$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: p6nPxpiXYmLWh64xNTb3GZO0Y8DOInyjZI3PhKXbzGo= Subject key identifier: 7A:2B:37:E8:B5:55:54:32:A6:B8:85:7D:78:20:5A:AE:2C:C4:C1:CC Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0AF9 Signing time: Mon 12 May 2025 19:11:09 +0000 Manifest this update: Mon 12 May 2025 19:11:08 +0000 Manifest next update: Mon 19 May 2025 19:11:08 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: SUeu1+sudXvo4/Tg7jR5d3luerhdtX2qSRkMu61n1+s=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: cME7E3dTvb+EGAR48GSsEEHAaLVHg6TnnZaiv9ezcQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2815 (0xaff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: May 12 19:11:08 2025 GMT Not After : May 19 19:11:08 2025 GMT Subject: CN=682247cd-5cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:c2:b0:aa:cf:1e:a1:d2:10:d0:da:33:60: 89:dd:8c:bf:b9:a1:ce:7b:eb:d8:25:80:cf:0f:8d: ff:65:57:56:86:85:6d:e9:3b:aa:05:45:3c:f7:a8: 3f:8d:d8:d7:6f:bd:08:48:67:a6:f9:46:8d:2d:b5: c9:53:8d:20:90:5b:f5:da:a1:b7:8b:0a:5c:33:c3: 3c:9a:44:57:c3:df:fb:7d:32:7d:24:b5:3f:4b:14: 71:3c:d6:6b:85:da:b9:a8:84:34:cb:7e:30:79:a7: fa:bc:a1:c9:f5:50:07:7b:fd:4b:a8:2c:40:50:bf: cf:f1:31:f5:df:49:c7:e9:3a:da:48:dd:a9:20:1a: f3:68:31:f0:5a:22:c4:41:a4:dc:3a:42:fc:78:64: 14:03:6d:83:b2:a3:97:80:46:06:5e:dc:13:5b:04: e3:89:66:1c:c0:45:f8:22:c8:01:48:c8:c7:91:f4: 95:75:01:c4:ac:a5:2c:b6:97:22:3a:ac:df:dd:c3: d8:8d:4b:d2:52:cf:3f:a6:50:ac:dc:c0:51:91:5e: 3f:56:72:7f:6e:d9:aa:4a:f6:61:5d:18:5f:2e:41: a9:7d:c5:26:45:4a:e5:81:92:51:19:08:fb:8a:49: 89:41:b9:1b:27:eb:4f:fa:5a:02:31:fd:5b:30:ba: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2B:37:E8:B5:55:54:32:A6:B8:85:7D:78:20:5A:AE:2C:C4:C1:CC X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d8:cc:9f:5a:0d:ca:68:96:c0:74:6a:85:78:fd:d0:71:bf: e4:70:a6:54:e4:cb:46:79:d4:5d:c3:36:54:68:72:bc:6f:45: df:90:53:b8:65:e1:f5:07:00:e1:d4:80:13:6b:7a:bf:c2:9a: 65:90:40:45:87:c2:d0:7f:00:d4:3e:8c:55:03:fe:19:35:50: 41:03:ca:06:ad:11:a0:15:50:97:34:fa:d9:83:2b:99:15:bd: c0:32:c5:c9:cb:a1:27:67:4b:03:a6:18:81:2e:75:5c:cc:cd: 8c:e9:66:5a:2c:ac:2f:4f:93:4c:2e:eb:f2:07:cd:eb:26:2d: 04:e1:c3:7c:8e:ee:78:e9:43:95:c4:ed:cf:98:78:10:c5:83: 2d:dd:8a:1e:e5:e0:24:51:0e:b4:a5:58:74:fc:f5:f2:59:5f: 09:cc:6c:38:11:af:9c:64:2f:d7:47:84:f9:30:80:b4:0f:51: 4f:74:f6:3d:77:b2:2b:e1:16:2e:a7:51:b3:d4:61:3f:d9:b4: 87:f2:8f:a9:f1:e1:81:0d:53:d3:45:af:5e:57:22:b3:fa:a2: 84:84:93:16:15:bd:df:7c:ad:63:97:32:b4:a2:52:fb:06:52: fa:b5:49:4e:f7:e3:c1:23:64:fc:b4:46:72:6f:29:84:f6:34: 30:46:b0:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUwNTEyMTkxMTA4WhcNMjUwNTE5MTkxMTA4WjAYMRYwFAYD VQQDEw02ODIyNDdjZC01Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsnCsKrPHqHSENDaM2CJ3Yy/uaHOe+vYJYDPD43/ZVdWhoVt6TuqBUU896g/ jdjXb70ISGem+UaNLbXJU40gkFv12qG3iwpcM8M8mkRXw9/7fTJ9JLU/SxRxPNZr hdq5qIQ0y34weaf6vKHJ9VAHe/1LqCxAUL/P8TH130nH6TraSN2pIBrzaDHwWiLE QaTcOkL8eGQUA22DsqOXgEYGXtwTWwTjiWYcwEX4IsgBSMjHkfSVdQHErKUstpci Oqzf3cPYjUvSUs8/plCs3MBRkV4/VnJ/btmqSvZhXRhfLkGpfcUmRUrlgZJRGQj7 ikmJQbkbJ+tP+loCMf1bMLqKmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHorN+i1 VVQypriFfXggWq4sxMHMMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa2MyfWg3KaJbAdGqFeP3Qcb/kcKZU5MtGedRdwzZUaHK8b0XfkFO4 ZeH1BwDh1IATa3q/wpplkEBFh8LQfwDUPoxVA/4ZNVBBA8oGrRGgFVCXNPrZgyuZ Fb3AMsXJy6EnZ0sDphiBLnVczM2M6WZaLKwvT5NMLuvyB83rJi0E4cN8ju546UOV xO3PmHgQxYMt3Yoe5eAkUQ60pVh0/PXyWV8JzGw4Ea+cZC/XR4T5MIC0D1FPdPY9 d7Ir4RYup1Gz1GE/2bSH8o+p8eGBDVPTRa9eVyKz+qKEhJMWFb3ffK1jlzK0olL7 BlL6tUlO9+PBI2T8tEZybymE9jQwRrBu -----END CERTIFICATE-----Generated at Wed May 14 11:37:09 2025 by rpki-client