$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: TPub1G6CDXBbyWwYwg4Mt/jcAB7S9YQvJ2B3iG7UtxM= Subject key identifier: 4B:09:3E:15:A9:57:1D:EB:62:67:12:A5:96:D4:E3:67:8D:C4:CB:B4 Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 011D Signing time: Sat 29 Mar 2025 04:17:30 +0000 Manifest this update: Sat 29 Mar 2025 04:17:30 +0000 Manifest next update: Sat 05 Apr 2025 04:17:30 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: vlKqaTkdQXM+yjCg1tPERJnX/NoXMHSeWqlnMtlOOTM=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17 Validity Not Before: Mar 29 04:17:30 2025 GMT Not After : Apr 5 04:17:30 2025 GMT Subject: CN=67e7745a-6452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:d7:a8:d0:ae:60:c9:78:0b:d0:a1:6f:81: c9:db:4d:e2:0b:df:4a:f7:aa:a3:b5:58:33:71:85: 8d:0e:a1:ae:db:80:5e:d8:5d:5c:d6:a3:8b:46:41: 8c:e4:ad:86:9b:be:f6:f9:8b:4f:3b:36:25:92:97: 2e:4b:db:b1:56:3a:27:4b:60:88:d7:ee:7c:69:84: 84:4b:f6:98:7c:f6:80:5e:96:17:37:91:0c:63:df: 91:eb:64:e8:13:df:51:4d:09:74:b2:1e:70:cb:13: d7:4d:86:ed:8b:db:e6:4a:eb:fb:2e:d1:4f:65:cb: e2:61:9b:ce:6f:3f:fd:22:08:33:a0:18:20:57:a2: 66:67:63:56:e3:04:79:3d:9d:8a:83:0d:1a:c1:1e: e7:df:15:3f:07:18:37:46:a2:a2:65:ae:9b:53:c7: 25:7b:a9:9c:99:c4:85:05:95:b7:1d:8d:2c:4d:7d: 63:d2:1b:e2:f8:8e:10:df:8d:bb:a4:28:75:2a:ca: 4a:18:af:99:7c:61:dc:c8:d2:4f:f4:87:6c:ae:af: 18:9e:13:15:34:15:66:44:d8:4b:43:72:3e:fc:d4: 30:fe:39:24:94:52:9c:43:f8:83:0f:96:29:11:42: 66:c2:79:53:2b:0a:85:4f:54:4b:10:45:e2:56:70: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:09:3E:15:A9:57:1D:EB:62:67:12:A5:96:D4:E3:67:8D:C4:CB:B4 X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:f9:37:99:c1:ba:f3:97:c4:e4:7b:e4:ef:1e:0d:4d:ec:d4: d7:30:3c:82:74:e3:d5:5d:44:50:a7:98:80:59:2d:4f:80:39: 48:21:2c:f1:4b:7d:f5:cf:be:f5:26:b7:7f:d7:f2:65:25:15: 0a:a3:97:81:ec:04:12:3c:46:f3:09:e7:05:b9:5c:87:70:3c: c1:d7:6c:5f:84:36:9b:9d:c9:17:29:ce:b8:8a:16:d7:94:06: 9a:fa:84:66:70:52:36:cd:4c:11:59:be:84:61:56:fc:66:44: 87:76:2f:ce:38:60:00:63:fb:14:c2:22:67:5e:2a:0b:c7:cb: 97:46:58:96:15:a6:26:11:26:4b:f5:72:38:93:3c:1d:e8:53: bf:97:45:3f:0b:3d:6d:a0:33:d0:4d:10:44:18:ca:68:77:16: 8b:c0:77:8e:1f:71:32:d3:07:10:5c:32:20:af:6f:cb:54:17: 1d:97:0f:cc:59:86:40:d8:09:3f:c5:d0:69:46:37:d6:3c:2a: 34:61:98:a9:14:a7:3e:57:8e:28:db:68:a5:8f:05:00:a9:17: 65:7a:ed:e2:11:21:36:03:18:0d:31:ba:6f:0f:72:9e:dd:da: ec:a4:c2:05:99:45:8f:87:c3:cf:20:9f:0a:1b:ae:a9:ec:40: a0:a5:c6:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwMzI5MDQxNzMwWhcNMjUwNDA1MDQxNzMwWjAYMRYwFAYD VQQDEw02N2U3NzQ1YS02NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LHXqNCuYMl4C9Chb4HJ203iC99K96qjtVgzcYWNDqGu24Be2F1c1qOLRkGM 5K2Gm772+YtPOzYlkpcuS9uxVjonS2CI1+58aYSES/aYfPaAXpYXN5EMY9+R62To E99RTQl0sh5wyxPXTYbti9vmSuv7LtFPZcviYZvObz/9IggzoBggV6JmZ2NW4wR5 PZ2Kgw0awR7n3xU/Bxg3RqKiZa6bU8cle6mcmcSFBZW3HY0sTX1j0hvi+I4Q3427 pCh1KspKGK+ZfGHcyNJP9Idsrq8YnhMVNBVmRNhLQ3I+/NQw/jkklFKcQ/iDD5Yp EUJmwnlTKwqFT1RLEEXiVnCicwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsJPhWp Vx3rYmcSpZbU42eNxMu0MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ+TeZwbrzl8Tke+TvHg1N7NTXMDyCdOPVXURQp5iAWS1PgDlIISzx S331z771Jrd/1/JlJRUKo5eB7AQSPEbzCecFuVyHcDzB12xfhDabnckXKc64ihbX lAaa+oRmcFI2zUwRWb6EYVb8ZkSHdi/OOGAAY/sUwiJnXioLx8uXRliWFaYmESZL 9XI4kzwd6FO/l0U/Cz1toDPQTRBEGMpodxaLwHeOH3Ey0wcQXDIgr2/LVBcdlw/M WYZA2Ak/xdBpRjfWPCo0YZipFKc+V44o22iljwUAqRdleu3iESE2AxgNMbpvD3Ke 3drspMIFmUWPh8PPIJ8KG66p7ECgpcYz -----END CERTIFICATE-----Generated at Fri Apr 4 22:20:00 2025 by rpki-client