$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: GJ4mwh76AhrU7Lsmu5GMTGi1bggFGTmqf4jX+BY7XD4= Subject key identifier: 76:B3:04:80:BA:0D:28:FA:57:53:68:4A:4C:AF:74:4A:C8:4D:DE:8F Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DBB Signing time: Fri 16 May 2025 18:09:39 +0000 Manifest this update: Fri 16 May 2025 18:09:39 +0000 Manifest next update: Fri 23 May 2025 18:09:39 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: j0lqEtk2srFyw0Id3Me25vsD/V7oijdcfKvmo4KXEgU=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: May 16 18:09:39 2025 GMT Not After : May 23 18:09:39 2025 GMT Subject: CN=68277f63-3958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:00:75:fd:df:7e:0d:34:83:22:3d:0e:7d: 47:bb:7c:7f:51:08:55:a9:68:87:f4:3f:a5:e5:de: f6:87:2d:48:77:ec:02:7f:b9:f8:d2:ee:5d:1c:61: e5:47:80:b9:c5:bb:1b:26:be:a9:66:11:5e:f3:da: ab:e2:a6:e1:42:c7:34:c3:a4:23:15:d9:ee:8e:bd: 4a:22:e3:ea:8c:84:10:5e:d8:0c:6e:5b:bb:12:ce: b1:1f:83:da:4a:90:20:67:b0:12:02:ab:6d:d0:45: e3:b9:fe:75:12:01:7a:d0:d4:8e:15:69:79:43:82: 21:e8:62:46:dc:80:1f:f5:36:77:90:7c:b6:5d:0e: 9b:fd:b4:fc:ac:8b:11:c6:e4:79:5d:84:f3:0d:88: bb:2d:1f:3e:f9:55:46:60:6a:11:53:d4:ca:9b:26: 18:85:28:9f:83:65:9d:f9:b8:7c:76:fa:a2:68:cb: 5c:af:1e:00:01:f5:18:47:8e:5a:3f:f2:6b:58:6f: ad:6c:37:3b:95:fa:27:b5:da:59:a2:84:50:97:12: e3:48:6b:e5:b9:5b:f2:5e:9e:34:66:87:c1:79:2a: 31:e8:5a:2e:17:2d:26:f1:77:cc:d7:d6:4b:c0:ed: e7:65:32:60:9e:19:b9:e0:31:4f:72:bb:a0:bb:e5: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B3:04:80:BA:0D:28:FA:57:53:68:4A:4C:AF:74:4A:C8:4D:DE:8F X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:83:e7:e8:31:d6:76:e5:3f:fb:7c:f1:4e:58:59:e5:fe:bf: a1:e3:fd:13:70:0b:54:fb:81:f0:b2:f7:6e:f0:e5:76:d9:42: 00:47:22:be:0d:18:aa:14:77:9e:18:7c:74:b2:54:a4:3a:27: 21:6c:85:45:f9:d4:59:98:62:f3:e2:fd:75:27:12:f8:03:89: fd:a6:58:38:e6:19:d1:e3:a5:ed:46:cd:5d:80:51:d3:80:cb: 87:05:51:b4:d1:eb:d4:d8:9f:1c:85:18:bc:93:39:9c:04:2b: 59:83:2c:06:fc:e0:73:57:cf:58:ed:26:b9:2f:37:07:f4:37: e0:f8:52:19:32:74:82:cd:98:fb:a2:62:bf:b9:a3:23:4a:9f: c4:ca:19:72:31:4f:eb:8c:d2:a8:ec:f2:98:88:b5:d0:c8:72: 87:64:5b:cb:84:f7:02:7c:86:3f:f3:bf:f1:dd:5b:fa:7b:c4: fe:06:27:00:c2:1e:32:14:db:46:8e:69:dc:5c:6d:5f:21:9b: db:6e:e6:33:20:ba:e4:a3:b4:bf:5a:1a:02:33:98:05:63:bd: 83:1c:ff:ed:fc:6d:12:cd:90:43:0a:d0:4f:8c:ee:45:12:73: c4:9d:1d:7a:3d:a4:fa:5d:39:f3:5e:ec:91:da:85:b4:33:ab: c2:23:a7:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwNTE2MTgwOTM5WhcNMjUwNTIzMTgwOTM5WjAYMRYwFAYD VQQDEw02ODI3N2Y2My0zOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu44Adf3ffg00gyI9Dn1Hu3x/UQhVqWiH9D+l5d72hy1Id+wCf7n40u5dHGHl R4C5xbsbJr6pZhFe89qr4qbhQsc0w6QjFdnujr1KIuPqjIQQXtgMblu7Es6xH4Pa SpAgZ7ASAqtt0EXjuf51EgF60NSOFWl5Q4Ih6GJG3IAf9TZ3kHy2XQ6b/bT8rIsR xuR5XYTzDYi7LR8++VVGYGoRU9TKmyYYhSifg2Wd+bh8dvqiaMtcrx4AAfUYR45a P/JrWG+tbDc7lfontdpZooRQlxLjSGvluVvyXp40ZofBeSox6FouFy0m8XfM19ZL wO3nZTJgnhm54DFPcrugu+XnEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHazBIC6 DSj6V1NoSkyvdErITd6PMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVg+foMdZ25T/7fPFOWFnl/r+h4/0TcAtU+4Hwsvdu8OV22UIARyK+ DRiqFHeeGHx0slSkOichbIVF+dRZmGLz4v11JxL4A4n9plg45hnR46XtRs1dgFHT gMuHBVG00evU2J8chRi8kzmcBCtZgywG/OBzV89Y7Sa5LzcH9Dfg+FIZMnSCzZj7 omK/uaMjSp/EyhlyMU/rjNKo7PKYiLXQyHKHZFvLhPcCfIY/87/x3Vv6e8T+BicA wh4yFNtGjmncXG1fIZvbbuYzILrko7S/WhoCM5gFY72DHP/t/G0SzZBDCtBPjO5F EnPEnR16PaT6XTnzXuyR2oW0M6vCI6fb -----END CERTIFICATE-----Generated at Sat May 17 01:21:00 2025 by rpki-client