$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft File: JcIFLO89jt7xrjiFX-f7EbRXgRU.mft (raw, json) Hash identifier: gBDemeU0u0p47B2LEX5hGZENcYh+CYESEX0T6Ca5bF8= Subject key identifier: 03:E5:84:BE:BE:5C:D4:91:C1:6F:02:62:C1:DB:AF:1B:C7:1C:84:2D Authority key identifier: 25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 Certificate issuer: /CN=A9148F18/serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft Manifest number: 0734 Signing time: Fri 30 May 2025 21:58:28 +0000 Manifest this update: Fri 30 May 2025 21:58:28 +0000 Manifest next update: Fri 06 Jun 2025 21:58:28 +0000 Files and hashes: 1: JcIFLO89jt7xrjiFX-f7EbRXgRU.crl (hash: 3MoVBqpgwJ+/PB4gZZ4o3wFVsh2I0W85de6tQPYbgUM=) 2: 325A2ABA2F6D11EBAE27D010C4F9AE02.roa (hash: pS+rknsKIRFZxced71y+WLIWbrwwq2gZOSPnZeQrMOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F18, serialNumber=25C2052CEF3D8EDEF1AE38855FE7FB11B4578115 Validity Not Before: May 30 21:58:28 2025 GMT Not After : Jun 6 21:58:28 2025 GMT Subject: CN=683a2a04-47a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:d1:ed:35:95:16:b4:79:5a:44:6a:0e:44: f6:a9:5f:da:2d:d7:89:9d:29:6d:5a:b7:b6:64:53: 49:45:09:08:5e:3f:92:75:c2:5d:ac:54:c5:a1:6c: c7:12:d6:2e:ae:6b:1b:c0:1c:f2:50:e4:80:e1:ab: 65:e0:bc:da:59:ee:0e:68:b6:82:a5:34:34:82:89: 13:db:f0:de:ed:89:ba:40:06:e2:d6:36:16:95:33: 68:99:ca:9b:21:35:79:5d:d5:d7:a9:e9:f2:a0:98: 19:d9:d0:e3:19:77:f4:b8:b2:61:a4:70:3b:48:8c: 1a:e7:e8:fe:55:70:26:1b:e6:82:16:35:1f:b1:29: 7a:eb:d9:b1:bb:cb:a8:22:fb:67:d9:b2:96:69:ff: c1:a1:72:13:12:17:80:df:af:52:a5:ab:14:54:e0: f5:a5:9e:eb:6e:59:3d:5a:bd:06:7d:4b:55:95:ac: ed:18:24:bb:a1:df:ab:dd:86:bf:4d:00:43:61:11: eb:89:1b:a6:19:bd:8b:78:35:e5:d8:8a:1b:41:50: fc:99:74:66:e0:ca:87:76:3b:44:43:78:b7:51:1a: 94:f9:02:c2:76:48:3c:c6:b3:15:d0:2d:df:d2:ef: 58:eb:53:c8:30:c0:bf:c4:5b:4b:b4:71:c0:36:aa: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E5:84:BE:BE:5C:D4:91:C1:6F:02:62:C1:DB:AF:1B:C7:1C:84:2D X509v3 Authority Key Identifier: keyid:25:C2:05:2C:EF:3D:8E:DE:F1:AE:38:85:5F:E7:FB:11:B4:57:81:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcIFLO89jt7xrjiFX-f7EbRXgRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F18/6C14168E2F6411EBB5CFCF5EC4F9AE02/JcIFLO89jt7xrjiFX-f7EbRXgRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:8e:53:7c:08:5d:ab:ec:fb:4f:18:b4:31:49:e4:f6:6a: 5e:0e:27:e6:ca:26:f0:44:5b:07:d8:16:e3:81:7a:d2:86:17: e8:22:a6:16:c9:98:c2:4f:fb:5e:93:63:9d:e3:e9:44:70:9f: ae:77:23:19:d4:6d:7c:9d:95:b7:9f:3e:f7:3f:b0:3d:ca:eb: d3:ad:d9:31:41:d8:ee:e3:71:d6:8c:ec:74:57:7e:f4:a3:13: 8e:71:49:bc:54:fb:5a:fc:a5:c4:4b:e6:ae:b2:e8:0b:e3:74: b3:b1:e8:66:ff:a7:34:da:66:9e:70:15:59:ad:7e:c4:26:e6: bb:06:66:f3:b9:c7:af:a9:ab:60:e4:77:de:22:66:1b:6d:83: 7f:8f:79:46:0f:75:9e:c4:db:78:24:e8:c6:78:c6:40:01:58: 7c:cc:e8:37:8e:9e:04:b7:b7:44:5e:7d:8d:da:19:ae:2f:46: 3e:f4:f2:d6:2b:1b:e7:e8:26:3c:55:42:dd:33:fb:3b:f1:4a: 4b:c0:c8:c2:a6:10:7a:07:47:02:bf:d6:d2:78:96:62:67:d1: 35:af:8b:f2:82:03:2f:bd:2e:8f:63:e0:ff:0b:d9:30:51:a9: d8:aa:4f:33:6e:83:f9:24:7f:ec:99:ef:77:6b:98:1f:e1:7b: dd:76:6c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGMTgxMTAvBgNVBAUTKDI1QzIwNTJDRUYzRDhFREVGMUFFMzg4NTVGRTdGQjEx QjQ1NzgxMTUwHhcNMjUwNTMwMjE1ODI4WhcNMjUwNjA2MjE1ODI4WjAYMRYwFAYD VQQDEw02ODNhMmEwNC00N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxnR7TWVFrR5WkRqDkT2qV/aLdeJnSltWre2ZFNJRQkIXj+SdcJdrFTFoWzH EtYurmsbwBzyUOSA4atl4LzaWe4OaLaCpTQ0gokT2/De7Ym6QAbi1jYWlTNomcqb ITV5XdXXqenyoJgZ2dDjGXf0uLJhpHA7SIwa5+j+VXAmG+aCFjUfsSl669mxu8uo Ivtn2bKWaf/BoXITEheA369SpasUVOD1pZ7rblk9Wr0GfUtVlaztGCS7od+r3Ya/ TQBDYRHriRumGb2LeDXl2IobQVD8mXRm4MqHdjtEQ3i3URqU+QLCdkg8xrMV0C3f 0u9Y61PIMMC/xFtLtHHANqrf+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPlhL6+ XNSRwW8CYsHbrxvHHIQtMB8GA1UdIwQYMBaAFCXCBSzvPY7e8a44hV/n+xG0V4EV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEYxOC82QzE0MTY4RTJG NjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0N3hyamlGWC1mN0ViUlhn UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjSUZMTzg5anQ3eHJqaUZYLWY3RWJSWGdSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEYxOC82QzE0MTY4RTJGNjQxMUVCQjVDRkNGNUVDNEY5QUUwMi9KY0lGTE84OWp0 N3hyamlGWC1mN0ViUlhnUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQY5TfAhdq+z7Txi0MUnk9mpeDifmyibwRFsH2BbjgXrShhfoIqYW yZjCT/tek2Od4+lEcJ+udyMZ1G18nZW3nz73P7A9yuvTrdkxQdju43HWjOx0V370 oxOOcUm8VPta/KXES+ausugL43Szsehm/6c02maecBVZrX7EJua7Bmbzucevqatg 5HfeImYbbYN/j3lGD3WexNt4JOjGeMZAAVh8zOg3jp4Et7dEXn2N2hmuL0Y+9PLW Kxvn6CY8VULdM/s78UpLwMjCphB6B0cCv9bSeJZiZ9E1r4vyggMvvS6PY+D/C9kw UanYqk8zboP5JH/sme93a5gf4XvddmxM -----END CERTIFICATE-----Generated at Sat May 31 17:50:43 2025 by rpki-client