu 15 May 2025 00:03:44 +0000 Manifest this update: Thu 15 May 2025 00:03:44 +0000 Manifest next update: Thu 22 May 2025 00:03:44 +0000 Files and hashes: 1: JLddtbfhQhLSg1_VqoX5droQ9rE.crl (hash: AYOEoNaYqHv588VF6/6n7DtLm9ajd61C/HIb6LzSN3E=) 2: 26A3B4903A1411EC925DC27BC4F9AE02.roa (hash: 2ZjvwcPMcqXEaANE73WvlyO0V3DxHIbOSZ3Q/4eDvaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166488, serialNumber=24B75DB5B7E14212D2835FD5AA85F976BA10F6B1 Validity Not Before: May 15 00:03:44 2025 GMT Not After : May 22 00:03:44 2025 GMT Subject: CN=68252f60-1c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:44:d7:4c:10:db:d6:90:e9:a3:bd:ec:ee: 9a:d0:ff:e5:ef:af:d7:26:f1:2e:bf:65:cb:5d:d4: 3b:0d:e7:91:ac:ce:d7:ec:03:d0:b9:bc:7b:db:72: 96:39:4d:20:7f:82:fe:26:1b:58:49:94:38:20:63: ff:ec:c9:70:d8:ad:90:87:28:24:6b:40:d9:ad:b3: 29:e1:0b:cd:c7:74:21:68:a7:72:17:ee:da:f9:db: 44:6c:3e:ac:14:65:17:77:65:7d:c8:99:1a:78:ce: 9f:9e:a3:0b:89:28:9d:ab:2e:82:d4:96:58:47:19: 3e:15:02:0d:93:8e:58:2f:1f:e9:28:11:63:90:58: e4:81:ab:c3:4f:09:4a:10:f6:dc:94:f1:ac:de:a3: 59:7c:b6:3e:19:cd:80:0c:db:45:cc:83:9a:60:19: 3f:a9:4e:b6:f7:bc:4d:35:df:d0:83:a5:13:8b:14: f8:0b:b7:ae:8a:d5:43:7c:db:ea:5b:10:5e:ce:7b: 8f:2e:6e:12:32:a7:9b:42:f3:ee:ee:30:7d:c8:3d: 28:85:7a:f4:30:6c:ca:92:0e:92:3a:54:4f:6c:11: 95:33:77:e0:72:aa:9f:ad:2c:d0:b1:1a:09:eb:0b: 0c:2e:d8:bb:1c:a6:1d:a8:dd:6c:e9:51:a4:4f:cc: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0A:DF:52:A8:23:FD:57:D3:5C:34:05:AE:0A:A6:D4:08:55:7B:20 X509v3 Authority Key Identifier: keyid:24:B7:5D:B5:B7:E1:42:12:D2:83:5F:D5:AA:85:F9:76:BA:10:F6:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLddtbfhQhLSg1_VqoX5droQ9rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166488/BF09112E3A1111ECB9CB7256C4F9AE02/JLddtbfhQhLSg1_VqoX5droQ9rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:9f:19:df:bc:4f:c6:3e:32:fa:ed:b8:10:a0:d6:34:f3: d1:17:72:d7:a3:7d:64:ee:7d:1c:f6:d7:03:0b:94:92:5e:26: 9d:35:d7:35:4f:4e:b2:7a:c2:73:0e:ba:8e:7f:59:5b:a5:aa: c5:20:67:48:ab:a3:bf:e2:d2:68:54:66:ed:f0:12:1b:4d:0e: 9e:ed:39:e1:1e:62:76:60:91:65:8a:2e:e3:ba:28:f2:93:8b: 74:e0:55:c1:61:30:e0:4f:8d:65:16:37:f6:55:8e:0c:2e:f5: da:87:89:2a:42:ba:d4:eb:54:af:a0:83:e5:07:e6:da:e0:86: 8c:fd:b6:4e:8f:cf:3a:7a:ac:4f:77:18:81:bc:33:5e:fc:7d: a8:c2:05:93:08:a2:d2:a3:00:ac:e0:45:71:95:10:1c:30:70: e8:2a:bf:9f:97:bf:f0:7c:2e:db:8c:a5:47:38:71:76:21:88: 5d:1b:1d:a4:26:dc:ec:2d:9a:a5:69:75:b3:a0:43:92:fb:d5: 5e:78:1a:a3:43:ff:a5:ad:f9:5a:cc:f0:af:36:e3:6f:4a:dc: 27:df:8f:d5:d4:56:23:eb:1f:1f:56:d0:54:01:85:05:46:dd: 05:39:6c:9c:7c:80:d0:f2:99:ba:88:46:bd:ea:b2:a5:9d:d4: 96:4d:0e:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY0ODgxMTAvBgNVBAUTKDI0Qjc1REI1QjdFMTQyMTJEMjgzNUZENUFBODVGOTc2 QkExMEY2QjEwHhcNMjUwNTE1MDAwMzQ0WhcNMjUwNTIyMDAwMzQ0WjAYMRYwFAYD VQQDEw02ODI1MmY2MC0xYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3ZE10wQ29aQ6aO97O6a0P/l76/XJvEuv2XLXdQ7DeeRrM7X7APQubx723KW OU0gf4L+JhtYSZQ4IGP/7Mlw2K2Qhygka0DZrbMp4QvNx3QhaKdyF+7a+dtEbD6s FGUXd2V9yJkaeM6fnqMLiSidqy6C1JZYRxk+FQINk45YLx/pKBFjkFjkgavDTwlK EPbclPGs3qNZfLY+Gc2ADNtFzIOaYBk/qU6297xNNd/Qg6UTixT4C7euitVDfNvq WxBeznuPLm4SMqebQvPu7jB9yD0ohXr0MGzKkg6SOlRPbBGVM3fgcqqfrSzQsRoJ 6wsMLti7HKYdqN1s6VGkT8y1UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMK31Ko I/1X01w0Ba4KptQIVXsgMB8GA1UdIwQYMBaAFCS3XbW34UIS0oNf1aqF+Xa6EPax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjQ4OC9CRjA5MTEyRTNB MTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFoTFNnMV9WcW9YNWRyb1E5 ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMZGR0YmZoUWhMU2cxX1Zxb1g1ZHJvUTlyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjQ4OC9CRjA5MTEyRTNBMTExMUVDQjlDQjcyNTZDNEY5QUUwMi9KTGRkdGJmaFFo TFNnMV9WcW9YNWRyb1E5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJvJ8Z37xPxj4y+u24EKDWNPPRF3LXo31k7n0c9tcDC5SSXiadNdc1 T06yesJzDrqOf1lbparFIGdIq6O/4tJoVGbt8BIbTQ6e7TnhHmJ2YJFlii7juijy k4t04FXBYTDgT41lFjf2VY4MLvXah4kqQrrU61SvoIPlB+ba4IaM/bZOj886eqxP dxiBvDNe/H2owgWTCKLSowCs4EVxlRAcMHDoKr+fl7/wfC7bjKVHOHF2IYhdGx2k JtzsLZqlaXWzoEOS+9VeeBqjQ/+lrflazPCvNuNvStwn34/V1FYj6x8fVtBUAYUF Rt0FOWycfIDQ8pm6iEa96rKlndSWTQ7H -----END CERTIFICATE-----Generated at Fri May 16 11:49:39 2025 by rpki-client