$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: lS1Xh8nP94DQANqmm8w78bmk/+pkybEP74KP5C/wh28= Subject key identifier: 2F:E5:F2:C9:34:1B:F3:CF:ED:FA:7D:F7:77:87:83:28:D7:EE:0C:9C Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D39 Signing time: Wed 14 May 2025 18:08:40 +0000 Manifest this update: Wed 14 May 2025 18:08:39 +0000 Manifest next update: Wed 21 May 2025 18:08:39 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: lRYeEyJPEk92d1g+A0Nf9TrJtFA7d7f+kttFA4h19ss=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: May 14 18:08:39 2025 GMT Not After : May 21 18:08:39 2025 GMT Subject: CN=6824dc28-5c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:88:cb:83:6e:82:9a:19:29:00:24:14:00: dd:8f:e8:71:91:29:1e:d8:25:03:87:ce:2a:10:77: 31:63:a8:34:80:89:80:83:3d:d6:8d:86:7c:62:82: 77:d9:71:c6:39:fe:d7:fc:d4:b5:5a:b9:9c:bf:b6: d2:bd:bd:34:74:0c:e6:b7:77:fa:a8:d2:f2:b2:5c: 6c:b7:c6:9d:cb:f9:66:1f:b1:0b:5f:95:0a:ca:ee: b2:77:78:fd:8e:aa:5d:95:34:5d:a1:64:f8:fa:e5: 5c:3c:16:db:ad:6a:b0:b4:40:40:69:f4:20:b8:2f: d9:d7:e7:ef:fa:8e:18:82:7e:da:b8:33:e4:15:55: f7:5a:1c:de:e9:e0:e5:7a:de:44:a6:ad:4d:19:1d: 27:d4:17:a3:80:e0:88:16:08:24:53:5b:30:48:4b: c4:1b:de:44:cc:e8:26:93:b4:03:a4:a5:7e:da:a0: 99:68:a7:6a:cc:17:91:a0:46:a0:24:04:56:f4:79: b1:4a:0b:9b:c7:16:fd:5c:20:30:a0:91:ac:55:3d: ce:ac:26:02:b1:89:4e:1a:96:0d:b1:24:75:d1:b9: c1:37:e9:53:fd:73:8c:d1:c7:ad:65:53:bd:2d:ce: 0c:39:b4:cb:96:0b:0b:76:01:8d:09:88:42:b9:a6: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E5:F2:C9:34:1B:F3:CF:ED:FA:7D:F7:77:87:83:28:D7:EE:0C:9C X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:04:b0:ac:bb:16:f4:09:c0:fc:b9:41:17:b2:32:76:16:59: 94:b8:61:bb:57:cf:bf:3e:05:e8:0e:01:e8:c7:97:21:8b:bf: 7c:a2:85:3e:00:b2:ca:d9:a2:50:19:85:05:f3:90:08:fa:2d: 7b:bd:f4:07:17:e0:57:27:da:e6:ca:ff:c6:e9:3c:c6:9f:80: 9c:f9:9b:22:19:b8:5e:c6:c0:e4:41:d1:23:de:62:9a:26:11: 6a:c4:e0:52:48:80:38:ba:9f:09:5d:86:31:45:99:e7:09:ee: 03:cd:2e:1c:86:88:c2:f9:9a:e7:8a:c0:6d:1c:37:4d:fc:d4: 84:c4:e4:16:30:82:fb:20:d5:7c:61:22:16:cd:84:15:34:5a: 7c:68:3d:a5:83:0c:7e:3b:0a:24:15:38:0b:23:c3:69:2c:d3: ee:21:05:82:85:e4:af:f7:79:d6:38:f2:c2:d0:41:8a:4c:6b: a0:57:9a:f8:c1:5c:33:1f:72:8d:57:6c:78:7b:4b:eb:10:6d: 15:82:b1:9c:f4:75:7a:97:b6:4e:c8:07:bf:cc:6c:57:d5:74: 9f:eb:d2:24:74:d8:9a:1a:c0:50:af:5e:9d:d4:82:c8:50:72: 1c:65:76:11:a7:f2:ae:19:2e:5e:38:24:35:09:22:5a:45:fd: b3:6e:cc:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUwNTE0MTgwODM5WhcNMjUwNTIxMTgwODM5WjAYMRYwFAYD VQQDEw02ODI0ZGMyOC01YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DCIy4NugpoZKQAkFADdj+hxkSke2CUDh84qEHcxY6g0gImAgz3WjYZ8YoJ3 2XHGOf7X/NS1Wrmcv7bSvb00dAzmt3f6qNLyslxst8ady/lmH7ELX5UKyu6yd3j9 jqpdlTRdoWT4+uVcPBbbrWqwtEBAafQguC/Z1+fv+o4Ygn7auDPkFVX3Whze6eDl et5Epq1NGR0n1BejgOCIFggkU1swSEvEG95EzOgmk7QDpKV+2qCZaKdqzBeRoEag JARW9HmxSgubxxb9XCAwoJGsVT3OrCYCsYlOGpYNsSR10bnBN+lT/XOM0cetZVO9 Lc4MObTLlgsLdgGNCYhCuaYLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/l8sk0 G/PP7fp993eHgyjX7gycMB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtBLCsuxb0CcD8uUEXsjJ2FlmUuGG7V8+/PgXoDgHox5chi798ooU+ ALLK2aJQGYUF85AI+i17vfQHF+BXJ9rmyv/G6TzGn4Cc+ZsiGbhexsDkQdEj3mKa JhFqxOBSSIA4up8JXYYxRZnnCe4DzS4chojC+ZrnisBtHDdN/NSExOQWMIL7INV8 YSIWzYQVNFp8aD2lgwx+OwokFTgLI8NpLNPuIQWCheSv93nWOPLC0EGKTGugV5r4 wVwzH3KNV2x4e0vrEG0VgrGc9HV6l7ZOyAe/zGxX1XSf69IkdNiaGsBQr16d1ILI UHIcZXYRp/KuGS5eOCQ1CSJaRf2zbszl -----END CERTIFICATE-----Generated at Thu May 15 18:00:29 2025 by rpki-client