$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: Klxd8tbJjk4G7oRREjWcoiNmfBkXYrc8SKhBIbyhyL4= Subject key identifier: C9:63:2F:E2:C8:18:D0:10:12:A2:FB:86:A8:A4:32:88:DC:BD:2A:AA Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: E8 Signing time: Sat 05 Apr 2025 04:43:44 +0000 Manifest this update: Sat 05 Apr 2025 04:43:44 +0000 Manifest next update: Sat 12 Apr 2025 04:43:44 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: 602Xx4oKN/bhtHXnSrSzRYk9uALX0yTwAZ/2WmYYTMA=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF Validity Not Before: Apr 5 04:43:44 2025 GMT Not After : Apr 12 04:43:44 2025 GMT Subject: CN=67f0b500-0027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:75:aa:c1:8a:74:19:5e:4e:c2:89:34:27: fe:a1:34:80:cf:87:04:3b:7c:7f:bc:3f:fc:6a:cb: bd:fe:95:67:e1:60:40:fd:f5:0e:3a:21:ff:ac:80: 14:24:70:90:54:cd:b0:b3:01:72:f4:0c:e3:c1:f5: 2e:b7:a5:83:67:0a:d2:a0:84:21:ba:ca:5a:d4:0f: a0:32:43:11:9a:c6:00:bd:d0:2b:aa:5c:69:5a:26: 08:12:1b:07:f1:a4:ad:a1:8d:aa:d6:3f:33:5a:db: 76:fb:30:cf:76:f0:89:f0:86:4e:dc:2f:8b:f9:55: b1:b1:26:72:ad:50:57:d4:31:bd:92:e1:a0:ac:4a: 9c:28:c8:a0:cb:69:32:79:c8:2d:e9:5f:e4:ce:13: fe:dc:91:db:81:2e:87:da:48:ea:8a:08:c9:06:af: 2f:5a:a0:a9:04:5d:4e:d2:8e:a1:47:08:b0:7a:3e: 42:76:b5:35:67:e8:96:b5:f4:d7:d0:c2:cb:da:b6: 50:4a:c1:47:64:51:b5:bb:44:7c:9d:75:94:b5:14: 37:9c:0e:13:75:24:b2:3f:51:e2:e4:a8:be:f1:20: 49:84:22:cd:25:14:f9:96:9d:60:d0:a5:a1:7c:0f: 14:7b:8c:7f:f6:0f:da:d5:8d:cf:ba:14:74:4c:95: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:2F:E2:C8:18:D0:10:12:A2:FB:86:A8:A4:32:88:DC:BD:2A:AA X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d0:54:d0:ca:a7:15:ee:01:1c:30:54:7c:f0:4c:1b:ec:60: 71:65:f7:e6:08:d2:62:d5:f1:93:70:27:14:ea:8d:2b:8b:fd: 63:e6:ee:aa:57:27:c1:b6:3b:8d:cc:78:af:07:e6:92:fb:c2: 61:fe:1d:94:66:bf:7f:3b:f3:f8:89:48:f2:da:19:6c:a8:b3: db:f7:77:8c:ce:db:ce:47:07:92:0d:06:8b:69:8a:72:04:00: 1a:5d:d3:18:a3:53:70:26:bc:21:cf:f1:2e:64:19:ee:76:98: 08:5c:38:8f:8b:cb:66:c7:2b:4f:1e:bd:da:bb:0a:c6:01:9b: 53:aa:60:df:38:d8:d3:94:d7:53:52:01:5c:9d:ac:30:ed:b2: 75:a5:b8:5e:9b:ab:d1:33:6c:10:39:5a:a3:ee:09:57:f8:2e: 42:5b:76:5a:bc:6a:03:c3:f2:a9:32:1f:aa:0e:bb:b5:df:45: 90:9b:ec:9f:4e:31:5d:c6:90:c4:35:3b:63:f9:d2:59:df:1d: 80:b8:8f:45:8f:34:30:b0:03:be:7c:52:c4:06:db:51:7e:81: 17:81:c8:01:d1:dc:09:50:0a:ac:fa:0c:86:20:0f:81:7b:a9: b2:4d:9c:9e:e0:96:cb:6f:80:f2:05:91:f6:81:eb:f1:59:34: 02:dd:37:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUwNDA1MDQ0MzQ0WhcNMjUwNDEyMDQ0MzQ0WjAYMRYwFAYD VQQDEw02N2YwYjUwMC0wMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4p1qsGKdBleTsKJNCf+oTSAz4cEO3x/vD/8asu9/pVn4WBA/fUOOiH/rIAU JHCQVM2wswFy9AzjwfUut6WDZwrSoIQhuspa1A+gMkMRmsYAvdArqlxpWiYIEhsH 8aStoY2q1j8zWtt2+zDPdvCJ8IZO3C+L+VWxsSZyrVBX1DG9kuGgrEqcKMigy2ky ecgt6V/kzhP+3JHbgS6H2kjqigjJBq8vWqCpBF1O0o6hRwiwej5CdrU1Z+iWtfTX 0MLL2rZQSsFHZFG1u0R8nXWUtRQ3nA4TdSSyP1Hi5Ki+8SBJhCLNJRT5lp1g0KWh fA8Ue4x/9g/a1Y3PuhR0TJXBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMljL+LI GNAQEqL7hqikMojcvSqqMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX0FTQyqcV7gEcMFR88Ewb7GBxZffmCNJi1fGTcCcU6o0ri/1j5u6q VyfBtjuNzHivB+aS+8Jh/h2UZr9/O/P4iUjy2hlsqLPb93eMztvORweSDQaLaYpy BAAaXdMYo1NwJrwhz/EuZBnudpgIXDiPi8tmxytPHr3auwrGAZtTqmDfONjTlNdT UgFcnaww7bJ1pbhem6vRM2wQOVqj7glX+C5CW3ZavGoDw/KpMh+qDru130WQm+yf TjFdxpDENTtj+dJZ3x2AuI9FjzQwsAO+fFLEBttRfoEXgcgB0dwJUAqs+gyGIA+B e6myTZye4JbLb4DyBZH2gevxWTQC3Tdd -----END CERTIFICATE-----Generated at Sun Apr 6 15:04:37 2025 by rpki-client