$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft File: jZIwmM1n9tG_JM--LD3KC2Zau4w.mft (raw, json) Hash identifier: tfjVw2Be30uHCDYPGfWoqEZobyFhDDgCwmnRbPpnowc= Subject key identifier: B8:BC:19:C4:A6:23:B6:B2:22:DE:57:F4:C9:E4:8E:B2:06:B9:52:3F Authority key identifier: 8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C Certificate issuer: /CN=A9148B17/serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft Manifest number: 013C Signing time: Sat 31 May 2025 04:09:44 +0000 Manifest this update: Sat 31 May 2025 04:09:43 +0000 Manifest next update: Sat 07 Jun 2025 04:09:43 +0000 Files and hashes: 1: jZIwmM1n9tG_JM--LD3KC2Zau4w.crl (hash: LH65LM6zqEPZmY2JWR2hdRwuKTZ1NPwsLlGB/KY0MM8=) 2: 4495F306772E11EEB7DE544FC4F9AE02.roa (hash: ccDaM+xIQE3p2Y5zhdqiVD5sdxLAr7SXV+gu36JLnEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B17, serialNumber=8D923098CD67F6D1BF24CFBE2C3DCA0B665ABB8C Validity Not Before: May 31 04:09:43 2025 GMT Not After : Jun 7 04:09:43 2025 GMT Subject: CN=683a8107-ebf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:12:ae:2d:74:cd:18:6d:72:0e:8d:97:e1: b3:e7:35:5f:c2:dc:e4:33:5b:2f:22:ce:69:f7:e1: 0e:8f:47:1c:e4:4a:8c:62:92:f0:e6:d8:d6:6c:72: 16:33:5f:3c:75:97:66:55:c7:9a:46:c3:1a:48:dd: d8:be:0a:43:92:ea:50:16:35:f4:43:64:1d:40:4e: e6:c0:30:42:dc:3f:09:f4:4c:89:45:0b:f5:b2:e9: 78:b5:1a:d0:d0:29:43:12:5c:1a:6e:02:ed:0f:7d: a1:eb:80:03:d8:84:d7:b8:3b:b5:a6:dc:82:ab:b7: e1:8e:89:88:63:0e:be:44:0e:35:71:1f:fc:07:13: b1:68:4f:dd:84:46:3e:d9:09:bd:ea:d4:c8:c4:37: 5a:1d:5d:55:9e:1a:fd:29:3c:51:ae:dc:75:29:e5: 5c:0f:35:18:59:ad:b2:30:51:4e:87:80:7b:d8:6e: 6c:41:b7:21:1d:57:d2:46:3a:a7:c2:f1:ec:f5:98: e9:60:0c:c8:5a:2c:1f:13:e2:28:d1:f2:be:43:6b: 75:46:2d:23:68:54:f3:0e:30:75:60:8f:10:57:cc: 2f:51:90:0e:ab:1f:76:94:56:57:a2:22:ee:3e:03: 46:f5:4c:1f:a2:47:37:ce:4c:dc:82:ce:b9:e9:ff: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BC:19:C4:A6:23:B6:B2:22:DE:57:F4:C9:E4:8E:B2:06:B9:52:3F X509v3 Authority Key Identifier: keyid:8D:92:30:98:CD:67:F6:D1:BF:24:CF:BE:2C:3D:CA:0B:66:5A:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZIwmM1n9tG_JM--LD3KC2Zau4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B17/EA4B165E68ED11EEB4B5D362C4F9AE02/jZIwmM1n9tG_JM--LD3KC2Zau4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:64:25:f9:32:45:0c:5f:a5:6f:9b:ec:a0:35:07:3f:fd: 47:c5:1f:0e:27:3e:c5:c7:91:27:79:2e:10:d7:5f:49:fc:d1: a7:fe:4d:29:6a:ff:bc:bd:91:81:45:87:8e:77:4f:af:b3:36: c3:c9:71:e0:50:2c:d3:bb:54:9d:b3:80:8a:3c:49:88:99:36: 67:bf:4e:95:3f:a1:4d:60:f3:aa:2c:75:ff:a6:df:92:75:a2: 53:19:b0:08:45:a9:ca:22:99:b5:c6:f1:a4:25:1a:dd:79:89: 48:c5:5b:6f:ab:dd:e8:57:b8:28:6e:e8:c1:77:e4:12:7c:5f: 07:30:28:9f:08:61:a3:81:78:7e:e4:5b:00:59:4a:08:cd:81: be:f5:f0:b7:df:87:d7:4d:05:d9:59:ad:ee:49:81:a2:a4:99: 17:80:19:c8:4e:9c:0d:09:2d:68:ba:69:73:5c:b5:94:97:a2: 19:cb:7b:24:23:8a:71:e0:e2:cf:66:30:fc:8f:c3:00:59:8a: b7:21:33:7a:05:12:ff:7d:1b:6b:43:11:1d:ec:a0:d9:1c:d8: a9:9e:60:7e:76:ed:9a:05:50:80:90:d1:a5:5a:c6:57:a3:84: e2:da:30:61:dd:30:f3:a9:41:ea:e9:d4:4d:55:04:f0:28:fd: df:29:29:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTcxMTAvBgNVBAUTKDhEOTIzMDk4Q0Q2N0Y2RDFCRjI0Q0ZCRTJDM0RDQTBC NjY1QUJCOEMwHhcNMjUwNTMxMDQwOTQzWhcNMjUwNjA3MDQwOTQzWjAYMRYwFAYD VQQDEw02ODNhODEwNy1lYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjkSri10zRhtcg6Nl+Gz5zVfwtzkM1svIs5p9+EOj0cc5EqMYpLw5tjWbHIW M188dZdmVceaRsMaSN3YvgpDkupQFjX0Q2QdQE7mwDBC3D8J9EyJRQv1sul4tRrQ 0ClDElwabgLtD32h64AD2ITXuDu1ptyCq7fhjomIYw6+RA41cR/8BxOxaE/dhEY+ 2Qm96tTIxDdaHV1Vnhr9KTxRrtx1KeVcDzUYWa2yMFFOh4B72G5sQbchHVfSRjqn wvHs9ZjpYAzIWiwfE+Io0fK+Q2t1Ri0jaFTzDjB1YI8QV8wvUZAOqx92lFZXoiLu PgNG9Uwfokc3zkzcgs656f9x6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi8GcSm I7ayIt5X9MnkjrIGuVI/MB8GA1UdIwQYMBaAFI2SMJjNZ/bRvyTPviw9ygtmWruM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxNy9FQTRCMTY1RTY4 RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0R19KTS0tTEQzS0MyWmF1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paSXdtTTFuOXRHX0pNLS1MRDNLQzJaYXU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEIxNy9FQTRCMTY1RTY4RUQxMUVFQjRCNUQzNjJDNEY5QUUwMi9qWkl3bU0xbjl0 R19KTS0tTEQzS0MyWmF1NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqGQl+TJFDF+lb5vsoDUHP/1HxR8OJz7Fx5EneS4Q119J/NGn/k0p av+8vZGBRYeOd0+vszbDyXHgUCzTu1Sds4CKPEmImTZnv06VP6FNYPOqLHX/pt+S daJTGbAIRanKIpm1xvGkJRrdeYlIxVtvq93oV7gobujBd+QSfF8HMCifCGGjgXh+ 5FsAWUoIzYG+9fC334fXTQXZWa3uSYGipJkXgBnITpwNCS1oumlzXLWUl6IZy3sk I4px4OLPZjD8j8MAWYq3ITN6BRL/fRtrQxEd7KDZHNipnmB+du2aBVCAkNGlWsZX o4Ti2jBh3TDzqUHq6dRNVQTwKP3fKSnw -----END CERTIFICATE-----Generated at Sat May 31 17:28:54 2025 by rpki-client