$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft File: Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json) Hash identifier: x3IYVoM7OCaRQIFhqOyDdHvHMKRg2ORdJz6bYjT5r4Q= Subject key identifier: 3F:C3:A3:7E:C5:1F:F9:A4:B2:C1:C4:24:12:01:9A:9D:A8:4F:92:B1 Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 Certificate issuer: /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft Manifest number: 51 Signing time: Tue 01 Jul 2025 08:02:32 +0000 Manifest this update: Tue 01 Jul 2025 08:02:32 +0000 Manifest next update: Tue 08 Jul 2025 08:02:31 +0000 Files and hashes: 1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: +d5MSnXgT4mBopm7B4mDLJiCV+OG+aiHBAEdyYDUnnE=) 2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: LzkuGFZUxj6+WvgGdYx8FBFSBGquSdSJrmGH+Nh7tDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Validity Not Before: Jul 1 08:02:32 2025 GMT Not After : Jul 8 08:02:31 2025 GMT Subject: CN=68639618-0fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:c4:39:57:bf:94:74:16:83:7f:ab:ed:cf: fb:0c:b1:8c:e8:21:66:9c:b8:50:24:8b:a1:be:a0: 73:0c:d6:30:e7:46:2e:5a:bf:f5:8b:1c:c5:74:61: d3:f5:75:8b:ff:95:da:70:cd:09:c0:fb:8e:6c:3c: b2:a2:a6:7a:7a:ec:24:76:9f:8e:49:de:81:93:c5: 07:3c:cb:e7:ff:7d:2f:b3:1e:6a:db:b9:18:e2:ea: ec:65:c3:39:ab:6d:df:b6:be:fe:97:b4:2a:ef:a3: 5c:6c:2b:ae:5f:6a:4d:04:cc:bf:ac:78:84:45:55: 08:79:a3:32:3a:32:b0:d9:b2:37:55:de:7b:d9:e6: 67:0b:0d:0d:8f:de:7e:a9:07:93:f9:dd:bd:69:9d: 87:94:6e:01:b6:98:b7:d6:bd:06:d1:ed:1a:e6:7d: d5:c8:5d:dc:a7:d1:95:5e:78:63:46:67:41:81:fc: 55:8a:88:77:5b:93:e6:1b:2c:64:a4:61:ee:8a:72: b2:ab:33:4a:fd:de:19:4c:b8:cf:6a:18:14:c7:80: 4c:ff:04:a3:85:ae:b1:cf:d2:5f:1b:10:13:0f:53: b6:1e:e2:51:bc:50:a8:f1:74:12:91:bc:38:7a:de: 76:1c:c1:7c:33:66:ce:e4:0d:33:39:d7:8f:54:86: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C3:A3:7E:C5:1F:F9:A4:B2:C1:C4:24:12:01:9A:9D:A8:4F:92:B1 X509v3 Authority Key Identifier: keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0b:18:0d:fd:9b:8d:2b:d7:a9:85:9c:9c:93:59:74:4b:f9: 10:10:2f:f5:d7:19:ba:1d:75:e0:95:96:a2:de:c5:75:a8:4c: a9:af:22:ef:d6:5c:d6:68:d8:49:41:32:e1:a0:95:ea:d4:f8: 85:32:d5:48:ae:fb:a0:0f:da:65:b3:82:5c:37:51:d4:e4:69: 06:da:c5:d9:18:95:02:eb:57:a3:5a:6f:72:70:2d:1a:73:1a: 42:c9:be:13:61:d8:de:a6:68:c2:18:38:dc:83:ed:04:fd:da: 46:af:52:44:1e:29:61:4a:aa:8e:9d:2c:eb:a6:8e:4d:13:d0: 5f:22:84:9e:b3:ab:bf:85:b7:03:81:f6:51:3a:98:cf:ac:d4: 60:45:4d:45:6c:30:86:40:c3:29:0a:66:f9:98:50:1f:74:14: be:0b:ad:db:b5:38:ec:42:22:15:59:87:02:64:3f:8f:92:27: d9:8e:a7:99:73:20:a1:14:83:84:1f:b0:2d:90:c7:e5:6c:b5: b4:91:c5:a1:9b:a2:12:93:72:b5:17:fd:5d:c9:05:26:d4:5b: 32:3f:ee:99:f5:ed:76:16:06:03:cb:c7:c6:c4:bf:a9:35:34: 60:0b:13:db:47:db:28:59:a2:97:b4:2a:ce:de:58:91:e5:38: d8:17:28:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0UyRTExMC8GA1UEBRMoMjVBQzNFNDhGMkU1OEU4OEM2MDU0NDc5OEVDNjcyNDA3 NkI1MzQxMzAeFw0yNTA3MDEwODAyMzJaFw0yNTA3MDgwODAyMzFaMBgxFjAUBgNV BAMTDTY4NjM5NjE4LTBmYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2G8Q5V7+UdBaDf6vtz/sMsYzoIWacuFAki6G+oHMM1jDnRi5av/WLHMV0YdP1 dYv/ldpwzQnA+45sPLKipnp67CR2n45J3oGTxQc8y+f/fS+zHmrbuRji6uxlwzmr bd+2vv6XtCrvo1xsK65fak0EzL+seIRFVQh5ozI6MrDZsjdV3nvZ5mcLDQ2P3n6p B5P53b1pnYeUbgG2mLfWvQbR7RrmfdXIXdyn0ZVeeGNGZ0GB/FWKiHdbk+YbLGSk Ye6KcrKrM0r93hlMuM9qGBTHgEz/BKOFrrHP0l8bEBMPU7Ye4lG8UKjxdBKRvDh6 3nYcwXwzZs7kDTM5149UhiXFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP8OjfsUf +aSywcQkEgGanahPkrEwHwYDVR0jBBgwFoAUJaw+SPLljojGBUR5jsZyQHa1NBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRTJFL0ZGQTM1RjA0REQ5 ODExRUZBOUFGNDM0NkM0RjlBRTAyL0phdy1TUExsam9qR0JVUjVqc1p5UUhhMU5C TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmF3LVNQTGxqb2pHQlVSNWpzWnlRSGExTkJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RTJFL0ZGQTM1RjA0REQ5ODExRUZBOUFGNDM0NkM0RjlBRTAyL0phdy1TUExsam9q R0JVUjVqc1p5UUhhMU5CTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJELGA39m40r16mFnJyTWXRL+RAQL/XXGboddeCVlqLexXWoTKmvIu/W XNZo2ElBMuGglerU+IUy1Uiu+6AP2mWzglw3UdTkaQbaxdkYlQLrV6Nab3JwLRpz GkLJvhNh2N6maMIYONyD7QT92kavUkQeKWFKqo6dLOumjk0T0F8ihJ6zq7+FtwOB 9lE6mM+s1GBFTUVsMIZAwykKZvmYUB90FL4Lrdu1OOxCIhVZhwJkP4+SJ9mOp5lz IKEUg4QfsC2Qx+VstbSRxaGbohKTcrUX/V3JBSbUWzI/7pn17XYWBgPLx8bEv6k1 NGALE9tH2yhZope0Ks7eWJHlONgXKPY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:07:48 2025 by rpki-client