$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json) Hash identifier: Jr3YvwKmHTRmeJyvOlQWnsMo3nQBDZf9S1dsHjA69UA= Subject key identifier: 39:79:2A:19:65:5F:04:8B:51:C5:9A:D5:78:D7:64:7F:CC:5F:8A:11 Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft Manifest number: 30 Signing time: Sat 31 May 2025 07:23:22 +0000 Manifest this update: Sat 31 May 2025 07:23:22 +0000 Manifest next update: Sat 07 Jun 2025 07:23:22 +0000 Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: ik2HDtUHRt+Sjb+Ui+1wAwcZuvDk4YRMAWDmhUODXZk=) 2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: 2g0YcwmcNYvF1yQbVU8JT3MVONcEq3Lo2nc0de/dtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Validity Not Before: May 31 07:23:22 2025 GMT Not After : Jun 7 07:23:22 2025 GMT Subject: CN=683aae6a-b241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:22:d9:e1:78:5a:19:d0:62:69:7a:e6:fe: ba:c4:0a:c5:22:01:01:bc:1e:33:33:09:cd:59:57: 8f:d1:c7:ed:61:32:12:6b:6a:94:9b:42:87:a9:ac: 89:41:de:24:97:a7:6b:02:a4:d5:b2:48:5e:be:66: b8:bd:fc:a0:bb:62:d8:b8:52:1f:ba:79:b1:3d:fe: d2:1b:ca:50:74:30:c9:1e:5d:34:90:6e:eb:ac:47: 54:14:c3:09:1d:52:0e:b8:6e:75:15:d2:8f:d2:5a: e3:e8:4b:61:b3:c4:50:c8:3d:db:8a:db:ff:e6:48: ed:00:e0:89:f9:b3:4d:f4:6f:b8:3f:0a:f8:87:b8: 15:15:b8:3f:64:b4:c1:e2:47:49:b8:af:65:34:18: a7:7d:74:8f:7f:4b:76:bb:67:10:df:7c:1b:e2:eb: c0:de:9f:64:8c:2b:7d:16:25:35:71:c5:b2:7a:6e: aa:30:f6:e0:da:46:42:43:c3:a0:58:ea:12:a7:50: bc:15:0e:73:4b:cb:81:6f:a8:4d:75:80:be:1e:07: 0c:c3:c4:17:d8:8e:ba:90:15:54:30:0e:ab:11:f2: 1e:11:32:86:a0:8f:0e:87:10:b9:46:71:8b:3d:16: 9c:d8:62:6d:d1:f9:97:3c:69:ca:9a:cc:75:69:fa: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:2A:19:65:5F:04:8B:51:C5:9A:D5:78:D7:64:7F:CC:5F:8A:11 X509v3 Authority Key Identifier: keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:5b:15:08:47:98:51:62:57:31:8c:04:c5:2a:54:6a:53:a9: 7d:92:14:78:9c:7c:e6:a2:7c:17:29:36:b0:5b:8d:5e:9a:a6: 8a:a0:16:81:6f:c5:47:44:6b:88:6c:23:23:4b:35:ee:42:3b: 99:64:56:17:71:1f:87:c5:e6:60:b3:d8:f4:dd:87:cc:58:7a: 0c:7c:69:0a:ae:b0:fe:06:55:25:2c:39:0b:03:c4:bd:cd:24: 41:79:f3:e7:9f:05:f8:77:b8:c3:89:79:f8:a2:19:16:d7:fc: f2:2d:46:39:db:7b:43:65:90:53:f5:b1:25:31:09:a3:e6:bf: 84:0d:df:4e:cd:f2:4c:a4:53:c4:20:27:91:92:b6:d2:aa:23: fb:05:e0:26:a7:ef:6d:29:5a:e8:de:72:5b:f6:74:9d:0a:71: 36:93:ac:da:c5:6d:9a:a9:b5:8d:ac:1f:e2:a7:c4:81:ee:d7: c4:d6:7f:88:87:10:b3:20:68:87:16:b7:0d:6c:05:97:81:15: 59:d3:ed:14:ff:40:77:11:5c:dc:1d:1c:d7:a2:3e:d6:d9:fa: e1:1f:13:49:fb:4c:13:a3:19:56:fe:23:30:55:37:d4:eb:08: 40:92:81:19:20:33:c7:33:d4:7a:07:42:ed:51:1d:7c:f8:8f: 8d:77:54:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE1NzExMC8GA1UEBRMoMjYyRUMyMEQzMkJDMTMyRDdEMjA0QzM0NDgyMjI5Nzky NDIxQ0Y3MDAeFw0yNTA1MzEwNzIzMjJaFw0yNTA2MDcwNzIzMjJaMBgxFjAUBgNV BAMTDTY4M2FhZTZhLWIyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDacCLZ4XhaGdBiaXrm/rrECsUiAQG8HjMzCc1ZV4/Rx+1hMhJrapSbQoeprIlB 3iSXp2sCpNWySF6+Zri9/KC7Yti4Uh+6ebE9/tIbylB0MMkeXTSQbuusR1QUwwkd Ug64bnUV0o/SWuPoS2GzxFDIPduK2//mSO0A4In5s030b7g/CviHuBUVuD9ktMHi R0m4r2U0GKd9dI9/S3a7ZxDffBvi68Den2SMK30WJTVxxbJ6bqow9uDaRkJDw6BY 6hKnULwVDnNLy4FvqE11gL4eBwzDxBfYjrqQFVQwDqsR8h4RMoagjw6HELlGcYs9 FpzYYm3R+Zc8acqazHVp+g+dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOXkqGWVf BItRxZrVeNdkf8xfihEwHwYDVR0jBBgwFoAUJi7CDTK8Ey19IEw0SCIpeSQhz3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTU3LzA2QjJCOEUyMDcy NjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHoz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmk3Q0RUSzhFeTE5SUV3MFNDSXBlU1FoejNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTU3LzA2QjJCOEUyMDcyNjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkx OUlFdzBTQ0lwZVNRaHozQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNbFQhHmFFiVzGMBMUqVGpTqX2SFHicfOaifBcpNrBbjV6apoqgFoFv xUdEa4hsIyNLNe5CO5lkVhdxH4fF5mCz2PTdh8xYegx8aQqusP4GVSUsOQsDxL3N JEF58+efBfh3uMOJefiiGRbX/PItRjnbe0NlkFP1sSUxCaPmv4QN307N8kykU8Qg J5GSttKqI/sF4Can720pWujeclv2dJ0KcTaTrNrFbZqptY2sH+KnxIHu18TWf4iH ELMgaIcWtw1sBZeBFVnT7RT/QHcRXNwdHNeiPtbZ+uEfE0n7TBOjGVb+IzBVN9Tr CECSgRkgM8cz1HoHQu1RHXz4j413VC4= -----END CERTIFICATE-----Generated at Sat May 31 17:22:03 2025 by rpki-client