$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft File: JZaec6mNmfQurIlCbGuUk8hdMxo.mft (raw, json) Hash identifier: 6EH8MnQrdf/le3GRoX90j4gTW9MJMrMMn58/hKhykJc= Subject key identifier: 78:8D:ED:48:80:67:C7:1A:00:A4:55:A5:30:BF:A9:7C:60:8A:0F:1B Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A Certificate issuer: /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft Manifest number: 011F Signing time: Sat 05 Apr 2025 04:03:56 +0000 Manifest this update: Sat 05 Apr 2025 04:03:55 +0000 Manifest next update: Sat 12 Apr 2025 04:03:55 +0000 Files and hashes: 1: JZaec6mNmfQurIlCbGuUk8hdMxo.crl (hash: asWMY+1g+OvmFP9/bZhxlu2/Y5ZZI/QG5DpiayPBZrw=) 2: 07C2DDD0597011EE9C188A29C4F9AE02.roa (hash: elKim0+kuVj5n91meyvY+LXLxWJNR5sixE2vqJMQIt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175911 Validity Not Before: Apr 5 04:03:55 2025 GMT Not After : Apr 12 04:03:55 2025 GMT Subject: CN=67f0abac-7061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:27:1b:25:1f:b7:22:6f:7b:94:96:fa:4b: 6e:b4:b8:9c:94:01:b4:a9:4a:5e:4e:ea:e6:f6:3f: 4c:d5:c8:95:70:f4:0a:3c:5a:c2:31:ce:7e:03:56: 6c:a5:2c:39:dc:4e:45:0d:79:16:f2:05:9a:f0:05: 8b:82:b2:f4:ae:42:ee:bb:7e:20:d7:a7:ec:4e:35: c4:57:0f:a5:35:14:9e:a8:30:fb:37:e9:0d:c8:a2: c7:7c:a6:4d:3e:93:f5:37:6f:e0:51:af:aa:72:b1: 64:79:fd:f1:a6:61:87:9d:82:44:7d:4d:f6:59:d9: fa:1c:cf:a3:3f:cb:de:3e:53:00:e7:a0:cb:84:cc: bc:74:54:52:1f:33:fc:af:f2:7d:8a:a4:80:14:83: 6f:5d:8a:64:a7:24:dc:f9:15:9a:82:b9:bd:b9:41: 0e:e2:29:63:bc:b0:b0:27:6d:ac:25:81:7f:32:6c: e2:e6:4f:11:99:b5:5e:98:2a:86:90:5c:81:d9:a7: f5:ee:c5:b5:87:71:a0:cd:67:36:99:8e:eb:91:1b: 9f:ef:3e:1e:d0:0c:cc:84:fa:b8:c1:b6:bf:2e:c7: 8c:07:53:d3:b3:88:d6:23:d7:26:f2:33:b5:f9:8e: 7c:41:b6:ed:49:3c:36:a2:35:0b:8b:1b:ef:20:7a: 7c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8D:ED:48:80:67:C7:1A:00:A4:55:A5:30:BF:A9:7C:60:8A:0F:1B X509v3 Authority Key Identifier: keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e0:d9:ad:a9:e2:1d:2c:b3:fc:84:61:2e:4e:87:a2:34:b6: 48:f1:b5:7c:de:0d:28:15:62:50:6c:48:6d:32:e6:ba:b7:66: 7b:4a:ce:08:97:c1:44:09:8e:48:9b:4a:31:f9:77:5f:3c:f1: 53:eb:42:ac:3b:c0:ec:d1:c5:38:70:13:67:ad:05:08:e9:b0: ec:6d:22:4b:43:4f:ff:41:da:2a:e7:bd:e2:83:e9:ba:35:5c: 70:26:de:f1:eb:1c:09:01:74:ba:ea:d6:ee:d2:63:68:8c:ce: 2c:c4:aa:cc:28:44:dd:73:8b:5a:0c:8c:0d:55:ec:69:d3:9c: 8d:b4:e1:d2:8f:64:8a:56:39:e7:44:d1:d7:40:32:6f:a3:57: 03:40:b2:d5:5f:f1:3b:fb:2f:d9:eb:1b:c2:02:18:3d:5e:e0: 9d:cd:a2:38:01:f1:04:35:ea:b6:57:a0:fb:35:54:74:d7:21: 7a:6e:c2:a2:60:01:f2:4f:52:9f:bf:c9:fb:a0:f4:3e:38:1e: 8f:ab:d0:48:78:ef:75:d7:e6:26:64:79:77:71:f9:29:d6:fd: 18:42:c5:15:21:64:af:8c:b6:d3:5a:e4:e3:0e:8c:1d:7d:0f: dc:f4:c5:36:bb:29:37:ee:16:db:1b:f3:cc:50:d3:a6:5a:ee: 38:c2:47:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MTExMTAvBgNVBAUTKDI1OTY5RTczQTk4RDk5RjQyRUFDODk0MjZDNkI5NDkz Qzg1RDMzMUEwHhcNMjUwNDA1MDQwMzU1WhcNMjUwNDEyMDQwMzU1WjAYMRYwFAYD VQQDEw02N2YwYWJhYy03MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzInGyUftyJve5SW+ktutLiclAG0qUpeTurm9j9M1ciVcPQKPFrCMc5+A1Zs pSw53E5FDXkW8gWa8AWLgrL0rkLuu34g16fsTjXEVw+lNRSeqDD7N+kNyKLHfKZN PpP1N2/gUa+qcrFkef3xpmGHnYJEfU32Wdn6HM+jP8vePlMA56DLhMy8dFRSHzP8 r/J9iqSAFINvXYpkpyTc+RWagrm9uUEO4iljvLCwJ22sJYF/Mmzi5k8RmbVemCqG kFyB2af17sW1h3GgzWc2mY7rkRuf7z4e0AzMhPq4wba/LseMB1PTs4jWI9cm8jO1 +Y58QbbtSTw2ojULixvvIHp89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiN7UiA Z8caAKRVpTC/qXxgig8bMB8GA1UdIwQYMBaAFCWWnnOpjZn0LqyJQmxrlJPIXTMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkxMS9CQzA5NTNBNjU5 NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1mUXVySWxDYkd1VWs4aGRN eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYWVjNm1ObWZRdXJJbENiR3VVazhoZE14by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkxMS9CQzA5NTNBNjU5NkYxMUVFOUIxQUFFMjhDNEY5QUUwMi9KWmFlYzZtTm1m UXVySWxDYkd1VWs4aGRNeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv4NmtqeIdLLP8hGEuToeiNLZI8bV83g0oFWJQbEhtMua6t2Z7Ss4I l8FECY5Im0ox+XdfPPFT60KsO8Ds0cU4cBNnrQUI6bDsbSJLQ0//Qdoq573ig+m6 NVxwJt7x6xwJAXS66tbu0mNojM4sxKrMKETdc4taDIwNVexp05yNtOHSj2SKVjnn RNHXQDJvo1cDQLLVX/E7+y/Z6xvCAhg9XuCdzaI4AfEENeq2V6D7NVR01yF6bsKi YAHyT1Kfv8n7oPQ+OB6Pq9BIeO911+YmZHl3cfkp1v0YQsUVIWSvjLbTWuTjDowd fQ/c9MU2uyk37hbbG/PMUNOmWu44wkec -----END CERTIFICATE-----Generated at Sat Apr 5 16:29:17 2025 by rpki-client