$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft File: jfaTJC1hD4djB0dTQqkuFVYCjlM.mft (raw, json) Hash identifier: 8D8ld1dn/wnU3MQcU8OV91oNIIcPLGsOvno8lVDBDA0= Subject key identifier: E5:3F:A6:F4:DE:65:D0:01:93:6B:E6:54:C9:88:96:A3:6D:58:1E:22 Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft Manifest number: 01D2 Signing time: Thu 03 Apr 2025 02:10:53 +0000 Manifest this update: Thu 03 Apr 2025 02:10:52 +0000 Manifest next update: Thu 10 Apr 2025 02:10:52 +0000 Files and hashes: 1: jfaTJC1hD4djB0dTQqkuFVYCjlM.crl (hash: 9t181zr+dFpZuBa9FQcX321LsZWkYsAiXftNylih6dQ=) 2: 8A805418846911EE8DDA071BC4F9AE02.roa (hash: sBMYi1WuwbM2sJh1B5DWzcaa+AKEL6HXkfE40Ukjn0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187461 Validity Not Before: Apr 3 02:10:52 2025 GMT Not After : Apr 10 02:10:52 2025 GMT Subject: CN=67edee2d-2f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:56:31:00:d9:70:b2:74:71:0a:2d:36:e7: 1b:41:17:4e:9b:41:17:80:ee:8c:91:2d:98:92:f3: 73:fe:e0:1b:eb:b5:11:c5:2d:3d:47:3b:ec:db:d9: fb:a9:41:b5:1b:72:4b:ae:6b:8e:61:c4:9b:ab:43: ce:77:14:c7:6d:fd:0f:50:13:d0:87:8f:46:2e:d9: 01:90:ac:ea:71:c8:2c:1d:96:f5:cc:f0:0d:ff:1c: cd:ce:a7:e5:21:ea:2d:b7:ea:d3:62:5c:6b:76:10: 7e:cc:6b:7d:37:c5:7c:db:17:2a:97:23:f5:ae:41: f3:ce:d0:d7:ed:8d:06:6e:38:a7:84:59:db:97:54: e4:31:43:20:0f:aa:b5:93:5e:5b:6b:78:ce:e4:c5: b9:3b:36:db:7d:3d:16:f2:d5:46:06:c9:90:25:b6: c2:b4:30:b6:fb:ca:22:66:19:ff:de:fc:78:51:11: bf:f2:f3:e0:16:26:30:81:65:5f:c5:5d:22:6d:01: f2:3a:03:66:87:a4:22:b6:54:d1:b3:85:d5:a6:43: 85:73:eb:78:fb:59:80:67:c2:50:a1:c7:73:ea:77: 8f:7e:a5:85:96:71:b0:6c:96:f7:47:b4:7a:3a:e9: c3:f8:45:d7:05:92:39:4c:e2:f7:03:4c:72:5e:83: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3F:A6:F4:DE:65:D0:01:93:6B:E6:54:C9:88:96:A3:6D:58:1E:22 X509v3 Authority Key Identifier: keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:76:a3:26:e6:87:aa:a4:a7:08:1d:41:3f:75:43:66:4f:e3: 1b:d1:40:c5:3c:4d:36:6b:c7:8e:fc:d3:9f:fb:63:a7:f1:5c: 1d:18:95:46:98:0d:3d:4b:f4:b0:03:aa:2e:fb:40:dc:f8:3e: 11:e2:7a:9b:ed:c3:75:65:e0:b7:17:52:5b:e6:18:87:4f:9b: c5:de:32:fc:1c:be:d2:33:4f:cf:d3:7c:3d:3c:3b:19:3b:eb: 45:b8:2b:d2:53:fb:86:89:8a:34:e7:78:9d:27:06:9d:82:21: 46:63:b4:d5:58:f5:63:30:d5:a1:6d:01:81:00:87:7c:a4:8d: 90:85:c8:ce:5e:79:9d:f5:d8:27:f3:9c:74:a9:a8:b3:52:b5: ed:e9:e0:0b:f5:fd:87:ed:7a:05:ec:af:a4:60:fa:3e:18:4a: 7c:a6:6a:f4:34:d4:4a:33:dc:e2:21:eb:5f:5a:28:75:f2:d5: d0:bc:24:37:38:4a:07:d6:83:e5:f2:5c:ab:23:9e:d9:18:9f: ad:02:ac:86:29:cb:ee:5b:97:20:19:37:a0:4e:41:da:a5:76: 60:6d:ba:59:63:46:34:45:61:59:a8:0d:40:06:e2:47:6d:39: 30:63:17:d4:2f:35:24:ff:6c:9a:b4:43:c1:ca:a4:3b:29:f2: 63:cd:03:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1 NTYwMjhFNTMwHhcNMjUwNDAzMDIxMDUyWhcNMjUwNDEwMDIxMDUyWjAYMRYwFAYD VQQDEw02N2VkZWUyZC0yZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0pWMQDZcLJ0cQotNucbQRdOm0EXgO6MkS2YkvNz/uAb67URxS09Rzvs29n7 qUG1G3JLrmuOYcSbq0POdxTHbf0PUBPQh49GLtkBkKzqccgsHZb1zPAN/xzNzqfl Ieott+rTYlxrdhB+zGt9N8V82xcqlyP1rkHzztDX7Y0GbjinhFnbl1TkMUMgD6q1 k15ba3jO5MW5OzbbfT0W8tVGBsmQJbbCtDC2+8oiZhn/3vx4URG/8vPgFiYwgWVf xV0ibQHyOgNmh6QitlTRs4XVpkOFc+t4+1mAZ8JQocdz6nePfqWFlnGwbJb3R7R6 OunD+EXXBZI5TOL3A0xyXoN5tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU/pvTe ZdABk2vmVMmIlqNtWB4iMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2MS9CMkMyMDZFMDRBMUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0 ZGpCMGRUUXFrdUZWWUNqbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUdqMm5oeqpKcIHUE/dUNmT+Mb0UDFPE02a8eO/NOf+2On8VwdGJVG mA09S/SwA6ou+0Dc+D4R4nqb7cN1ZeC3F1Jb5hiHT5vF3jL8HL7SM0/P03w9PDsZ O+tFuCvSU/uGiYo053idJwadgiFGY7TVWPVjMNWhbQGBAId8pI2QhcjOXnmd9dgn 85x0qaizUrXt6eAL9f2H7XoF7K+kYPo+GEp8pmr0NNRKM9ziIetfWih18tXQvCQ3 OEoH1oPl8lyrI57ZGJ+tAqyGKcvuW5cgGTegTkHapXZgbbpZY0Y0RWFZqA1ABuJH bTkwYxfULzUk/2yatEPByqQ7KfJjzQNg -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:53 2025 by rpki-client