$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft File: JaQw8WuofbvVFVMhuA-CAeVt6v0.mft (raw, json) Hash identifier: JNnweTEL+hq4MTfjKtIK/ucj0zit72eFzqRPBP30w2I= Subject key identifier: DF:EB:B1:C7:29:CC:BA:3A:58:ED:3E:93:53:80:1F:EB:81:95:6D:53 Authority key identifier: 25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD Certificate issuer: /CN=A9175F5F/serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft Manifest number: 0B01 Signing time: Fri 30 May 2025 19:31:02 +0000 Manifest this update: Fri 30 May 2025 19:31:02 +0000 Manifest next update: Fri 06 Jun 2025 19:31:02 +0000 Files and hashes: 1: JaQw8WuofbvVFVMhuA-CAeVt6v0.crl (hash: pcbkIAV0Gbi4YS8n+J207ghF/Bv1Wcw3uyhF2RIeBrk=) 2: 49CE816E430A11EAA674EA74C4F9AE02.roa (hash: cME7E3dTvb+EGAR48GSsEEHAaLVHg6TnnZaiv9ezcQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F5F, serialNumber=25A430F16BA87DBBD5155321B80F8201E56DEAFD Validity Not Before: May 30 19:31:02 2025 GMT Not After : Jun 6 19:31:02 2025 GMT Subject: CN=683a0776-6481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:4e:6a:9b:1d:4e:d9:86:ce:c7:f6:d7:a8: 87:2e:db:80:d9:cb:e7:56:5c:8e:9a:ab:15:c6:55: da:26:43:90:a5:d2:f6:70:5c:71:4a:f9:6c:07:e8: 05:5c:3e:94:d0:f2:6b:c2:e6:31:25:c4:80:f0:8a: 68:96:81:81:e2:87:30:cf:d5:a0:e3:60:63:5d:ed: 19:39:d6:97:11:ba:f3:fc:a1:80:2f:58:3b:34:14: e1:c9:bf:c1:4b:c0:2e:d4:f8:a2:bc:c6:f8:81:9b: 85:35:c2:23:8b:b2:b2:9b:68:36:c2:ab:2d:7c:07: f9:7c:24:ce:be:28:06:0f:8d:09:bd:ff:df:35:fb: 57:a2:39:b8:52:9d:21:fd:59:53:f8:94:49:98:77: 46:43:34:3f:cc:2f:8c:82:7a:54:71:f7:d7:0e:eb: c7:f8:58:8d:08:35:2e:60:11:d2:5a:84:1a:6b:1e: 7f:01:d1:de:79:e7:49:6b:be:5a:c8:1d:b4:1b:21: ca:bd:ef:0a:94:3b:f4:d5:b1:52:e9:1c:3a:85:ab: 33:7a:fe:98:6b:9e:24:4b:73:a8:0f:9a:94:21:77: ca:7a:44:46:ee:4a:71:54:8c:da:e3:27:42:d7:f6: 0e:87:f9:17:e3:1d:64:32:ba:8c:5e:0a:7d:ea:6c: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:B1:C7:29:CC:BA:3A:58:ED:3E:93:53:80:1F:EB:81:95:6D:53 X509v3 Authority Key Identifier: keyid:25:A4:30:F1:6B:A8:7D:BB:D5:15:53:21:B8:0F:82:01:E5:6D:EA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JaQw8WuofbvVFVMhuA-CAeVt6v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F5F/7011FDB2430811EA8194A66EC4F9AE02/JaQw8WuofbvVFVMhuA-CAeVt6v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:07:18:54:5b:1a:da:5f:05:b1:c8:49:db:9c:ca:19:5a:cf: 65:69:22:c9:6a:22:1e:10:0e:5d:ed:53:73:a1:e2:65:08:7c: 73:f5:ab:c6:56:97:4c:71:6a:ae:da:cc:71:e6:c1:77:6f:1b: a9:82:ca:d3:9f:b0:31:27:03:9a:34:3f:ca:8f:dc:e3:4d:e6: 58:37:2b:e3:73:dd:ed:f5:52:52:bb:c3:c2:63:39:5e:c8:71: 19:43:36:0d:29:fe:99:9b:f9:04:8f:31:56:99:d3:72:6c:65: e0:6b:b5:de:bd:fc:ea:d0:bf:0b:fa:36:f1:47:b8:b4:70:c8: 1f:35:23:79:89:68:f0:1d:60:79:1b:72:a1:ea:19:c4:4a:1f: d7:d8:91:0e:c1:9c:b1:30:b1:44:a8:2d:2c:ff:30:6b:32:9d: 3d:5e:02:2b:da:bc:01:ea:33:61:7b:bd:f0:77:00:99:8a:82: 66:62:9c:21:ab:54:8f:a0:1a:8e:2e:49:60:64:77:28:65:88: 68:00:97:ad:72:d0:70:4d:2b:f8:c2:9a:e8:dd:84:28:9e:24: 23:68:72:02:bb:2e:97:e0:35:c1:fe:cf:23:70:98:72:aa:5c: db:23:f5:a9:97:57:0c:15:6c:3b:f9:ec:71:d5:15:d9:44:ec: 3f:7d:22:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNUYxMTAvBgNVBAUTKDI1QTQzMEYxNkJBODdEQkJENTE1NTMyMUI4MEY4MjAx RTU2REVBRkQwHhcNMjUwNTMwMTkzMTAyWhcNMjUwNjA2MTkzMTAyWjAYMRYwFAYD VQQDEw02ODNhMDc3Ni02NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8ROapsdTtmGzsf216iHLtuA2cvnVlyOmqsVxlXaJkOQpdL2cFxxSvlsB+gF XD6U0PJrwuYxJcSA8IpoloGB4ocwz9Wg42BjXe0ZOdaXEbrz/KGAL1g7NBThyb/B S8Au1PiivMb4gZuFNcIji7Kym2g2wqstfAf5fCTOvigGD40Jvf/fNftXojm4Up0h /VlT+JRJmHdGQzQ/zC+MgnpUcffXDuvH+FiNCDUuYBHSWoQaax5/AdHeeedJa75a yB20GyHKve8KlDv01bFS6Rw6haszev6Ya54kS3OoD5qUIXfKekRG7kpxVIza4ydC 1/YOh/kX4x1kMrqMXgp96myFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/rsccp zLo6WO0+k1OAH+uBlW1TMB8GA1UdIwQYMBaAFCWkMPFrqH271RVTIbgPggHlber9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1Ri83MDExRkRCMjQz MDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2ZidlZGVk1odUEtQ0FlVnQ2 djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0phUXc4V3VvZmJ2VkZWTWh1QS1DQWVWdDZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1Ri83MDExRkRCMjQzMDgxMUVBODE5NEE2NkVDNEY5QUUwMi9KYVF3OFd1b2Zi dlZGVk1odUEtQ0FlVnQ2djAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0BxhUWxraXwWxyEnbnMoZWs9laSLJaiIeEA5d7VNzoeJlCHxz9avG VpdMcWqu2sxx5sF3bxupgsrTn7AxJwOaND/Kj9zjTeZYNyvjc93t9VJSu8PCYzle yHEZQzYNKf6Zm/kEjzFWmdNybGXga7Xevfzq0L8L+jbxR7i0cMgfNSN5iWjwHWB5 G3Kh6hnESh/X2JEOwZyxMLFEqC0s/zBrMp09XgIr2rwB6jNhe73wdwCZioJmYpwh q1SPoBqOLklgZHcoZYhoAJetctBwTSv4wpro3YQoniQjaHICuy6X4DXB/s8jcJhy qlzbI/Wpl1cMFWw7+exx1RXZROw/fSKY -----END CERTIFICATE-----Generated at Sat May 31 17:17:29 2025 by rpki-client