$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft File: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft (raw, json) Hash identifier: ZCWkJbjqhPV1aXDVQGBQM0L1WwiNVT00dNJi5Ty4Rkw= Subject key identifier: E0:C0:AD:A3:67:9D:86:94:F8:E3:C3:13:83:15:CC:6D:9F:6C:47:3D Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft Manifest number: 018E Signing time: Sat 29 Mar 2025 03:05:57 +0000 Manifest this update: Sat 29 Mar 2025 03:05:56 +0000 Manifest next update: Sat 05 Apr 2025 03:05:56 +0000 Files and hashes: 1: J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl (hash: w/mzDkM1nZOzqRkbv4BR5DQt2WRMhVUV+ywuZSkCTo0=) 2: 643F1F08B72F11ED85F55F23C4F9AE02.roa (hash: Jr5/4E0BqvD6E+dU0waXVfsK7t56ulJ7qARG32utiNc=) 3: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (hash: 5w8g5x+ok2twOTv8Pno7z7uYOa1KLIU/k+gb4VmjlK8=) 4: 6023AFB22F5F11EEBE311577C4F9AE02.roa (hash: DST7aY8U7pn+fcW6ISk7J3CqqppEvOX29fKYTnqiYaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED Validity Not Before: Mar 29 03:05:56 2025 GMT Not After : Apr 5 03:05:56 2025 GMT Subject: CN=67e76395-890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:25:cb:11:9b:96:7e:78:fe:2e:1e:05:60: 13:56:02:33:bd:fa:3d:5d:20:77:e9:07:a1:aa:10: 8e:d1:8c:6f:df:8d:98:3a:67:5e:9d:ba:41:1b:dd: 11:c0:44:8d:23:cc:58:a1:ff:ae:95:a2:20:5a:29: 82:fe:d5:7b:71:ee:84:87:1a:b4:fa:bc:65:29:20: b7:c0:52:76:07:c8:d2:87:ae:42:09:fc:74:15:8b: b9:0b:5e:69:19:fd:61:14:29:7c:e6:39:66:33:91: ec:78:c4:5b:b5:42:7c:aa:72:db:87:09:f6:11:1f: 54:3a:db:ac:f8:5c:a6:02:71:ec:4a:ef:44:25:76: 5a:fc:6d:53:78:76:84:a7:19:16:3e:9c:25:d1:d3: 8c:d6:3c:7c:e3:9f:1f:e0:b0:75:f0:27:fb:80:1c: db:2a:fa:09:40:d3:7a:e3:6f:e0:cb:8f:0d:c0:8c: 04:27:d4:c7:5f:6e:5a:f7:ed:73:9d:0c:af:12:bd: a4:9c:ff:8a:b9:43:ed:1a:e8:1d:3a:7d:68:54:ea: 8e:a2:f3:47:6d:3c:8f:37:b9:e2:8a:36:a2:70:8f: 7c:f5:78:2f:71:4d:72:d1:e4:66:25:eb:84:a1:5e: bc:34:f5:a5:61:eb:3e:db:30:a5:64:e3:24:ae:8f: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C0:AD:A3:67:9D:86:94:F8:E3:C3:13:83:15:CC:6D:9F:6C:47:3D X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8f:39:53:a3:2e:0e:14:01:44:98:51:95:48:3b:63:94:33: 52:7d:13:86:9e:5c:73:da:bf:91:48:6a:46:7a:69:e4:14:d0: c5:89:da:ae:54:fb:b3:eb:36:08:f3:a7:c8:3c:7f:8d:96:46: a6:07:ab:16:78:4c:13:0b:66:6e:9e:92:9d:0b:41:a5:99:fe: 0e:19:ec:93:7d:3f:33:97:c1:ad:66:9f:e7:b8:7c:13:b0:aa: f2:cb:bd:90:f9:8f:14:77:15:7b:31:9e:76:b1:e7:0a:34:cb: a7:f5:9f:c0:82:a7:42:1c:8f:11:dd:cf:d0:a5:b4:fd:d7:04: aa:41:ac:47:34:04:fe:d5:35:b5:80:e9:2e:f3:aa:c5:99:db: 1f:e8:33:53:cc:6e:58:52:58:db:01:78:36:af:05:1d:9d:9f: f7:86:cd:8d:a4:96:48:27:35:b8:1a:94:09:66:59:a8:8e:24: ac:6a:e9:ac:72:e3:80:63:cd:f7:dd:8b:ed:a5:90:9e:5d:ae: 82:6c:65:69:32:ab:2a:a5:f4:50:8c:09:10:6b:42:3e:ef:b8: ac:22:17:73:33:e2:dd:4c:c1:3f:ff:d8:05:08:96:c3:a8:27: ee:79:91:3d:21:27:6e:c2:48:75:4c:b2:eb:18:ab:08:bb:a8: 67:5f:d4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUwMzI5MDMwNTU2WhcNMjUwNDA1MDMwNTU2WjAYMRYwFAYD VQQDEw02N2U3NjM5NS04OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0AlyxGbln54/i4eBWATVgIzvfo9XSB36QehqhCO0Yxv342YOmdenbpBG90R wESNI8xYof+ulaIgWimC/tV7ce6Ehxq0+rxlKSC3wFJ2B8jSh65CCfx0FYu5C15p Gf1hFCl85jlmM5HseMRbtUJ8qnLbhwn2ER9UOtus+FymAnHsSu9EJXZa/G1TeHaE pxkWPpwl0dOM1jx8458f4LB18Cf7gBzbKvoJQNN642/gy48NwIwEJ9THX25a9+1z nQyvEr2knP+KuUPtGugdOn1oVOqOovNHbTyPN7niijaicI989XgvcU1y0eRmJeuE oV68NPWlYes+2zClZOMkro8ZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODAraNn nYaU+OPDE4MVzG2fbEc9MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJFRC9GQjJBQThFQ0I3MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVo czg0OFRyNXJiQlg3ek5MUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjzlToy4OFAFEmFGVSDtjlDNSfROGnlxz2r+RSGpGemnkFNDFidqu VPuz6zYI86fIPH+NlkamB6sWeEwTC2ZunpKdC0Glmf4OGeyTfT8zl8GtZp/nuHwT sKryy72Q+Y8UdxV7MZ52secKNMun9Z/AgqdCHI8R3c/QpbT91wSqQaxHNAT+1TW1 gOku86rFmdsf6DNTzG5YUljbAXg2rwUdnZ/3hs2NpJZIJzW4GpQJZlmojiSsaums cuOAY8333YvtpZCeXa6CbGVpMqsqpfRQjAkQa0I+77isIhdzM+LdTME//9gFCJbD qCfueZE9ISduwkh1TLLrGKsIu6hnX9SL -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:37 2025 by rpki-client