$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft File: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft (raw, json) Hash identifier: exll+DnarxkuwGDK/yAmS/uF0gQVXoY2dUHi+NYjfmY= Subject key identifier: 17:65:A8:FC:7F:F9:10:67:CF:79:0E:C9:69:13:29:65:5C:30:93:35 Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07 Certificate issuer: /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft Manifest number: 0C Signing time: Sat 31 May 2025 07:38:37 +0000 Manifest this update: Sat 31 May 2025 07:38:36 +0000 Manifest next update: Sat 07 Jun 2025 07:38:36 +0000 Files and hashes: 1: J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl (hash: /Hyp6FMoBLFmzULBBRanljQMrO5ncMgJj0iFefhAUrM=) 2: 1CF72A482B0C11F08B7A2511C4F9AE02.roa (hash: 2ofBFHApjBEiLo4MH3QZR4kbgOi0f02WpjAlcU00vM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507 Validity Not Before: May 31 07:38:36 2025 GMT Not After : Jun 7 07:38:36 2025 GMT Subject: CN=683ab1fd-7323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:d0:3d:aa:54:46:aa:57:c8:84:c8:a0:d2: bf:e2:49:75:5d:a1:31:2b:0e:2b:30:dc:75:a5:26: 47:c1:8b:fc:0b:97:fc:66:b2:4f:86:f6:80:6b:44: 13:3b:08:d8:f9:17:61:fc:3b:f2:eb:34:e4:c1:06: 22:36:fe:aa:f0:cc:9b:42:21:c2:c9:f6:d8:4e:ce: 4d:67:34:c7:b7:ac:2b:ff:0a:37:57:19:60:14:a4: 8c:0e:df:3a:6b:b8:13:b8:18:06:d8:ca:dc:5b:93: e9:e3:22:1f:e2:5d:d1:46:1c:7d:a1:d0:40:e2:c4: c8:67:0a:4f:d0:36:be:11:c4:a9:6e:1c:11:c8:30: 22:a9:27:81:00:34:7d:57:42:6f:c8:2f:d0:31:a2: 75:3f:23:24:2c:a0:55:0f:c3:af:3e:27:0b:4f:d1: 63:fe:61:b7:49:f3:b0:71:49:36:51:76:19:b9:e3: 67:ed:c9:e9:14:20:a2:68:9f:8e:44:66:5b:0c:97: ea:0f:d9:55:0d:3e:5c:a3:7c:ed:93:c5:0d:0c:29: d8:98:c0:99:b5:7f:e3:b3:60:8b:3a:6d:92:71:c3: 6f:c6:4c:ce:94:bf:14:5a:1f:b1:53:9e:ca:75:43: f9:4d:01:9d:35:03:b1:24:c5:a7:5e:a4:f7:73:b5: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:65:A8:FC:7F:F9:10:67:CF:79:0E:C9:69:13:29:65:5C:30:93:35 X509v3 Authority Key Identifier: keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:eb:b3:11:79:f0:c6:69:3e:64:3a:64:19:98:f9:67:bf:3a: 58:15:0a:b6:fc:38:be:7f:7b:e9:1d:96:9f:e8:84:00:3e:40: a7:0c:d2:19:2c:d8:8e:86:b8:02:ba:13:59:10:df:b3:ea:f4: c2:be:74:f8:ad:e3:09:bd:9a:57:62:92:86:ff:aa:26:cd:c2: c1:bb:c7:2f:7e:0c:71:e9:41:dd:23:81:ac:75:44:90:f2:b9: d2:15:ee:9a:46:9f:4a:10:fa:36:55:b3:d2:39:ed:fb:d8:a4: 28:b0:c6:b3:d1:85:3c:f6:04:e7:31:ee:0f:60:83:10:c9:23: 5d:51:d7:4b:ff:57:ee:28:6f:e6:ca:6f:67:1b:15:a4:d6:ec: 11:51:0c:77:82:5b:11:24:0a:fc:ce:55:f7:fe:62:ea:26:c9: 2a:3b:a8:54:50:93:30:ed:ad:c8:cb:82:bd:d3:59:d5:b6:0c: d7:23:92:1d:f8:70:22:3c:15:84:b6:93:f7:d9:80:01:8f:70: b1:61:6d:f3:5e:9b:5a:49:71:2d:03:de:6e:1a:f3:44:d7:f6: 8e:69:f5:00:7b:07:93:93:14:5e:89:12:5a:fe:66:6c:df:2b: 10:7c:06:62:84:85:28:91:7b:49:c4:38:e5:af:44:44:f0:57: 84:0c:72:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTU1OTExMC8GA1UEBRMoMjdGNUFEQTlBMTcxMzA3MzkzMTA5Mzg0NTlCMTRBREEy REQyRjUwNzAeFw0yNTA1MzEwNzM4MzZaFw0yNTA2MDcwNzM4MzZaMBgxFjAUBgNV BAMTDTY4M2FiMWZkLTczMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAE9A9qlRGqlfIhMig0r/iSXVdoTErDisw3HWlJkfBi/wLl/xmsk+G9oBrRBM7 CNj5F2H8O/LrNOTBBiI2/qrwzJtCIcLJ9thOzk1nNMe3rCv/CjdXGWAUpIwO3zpr uBO4GAbYytxbk+njIh/iXdFGHH2h0EDixMhnCk/QNr4RxKluHBHIMCKpJ4EANH1X Qm/IL9AxonU/IyQsoFUPw68+JwtP0WP+YbdJ87BxSTZRdhm542ftyekUIKJon45E ZlsMl+oP2VUNPlyjfO2TxQ0MKdiYwJm1f+OzYIs6bZJxw2/GTM6UvxRaH7FTnsp1 Q/lNAZ01A7EkxadepPdztYqdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF2Wo/H/5 EGfPeQ7JaRMpZVwwkzUwHwYDVR0jBBgwFoAUJ/WtqaFxMHOTEJOEWbFK2i3S9Qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxNTU5LzI3QzJFM0U2MkIw QjExRjBCOTJFQ0Y4MUM0RjlBRTAyL0pfV3RxYUZ4TUhPVEVKT0VXYkZLMmkzUzlR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSl9XdHFhRnhNSE9URUpPRVdiRksyaTNTOVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx NTU5LzI3QzJFM0U2MkIwQjExRjBCOTJFQ0Y4MUM0RjlBRTAyL0pfV3RxYUZ4TUhP VEVKT0VXYkZLMmkzUzlRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTrsxF58MZpPmQ6ZBmY+We/OlgVCrb8OL5/e+kdlp/ohAA+QKcM0hks 2I6GuAK6E1kQ37Pq9MK+dPit4wm9mldikob/qibNwsG7xy9+DHHpQd0jgax1RJDy udIV7ppGn0oQ+jZVs9I57fvYpCiwxrPRhTz2BOcx7g9ggxDJI11R10v/V+4ob+bK b2cbFaTW7BFRDHeCWxEkCvzOVff+YuomySo7qFRQkzDtrcjLgr3TWdW2DNcjkh34 cCI8FYS2k/fZgAGPcLFhbfNem1pJcS0D3m4a80TX9o5p9QB7B5OTFF6JElr+Zmzf KxB8BmKEhSiRe0nEOOWvRETwV4QMcrA= -----END CERTIFICATE-----Generated at Sat May 31 17:20:42 2025 by rpki-client