$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft File: JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json) Hash identifier: Wy6x5t+StJxvZAuJj+xxxdxsswABSLMl1KPtyfzmmvs= Subject key identifier: 33:50:5C:AD:2A:6D:FC:58:E5:3A:AE:11:D7:6D:E4:9D:23:03:7B:C3 Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B Certificate issuer: /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft Manifest number: 0103 Signing time: Sat 31 May 2025 04:42:55 +0000 Manifest this update: Sat 31 May 2025 04:42:55 +0000 Manifest next update: Sat 07 Jun 2025 04:42:55 +0000 Files and hashes: 1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: pAHIRQyLj5+um4ucvoU3iZ8X0h1RVj7GzK7JVzcNUiw=) 2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: CD96z1MB6TWn9rZZ43ZACAQ8e/LAtFVDTuQ0/fNw+cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B Validity Not Before: May 31 04:42:55 2025 GMT Not After : Jun 7 04:42:55 2025 GMT Subject: CN=683a88cf-04cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:51:dd:4f:fe:f3:33:5a:00:bd:46:73:5f:f2: 8f:c4:a1:b1:96:ce:6b:f5:09:50:e5:0d:b7:df:94: 95:64:9a:9c:4f:ec:6e:7b:1c:36:48:9f:6e:0c:87: ce:99:df:4d:49:0a:7e:2e:30:45:4e:c7:1e:fc:b8: 6a:4e:27:81:d4:d5:11:e4:69:b8:88:38:88:de:9d: 20:4f:1a:45:61:7c:ff:5a:be:c6:0e:7a:84:3b:45: 06:75:93:75:c9:e2:89:95:4b:ce:b9:d8:c5:e8:1a: 0c:a0:11:a0:5c:a8:2d:ff:c0:93:63:80:44:36:86: 81:c7:be:ae:2c:db:f3:3a:4a:c0:57:08:89:ef:d5: 8d:93:26:3e:07:17:bd:1d:3b:d9:70:d0:ff:2d:29: a9:e2:21:33:35:60:dc:1f:4a:9a:f1:db:3e:83:aa: e9:24:b8:d8:64:91:90:f8:bd:5a:11:67:88:38:e4: 1e:4a:f7:e9:2e:9c:91:cf:78:60:5f:46:0e:01:28: 00:9a:73:e9:e8:a3:f9:ba:4f:0d:b0:f5:a3:df:d7: e3:f1:a0:d3:cd:1e:0f:4c:2f:3d:5b:39:b3:8e:dd: 17:2c:11:00:84:d3:92:9a:15:42:ee:ff:50:51:17: a5:33:ec:26:05:54:08:ec:a5:d6:d1:4b:ca:2b:0a: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:50:5C:AD:2A:6D:FC:58:E5:3A:AE:11:D7:6D:E4:9D:23:03:7B:C3 X509v3 Authority Key Identifier: keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:43:14:a8:b7:4a:78:fa:33:20:e7:11:64:09:2f:09:ea:e4: 79:39:ee:b5:ce:33:2e:7a:cb:ee:1f:5c:43:9a:3d:14:df:97: da:93:69:1f:d1:f7:63:71:54:fd:b4:12:de:5f:50:c6:b3:39: 39:85:4c:7e:2a:d3:7b:90:5c:b0:87:44:c9:a9:6a:fd:54:19: a0:2d:c4:38:a5:57:f4:78:ef:4f:c3:c1:8c:0b:77:6f:2e:f8: 62:0f:c1:5a:1a:1f:81:8c:42:11:20:e3:57:69:58:26:71:79: 92:f2:03:ef:b5:85:92:df:54:2c:a6:57:a8:a9:a1:e0:32:e7: 7a:f9:4d:5b:5f:7b:40:95:a2:46:cc:29:af:6b:7d:ac:05:ce: c0:40:58:34:26:33:c2:a1:34:23:0d:bd:bb:e7:0e:9f:59:26: 7c:61:58:1a:a2:f9:52:f2:35:2d:2a:20:a5:9b:b3:5d:bc:29: e3:e9:b4:c2:6a:c4:8e:c3:38:a0:a8:c0:90:f2:c4:1e:b1:ad: b0:c1:0f:b0:3c:3d:8f:df:38:c4:44:78:53:1f:af:07:0f:71: 30:09:99:83:47:5a:43:dd:a8:28:3f:88:08:a6:d1:19:ad:d5: 59:67:9e:fb:d7:ee:8e:41:8a:51:88:8e:ae:7e:30:b3:96:d6: b1:df:3a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5 NjM3MEZCOEIwHhcNMjUwNTMxMDQ0MjU1WhcNMjUwNjA3MDQ0MjU1WjAYMRYwFAYD VQQDEw02ODNhODhjZi0wNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VHdT/7zM1oAvUZzX/KPxKGxls5r9QlQ5Q2335SVZJqcT+xuexw2SJ9uDIfO md9NSQp+LjBFTsce/LhqTieB1NUR5Gm4iDiI3p0gTxpFYXz/Wr7GDnqEO0UGdZN1 yeKJlUvOudjF6BoMoBGgXKgt/8CTY4BENoaBx76uLNvzOkrAVwiJ79WNkyY+Bxe9 HTvZcND/LSmp4iEzNWDcH0qa8ds+g6rpJLjYZJGQ+L1aEWeIOOQeSvfpLpyRz3hg X0YOASgAmnPp6KP5uk8NsPWj39fj8aDTzR4PTC89Wzmzjt0XLBEAhNOSmhVC7v9Q URelM+wmBVQI7KXW0UvKKwqSiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNQXK0q bfxY5TquEddt5J0jA3vDMB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1 MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3 OXE4ckNjdHlQbHlXTnctNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIQxSot0p4+jMg5xFkCS8J6uR5Oe61zjMuesvuH1xDmj0U35fak2kf 0fdjcVT9tBLeX1DGszk5hUx+KtN7kFywh0TJqWr9VBmgLcQ4pVf0eO9Pw8GMC3dv LvhiD8FaGh+BjEIRIONXaVgmcXmS8gPvtYWS31QspleoqaHgMud6+U1bX3tAlaJG zCmva32sBc7AQFg0JjPCoTQjDb275w6fWSZ8YVgaovlS8jUtKiClm7NdvCnj6bTC asSOwzigqMCQ8sQesa2wwQ+wPD2P3zjERHhTH68HD3EwCZmDR1pD3agoP4gIptEZ rdVZZ5771+6OQYpRiI6ufjCzltax3zqT -----END CERTIFICATE-----Generated at Sat May 31 16:43:53 2025 by rpki-client