$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft File: JzKpmoY71iA82RXNcle10dmH6yg.mft (raw, json) Hash identifier: 2ToJEytjZhijBFjSh3oXZnvIgV1YtevNkzLnGG1RM5U= Subject key identifier: 93:ED:2D:F9:52:90:92:32:26:3A:01:C0:EB:E9:D3:15:AD:9A:C8:E6 Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 29B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft Manifest number: 29AF Signing time: Fri 04 Apr 2025 15:39:13 +0000 Manifest this update: Fri 04 Apr 2025 15:39:13 +0000 Manifest next update: Fri 11 Apr 2025 15:39:13 +0000 Files and hashes: 1: JzKpmoY71iA82RXNcle10dmH6yg.crl (hash: X5frK4AsKSSiLSuj0OeJgHqVm9zJ0QKAC4gLpSgeLSM=) 2: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (hash: v8ikpVeIaeLPw7BPTH8hEvqeozL1b7cNZXyGxnhNLLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10680 (0x29b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39 Validity Not Before: Apr 4 15:39:13 2025 GMT Not After : Apr 11 15:39:13 2025 GMT Subject: CN=67effd21-e0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:e5:55:18:9e:77:dd:3c:1f:8b:e4:be:4c: a8:39:d5:65:f7:5c:80:cc:f0:d5:34:1a:76:fe:fa: 9e:ba:f5:4b:13:86:97:db:55:2d:92:03:1e:fb:3f: d5:ab:11:e0:1a:0b:b1:6f:40:a8:d9:4a:8c:4c:b8: e3:85:0f:8b:21:8d:02:a4:21:00:70:de:5d:74:0f: f6:88:59:da:f7:48:64:b6:2e:68:33:e9:ab:0b:9a: 9c:ec:a5:1e:04:cc:6d:28:a8:b8:0d:c6:53:bd:e6: 65:5d:19:78:81:1d:5a:59:be:b2:c2:48:01:5e:41: 04:7d:8a:02:11:ae:ca:b7:16:2b:c3:5f:ac:ce:ad: 5d:69:8c:3d:04:50:e3:6a:30:13:b1:2d:67:f6:f9: 70:8f:62:fc:fa:3c:06:7b:7a:da:81:a4:f0:50:99: cf:32:7c:44:ff:ff:4a:97:e3:b7:d5:65:ec:29:73: 1d:cb:c0:4f:ff:51:63:b5:bc:d1:db:5c:24:a7:72: 1e:a9:dd:a0:2d:21:4e:1f:c1:ac:bb:1b:7c:e4:eb: 10:a1:cb:52:63:1f:7f:4c:48:c9:9d:de:e1:6e:13: e7:a2:67:c2:fd:1c:1c:77:b5:a7:75:8f:bf:9b:eb: 6f:ce:f7:b9:d5:47:3b:80:37:9c:1b:c6:6e:34:9e: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:2D:F9:52:90:92:32:26:3A:01:C0:EB:E9:D3:15:AD:9A:C8:E6 X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:67:41:e4:b8:d5:cd:3b:a7:aa:ef:f2:31:03:07:12:43: 84:a2:95:b8:1a:b4:a6:51:2a:63:d5:e1:7b:8f:e7:d9:a8:b3: 44:2f:84:30:34:76:38:61:a5:d2:69:c7:8d:fc:4b:f4:a0:0d: 3c:e9:91:55:33:2b:a4:66:d0:34:14:06:a4:a0:d2:53:c7:82: 73:d5:08:ac:30:c1:f9:da:a9:06:46:b9:c6:b0:11:79:95:78: 6a:fe:85:86:4c:d4:ad:32:4a:ea:2c:bd:4c:b7:0d:f6:c5:a4: 96:ea:33:18:38:36:17:11:8c:27:67:8c:29:b3:cc:cd:f1:19: 8f:ea:03:ce:af:a8:b6:37:5c:ff:24:11:0c:66:40:f8:0c:e5: df:fd:f3:b7:8f:e4:3d:4c:39:c3:66:be:8b:51:b1:42:ca:ec: 29:2e:f4:06:d0:65:de:49:5f:29:29:37:96:49:f7:b7:08:00: e4:92:b3:9c:4d:f6:1a:3d:42:35:f6:0e:75:1b:52:7d:29:05: e3:39:cb:86:37:d0:e4:9f:e4:e5:30:d0:66:ed:fb:83:a5:c3: 2a:83:cc:2a:2f:58:8f:1c:74:56:8c:cd:e8:a7:4c:ed:a7:c4: 96:d9:b5:c6:3a:da:62:d7:9f:7a:5c:87:9d:c0:99:ab:9e:dc: 40:45:58:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjUwNDA0MTUzOTEzWhcNMjUwNDExMTUzOTEzWjAYMRYwFAYD VQQDEw02N2VmZmQyMS1lMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KzlVRied908H4vkvkyoOdVl91yAzPDVNBp2/vqeuvVLE4aX21UtkgMe+z/V qxHgGguxb0Co2UqMTLjjhQ+LIY0CpCEAcN5ddA/2iFna90hkti5oM+mrC5qc7KUe BMxtKKi4DcZTveZlXRl4gR1aWb6ywkgBXkEEfYoCEa7KtxYrw1+szq1daYw9BFDj ajATsS1n9vlwj2L8+jwGe3ragaTwUJnPMnxE//9Kl+O31WXsKXMdy8BP/1FjtbzR 21wkp3Ieqd2gLSFOH8Gsuxt85OsQoctSYx9/TEjJnd7hbhPnomfC/Rwcd7WndY+/ m+tvzve51Uc7gDecG8ZuNJ5zPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPtLflS kJIyJjoBwOvp0xWtmsjmMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkEzOS9BNjU5NDlCMjNCQzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFp QTgyUlhOY2xlMTBkbUg2eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK5mdB5LjVzTunqu/yMQMHEkOEopW4GrSmUSpj1eF7j+fZqLNEL4Qw NHY4YaXSaceN/Ev0oA086ZFVMyukZtA0FAakoNJTx4Jz1QisMMH52qkGRrnGsBF5 lXhq/oWGTNStMkrqLL1Mtw32xaSW6jMYODYXEYwnZ4wps8zN8RmP6gPOr6i2N1z/ JBEMZkD4DOXf/fO3j+Q9TDnDZr6LUbFCyuwpLvQG0GXeSV8pKTeWSfe3CADkkrOc TfYaPUI19g51G1J9KQXjOcuGN9Dkn+TlMNBm7fuDpcMqg8wqL1iPHHRWjM3op0zt p8SW2bXGOtpi1596XIedwJmrntxARVhp -----END CERTIFICATE-----Generated at Sat Apr 5 22:06:47 2025 by rpki-client