$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft File: jcnPJvnU_dwRFF0zw70Hli1ie7g.mft (raw, json) Hash identifier: JbBcf+T23jskYNixSW0wijV7XvYcNCHy9xd12SHJChw= Subject key identifier: 61:8D:96:2C:8B:69:1B:F0:EE:8D:4E:4C:55:8D:D2:CF:A5:2F:DA:4E Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 Certificate issuer: /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft Manifest number: 2497 Signing time: Fri 30 May 2025 16:31:26 +0000 Manifest this update: Fri 30 May 2025 16:31:26 +0000 Manifest next update: Fri 06 Jun 2025 16:31:26 +0000 Files and hashes: 1: jcnPJvnU_dwRFF0zw70Hli1ie7g.crl (hash: C0uwJYIP/eiHSZG2o58koKuipWxMc6e/1DXFg8cGUIs=) 2: BD55046A86A711EFAAEE7030C4F9AE02.roa (hash: ktQbvk1dYwtY6XHKjo1bzOppPwxVRxcNRlkE67hCNQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8 Validity Not Before: May 30 16:31:26 2025 GMT Not After : Jun 6 16:31:26 2025 GMT Subject: CN=6839dd5e-df88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:74:6c:5d:9e:8d:1b:5c:ff:6f:90:7b:db: a0:98:40:0e:a0:59:d2:bf:51:61:dc:22:c4:08:f3: 33:29:5d:c8:53:79:e5:95:3a:39:f5:2f:b9:4f:dc: a2:a2:3a:2f:58:75:c7:2b:98:a2:a6:8f:50:92:ae: b8:58:e1:54:29:34:58:b5:9f:ff:8f:88:ee:e8:91: fe:24:f9:02:75:fc:a5:a3:09:32:c2:74:3f:a6:d6: 7b:b3:2c:a5:01:3b:be:45:3a:1a:5c:38:7e:09:9e: a9:29:5e:58:e9:05:7a:36:88:aa:16:11:26:74:e0: e3:95:59:c2:71:c9:58:2b:22:2f:a4:61:dd:ba:fa: 4e:ba:f2:6f:f7:5e:4c:b2:75:4a:7b:1b:4f:46:fe: b3:ec:86:76:4e:1e:2f:36:57:8d:15:68:9a:b9:58: 63:fe:5f:4a:e3:ea:2a:aa:25:6e:32:4a:5a:81:e0: a7:95:59:06:7a:bc:a6:a9:c8:2e:3d:f1:5b:31:e2: 32:ec:da:7d:32:4a:cd:5a:6f:7e:59:8b:35:6d:e4: 82:82:f2:d6:9e:80:c3:34:ef:28:3b:e5:86:57:5d: 9d:4e:3b:2a:83:3b:4c:ba:cc:5a:26:73:5d:2b:3f: 13:e0:bb:a0:eb:a4:88:a8:3e:9e:e2:65:ce:f4:98: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8D:96:2C:8B:69:1B:F0:EE:8D:4E:4C:55:8D:D2:CF:A5:2F:DA:4E X509v3 Authority Key Identifier: keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d6:40:0b:55:39:2d:d3:45:f7:4e:30:3c:24:df:2b:9c:41: 52:31:0e:56:1f:2d:75:4d:47:ce:34:1f:dd:92:2d:8c:c1:f5: 0f:f9:fd:57:98:82:47:de:d3:ff:dc:df:98:de:b5:d1:34:d4: 4a:39:6c:2e:12:c8:06:59:08:52:fa:28:6c:61:0c:c0:70:43: 38:03:4c:f9:2d:27:3d:e3:17:a6:5d:53:dc:67:81:a7:97:71: 3d:21:33:0b:1e:eb:37:e9:8b:aa:b0:18:ee:0a:97:bb:6c:6d: 63:29:cf:82:53:e3:aa:83:a6:30:e0:40:a3:d1:29:35:2b:63: e7:c8:af:a4:1c:22:bb:5a:6c:cd:a4:38:c7:0e:d9:76:37:e3: 21:68:77:7c:8f:fc:67:9d:da:19:a1:53:c7:02:04:80:07:bb: 39:ea:3d:32:44:da:60:49:6b:31:68:9c:81:e1:9e:90:b5:4c: 6c:e6:27:cb:84:25:7f:a8:71:2d:fc:73:f7:69:26:01:02:36: 74:99:bd:89:01:2c:ad:41:01:cf:fe:b6:a5:20:58:a3:3c:2c: 1f:47:2e:f0:ed:a1:51:71:a5:16:25:ac:4c:5d:06:a4:be:a0: 1c:32:c1:c2:c1:52:eb:8f:ec:ec:09:8b:ec:7e:3b:c0:7b:dd: 66:d7:b8:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoOERDOUNGMjZGOUQ0RkREQzExMTQ1RDMzQzNCRDA3OTYy RDYyN0JCODAeFw0yNTA1MzAxNjMxMjZaFw0yNTA2MDYxNjMxMjZaMBgxFjAUBgNV BAMTDTY4MzlkZDVlLWRmODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw/XRsXZ6NG1z/b5B726CYQA6gWdK/UWHcIsQI8zMpXchTeeWVOjn1L7lP3KKi Oi9YdccrmKKmj1CSrrhY4VQpNFi1n/+PiO7okf4k+QJ1/KWjCTLCdD+m1nuzLKUB O75FOhpcOH4JnqkpXljpBXo2iKoWESZ04OOVWcJxyVgrIi+kYd26+k668m/3Xkyy dUp7G09G/rPshnZOHi82V40VaJq5WGP+X0rj6iqqJW4ySlqB4KeVWQZ6vKapyC49 8Vsx4jLs2n0ySs1ab35ZizVt5IKC8taegMM07yg75YZXXZ1OOyqDO0y6zFomc10r PxPgu6DrpIioPp7iZc70mOOdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYY2WLItp G/DujU5MVY3Sz6Uv2k4wHwYDVR0jBBgwFoAUjcnPJvnU/dwRFF0zw70Hli1ie7gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3UkZGMHp3NzBIbGkxaWU3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamNuUEp2blVfZHdSRkYwenc3MEhsaTFpZTdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL2pjblBKdm5VX2R3 UkZGMHp3NzBIbGkxaWU3Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHHWQAtVOS3TRfdOMDwk3yucQVIxDlYfLXVNR840H92SLYzB9Q/5/VeY gkfe0//c35jetdE01Eo5bC4SyAZZCFL6KGxhDMBwQzgDTPktJz3jF6ZdU9xngaeX cT0hMwse6zfpi6qwGO4Kl7tsbWMpz4JT46qDpjDgQKPRKTUrY+fIr6QcIrtabM2k OMcO2XY34yFod3yP/Ged2hmhU8cCBIAHuznqPTJE2mBJazFonIHhnpC1TGzmJ8uE JX+ocS38c/dpJgECNnSZvYkBLK1BAc/+tqUgWKM8LB9HLvDtoVFxpRYlrExdBqS+ oBwywcLBUuuP7OwJi+x+O8B73WbXuLM= -----END CERTIFICATE-----Generated at Sat May 31 17:11:19 2025 by rpki-client