$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: XfTheLUjb/z33t9Y1VPHAPspQ3SjprRLf+zpguTcOjY= Subject key identifier: BF:85:8C:13:4D:3A:B2:41:7F:F0:99:E2:67:AE:B1:73:7B:C6:1D:3F Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 0263 Signing time: Sat 05 Apr 2025 01:52:15 +0000 Manifest this update: Sat 05 Apr 2025 01:52:14 +0000 Manifest next update: Sat 12 Apr 2025 01:52:14 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: QvTPUtmI36So+G93p8eSrzYfGWbH3VNgcHXt7WOye1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494 Validity Not Before: Apr 5 01:52:14 2025 GMT Not After : Apr 12 01:52:14 2025 GMT Subject: CN=67f08ccf-624a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:3d:c1:f9:62:8c:2d:d7:23:b5:91:2b:92: 26:54:e2:e9:d0:fc:45:32:67:6d:3b:e6:b2:ff:54: 90:11:ca:79:2c:e9:9d:78:3f:3d:48:46:37:22:d8: 0b:e5:e6:5d:28:07:58:b6:41:5a:94:d0:23:f8:51: 22:3b:e3:8a:82:70:ee:22:ea:4c:46:40:9b:ea:6b: 31:d5:4f:51:ab:f2:90:88:c3:db:fe:01:57:5e:3c: 46:8e:67:95:50:e6:92:3a:38:e6:03:f6:58:b8:9e: 4e:21:c5:7d:79:54:90:86:81:41:9e:aa:2e:4a:4b: fd:df:ce:6e:7f:b9:3f:db:6f:a0:6c:22:25:81:e6: d0:d8:d4:87:6a:45:37:82:16:db:ab:56:15:9b:26: 6f:30:37:8a:ca:e5:8e:a6:e6:90:74:8c:59:81:39: 9d:4e:ce:19:f8:07:b4:2a:b6:cb:d1:d2:79:65:ef: 00:66:56:45:58:67:76:8e:ba:30:75:a1:f2:2c:1b: 8f:53:bd:59:b5:a1:1f:27:38:8d:22:ae:84:76:10: 6a:19:44:a8:21:e2:1f:1d:b1:23:ad:db:84:99:f7: 28:48:b1:81:69:99:6d:aa:44:e3:b9:49:bc:88:77: c9:4b:7e:47:f6:54:8e:10:13:a5:ec:8d:a4:e0:2c: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:85:8C:13:4D:3A:B2:41:7F:F0:99:E2:67:AE:B1:73:7B:C6:1D:3F X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a3:4b:22:03:a9:20:53:5f:8a:ab:d3:10:51:63:09:d5:f0: 11:e5:70:73:0c:dd:e1:f0:be:77:af:f7:bb:f8:39:33:40:61: b1:4b:9e:c7:f8:f7:42:7d:6f:4a:f0:a2:a1:53:c2:de:c2:b3: f2:33:82:c8:fc:d3:d5:9b:61:bb:e1:0b:76:f5:f7:4b:39:ee: 79:02:a4:ea:cd:d9:c7:a6:94:95:0d:59:c5:61:6c:ed:58:71: 86:62:68:dd:a3:17:31:42:41:6a:32:0c:8d:f8:98:0b:0f:35: c5:fe:19:92:de:8f:b6:09:ee:78:db:b0:7a:78:31:5e:1a:b2: c6:39:aa:0b:4f:d8:f8:80:f6:27:5e:e1:9b:ec:c0:98:40:de: c7:f0:19:a2:88:84:79:48:c6:7a:df:46:56:21:32:c1:ab:c2: 8a:46:ba:e5:03:ed:46:0c:1a:dc:16:01:05:04:36:60:a1:9a: 2c:df:c5:22:91:44:49:5d:42:21:50:95:87:20:c5:a5:1b:22: b8:e5:d8:1a:d4:f9:07:db:9a:a4:e6:3a:c6:ca:34:79:39:18: e1:86:03:20:7b:1d:ec:22:ab:34:2f:28:03:a0:9f:b6:bc:c6: 68:e5:79:55:9a:a4:d0:3e:52:77:a6:77:d5:64:39:b3:f1:15: 27:e3:63:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwNDA1MDE1MjE0WhcNMjUwNDEyMDE1MjE0WjAYMRYwFAYD VQQDEw02N2YwOGNjZi02MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1k9wflijC3XI7WRK5ImVOLp0PxFMmdtO+ay/1SQEcp5LOmdeD89SEY3ItgL 5eZdKAdYtkFalNAj+FEiO+OKgnDuIupMRkCb6msx1U9Rq/KQiMPb/gFXXjxGjmeV UOaSOjjmA/ZYuJ5OIcV9eVSQhoFBnqouSkv9385uf7k/22+gbCIlgebQ2NSHakU3 ghbbq1YVmyZvMDeKyuWOpuaQdIxZgTmdTs4Z+Ae0KrbL0dJ5Ze8AZlZFWGd2jrow daHyLBuPU71ZtaEfJziNIq6EdhBqGUSoIeIfHbEjrduEmfcoSLGBaZltqkTjuUm8 iHfJS35H9lSOEBOl7I2k4Cxu2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+FjBNN OrJBf/CZ4meusXN7xh0/MB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/o0siA6kgU1+Kq9MQUWMJ1fAR5XBzDN3h8L53r/e7+DkzQGGxS57H +PdCfW9K8KKhU8LewrPyM4LI/NPVm2G74Qt29fdLOe55AqTqzdnHppSVDVnFYWzt WHGGYmjdoxcxQkFqMgyN+JgLDzXF/hmS3o+2Ce5427B6eDFeGrLGOaoLT9j4gPYn XuGb7MCYQN7H8BmiiIR5SMZ630ZWITLBq8KKRrrlA+1GDBrcFgEFBDZgoZos38Ui kURJXUIhUJWHIMWlGyK45dga1PkH25qk5jrGyjR5ORjhhgMgex3sIqs0LygDoJ+2 vMZo5XlVmqTQPlJ3pnfVZDmz8RUn42Ml -----END CERTIFICATE-----Generated at Sat Apr 5 10:32:11 2025 by rpki-client