$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: SMMXK3ZLYzNcNuC3mBvkQ1oR3+bbhCrkhI+M+Qs9YeQ= Subject key identifier: AE:AE:6A:62:95:D7:09:17:15:82:8A:72:BD:28:F5:8D:D1:47:B4:AD Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DD2 Signing time: Wed 02 Jul 2025 18:06:38 +0000 Manifest this update: Wed 02 Jul 2025 18:06:37 +0000 Manifest next update: Wed 09 Jul 2025 18:06:37 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: 1Z9cgSbZOo6rBQDncXjJFIF7MtSsv3u1JibqdAv0Uwg=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3544 (0xdd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Jul 2 18:06:37 2025 GMT Not After : Jul 9 18:06:37 2025 GMT Subject: CN=6865752d-4cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:e4:6a:09:86:e9:aa:b9:75:ea:66:f1:8e: 40:2c:ea:a7:f7:47:d9:9e:e3:76:6a:3a:4d:71:da: 29:3e:01:7e:6d:51:48:32:a4:23:9f:ed:68:65:bc: 1f:a5:49:39:4e:49:a7:cb:9e:28:18:28:b5:89:26: 31:66:6d:c0:c0:8f:a7:1b:69:0d:42:04:6d:86:de: 74:1e:e6:16:22:0c:06:82:f2:32:84:96:4b:f1:62: 62:a5:27:20:a0:ad:45:97:6c:9b:92:18:ad:aa:18: 51:b2:29:65:72:1c:23:57:20:f7:19:73:5e:f6:52: 5a:ca:85:ab:98:d8:3c:e6:9a:44:84:c7:db:e2:3a: 2a:4f:90:43:8f:80:12:7a:8f:db:b1:b8:b4:cf:cc: 97:ef:72:f9:45:82:c4:e1:e0:0b:fc:51:93:bf:f3: 40:7b:87:45:ba:f4:ed:3e:ed:97:6f:cd:1f:f7:b8: f7:1c:4c:fb:86:3f:4a:22:81:c0:84:4a:d7:ac:be: 3a:bc:fd:21:d4:de:2b:c3:3d:2c:3a:cb:b2:14:b7: d4:c5:f5:c4:91:00:31:5f:b1:29:12:5d:2f:f6:d3: 1a:b1:40:95:dd:43:a5:ee:52:2e:ab:bd:60:c1:8c: e1:9d:5a:79:ca:8a:0a:1b:2a:40:06:c5:91:d4:4d: 20:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AE:6A:62:95:D7:09:17:15:82:8A:72:BD:28:F5:8D:D1:47:B4:AD X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:bd:3b:c9:fd:57:75:43:08:c1:03:2d:b1:b1:4c:e5:5e:47: e8:83:a9:14:29:7b:b3:ca:b1:71:f0:45:e6:e5:61:4e:83:f8: 61:d6:0f:63:53:6d:b8:f0:37:c0:30:ab:3e:e1:12:a3:7a:6b: 6f:c8:00:e1:2f:b0:54:e3:91:a1:7f:5a:99:9a:03:9a:80:e5: 53:48:97:47:ec:e4:a3:85:c0:5c:8b:65:da:7e:a6:40:b4:cc: 66:83:b8:9a:b0:c4:c5:e2:72:bd:8b:e8:52:9b:39:55:53:4d: 57:4f:a3:67:5f:30:cc:ca:a0:53:f4:23:11:f6:be:17:73:5e: 06:85:9b:3f:9b:53:f5:13:a3:20:2d:cc:fa:ac:de:fe:6e:83: a5:49:17:2a:3f:b6:f1:62:72:38:94:2d:71:05:43:29:71:47: c1:33:f3:ee:3b:05:e4:fe:aa:cc:4f:dc:be:e0:af:3a:d5:9a: 0e:2f:da:dd:3b:b5:69:ce:7b:50:2c:70:b9:b2:d3:98:5d:7d: e8:61:93:df:d5:7e:ce:1a:bb:7b:a2:18:f8:fc:88:0e:4a:1c: e2:c3:a8:6d:27:a7:cd:94:cf:91:e7:46:30:da:f9:5f:9a:52: b1:53:5e:d7:13:a1:22:90:b1:51:5b:67:c0:2f:7b:ea:2a:a4: 8e:be:67:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwNzAyMTgwNjM3WhcNMjUwNzA5MTgwNjM3WjAYMRYwFAYD VQQDEw02ODY1NzUyZC00Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6/kagmG6aq5depm8Y5ALOqn90fZnuN2ajpNcdopPgF+bVFIMqQjn+1oZbwf pUk5Tkmny54oGCi1iSYxZm3AwI+nG2kNQgRtht50HuYWIgwGgvIyhJZL8WJipScg oK1Fl2ybkhitqhhRsillchwjVyD3GXNe9lJayoWrmNg85ppEhMfb4joqT5BDj4AS eo/bsbi0z8yX73L5RYLE4eAL/FGTv/NAe4dFuvTtPu2Xb80f97j3HEz7hj9KIoHA hErXrL46vP0h1N4rwz0sOsuyFLfUxfXEkQAxX7EpEl0v9tMasUCV3UOl7lIuq71g wYzhnVp5yooKGypABsWR1E0gSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6uamKV 1wkXFYKKcr0o9Y3RR7StMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgvTvJ/Vd1QwjBAy2xsUzlXkfog6kUKXuzyrFx8EXm5WFOg/hh1g9j U2248DfAMKs+4RKjemtvyADhL7BU45Ghf1qZmgOagOVTSJdH7OSjhcBci2XafqZA tMxmg7iasMTF4nK9i+hSmzlVU01XT6NnXzDMyqBT9CMR9r4Xc14GhZs/m1P1E6Mg Lcz6rN7+boOlSRcqP7bxYnI4lC1xBUMpcUfBM/PuOwXk/qrMT9y+4K861ZoOL9rd O7VpzntQLHC5stOYXX3oYZPf1X7OGrt7ohj4/IgOShziw6htJ6fNlM+R50Yw2vlf mlKxU17XE6EikLFRW2fAL3vqKqSOvmfy -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:13 2025 by rpki-client