$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: Mn7tR/7EhZ+xQFFxmVJxJND18yuwuSFxYieekwltub4= Subject key identifier: AE:2C:2C:8B:1D:CF:33:54:6A:61:F6:B7:FB:A0:21:A8:70:ED:3D:03 Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 2421 Signing time: Fri 04 Apr 2025 16:23:54 +0000 Manifest this update: Fri 04 Apr 2025 16:23:54 +0000 Manifest next update: Fri 11 Apr 2025 16:23:54 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: rTAbJMclaya4+Za9/8AtXp0RmB9H3fv/b54K27QQnOU=) 2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: YZRf5ygqs6yZScbkx1VpIvx3DqExks4rVOBFuDw10NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02 Validity Not Before: Apr 4 16:23:54 2025 GMT Not After : Apr 11 16:23:54 2025 GMT Subject: CN=67f0079a-5088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0b:c8:36:50:85:ba:55:1b:1e:0c:af:6e:71: 39:88:6d:85:68:cc:71:ce:51:a4:8b:16:21:ad:ab: d3:a6:a5:23:61:33:8d:a0:48:cc:81:2b:36:d3:5e: 1b:a4:23:08:e4:09:fb:88:a2:78:34:01:18:a4:dd: 87:de:f4:85:6a:61:81:99:f9:86:c3:7b:68:dd:91: 70:29:a9:13:32:3b:db:22:59:d8:ec:31:b9:61:c1: 3e:32:d4:e9:51:11:a5:6b:d2:7c:a4:68:6f:9c:21: da:f1:18:93:64:8f:0f:1e:ac:c8:41:d7:9b:b8:e1: 7f:95:b0:f6:e4:eb:48:b8:04:f0:8b:32:d0:e9:24: 44:96:3a:86:29:fd:3f:92:56:c3:b6:04:ba:68:32: 55:49:04:fa:21:c5:c2:de:78:ea:b5:3e:f3:8d:a0: 9b:9b:6c:01:6d:42:4e:40:76:1f:66:96:6f:02:85: 4b:ac:88:a5:ce:e0:b4:98:82:f3:52:d0:17:cc:66: 6f:0e:63:64:11:44:aa:5a:9d:6b:eb:4b:27:88:b1: b3:58:4b:2f:3e:cf:67:7d:bd:9b:88:5e:94:ec:e6: a9:a0:f8:b0:44:45:b5:38:0c:8b:5a:9b:8f:d3:b7: 68:1d:9a:41:a3:cb:d4:b7:68:d8:6b:80:cf:44:2b: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2C:2C:8B:1D:CF:33:54:6A:61:F6:B7:FB:A0:21:A8:70:ED:3D:03 X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b4:6f:f6:8d:19:52:ba:58:ef:c7:97:82:4f:15:31:68:d8: 74:9b:62:99:6d:61:0c:be:cd:22:7b:26:c2:74:61:22:86:56: 4a:b9:cd:fb:4b:77:d5:0e:df:c6:11:c9:d1:a2:a5:8c:ae:42: 27:c0:0a:32:2a:7a:2e:70:cb:8f:b9:b3:a5:f4:c4:1f:7d:12: ec:ef:4b:a4:d9:93:fd:dc:37:1f:ca:4f:6e:54:3b:83:68:b9: 6d:bb:48:a5:6a:52:27:a2:6b:bc:e5:e4:ec:7c:3f:90:44:9c: fc:88:ff:18:b6:79:57:43:a8:d9:70:2a:c9:ae:2d:f5:b1:2b: 0f:6c:2c:a4:df:16:00:8d:1c:b7:72:0a:01:08:84:3a:82:de: 7a:97:8e:9c:26:6c:05:72:2b:0e:60:96:9e:df:ee:53:86:5d: 45:98:78:e3:8c:1c:00:f6:17:95:d7:15:6e:71:36:8c:d1:88: 20:92:1c:c7:c8:43:9a:4d:7a:e0:c4:ce:84:26:b4:d7:d9:fe: b8:27:f7:0c:34:2c:a3:a9:fd:fb:63:0d:07:f9:c5:47:6b:f3: a1:07:a1:25:0d:99:0b:de:a4:49:97:e7:85:0e:e7:b4:e5:29: 82:15:5c:28:6d:3e:31:96:61:1d:03:53:39:9b:4e:57:96:52: 2b:32:ae:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy RDYyN0JCODAeFw0yNTA0MDQxNjIzNTRaFw0yNTA0MTExNjIzNTRaMBgxFjAUBgNV BAMTDTY3ZjAwNzlhLTUwODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiC8g2UIW6VRseDK9ucTmIbYVozHHOUaSLFiGtq9OmpSNhM42gSMyBKzbTXhuk IwjkCfuIong0ARik3Yfe9IVqYYGZ+YbDe2jdkXApqRMyO9siWdjsMblhwT4y1OlR EaVr0nykaG+cIdrxGJNkjw8erMhB15u44X+VsPbk60i4BPCLMtDpJESWOoYp/T+S VsO2BLpoMlVJBPohxcLeeOq1PvONoJubbAFtQk5Adh9mlm8ChUusiKXO4LSYgvNS 0BfMZm8OY2QRRKpanWvrSyeIsbNYSy8+z2d9vZuIXpTs5qmg+LBERbU4DItam4/T t2gdmkGjy9S3aNhrgM9EK6TJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUriwsix3P M1RqYfa3+6AhqHDtPQMwHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3 UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGe0b/aNGVK6WO/Hl4JPFTFo2HSbYpltYQy+zSJ7JsJ0YSKGVkq5zftL d9UO38YRydGipYyuQifACjIqei5wy4+5s6X0xB99EuzvS6TZk/3cNx/KT25UO4No uW27SKVqUieia7zl5Ox8P5BEnPyI/xi2eVdDqNlwKsmuLfWxKw9sLKTfFgCNHLdy CgEIhDqC3nqXjpwmbAVyKw5glp7f7lOGXUWYeOOMHAD2F5XXFW5xNozRiCCSHMfI Q5pNeuDEzoQmtNfZ/rgn9ww0LKOp/ftjDQf5xUdr86EHoSUNmQvepEmX54UO57Tl KYIVXChtPjGWYR0DUzmbTleWUisyrnI= -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:29 2025 by rpki-client