$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft File: J5ydeYJLogRvE4r2zbijsI8DvrM.mft (raw, json) Hash identifier: 1D2XuaK/BrT414LWoaVksMfkSjjd83gqEHkSlUU0qmY= Subject key identifier: 66:F6:42:9B:7A:55:0A:D5:95:40:EC:7E:58:47:B3:C0:35:34:E0:C2 Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 Certificate issuer: /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft Manifest number: 2A Signing time: Sun 01 Jun 2025 07:30:52 +0000 Manifest this update: Sun 01 Jun 2025 07:30:51 +0000 Manifest next update: Sun 08 Jun 2025 07:30:51 +0000 Files and hashes: 1: J5ydeYJLogRvE4r2zbijsI8DvrM.crl (hash: 5tJNuzX73mVypaxop8KBNu+sUcY4ubT3q506iPFGOv0=) 2: 5A41B0A6057A11F09EADEF0CC4F9AE02.roa (hash: PPN/x2sZl0HJPR4L+M0+9CfV3iBEeqKh59canDo6teY=) 3: 4C559E64054B11F08646F910C4F9AE02.roa (hash: 0Xm3uacvSp3paq390FzXVAQQzWpRRD8IchY/Au4ztQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3 Validity Not Before: Jun 1 07:30:51 2025 GMT Not After : Jun 8 07:30:51 2025 GMT Subject: CN=683c01ac-4a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:0b:71:ec:2b:cf:d2:e6:1a:bc:08:09:1c: 67:3c:60:44:ba:57:5b:80:2a:01:46:71:d9:86:9d: 68:ed:25:3f:2a:77:4c:76:5a:a5:c4:75:f0:66:89: 34:9d:ce:a5:d1:d6:5e:c7:f8:59:30:21:e7:15:98: 66:9e:4a:41:df:b7:f2:c6:3d:7d:11:be:1d:f5:9a: d7:3f:bb:e2:a5:7b:02:3b:78:fd:ab:ad:6c:5d:1d: 5d:d0:23:63:42:f4:38:26:ea:69:9b:cf:23:02:b2: 65:94:60:a8:cb:4b:77:69:4a:1f:d2:8c:7d:ab:49: b4:d5:64:b8:4c:dd:83:2c:1b:49:78:9f:eb:4f:28: b2:81:18:77:dd:59:60:cd:50:cd:19:7a:5a:75:70: dc:92:ac:59:e9:df:23:cb:03:2d:a6:50:33:14:21: 8e:b1:0c:99:a0:07:af:1c:ae:77:f7:91:30:fa:39: 34:10:ff:cb:09:be:0c:eb:ac:47:5f:17:8f:67:96: 6f:a2:09:21:72:f6:7a:55:7f:6e:d1:49:ab:0b:57: f7:cf:eb:51:d7:fe:88:08:73:7c:ba:57:27:4a:ae: bf:e9:b7:bb:54:22:33:6d:a4:86:9c:b5:20:71:31: 26:74:55:4f:b1:9c:1a:0a:17:9f:a7:19:68:71:a8: de:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:42:9B:7A:55:0A:D5:95:40:EC:7E:58:47:B3:C0:35:34:E0:C2 X509v3 Authority Key Identifier: keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:0d:96:cc:a5:f4:8a:58:d5:58:5b:3c:d1:1e:6d:0a:7d:10: d1:e2:22:34:f5:e9:c2:ad:01:c9:48:b4:9c:ba:7f:85:d2:e3: 6c:7d:19:94:e1:a2:d8:c1:23:95:cb:d7:a1:73:08:e4:7d:40: 82:5d:64:ab:2f:f2:5d:e9:b2:56:38:3a:af:ae:69:63:e0:49: 7e:d1:d3:af:c6:6c:7a:c6:dc:49:67:ec:c7:9c:80:e2:95:04: 66:89:30:13:3a:e8:07:ec:8b:ef:da:a9:02:cf:93:a9:81:45: 10:4a:4f:52:68:29:f9:ea:20:cd:d2:74:41:c9:6a:3b:d6:27: c6:f4:06:3a:40:bc:3c:db:80:b0:67:8f:dd:f1:80:0a:d7:1e: 71:53:b3:61:dc:cd:39:d2:01:c5:cf:85:29:21:64:43:78:5f: a7:98:b8:29:27:1a:a4:93:82:61:23:03:ea:c7:41:59:51:bd: d9:af:62:bd:ff:b4:94:0c:f0:0d:43:13:51:e8:66:9e:e6:bd: 70:8b:39:fb:44:5b:88:79:e6:03:02:db:0b:84:d5:9d:03:89: 72:51:fc:64:93:db:5c:58:fd:73:95:fd:47:88:23:6e:f1:4e: 23:bd:39:2e:89:fd:d6:2d:94:fa:65:34:62:03:a4:12:c1:b2: 27:c0:b5:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDkyNzExMC8GA1UEBRMoMjc5QzlENzk4MjRCQTIwNDZGMTM4QUY2Q0RCOEEzQjA4 RjAzQkVCMzAeFw0yNTA2MDEwNzMwNTFaFw0yNTA2MDgwNzMwNTFaMBgxFjAUBgNV BAMTDTY4M2MwMWFjLTRhOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyLAtx7CvP0uYavAgJHGc8YES6V1uAKgFGcdmGnWjtJT8qd0x2WqXEdfBmiTSd zqXR1l7H+FkwIecVmGaeSkHft/LGPX0Rvh31mtc/u+KlewI7eP2rrWxdHV3QI2NC 9Dgm6mmbzyMCsmWUYKjLS3dpSh/SjH2rSbTVZLhM3YMsG0l4n+tPKLKBGHfdWWDN UM0Zelp1cNySrFnp3yPLAy2mUDMUIY6xDJmgB68crnf3kTD6OTQQ/8sJvgzrrEdf F49nlm+iCSFy9npVf27RSasLV/fP61HX/ogIc3y6VydKrr/pt7tUIjNtpIactSBx MSZ0VU+xnBoKF5+nGWhxqN7ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZvZCm3pV CtWVQOx+WEezwDU04MIwHwYDVR0jBBgwFoAUJ5ydeYJLogRvE4r2zbijsI8DvrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOTI3L0MxMDZEMzNDMDRE QzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dSdkU0cjJ6Ymlqc0k4RHZy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSjV5ZGVZSkxvZ1J2RTRyMnpiaWpzSThEdnJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OTI3L0MxMDZEMzNDMDREQzExRjBCNkIyNUE0M0M0RjlBRTAyL0o1eWRlWUpMb2dS dkU0cjJ6Ymlqc0k4RHZyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGMNlsyl9IpY1VhbPNEebQp9ENHiIjT16cKtAclItJy6f4XS42x9GZTh otjBI5XL16FzCOR9QIJdZKsv8l3pslY4Oq+uaWPgSX7R06/GbHrG3Eln7MecgOKV BGaJMBM66Afsi+/aqQLPk6mBRRBKT1JoKfnqIM3SdEHJajvWJ8b0BjpAvDzbgLBn j93xgArXHnFTs2HczTnSAcXPhSkhZEN4X6eYuCknGqSTgmEjA+rHQVlRvdmvYr3/ tJQM8A1DE1HoZp7mvXCLOftEW4h55gMC2wuE1Z0DiXJR/GST21xY/XOV/UeII27x TiO9OS6J/dYtlPplNGIDpBLBsifAtdM= -----END CERTIFICATE-----Generated at Mon Jun 2 05:05:23 2025 by rpki-client