$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: U6+cL7bPYhoLYl6gI+VYBZgYKCTxNYRgUmWsFPxEI2c= Subject key identifier: 4D:EE:F9:C1:B9:D3:02:6D:20:01:F1:8D:39:AE:08:AC:48:8B:CD:A2 Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0AE8 Signing time: Tue 08 Apr 2025 19:15:51 +0000 Manifest this update: Tue 08 Apr 2025 19:15:50 +0000 Manifest next update: Tue 15 Apr 2025 19:15:50 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: HedTtOlLtWAZ5DrBuwJXbOv/J9MXvwXO1VF88uUitns=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: cME7E3dTvb+EGAR48GSsEEHAaLVHg6TnnZaiv9ezcQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 19:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F Validity Not Before: Apr 8 19:15:50 2025 GMT Not After : Apr 15 19:15:50 2025 GMT Subject: CN=67f575e7-4adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:3c:5d:c1:81:31:96:73:82:3b:f2:83:b1: 08:00:cc:aa:d4:68:32:26:19:9a:5a:49:8c:3a:56: df:a8:48:31:65:50:fe:b1:ec:eb:2d:8c:44:12:88: 7c:ad:3e:1f:b0:d2:bc:c8:0f:0a:51:ab:8c:d3:7c: 0d:29:a3:c8:2b:6e:7f:67:94:0d:8c:6c:61:e4:2e: 52:c2:b1:c0:7d:6f:02:91:4f:56:0d:db:1a:02:25: 13:39:5d:6f:5d:23:28:ce:1a:ea:56:c4:33:d6:55: 1c:01:b4:56:2f:45:ad:1a:56:cf:9b:4b:d1:4b:86: d7:6e:d5:5d:a5:c5:22:2a:08:a4:38:e0:4f:e1:1f: 70:7b:03:fd:1a:92:ae:09:9d:a9:60:45:87:42:c9: 4f:0a:cd:2e:55:50:52:7c:ca:5c:1f:92:b7:3d:65: a1:a4:20:4c:83:48:3a:7f:a4:12:91:a1:83:4d:f0: f0:da:a4:47:9c:37:67:1c:52:a2:55:f9:c1:d8:6d: 94:91:67:30:bf:99:6d:23:66:ea:7b:e2:b0:91:c2: b1:1d:0b:4f:96:77:f1:5b:aa:9b:5e:d5:e6:44:ea: 58:21:f9:e9:ca:3d:b3:f0:31:de:d6:94:31:7c:05: d6:4f:f2:07:af:f5:26:76:2f:f0:96:c7:26:e6:68: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:F9:C1:B9:D3:02:6D:20:01:F1:8D:39:AE:08:AC:48:8B:CD:A2 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:f4:61:42:bc:a4:2b:08:fb:17:84:ab:28:c4:ea:17:44:d2: b6:6e:0c:a3:4c:c6:3a:1e:9b:8d:b4:c6:9f:12:0d:b7:ca:ab: 6c:1f:79:8b:cf:16:1a:21:c1:fa:68:f0:81:a7:27:89:92:1e: be:f3:5b:e2:22:16:b3:a2:f4:a0:ae:f2:bb:28:6f:9c:0f:81: e7:2f:d2:ea:b8:70:37:fb:6e:96:2a:96:f8:09:25:64:d5:ba: 1c:e0:d6:2c:56:56:f1:e4:78:d2:81:ff:53:91:48:ea:92:d1: 46:fb:e0:4e:f8:a6:bd:8a:f7:2c:1e:45:3e:42:43:0d:ce:78: f5:b8:7c:ca:0b:71:12:e2:a9:fc:6e:93:d1:65:8f:7b:98:46: a2:d3:04:85:8a:f0:fa:96:12:98:db:99:1f:fb:ad:b0:6c:e2: 7a:a0:b0:7c:b1:a3:7f:31:88:43:10:44:30:1a:a2:90:d5:6a: f6:58:cb:72:ee:72:38:82:60:e0:57:1a:15:6b:86:65:fc:f1: 5b:c8:59:64:97:58:87:56:49:6b:b9:5d:cf:f8:58:6c:ef:1b: e6:9f:b8:44:a3:ba:df:5b:da:5a:51:90:2d:ce:e3:b8:14:cf: 93:66:91:59:1f:dd:35:9e:60:fd:85:b6:8d:d1:e3:86:ab:d9: 8f:32:c0:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUwNDA4MTkxNTUwWhcNMjUwNDE1MTkxNTUwWjAYMRYwFAYD VQQDEw02N2Y1NzVlNy00YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwg8XcGBMZZzgjvyg7EIAMyq1GgyJhmaWkmMOlbfqEgxZVD+sezrLYxEEoh8 rT4fsNK8yA8KUauM03wNKaPIK25/Z5QNjGxh5C5SwrHAfW8CkU9WDdsaAiUTOV1v XSMozhrqVsQz1lUcAbRWL0WtGlbPm0vRS4bXbtVdpcUiKgikOOBP4R9wewP9GpKu CZ2pYEWHQslPCs0uVVBSfMpcH5K3PWWhpCBMg0g6f6QSkaGDTfDw2qRHnDdnHFKi VfnB2G2UkWcwv5ltI2bqe+KwkcKxHQtPlnfxW6qbXtXmROpYIfnpyj2z8DHe1pQx fAXWT/IHr/Umdi/wlscm5miHPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3u+cG5 0wJtIAHxjTmuCKxIi82iMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR9GFCvKQrCPsXhKsoxOoXRNK2bgyjTMY6HpuNtMafEg23yqtsH3mL zxYaIcH6aPCBpyeJkh6+81viIhazovSgrvK7KG+cD4HnL9LquHA3+26WKpb4CSVk 1boc4NYsVlbx5HjSgf9TkUjqktFG++BO+Ka9ivcsHkU+QkMNznj1uHzKC3ES4qn8 bpPRZY97mEai0wSFivD6lhKY25kf+62wbOJ6oLB8saN/MYhDEEQwGqKQ1Wr2WMty 7nI4gmDgVxoVa4Zl/PFbyFlkl1iHVklruV3P+Fhs7xvmn7hEo7rfW9paUZAtzuO4 FM+TZpFZH901nmD9hbaN0eOGq9mPMsC7 -----END CERTIFICATE-----Generated at Thu Apr 10 18:59:50 2025 by rpki-client