$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: kNPz4uPzVKdQ047KWbdABDpC5Kg+U2nLmvdEDBku7dM= Subject key identifier: A6:18:8F:E7:4D:96:0E:94:23:BF:E2:A7:34:E1:18:18:34:4A:82:32 Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: 55 Signing time: Tue 13 May 2025 06:25:14 +0000 Manifest this update: Tue 13 May 2025 06:25:14 +0000 Manifest next update: Tue 20 May 2025 06:25:14 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: oViQlSuXvBVxcvI13QefvInKzeffhH2ebguwYzkox1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: May 13 06:25:14 2025 GMT Not After : May 20 06:25:14 2025 GMT Subject: CN=6822e5ca-30d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:e7:f0:a9:37:05:c7:56:7d:0e:15:66:b1: 14:2f:81:03:61:db:e5:a4:a3:32:f0:b2:29:03:06: 40:a9:8a:be:ba:2a:7f:90:80:93:86:e2:9b:ff:06: 3d:bb:3c:5b:7d:29:fd:7b:87:83:98:71:dd:66:a7: ef:43:7f:48:88:ce:99:98:de:72:25:2b:e8:b8:e3: a1:d2:d6:02:0c:3a:ab:4f:93:9d:4a:a0:b7:bc:c4: 90:17:48:ca:31:05:f2:c8:5e:e1:ee:bd:16:b7:3e: f9:8e:0e:35:32:05:63:e9:72:9a:fb:1b:c0:71:9f: 72:2f:4c:e4:51:df:d4:c1:1b:60:33:53:a2:88:3e: 36:8c:db:61:3b:6b:df:be:bc:d9:c2:e3:af:d6:80: ff:09:f9:e8:a5:64:13:bc:0b:45:9a:f3:6a:64:e3: 86:da:04:d1:bc:07:9f:31:bb:72:32:df:91:7f:c2: c4:d8:52:10:4d:70:17:09:da:4d:ba:bf:a2:c1:3f: 22:ce:3d:68:e3:5d:be:d7:10:ce:6e:67:0c:c9:50: d3:5c:74:de:2d:6a:88:e8:22:ad:8d:4a:cd:ed:3c: 2e:18:c7:df:62:16:f5:b8:97:10:f6:53:c6:ad:8c: 2b:da:9f:4b:c2:74:98:24:9d:63:ad:95:b0:6d:8c: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:18:8F:E7:4D:96:0E:94:23:BF:E2:A7:34:E1:18:18:34:4A:82:32 X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:b5:78:5d:71:68:a6:1f:90:d2:b6:82:aa:c0:d9:eb:2e:7b: f6:ad:7c:67:4a:0d:1a:98:5f:c5:ca:57:a1:e9:d2:ca:13:5d: e0:50:38:fc:1a:07:c4:5b:0d:6d:46:e7:f5:5d:a8:0d:e0:f8: 1e:eb:49:24:9a:7f:b2:7d:b3:49:d2:df:e6:b5:db:3b:bf:b5: d8:aa:e0:89:a2:aa:cf:11:6f:31:2f:77:14:63:7d:92:61:19: 1b:5e:42:3c:45:27:94:90:6c:46:80:dd:4e:53:89:ce:e3:ff: 76:96:1d:d7:5b:7c:75:1f:15:83:40:fb:15:a8:dc:ec:80:8a: 7c:cb:cd:e1:b3:70:08:eb:2c:a0:56:2f:09:1b:3b:d2:15:a1: b7:94:cd:06:b0:b2:8f:3e:1a:0f:60:0e:d0:a2:35:cf:14:06: e8:2f:e5:be:2c:95:c8:5a:31:dc:e7:78:ff:27:08:95:42:6d: 78:b9:0e:b2:8d:b5:1f:fa:5e:f3:fb:24:c5:91:21:cf:30:83: 72:f6:89:79:f3:a6:88:1b:4e:ca:f0:d3:ff:0a:31:c0:e7:65: 16:73:3e:ae:37:42:29:69:a0:d6:fa:42:aa:8e:db:20:6e:a3: 7b:8e:a7:a6:61:7e:27:76:bd:63:70:8a:28:0f:0e:eb:2e:72: e7:d9:e2:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoOEUxQ0MxREJGQUJENDBCNjQxNEMyM0UzREZEODkxNDU1 MjdERjMyMTAeFw0yNTA1MTMwNjI1MTRaFw0yNTA1MjAwNjI1MTRaMBgxFjAUBgNV BAMTDTY4MjJlNWNhLTMwZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE1+fwqTcFx1Z9DhVmsRQvgQNh2+WkozLwsikDBkCpir66Kn+QgJOG4pv/Bj27 PFt9Kf17h4OYcd1mp+9Df0iIzpmY3nIlK+i446HS1gIMOqtPk51KoLe8xJAXSMox BfLIXuHuvRa3PvmODjUyBWPpcpr7G8Bxn3IvTORR39TBG2AzU6KIPjaM22E7a9++ vNnC46/WgP8J+eilZBO8C0Wa82pk44baBNG8B58xu3Iy35F/wsTYUhBNcBcJ2k26 v6LBPyLOPWjjXb7XEM5uZwzJUNNcdN4taojoIq2NSs3tPC4Yx99iFvW4lxD2U8at jCvan0vCdJgknWOtlbBtjA0DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUphiP502W DpQjv+KnNOEYGDRKgjIwHwYDVR0jBBgwFoAUjhzB2/q9QLZBTCPj39iRRVJ98yEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0JEODYzRDcyQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamh6QjJfcTlRTFpCVENQajM5aVJSVko5OHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0JEODYzRDcyQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL2poekIyX3E5UUxa QlRDUGozOWlSUlZKOTh5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM21eF1xaKYfkNK2gqrA2esue/atfGdKDRqYX8XKV6Hp0soTXeBQOPwa B8RbDW1G5/VdqA3g+B7rSSSaf7J9s0nS3+a12zu/tdiq4Imiqs8RbzEvdxRjfZJh GRteQjxFJ5SQbEaA3U5Tic7j/3aWHddbfHUfFYNA+xWo3OyAinzLzeGzcAjrLKBW LwkbO9IVobeUzQawso8+Gg9gDtCiNc8UBugv5b4slchaMdzneP8nCJVCbXi5DrKN tR/6XvP7JMWRIc8wg3L2iXnzpogbTsrw0/8KMcDnZRZzPq43QilpoNb6QqqO2yBu o3uOp6Zhfid2vWNwiigPDusucufZ4l0= -----END CERTIFICATE-----Generated at Tue May 13 19:53:26 2025 by rpki-client