$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json) Hash identifier: FRVOIACmNgvdrsGgcs43/RlKcWq5bX7CIQ/+Gf9O6zI= Subject key identifier: FC:10:DB:BD:9A:C6:B7:12:50:13:A2:63:E8:F3:9F:A3:8D:EC:19:6D Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft Manifest number: 20 Signing time: Sun 11 May 2025 06:38:44 +0000 Manifest this update: Sun 11 May 2025 06:38:43 +0000 Manifest next update: Sun 18 May 2025 06:38:43 +0000 Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: IgTRpUUnxwBWA32W1rLMIczyfPWnWvqKhq5gMBRaD/E=) 2: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (hash: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=) 3: 4C559E64054B11F08646F910C4F9AE02.roa (hash: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: May 11 06:38:43 2025 GMT Not After : May 18 06:38:43 2025 GMT Subject: CN=682045f4-0641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:b9:aa:d2:5e:6a:c4:ad:ba:d6:4c:68:1e: 70:f5:e0:0b:3b:5b:2e:24:eb:8e:e7:1f:8d:f1:ca: 02:0c:b5:6f:c3:3f:98:dc:f5:59:f3:71:4b:31:9c: 07:27:20:2d:10:81:b3:56:8d:a1:7c:d5:47:36:0e: 99:48:70:0a:16:6b:3b:f8:31:2a:f3:12:d6:07:f9: 70:1c:d0:af:3f:14:7c:f0:d0:12:b5:6c:0c:6d:3b: 87:7e:ae:cb:d2:02:0f:ac:10:56:9c:23:eb:89:52: 61:b7:0b:02:40:d3:68:27:13:31:bd:86:29:7f:74: f0:ce:00:63:e0:35:35:d3:21:39:40:7b:c4:e5:d0: e2:98:d0:50:6a:54:c6:98:bc:93:83:08:3a:c8:ab: 1f:09:59:69:3c:36:22:f3:8f:fd:ea:fd:82:61:1b: b9:67:61:d0:8b:bb:12:b9:fd:96:5a:7a:6b:93:95: 9f:8d:dd:e8:f1:b6:d7:01:12:27:9c:23:45:e2:ca: 5d:e2:c6:8a:85:67:16:1e:d5:6a:86:d5:31:20:38: 87:ba:af:af:49:27:a5:b5:ac:58:9a:4f:88:0d:1e: d9:20:ca:94:e6:95:c0:e4:11:00:9a:1a:34:fb:0a: e6:c8:f6:82:06:c1:26:37:e3:1e:0e:e7:85:d7:f3: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:10:DB:BD:9A:C6:B7:12:50:13:A2:63:E8:F3:9F:A3:8D:EC:19:6D X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:29:b4:13:7b:36:68:c2:5e:cf:65:fc:8a:55:a7:3c:78:62: 5f:10:4a:f2:30:07:2c:98:7c:f5:e5:34:3d:ba:d8:7b:e5:c1: c4:1d:d8:f1:4d:de:fa:e0:20:d9:35:0e:28:7f:70:bd:3e:7a: ea:9f:2a:c2:95:35:53:ad:21:b3:bc:dd:cb:2f:52:3b:f6:8e: 65:73:f0:cf:29:fd:15:32:22:e7:28:e0:fc:a5:3f:14:1d:e3: 57:ef:00:bc:0f:d7:f1:b5:e6:3f:d4:a5:a4:6a:97:8a:c6:07: 66:6e:38:fe:f9:44:36:a9:c0:02:36:fc:2a:69:5f:3c:74:6c: 0d:cc:65:f1:3d:d4:1a:fb:cd:ba:fc:30:58:ef:40:52:16:93: 17:7a:6d:a3:dd:99:c2:00:38:83:68:37:fc:3b:9c:9e:70:72: ee:73:1d:e6:d6:79:72:ef:53:56:be:2b:19:9d:5d:0a:97:7b: 6f:55:74:ee:95:69:c7:ea:84:6b:c8:a0:93:83:1d:be:47:40: c2:96:1c:03:63:2e:b9:27:5a:34:16:bd:92:45:01:d7:24:66: bb:1e:fa:98:87:42:04:5d:24:3d:db:df:e3:bf:32:e6:46:b9: e0:fa:7e:a9:a0:72:84:57:c8:bb:f5:b8:22:34:a0:8f:45:76: 71:19:5e:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTA1MTEwNjM4NDNaFw0yNTA1MTgwNjM4NDNaMBgxFjAUBgNV BAMTDTY4MjA0NWY0LTA2NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVRLmq0l5qxK261kxoHnD14As7Wy4k647nH43xygIMtW/DP5jc9VnzcUsxnAcn IC0QgbNWjaF81Uc2DplIcAoWazv4MSrzEtYH+XAc0K8/FHzw0BK1bAxtO4d+rsvS Ag+sEFacI+uJUmG3CwJA02gnEzG9hil/dPDOAGPgNTXTITlAe8Tl0OKY0FBqVMaY vJODCDrIqx8JWWk8NiLzj/3q/YJhG7lnYdCLuxK5/ZZaemuTlZ+N3ejxttcBEiec I0Xiyl3ixoqFZxYe1WqG1TEgOIe6r69JJ6W1rFiaT4gNHtkgypTmlcDkEQCaGjT7 CubI9oIGwSY34x4O54XX84HDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/BDbvZrG txJQE6Jj6POfo43sGW0wHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTI3L0MxMDZEMzNDMDREQzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dS dkU0cjJ6Ymlqc0k4RHZyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADUptBN7NmjCXs9l/IpVpzx4Yl8QSvIwByyYfPXlND262HvlwcQd2PFN 3vrgINk1Dih/cL0+euqfKsKVNVOtIbO83csvUjv2jmVz8M8p/RUyIuco4PylPxQd 41fvALwP1/G15j/UpaRql4rGB2ZuOP75RDapwAI2/CppXzx0bA3MZfE91Br7zbr8 MFjvQFIWkxd6baPdmcIAOINoN/w7nJ5wcu5zHebWeXLvU1a+KxmdXQqXe29VdO6V acfqhGvIoJODHb5HQMKWHANjLrknWjQWvZJFAdckZrse+piHQgRdJD3b3+O/MuZG ueD6fqmgcoRXyLv1uCI0oI9FdnEZXic= -----END CERTIFICATE-----Generated at Sun May 11 09:21:01 2025 by rpki-client