$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: RbPn4cMkfVFgLDobsdRhdDO0vmUz7XsITZU2AneBneQ= Subject key identifier: 5A:D3:27:87:F4:97:D7:0F:07:B2:82:3F:7C:6B:4B:F8:FB:1C:8A:A3 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 0275 Signing time: Sun 11 May 2025 01:12:49 +0000 Manifest this update: Sun 11 May 2025 01:12:49 +0000 Manifest next update: Sun 18 May 2025 01:12:49 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: wYExEs//esU6/19m9SRqX9bQGivo4AuZ03Y9W68FRxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: May 11 01:12:49 2025 GMT Not After : May 18 01:12:49 2025 GMT Subject: CN=681ff991-f06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:67:b5:56:c5:d1:99:47:d4:2b:87:21:43: 5e:01:a6:2f:9c:be:72:e2:6e:5d:87:79:cb:aa:70: 7e:9b:31:04:1e:e5:7a:61:91:25:1e:9f:f4:ff:85: 73:fa:8a:ca:c3:77:4d:b4:ac:3f:78:3d:5f:67:9e: 06:35:29:53:3d:05:30:06:82:02:73:70:51:9f:de: a3:3f:0e:08:c0:ef:29:af:37:44:f5:dc:3c:61:c1: e7:0c:82:e2:10:6c:3d:11:d5:13:06:4d:7f:99:44: 84:5b:a4:d4:df:a9:9f:e6:af:0d:cb:0a:ac:6e:7f: 7a:b9:4c:c8:12:2b:7c:b7:f9:33:02:87:95:9f:87: 96:bd:cc:c2:1f:23:84:a5:b1:11:5d:e1:41:0c:2c: 94:2f:5b:0f:21:89:f9:2b:4f:37:40:97:82:f3:99: ba:a9:02:6f:9d:68:dc:1c:b9:8b:0b:5b:c1:fe:a0: 4b:82:fe:cf:64:44:4b:dc:9c:bb:23:7f:02:0d:ab: 6f:b4:e9:f9:da:33:97:0b:4d:fa:49:c0:c6:fe:4f: 40:55:fe:8c:1b:2a:41:7f:6e:80:5a:34:d8:d8:1f: 8e:60:1d:ea:5c:30:2e:4d:c3:5b:09:82:4f:35:86: 1b:83:09:fa:58:ae:36:47:81:77:e3:57:b6:e1:70: 66:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D3:27:87:F4:97:D7:0F:07:B2:82:3F:7C:6B:4B:F8:FB:1C:8A:A3 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2b:a6:85:80:e8:01:56:ef:d3:2a:0c:0f:65:32:19:35:56: b1:e3:c6:67:5e:13:87:a7:cd:8e:e1:c5:75:fd:f1:b3:80:48: 2d:96:1d:f0:a4:16:22:b4:ee:7b:e8:dd:6c:75:fa:39:1e:cf: 72:ac:d4:37:8e:e1:9f:65:a8:78:d0:6f:79:3a:ff:b5:e5:76: 37:14:95:47:8b:cc:84:f2:7f:f4:e3:6d:f2:c5:b1:3b:3f:f4: bc:82:2a:21:97:50:55:52:6e:74:b8:df:5e:46:37:ea:e7:a8: 39:de:b7:ba:7f:dd:95:8a:4b:b9:3a:b4:58:fa:5e:5f:84:e4: 06:43:b9:86:38:6d:63:f6:87:e7:2a:6f:34:6a:2f:32:98:7f: 3b:d3:47:71:0b:34:55:d3:d5:c5:e0:41:61:9f:9e:97:b5:16: 6d:db:e5:ad:b7:90:eb:ca:73:1c:dd:ca:8e:df:3d:e7:12:e4: 65:c2:2c:ae:53:0e:48:0f:30:b0:78:29:49:ff:46:38:d8:4b: 2c:e0:a8:64:f1:fd:b4:4a:bc:ea:c2:0d:8d:e7:40:01:bd:19: 8e:5b:dc:9d:bd:53:70:1d:03:7c:6e:3c:1f:c6:e0:17:3d:1e: fd:fc:7e:e4:b9:5b:9d:d1:ae:47:04:55:9b:b0:d5:a0:d2:09: 93:cc:f5:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwNTExMDExMjQ5WhcNMjUwNTE4MDExMjQ5WjAYMRYwFAYD VQQDEw02ODFmZjk5MS1mMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYNntVbF0ZlH1CuHIUNeAaYvnL5y4m5dh3nLqnB+mzEEHuV6YZElHp/0/4Vz +orKw3dNtKw/eD1fZ54GNSlTPQUwBoICc3BRn96jPw4IwO8przdE9dw8YcHnDILi EGw9EdUTBk1/mUSEW6TU36mf5q8Nywqsbn96uUzIEit8t/kzAoeVn4eWvczCHyOE pbERXeFBDCyUL1sPIYn5K083QJeC85m6qQJvnWjcHLmLC1vB/qBLgv7PZERL3Jy7 I38CDatvtOn52jOXC036ScDG/k9AVf6MGypBf26AWjTY2B+OYB3qXDAuTcNbCYJP NYYbgwn6WK42R4F341e24XBm5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrTJ4f0 l9cPB7KCP3xrS/j7HIqjMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdK6aFgOgBVu/TKgwPZTIZNVax48ZnXhOHp82O4cV1/fGzgEgtlh3w pBYitO576N1sdfo5Hs9yrNQ3juGfZah40G95Ov+15XY3FJVHi8yE8n/0423yxbE7 P/S8giohl1BVUm50uN9eRjfq56g53re6f92Viku5OrRY+l5fhOQGQ7mGOG1j9ofn Km80ai8ymH8700dxCzRV09XF4EFhn56XtRZt2+Wtt5DrynMc3cqO3z3nEuRlwiyu Uw5IDzCweClJ/0Y42Ess4Khk8f20Srzqwg2N50ABvRmOW9ydvVNwHQN8bjwfxuAX PR79/H7kuVud0a5HBFWbsNWg0gmTzPW1 -----END CERTIFICATE-----Generated at Sun May 11 12:40:49 2025 by rpki-client