$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json) Hash identifier: xx2XxN3Rb9pkyP2Q0Ufij/vZCUnwsYTbvz3pMh6HIVw= Subject key identifier: D6:EB:39:1D:68:EC:CF:64:C8:99:B7:D1:FC:7C:E8:92:F3:38:17:41 Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft Manifest number: 0135 Signing time: Thu 15 May 2025 03:51:31 +0000 Manifest this update: Thu 15 May 2025 03:51:30 +0000 Manifest next update: Thu 22 May 2025 03:51:30 +0000 Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: Ao3nEADRcoet+RdXprPzsL4axhZlafXfTWyMZIU7pjA=) 2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: gKjXag0sfARiLyE6YNWzcV2bYu/wNp5XI3N1jUN8tAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175911, serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Validity Not Before: May 15 03:51:30 2025 GMT Not After : May 22 03:51:30 2025 GMT Subject: CN=682564c2-1605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:33:61:ff:08:29:5b:e6:dc:06:d4:db:ba: 98:ed:11:f5:22:14:a5:37:2d:44:f5:12:6d:7a:b2: e3:f6:af:a7:f7:60:79:f6:34:cf:ff:73:c7:bd:6c: 05:eb:85:27:b1:f8:b2:18:87:4e:0b:9f:c6:58:d5: 7c:37:43:5c:f5:db:9d:28:61:23:05:e7:70:d8:e3: fd:b5:4e:44:ec:72:02:7c:b9:02:3c:a8:b3:e6:61: 2f:94:42:e1:68:12:a5:e9:3d:37:b3:5a:b5:9b:34: 16:60:a0:af:b2:61:5d:96:f3:66:ac:00:dc:4e:bb: 6d:92:89:91:38:ad:34:97:72:61:4f:6c:0e:91:9a: 31:d1:ad:5b:d9:28:56:84:55:e1:d2:36:dc:15:78: 13:16:b7:73:aa:97:fc:2b:ec:4c:a8:1a:a8:4c:9e: 75:ce:40:a2:6e:7e:ad:37:53:79:90:94:f7:10:e3: 15:b3:f6:6a:1a:c1:29:62:bb:bc:47:fc:8d:18:bd: ec:88:16:4b:59:4e:3d:09:a7:9a:32:b9:b1:3b:db: 1b:f9:22:39:f9:b0:c5:28:3b:0f:bc:73:b7:c9:d4: 47:83:de:66:6d:5c:b9:17:6f:b4:15:56:5b:15:4c: f2:ab:40:0e:89:d2:fe:d5:3a:49:59:7b:a7:1c:5f: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EB:39:1D:68:EC:CF:64:C8:99:B7:D1:FC:7C:E8:92:F3:38:17:41 X509v3 Authority Key Identifier: keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fb:03:bc:62:38:21:c2:ff:8a:55:55:55:ca:80:63:27:07: e3:ca:ce:0a:eb:ad:78:9d:d1:02:18:0d:89:9d:b8:fb:bc:53: 5d:c1:d8:bf:eb:86:ed:41:af:9b:23:94:42:25:18:39:d8:46: 2d:a9:31:ae:da:3c:da:7c:be:0e:a8:df:24:54:30:46:32:84: 8f:e4:0a:36:fd:2a:d3:23:e4:b2:c0:ba:2d:33:59:df:c2:39: a2:c1:53:35:35:b3:41:b0:1e:28:e4:d6:5c:37:5d:cb:e3:71: 57:a9:57:f3:7d:fb:71:82:e0:38:cf:10:0f:3f:b6:bf:cf:00: ee:08:42:ac:b5:6b:86:9f:a0:67:b0:17:87:04:bb:26:23:2c: de:a6:1f:c7:09:fa:01:2a:05:dd:75:2c:e9:5a:b2:49:3d:2d: ed:62:22:37:30:d4:b1:62:ea:91:97:d2:a6:1f:19:8e:61:96: be:89:7a:f7:1b:71:bb:0e:bb:e4:e1:a5:a0:18:82:7b:11:a6: 15:a5:31:41:97:47:db:9f:9a:1f:58:ad:a5:2b:03:63:5d:9a: 1a:27:bf:26:e2:e2:bc:27:d4:33:68:49:75:09:87:c0:45:62: d2:63:3e:39:19:dd:31:7c:a1:d0:80:4e:64:de:a3:dc:fc:29: f7:cf:bd:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MTExMTAvBgNVBAUTKDI1OTY5RTczQTk4RDk5RjQyRUFDODk0MjZDNkI5NDkz Qzg1RDMzMUEwHhcNMjUwNTE1MDM1MTMwWhcNMjUwNTIyMDM1MTMwWjAYMRYwFAYD VQQDEw02ODI1NjRjMi0xNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu0zYf8IKVvm3AbU27qY7RH1IhSlNy1E9RJterLj9q+n92B59jTP/3PHvWwF 64UnsfiyGIdOC5/GWNV8N0Nc9dudKGEjBedw2OP9tU5E7HICfLkCPKiz5mEvlELh aBKl6T03s1q1mzQWYKCvsmFdlvNmrADcTrttkomROK00l3JhT2wOkZox0a1b2ShW hFXh0jbcFXgTFrdzqpf8K+xMqBqoTJ51zkCibn6tN1N5kJT3EOMVs/ZqGsEpYru8 R/yNGL3siBZLWU49CaeaMrmxO9sb+SI5+bDFKDsPvHO3ydRHg95mbVy5F2+0FVZb FUzyq0AOidL+1TpJWXunHF+BMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbrOR1o 7M9kyJm30fx86JLzOBdBMB8GA1UdIwQYMBaAFCWWnnOpjZn0LqyJQmxrlJPIXTMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkxMS9CQzA5NTNBNjU5 NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1mUXVySWxDYkd1VWs4aGRN eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYWVjNm1ObWZRdXJJbENiR3VVazhoZE14by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkxMS9CQzA5NTNBNjU5NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1m UXVySWxDYkd1VWs4aGRNeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL+wO8Yjghwv+KVVVVyoBjJwfjys4K6614ndECGA2Jnbj7vFNdwdi/ 64btQa+bI5RCJRg52EYtqTGu2jzafL4OqN8kVDBGMoSP5Ao2/SrTI+SywLotM1nf wjmiwVM1NbNBsB4o5NZcN13L43FXqVfzfftxguA4zxAPP7a/zwDuCEKstWuGn6Bn sBeHBLsmIyzeph/HCfoBKgXddSzpWrJJPS3tYiI3MNSxYuqRl9KmHxmOYZa+iXr3 G3G7Drvk4aWgGIJ7EaYVpTFBl0fbn5ofWK2lKwNjXZoaJ78m4uK8J9QzaEl1CYfA RWLSYz45Gd0xfKHQgE5k3qPc/Cn3z70C -----END CERTIFICATE-----Generated at Fri May 16 13:52:44 2025 by rpki-client