$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft File: jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json) Hash identifier: ValxGRvJy/laQUTfMWT4cNabjBpAnyVaNkyjZGurcUI= Subject key identifier: AB:78:D5:75:E3:83:0A:44:C6:9F:E1:9F:1F:B3:74:C7:63:BD:F2:06 Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft Manifest number: D2 Signing time: Mon 05 May 2025 04:31:17 +0000 Manifest this update: Mon 05 May 2025 04:31:17 +0000 Manifest next update: Mon 12 May 2025 04:31:17 +0000 Files and hashes: 1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: oBnpDfkIdHO/0inekxwxD1/rN4N/SayPHEDtz8T/0k4=) 2: 5A32E8DAE79111EE972FC923C4F9AE02.roa (hash: mY/bcg2+Nm0bHgEr5ZTRXdk5A4XIUo9DciT4aIgm6Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB Validity Not Before: May 5 04:31:17 2025 GMT Not After : May 12 04:31:17 2025 GMT Subject: CN=68183f15-c838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:11:87:19:06:3d:b6:db:35:5a:46:8e:5c: 46:b4:6b:f2:38:1b:35:be:6e:a2:80:95:5c:bc:d8: 66:7a:4d:14:ee:d1:bc:bd:59:26:ea:9f:2b:d2:03: e3:5b:59:16:b8:8d:b7:47:50:95:b6:f0:4e:26:16: 31:d0:00:51:bf:6c:4b:67:9b:3b:18:40:fb:d3:5e: 5e:39:62:7e:63:61:6f:5b:f1:c7:9a:a8:ed:b1:68: f8:e3:3b:c4:2f:f2:c5:25:51:0c:ab:10:e5:51:13: 7d:38:d7:70:c5:b5:ed:71:52:7d:cf:c7:74:f7:d5: 15:71:e3:75:2b:93:57:e3:09:83:ad:a9:b6:b5:3f: f4:ed:8c:8a:a1:24:eb:a4:79:34:3a:7a:cf:b6:f0: 3a:1d:0c:6f:0b:fb:60:0c:72:21:9d:c3:08:8c:a1: 66:8d:b8:91:d5:de:c4:f0:58:c0:54:27:0f:b5:c7: 84:cc:30:98:ea:fa:02:e7:84:f2:8f:e4:e9:d0:25: 18:b6:b6:6e:fc:5e:bb:ab:74:5b:08:8f:3c:7c:bb: ed:9d:20:43:39:51:e5:34:26:cc:c3:05:04:10:4a: a7:d0:ec:ec:57:05:fe:37:58:75:b9:9f:20:f0:6b: f2:72:be:4a:af:2a:66:1f:0a:a3:38:7e:f6:c8:00: 72:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:78:D5:75:E3:83:0A:44:C6:9F:E1:9F:1F:B3:74:C7:63:BD:F2:06 X509v3 Authority Key Identifier: keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:db:81:73:dd:71:d1:fa:5e:cb:cb:78:94:79:90:65:bb:42: 9d:f9:5f:a7:5b:c6:44:4c:e3:a9:e2:9d:12:4e:95:4e:ca:1d: 76:2a:2f:29:f9:0b:fa:20:4d:ca:1d:c4:e6:c8:b4:09:a8:65: 7b:ac:1d:8f:17:c2:38:47:c1:59:a3:06:ce:06:ae:c5:17:18: 88:a6:e4:cd:e0:64:6a:fc:b7:a0:e3:b0:a8:06:12:ab:c1:3c: 6a:da:34:78:1a:8b:c2:cd:6f:30:6b:2f:c2:17:cd:49:21:89: 8e:a3:7c:f2:dc:6c:fe:4b:c5:bd:e0:37:c1:c8:c5:94:e6:58: 5c:44:f7:f7:7d:97:29:c4:8a:f6:83:3c:42:7f:80:28:23:d8: 23:cf:ef:8a:6a:4b:f8:6a:d2:48:6f:03:db:7c:3d:e4:d2:79: 83:0b:c9:f6:fe:ac:61:27:8d:29:75:ea:b5:b8:22:a5:6f:72: cf:e6:c1:1c:9b:a8:57:c3:b9:1e:24:b0:5b:3a:ce:d9:c8:47: 0e:2b:68:1b:74:e1:77:bc:5a:dc:5e:15:61:71:69:5d:fe:e7: e1:13:8d:72:4d:a6:f9:c5:af:e7:f4:67:f5:ea:68:d8:2c:60: eb:c4:3f:38:70:1d:b6:e0:92:24:fe:8f:dd:cd:8d:56:cf:a5: 26:a1:76:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz NzVFODEzREIwHhcNMjUwNTA1MDQzMTE3WhcNMjUwNTEyMDQzMTE3WjAYMRYwFAYD VQQDEw02ODE4M2YxNS1jODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQsRhxkGPbbbNVpGjlxGtGvyOBs1vm6igJVcvNhmek0U7tG8vVkm6p8r0gPj W1kWuI23R1CVtvBOJhYx0ABRv2xLZ5s7GED7015eOWJ+Y2FvW/HHmqjtsWj44zvE L/LFJVEMqxDlURN9ONdwxbXtcVJ9z8d099UVceN1K5NX4wmDram2tT/07YyKoSTr pHk0OnrPtvA6HQxvC/tgDHIhncMIjKFmjbiR1d7E8FjAVCcPtceEzDCY6voC54Ty j+Tp0CUYtrZu/F67q3RbCI88fLvtnSBDOVHlNCbMwwUEEEqn0OzsVwX+N1h1uZ8g 8Gvycr5KrypmHwqjOH72yAByvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt41XXj gwpExp/hnx+zdMdjvfIGMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3 OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5 dHhMX0IzM2dTUWczWG9FOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX24Fz3XHR+l7Ly3iUeZBlu0Kd+V+nW8ZETOOp4p0STpVOyh12Ki8p +Qv6IE3KHcTmyLQJqGV7rB2PF8I4R8FZowbOBq7FFxiIpuTN4GRq/Leg47CoBhKr wTxq2jR4GovCzW8way/CF81JIYmOo3zy3Gz+S8W94DfByMWU5lhcRPf3fZcpxIr2 gzxCf4AoI9gjz++Kakv4atJIbwPbfD3k0nmDC8n2/qxhJ40pdeq1uCKlb3LP5sEc m6hXw7keJLBbOs7ZyEcOK2gbdOF3vFrcXhVhcWld/ufhE41yTab5xa/n9Gf16mjY LGDrxD84cB224JIk/o/dzY1Wz6UmoXZi -----END CERTIFICATE-----Generated at Mon May 5 13:04:15 2025 by rpki-client