$ rpki-client -vvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft File: Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json) Hash identifier: RQf+yypNlWitRHrAKB443pUhifOUC9jg6FkdKv051dM= Subject key identifier: 26:D3:EB:46:27:6F:CA:26:B9:26:60:64:FF:26:06:CA:A9:B5:4D:E5 Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 Certificate issuer: /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft Manifest number: 30 Signing time: Sat 31 May 2025 07:13:55 +0000 Manifest this update: Sat 31 May 2025 07:13:54 +0000 Manifest next update: Sat 07 Jun 2025 07:13:54 +0000 Files and hashes: 1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: 4mpmTMZqn8ET0oYz2jpZpK2tC7KWUbv7P/ALhy4rvbk=) 2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: ddGHr0kpolkDLC4jRmYbLqkLIgOm/5JeTXQQ5En7IJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0 Validity Not Before: May 31 07:13:54 2025 GMT Not After : Jun 7 07:13:54 2025 GMT Subject: CN=683aac32-8c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:25:3d:32:3a:c5:a7:2f:52:6e:b6:30:f6: 4b:1d:c0:58:8a:9a:0d:0f:05:35:67:ec:c1:02:3c: 40:cb:b6:e7:e2:a3:ee:4e:17:d5:f3:62:7b:7e:49: 31:07:58:1f:08:cd:b7:bc:ff:68:c1:b6:d3:2b:a7: e4:3d:e9:47:83:ed:39:19:74:54:be:41:30:bc:80: f6:50:98:50:12:67:b5:1f:ee:16:1b:42:ae:9a:ad: 14:b2:cc:23:84:4e:fa:a5:54:38:8c:09:5e:da:99: 53:f4:c0:ee:4b:ea:64:09:d3:0c:59:60:00:4c:9f: 54:4e:3e:b6:54:ce:54:d6:18:48:51:fb:b2:d4:bb: 60:60:c2:55:a5:33:77:de:ec:1e:85:d8:6a:54:a0: 0b:8d:fd:4a:e8:77:b3:a6:3e:e9:21:b7:86:a3:ce: 56:e6:cf:ef:0b:9a:0c:1f:7f:54:67:48:80:f9:dd: 46:d7:53:c1:e9:48:6a:1b:99:41:1d:7f:8d:1a:7e: c1:78:05:c2:cb:06:40:74:fd:4c:20:16:18:2e:c5: 82:21:42:02:17:39:48:b7:42:30:f0:80:11:fc:eb: 6d:cf:9b:36:63:71:aa:4a:b4:46:76:bf:cf:dc:eb: ea:4d:9a:45:4f:96:4d:5a:64:d0:24:1f:24:49:e0: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D3:EB:46:27:6F:CA:26:B9:26:60:64:FF:26:06:CA:A9:B5:4D:E5 X509v3 Authority Key Identifier: keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f2:74:ae:6c:f0:fa:9e:4e:ac:c1:d8:75:54:94:2d:5e:22: ba:23:eb:ff:14:f1:7b:db:3b:10:10:2c:60:0b:34:14:cd:ab: 0f:b5:f6:a9:c7:36:d3:ae:9c:d1:2b:11:5b:2a:14:c3:87:78: c5:83:f5:96:b5:de:b4:ec:c3:13:ff:bf:80:9c:98:df:af:98: e4:63:2c:8c:86:80:58:0c:9f:c4:74:0c:d0:e9:c7:e3:54:9b: 64:2d:f6:ef:02:98:46:be:bc:71:b0:db:a0:61:43:14:69:5c: 97:13:38:c1:b1:b1:74:93:a0:82:5f:97:f0:f4:a5:ad:20:c7: 19:62:91:0b:16:ce:fe:5b:f2:a7:c4:92:9a:b9:19:44:01:35: 50:e6:09:df:a1:57:17:a1:22:c6:17:c3:a2:2e:8b:d2:29:9b: 89:11:e2:07:60:0b:11:31:f9:96:5a:87:53:28:05:9e:56:82: 48:fd:1d:cc:b9:17:82:d1:0f:8a:aa:0b:aa:f4:60:11:8f:cd: b7:d2:49:d7:c5:40:01:0d:a7:6f:d5:d4:c1:2f:e4:97:ab:e8: ce:58:77:fc:61:4c:3c:72:79:64:d1:ad:dd:45:22:d6:e1:9c: 2e:74:f7:85:58:0f:3c:62:0a:bc:ad:00:10:13:a1:76:31:dd: 8a:1d:4d:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NUZBQjExMC8GA1UEBRMoMjZGOEJEMDNDNUEyQjdBQTcxNzU0NTlFQTA0N0E4ODY3 NjIzOUVFMDAeFw0yNTA1MzEwNzEzNTRaFw0yNTA2MDcwNzEzNTRaMBgxFjAUBgNV BAMTDTY4M2FhYzMyLThjNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvbSU9MjrFpy9SbrYw9ksdwFiKmg0PBTVn7MECPEDLtufio+5OF9XzYnt+STEH WB8Izbe8/2jBttMrp+Q96UeD7TkZdFS+QTC8gPZQmFASZ7Uf7hYbQq6arRSyzCOE TvqlVDiMCV7amVP0wO5L6mQJ0wxZYABMn1ROPrZUzlTWGEhR+7LUu2BgwlWlM3fe 7B6F2GpUoAuN/Urod7OmPukht4ajzlbmz+8Lmgwff1RnSID53UbXU8HpSGobmUEd f40afsF4BcLLBkB0/UwgFhguxYIhQgIXOUi3QjDwgBH8623PmzZjcapKtEZ2v8/c 6+pNmkVPlk1aZNAkHyRJ4Ce9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJtPrRidv yia5JmBk/yYGyqm1TeUwHwYDVR0jBBgwFoAUJvi9A8Wit6pxdUWeoEeohnYjnuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1RkFCL0ZBODYzNzcyRjVB QzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZweGRVV2VvRWVvaG5Zam51 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSnZpOUE4V2l0NnB4ZFVXZW9FZW9obllqbnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 RkFCL0ZBODYzNzcyRjVBQzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZw eGRVV2VvRWVvaG5Zam51QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGrydK5s8PqeTqzB2HVUlC1eIroj6/8U8XvbOxAQLGALNBTNqw+19qnH NtOunNErEVsqFMOHeMWD9Za13rTswxP/v4CcmN+vmORjLIyGgFgMn8R0DNDpx+NU m2Qt9u8CmEa+vHGw26BhQxRpXJcTOMGxsXSToIJfl/D0pa0gxxlikQsWzv5b8qfE kpq5GUQBNVDmCd+hVxehIsYXw6Iui9Ipm4kR4gdgCxEx+ZZah1MoBZ5Wgkj9Hcy5 F4LRD4qqC6r0YBGPzbfSSdfFQAENp2/V1MEv5Jer6M5Yd/xhTDxyeWTRrd1FItbh nC5094VYDzxiCrytABAToXYx3YodTVU= -----END CERTIFICATE-----Generated at Sat May 31 15:09:34 2025 by rpki-client