$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft File: jKig9ls44oUnna2vt9k_eFFssRg.mft (raw, json) Hash identifier: HGpznTwwnB0pMJNHyye6ei4Qk318FOgJOrStTAnTGbw= Subject key identifier: 09:D9:AE:65:E6:E3:EC:CF:74:83:EF:AF:8E:68:40:0F:AD:2B:AE:63 Authority key identifier: 8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 Certificate issuer: /CN=A9168494/serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft Manifest number: 027E Signing time: Sat 31 May 2025 01:50:19 +0000 Manifest this update: Sat 31 May 2025 01:50:18 +0000 Manifest next update: Sat 07 Jun 2025 01:50:18 +0000 Files and hashes: 1: jKig9ls44oUnna2vt9k_eFFssRg.crl (hash: z70CF4twsx8MXBeV2qDNwoxj/gItg9riW9tz4pHURq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=8CA8A0F65B38E285279DADAFB7D93F78516CB118 Validity Not Before: May 31 01:50:18 2025 GMT Not After : Jun 7 01:50:18 2025 GMT Subject: CN=683a605a-ffdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:3c:92:36:4c:de:80:0a:69:ac:f9:bf:e6: df:50:3c:6b:56:df:a5:9e:a7:91:1c:67:7c:bb:08: 84:c5:01:3d:93:e7:7d:b7:3f:e3:9e:f4:54:b8:b3: b5:a0:78:63:b1:79:03:c4:5d:18:29:1d:07:f6:29: 67:32:b4:f2:f7:32:dc:c2:a5:88:15:13:67:f5:cc: 81:d4:ab:54:9d:fc:48:68:bb:57:6b:5f:ce:2d:7d: fa:10:4d:68:3f:e5:03:18:7c:bd:15:75:c5:3a:ec: e2:21:0e:14:c6:b5:52:f0:44:f1:ce:b1:51:9b:b5: 8a:28:79:be:09:96:0b:f7:4b:47:d5:f5:a1:18:34: 1a:44:a9:8e:cd:6a:1c:5f:a1:04:ec:eb:b7:6e:fe: f3:13:09:ce:69:2c:bb:ad:e9:77:05:cc:73:7c:2a: e9:61:81:aa:fc:83:fc:38:15:b9:b2:29:fe:86:b3: 1a:24:70:31:b8:0b:2d:55:37:85:49:03:43:a2:78: 19:4a:ea:f8:b3:24:6e:a0:9a:c3:dd:b3:11:c7:ba: b3:1e:0e:1d:b2:06:a2:38:92:77:e9:97:57:e2:c4: e2:f3:cf:4b:ce:2d:24:a4:4a:5d:55:c1:ca:8f:d5: 33:94:ad:fb:cd:e8:ae:0e:1c:f0:ae:1f:19:cd:0b: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D9:AE:65:E6:E3:EC:CF:74:83:EF:AF:8E:68:40:0F:AD:2B:AE:63 X509v3 Authority Key Identifier: keyid:8C:A8:A0:F6:5B:38:E2:85:27:9D:AD:AF:B7:D9:3F:78:51:6C:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jKig9ls44oUnna2vt9k_eFFssRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/3ADE71B2099311EDB21C9B4BC4F9AE02/jKig9ls44oUnna2vt9k_eFFssRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8e:6e:71:db:db:d6:eb:d3:84:6c:2a:d4:85:bf:c8:fb:f7: 85:83:39:0f:b9:85:36:f6:05:02:c6:14:aa:de:3e:2a:ca:b6: 83:9b:70:f8:94:7a:a4:10:8b:e9:28:12:f6:2a:ef:43:c9:f8: 08:d7:37:17:e9:c3:be:21:0a:b3:03:7d:c3:e6:86:20:d7:57: 06:fa:85:c9:c2:ef:61:3a:4f:f2:9e:83:85:d4:2e:5f:43:ee: 1b:e1:1d:ca:be:81:0f:14:48:1d:12:b7:05:cd:78:6b:6d:30: 97:5c:da:7d:34:6c:56:0d:62:83:1a:cc:8a:43:6b:f6:36:59: 40:06:9d:76:da:5c:c7:3f:a4:b7:76:a4:b0:1d:58:60:39:18: 09:be:e0:c6:20:5e:97:c3:58:74:60:b3:5b:1b:15:fc:c3:52: 73:e1:dc:66:0b:78:e6:e2:f0:6a:51:6d:98:68:ee:7e:42:59: 1d:57:5a:d9:c3:91:55:73:54:6c:46:52:d5:73:21:82:7c:88: 8c:c8:1b:f6:37:4e:93:74:4a:c9:14:4e:c0:1c:70:cd:91:89: 64:0e:df:7f:d1:6a:7e:06:e1:65:91:bd:88:37:7c:a9:1a:eb: 50:11:3e:dd:4d:4c:01:ff:60:64:8a:ac:59:88:00:c0:66:67: 2e:fb:88:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKDhDQThBMEY2NUIzOEUyODUyNzlEQURBRkI3RDkzRjc4 NTE2Q0IxMTgwHhcNMjUwNTMxMDE1MDE4WhcNMjUwNjA3MDE1MDE4WjAYMRYwFAYD VQQDEw02ODNhNjA1YS1mZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSY8kjZM3oAKaaz5v+bfUDxrVt+lnqeRHGd8uwiExQE9k+d9tz/jnvRUuLO1 oHhjsXkDxF0YKR0H9ilnMrTy9zLcwqWIFRNn9cyB1KtUnfxIaLtXa1/OLX36EE1o P+UDGHy9FXXFOuziIQ4UxrVS8ETxzrFRm7WKKHm+CZYL90tH1fWhGDQaRKmOzWoc X6EE7Ou3bv7zEwnOaSy7rel3BcxzfCrpYYGq/IP8OBW5sin+hrMaJHAxuAstVTeF SQNDongZSur4syRuoJrD3bMRx7qzHg4dsgaiOJJ36ZdX4sTi889Lzi0kpEpdVcHK j9UzlK37zeiuDhzwrh8ZzQtjdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnZrmXm 4+zPdIPvr45oQA+tK65jMB8GA1UdIwQYMBaAFIyooPZbOOKFJ52tr7fZP3hRbLEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zQURFNzFCMjA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRvVW5uYTJ2dDlrX2VGRnNz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pLaWc5bHM0NG9Vbm5hMnZ0OWtfZUZGc3NSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zQURFNzFCMjA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9qS2lnOWxzNDRv VW5uYTJ2dDlrX2VGRnNzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jm5x29vW69OEbCrUhb/I+/eFgzkPuYU29gUCxhSq3j4qyraDm3D4 lHqkEIvpKBL2Ku9DyfgI1zcX6cO+IQqzA33D5oYg11cG+oXJwu9hOk/ynoOF1C5f Q+4b4R3KvoEPFEgdErcFzXhrbTCXXNp9NGxWDWKDGsyKQ2v2NllABp122lzHP6S3 dqSwHVhgORgJvuDGIF6Xw1h0YLNbGxX8w1Jz4dxmC3jm4vBqUW2YaO5+QlkdV1rZ w5FVc1RsRlLVcyGCfIiMyBv2N06TdErJFE7AHHDNkYlkDt9/0Wp+BuFlkb2IN3yp GutQET7dTUwB/2BkiqxZiADAZmcu+4he -----END CERTIFICATE-----Generated at Sat May 31 15:18:04 2025 by rpki-client