$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: EW3WU26FERqgICy8b+ER2J3GuqDTBRca03MJYoylcg4= Subject key identifier: 95:66:3E:9D:B0:A1:8B:1A:87:68:95:21:7E:A9:DC:B8:CE:93:A9:6A Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C29 Signing time: Fri 30 May 2025 18:48:25 +0000 Manifest this update: Fri 30 May 2025 18:48:24 +0000 Manifest next update: Fri 06 Jun 2025 18:48:24 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: C0WLTxu1Th9Qsh7aJUxwtVJUl5pLTxzDg5MO81hWBPA=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: May 30 18:48:24 2025 GMT Not After : Jun 6 18:48:24 2025 GMT Subject: CN=6839fd78-2278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:0a:6c:39:16:82:3c:0f:37:ad:15:1e:d9: b1:e9:a7:97:87:9e:87:b3:89:77:68:50:33:3c:f8: 40:7f:b4:d7:a9:4c:37:91:c0:58:ca:37:ba:a7:e9: fe:67:5e:70:d0:fc:db:21:c8:4e:43:32:d7:d1:86: c8:2b:15:a8:3c:dd:1e:20:b5:9b:f7:e8:08:42:00: 71:f6:0d:6a:bd:00:ad:69:0e:a3:c4:a3:0f:5b:43: 7a:e0:54:88:19:46:60:70:85:93:12:37:4e:0e:30: 6a:cd:7d:65:aa:cd:ce:99:da:87:2c:e9:2b:01:bc: f0:2e:1e:7a:bc:ca:f0:93:a9:40:92:e7:92:50:35: 3c:14:ff:59:10:6b:c9:d2:7d:b5:f1:c5:c2:64:96: 96:99:89:31:e6:0e:14:b7:b8:11:83:7f:45:24:30: 7d:62:94:9e:b0:aa:4e:f6:59:58:c2:68:4a:f4:3e: 9c:4c:b2:cb:2c:6f:89:7b:f1:82:d3:2f:b9:0c:93: 7d:41:76:5e:33:8c:ee:13:a1:3c:f3:a7:f4:ff:81: c8:86:27:20:19:5c:3e:c5:fd:12:b7:1b:b6:c5:d4: 0e:19:17:91:df:ab:0d:9d:68:7b:23:f9:40:7e:c4: 60:44:75:4b:22:94:41:a2:aa:d2:73:31:84:e6:b9: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:3E:9D:B0:A1:8B:1A:87:68:95:21:7E:A9:DC:B8:CE:93:A9:6A X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d7:f3:fe:b4:9c:c6:ea:07:be:57:a4:b7:96:1d:2c:e2:31: a0:42:2e:0c:49:5a:db:40:4d:d5:75:9f:2c:35:b2:5c:b8:a5: ea:f4:91:ec:23:0a:11:f0:c5:36:5b:2c:b5:f6:17:59:68:bd: 88:87:af:c6:fb:9d:56:b0:be:a8:be:a2:50:b3:1d:19:2f:70: 6e:38:20:87:73:b2:4f:25:ea:54:da:bf:48:87:2e:a6:82:a9: 44:51:cf:b5:48:c0:a8:89:79:c4:29:f7:9b:1f:a1:8b:73:9a: 77:48:af:e6:20:c7:1a:50:87:b4:a5:9a:6f:03:0e:87:eb:ef: 3e:ae:84:b2:0d:f6:58:cd:b3:a3:65:49:fa:d2:27:4c:67:6f: c9:9a:3d:d3:90:15:80:8b:9b:06:f5:eb:54:3d:40:ea:ee:99: 3c:fb:38:7b:c3:86:24:a8:99:60:01:a9:84:fa:20:22:e3:6b: 0c:5e:74:86:8b:a6:6c:10:47:44:19:ee:41:44:5d:95:32:2b: e8:1a:74:59:b8:8e:19:6a:c7:9d:e6:28:e9:8e:14:40:93:2c: 85:7e:a9:63:a8:21:9d:25:18:63:6f:88:c7:d6:4d:f8:9b:81: 25:ab:78:e9:cd:a6:3b:dc:57:9a:be:f3:8c:6e:2d:2b:2a:c3: d2:10:61:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwNTMwMTg0ODI0WhcNMjUwNjA2MTg0ODI0WjAYMRYwFAYD VQQDEw02ODM5ZmQ3OC0yMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNwKbDkWgjwPN60VHtmx6aeXh56Hs4l3aFAzPPhAf7TXqUw3kcBYyje6p+n+ Z15w0PzbIchOQzLX0YbIKxWoPN0eILWb9+gIQgBx9g1qvQCtaQ6jxKMPW0N64FSI GUZgcIWTEjdODjBqzX1lqs3OmdqHLOkrAbzwLh56vMrwk6lAkueSUDU8FP9ZEGvJ 0n218cXCZJaWmYkx5g4Ut7gRg39FJDB9YpSesKpO9llYwmhK9D6cTLLLLG+Je/GC 0y+5DJN9QXZeM4zuE6E886f0/4HIhicgGVw+xf0Stxu2xdQOGReR36sNnWh7I/lA fsRgRHVLIpRBoqrSczGE5rlIbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVmPp2w oYsah2iVIX6p3LjOk6lqMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ1/P+tJzG6ge+V6S3lh0s4jGgQi4MSVrbQE3VdZ8sNbJcuKXq9JHs IwoR8MU2Wyy19hdZaL2Ih6/G+51WsL6ovqJQsx0ZL3BuOCCHc7JPJepU2r9Ihy6m gqlEUc+1SMCoiXnEKfebH6GLc5p3SK/mIMcaUIe0pZpvAw6H6+8+roSyDfZYzbOj ZUn60idMZ2/Jmj3TkBWAi5sG9etUPUDq7pk8+zh7w4YkqJlgAamE+iAi42sMXnSG i6ZsEEdEGe5BRF2VMivoGnRZuI4Zased5ijpjhRAkyyFfqljqCGdJRhjb4jH1k34 m4Elq3jpzaY73FeavvOMbi0rKsPSEGHF -----END CERTIFICATE-----Generated at Sat May 31 17:10:18 2025 by rpki-client