$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft File: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft (raw, json) Hash identifier: sS0pSK+t+YI+pu3C3VHWPrfhHbBbNl4bAPyq84N1dWg= Subject key identifier: 40:4F:8B:AC:2E:3C:4F:8B:F8:C1:E9:9A:9F:3D:A0:1E:BD:2B:F7:79 Authority key identifier: 25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 Certificate issuer: /CN=A9160A05/serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft Manifest number: 7F Signing time: Sat 31 May 2025 06:14:08 +0000 Manifest this update: Sat 31 May 2025 06:14:07 +0000 Manifest next update: Sat 07 Jun 2025 06:14:07 +0000 Files and hashes: 1: JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl (hash: 9pE0Lg++B/ydHN6SuuV1nxQneNB4Fj9ag9PZLLo5Zd8=) 2: D292C0D27E1A11EFAE842E12C4F9AE02.roa (hash: /pzh/4JNMJFd04w0J0X6gL+Cxb0zDVOHsambsb667Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=25A0B8B0C10415FD406DB203236659C5F163AE43 Validity Not Before: May 31 06:14:07 2025 GMT Not After : Jun 7 06:14:07 2025 GMT Subject: CN=683a9e2f-88bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:18:27:6a:aa:7f:76:c8:56:b5:9f:d5:7e: 95:07:44:a3:40:c1:ed:3e:07:56:96:a6:b5:cb:0f: 5e:17:8f:87:7a:af:13:c2:fa:61:13:a8:59:66:5b: b4:a2:b4:a3:46:33:ed:d3:49:14:b1:1a:42:23:52: 46:75:bc:42:ea:63:50:34:45:d5:41:6b:64:f4:e8: 4c:a9:83:bf:81:67:11:9f:e0:66:52:54:95:c5:54: 7c:e9:31:ed:1a:c6:68:53:13:09:af:79:de:42:64: 93:77:ba:a0:9a:94:ef:43:9f:5e:b4:d9:1a:62:d6: 67:f0:fd:aa:58:bd:85:24:9f:4f:1c:57:ad:37:ac: 58:e4:94:fb:05:7e:b9:de:25:c2:72:71:c7:f5:ab: 3e:44:bb:b5:74:6c:4c:9a:16:b7:bd:c5:33:60:e2: d5:38:21:00:66:56:6a:78:25:7a:a9:0d:ef:ea:9b: 15:4b:95:21:f1:ea:ca:c6:e7:41:0f:e2:71:12:fb: d6:d3:16:cf:ce:d8:a2:a8:a7:94:12:fd:70:75:07: e9:1a:bc:17:47:c3:25:a2:ef:17:10:07:d2:2a:df: d1:ad:67:b2:39:28:7d:de:52:57:f1:66:11:56:6c: b3:b7:39:06:15:c1:bf:53:d1:5f:f5:0e:7b:88:f5: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4F:8B:AC:2E:3C:4F:8B:F8:C1:E9:9A:9F:3D:A0:1E:BD:2B:F7:79 X509v3 Authority Key Identifier: keyid:25:A0:B8:B0:C1:04:15:FD:40:6D:B2:03:23:66:59:C5:F1:63:AE:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/DA5D1D627C8A11EF8FAB6909C4F9AE02/JaC4sMEEFf1AbbIDI2ZZxfFjrkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8f:12:0d:8c:b6:7d:25:1a:71:79:19:23:4a:29:4a:db:90: 43:31:8c:c4:ba:03:52:c2:ab:07:8b:33:58:7f:7d:71:04:2a: c0:ca:eb:cb:b6:35:ed:77:52:0f:fd:c2:b2:3e:1c:e4:56:0c: 42:d0:f7:0d:d6:76:a7:f1:47:d1:77:6a:5c:09:d0:3b:14:5e: 74:8e:98:19:02:fe:40:9e:bb:62:e4:60:df:b1:53:fc:1e:33: 41:d0:a3:ca:8a:57:9b:a5:2e:9c:94:a8:19:5a:4b:77:6d:1d: ab:bf:77:d3:ce:f2:f1:f7:76:7d:90:26:05:d1:8f:e1:06:96: d5:6f:dd:84:89:fb:fb:95:54:e0:dc:5d:29:94:93:c5:cc:5e: 82:41:7e:b2:e2:93:a9:e4:ec:d7:e4:67:e1:8f:77:cf:a0:bb: 74:98:68:a0:0d:05:cc:8e:f9:24:0b:f0:95:07:c5:07:12:f5: 90:f5:9e:96:7a:dd:66:ab:91:61:12:98:c2:38:7e:f1:fb:df: 37:58:e7:c2:d7:de:91:49:db:2a:a3:7c:ef:b8:46:86:8d:18: 3f:4e:5d:df:17:26:fc:13:43:19:e8:a1:1a:5e:ae:14:da:d4: d8:df:f7:e9:8c:2e:33:ff:8e:76:13:74:b4:01:a9:45:5e:b3: 86:e4:3d:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDI1QTBCOEIwQzEwNDE1RkQ0MDZEQjIwMzIzNjY1OUM1 RjE2M0FFNDMwHhcNMjUwNTMxMDYxNDA3WhcNMjUwNjA3MDYxNDA3WjAYMRYwFAYD VQQDEw02ODNhOWUyZi04OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4oYJ2qqf3bIVrWf1X6VB0SjQMHtPgdWlqa1yw9eF4+Heq8TwvphE6hZZlu0 orSjRjPt00kUsRpCI1JGdbxC6mNQNEXVQWtk9OhMqYO/gWcRn+BmUlSVxVR86THt GsZoUxMJr3neQmSTd7qgmpTvQ59etNkaYtZn8P2qWL2FJJ9PHFetN6xY5JT7BX65 3iXCcnHH9as+RLu1dGxMmha3vcUzYOLVOCEAZlZqeCV6qQ3v6psVS5Uh8erKxudB D+JxEvvW0xbPztiiqKeUEv1wdQfpGrwXR8Mlou8XEAfSKt/RrWeyOSh93lJX8WYR VmyztzkGFcG/U9Ff9Q57iPVbAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBPi6wu PE+L+MHpmp89oB69K/d5MB8GA1UdIwQYMBaAFCWguLDBBBX9QG2yAyNmWcXxY65D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EQTVEMUQ2MjdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZmMUFiYklESTJaWnhmRmpy a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phQzRzTUVFRmYxQWJiSURJMlpaeGZGanJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EQTVEMUQ2MjdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9KYUM0c01FRUZm MUFiYklESTJaWnhmRmpya00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfjxINjLZ9JRpxeRkjSilK25BDMYzEugNSwqsHizNYf31xBCrAyuvL tjXtd1IP/cKyPhzkVgxC0PcN1nan8UfRd2pcCdA7FF50jpgZAv5Anrti5GDfsVP8 HjNB0KPKilebpS6clKgZWkt3bR2rv3fTzvLx93Z9kCYF0Y/hBpbVb92Eifv7lVTg 3F0plJPFzF6CQX6y4pOp5OzX5Gfhj3fPoLt0mGigDQXMjvkkC/CVB8UHEvWQ9Z6W et1mq5FhEpjCOH7x+983WOfC196RSdsqo3zvuEaGjRg/Tl3fFyb8E0MZ6KEaXq4U 2tTY3/fpjC4z/452E3S0AalFXrOG5D06 -----END CERTIFICATE-----Generated at Sat May 31 16:49:08 2025 by rpki-client