$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft File: Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json) Hash identifier: hwFd08dfqI0ck1sck/WPTE9tpPF+YcpqE2xmpYMcbds= Subject key identifier: DC:25:73:E7:F7:E3:7C:39:FA:35:36:16:2B:48:D9:FC:E8:13:DE:D9 Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 Certificate issuer: /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft Manifest number: 38 Signing time: Sun 11 May 2025 06:19:08 +0000 Manifest this update: Sun 11 May 2025 06:19:08 +0000 Manifest next update: Sun 18 May 2025 06:19:08 +0000 Files and hashes: 1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: jFBe1eeA7fJ7+0xG1Ped8dn/UwI6FR6hl8MVC8oOr8w=) 2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: LzkuGFZUxj6+WvgGdYx8FBFSBGquSdSJrmGH+Nh7tDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153E2E, serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Validity Not Before: May 11 06:19:08 2025 GMT Not After : May 18 06:19:08 2025 GMT Subject: CN=6820415c-c84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:c2:fd:b7:b8:62:cf:ae:29:04:52:38:0b: bd:39:67:36:81:c7:15:81:0d:bc:de:7a:a2:a0:51: 3c:18:4a:e1:ce:aa:4a:1b:a7:39:de:6f:b4:d0:01: 07:cc:89:bf:14:dd:80:25:0f:6e:87:61:99:c1:77: b7:26:60:17:a9:ac:ed:0e:4d:ed:f9:d1:89:ba:e2: cc:71:52:32:88:36:08:78:b6:ef:5d:1c:5d:9d:af: 09:fa:d2:a6:42:ff:d7:f1:65:64:f2:16:5e:a9:af: 94:29:fe:c7:70:f3:a9:b9:d4:19:d8:5e:fd:63:ff: 50:a6:46:6e:6b:f3:6c:aa:78:dc:e5:1b:dc:06:cd: d0:16:3c:4b:ea:57:5d:51:c7:e9:4f:cf:e0:7d:5d: 75:96:31:2f:ba:3d:54:e2:d8:0c:f3:61:1d:d8:7a: 56:0f:ee:66:b6:f6:e5:59:d1:d7:e4:e1:ce:28:4f: 1b:18:d6:61:71:50:43:87:75:8a:77:96:f3:c9:de: bc:d0:99:24:49:be:7f:19:51:b7:5a:7d:26:60:b4: b2:c5:d9:55:2f:02:89:0e:cd:0b:b8:0a:84:80:03: 01:4a:e2:93:c7:86:90:78:5d:0f:11:6d:58:eb:35: 27:d2:d7:52:28:ba:48:35:7c:cd:6f:22:7d:43:99: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:73:E7:F7:E3:7C:39:FA:35:36:16:2B:48:D9:FC:E8:13:DE:D9 X509v3 Authority Key Identifier: keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8e:95:a4:87:a4:cc:3f:4c:99:0f:bb:ef:02:58:74:ed:b2: 9b:1c:29:9d:56:38:02:96:7c:c9:66:ba:60:9e:c1:20:34:f5: 14:ea:3b:e2:49:fc:b5:24:82:cf:9f:5b:d1:de:64:37:f2:d6: ca:21:c4:1e:2e:ed:48:2d:6a:39:fb:f2:f3:0e:05:5f:26:ce: fa:f3:82:1a:e7:71:66:ee:51:a8:23:59:85:d4:e8:f1:3d:93: 8b:0a:94:b7:f8:2f:f6:a4:7e:70:81:8e:64:56:75:36:86:4d: 71:aa:40:7c:2a:d2:43:a4:71:fc:11:3b:b6:95:39:d4:9a:50: d7:bb:09:ab:86:5e:40:1f:a9:e1:93:fb:25:cb:c5:04:14:99: fb:a2:26:89:3f:26:3a:81:76:24:e8:98:d5:38:fa:d6:97:28: ee:ef:ca:04:d3:0b:8f:f2:4b:e9:2a:6f:e6:88:74:ed:22:cd: 56:44:c8:14:1b:39:1a:a8:8d:4a:99:84:35:8a:cf:ab:ec:ad: 39:03:d3:be:d3:f7:4f:f4:52:37:d1:af:2f:0b:52:ac:42:82: 6a:a4:ed:b9:cc:de:58:35:90:ce:74:56:53:d6:62:5c:cd:d5: d3:6f:f2:88:af:10:eb:a7:db:3b:b6:77:3d:46:ce:8b:cc:31: 1b:f3:51:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0UyRTExMC8GA1UEBRMoMjVBQzNFNDhGMkU1OEU4OEM2MDU0NDc5OEVDNjcyNDA3 NkI1MzQxMzAeFw0yNTA1MTEwNjE5MDhaFw0yNTA1MTgwNjE5MDhaMBgxFjAUBgNV BAMTDTY4MjA0MTVjLWM4NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk78L9t7hiz64pBFI4C705ZzaBxxWBDbzeeqKgUTwYSuHOqkobpzneb7TQAQfM ib8U3YAlD26HYZnBd7cmYBeprO0OTe350Ym64sxxUjKINgh4tu9dHF2drwn60qZC /9fxZWTyFl6pr5Qp/sdw86m51BnYXv1j/1CmRm5r82yqeNzlG9wGzdAWPEvqV11R x+lPz+B9XXWWMS+6PVTi2AzzYR3YelYP7ma29uVZ0dfk4c4oTxsY1mFxUEOHdYp3 lvPJ3rzQmSRJvn8ZUbdafSZgtLLF2VUvAokOzQu4CoSAAwFK4pPHhpB4XQ8RbVjr NSfS11Ioukg1fM1vIn1DmQB/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3CVz5/fj fDn6NTYWK0jZ/OgT3tkwHwYDVR0jBBgwFoAUJaw+SPLljojGBUR5jsZyQHa1NBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRTJFL0ZGQTM1RjA0REQ5 ODExRUZBOUFGNDM0NkM0RjlBRTAyL0phdy1TUExsam9qR0JVUjVqc1p5UUhhMU5C TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmF3LVNQTGxqb2pHQlVSNWpzWnlRSGExTkJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RTJFL0ZGQTM1RjA0REQ5ODExRUZBOUFGNDM0NkM0RjlBRTAyL0phdy1TUExsam9q R0JVUjVqc1p5UUhhMU5CTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFaOlaSHpMw/TJkPu+8CWHTtspscKZ1WOAKWfMlmumCewSA09RTqO+JJ /LUkgs+fW9HeZDfy1sohxB4u7Ugtajn78vMOBV8mzvrzghrncWbuUagjWYXU6PE9 k4sKlLf4L/akfnCBjmRWdTaGTXGqQHwq0kOkcfwRO7aVOdSaUNe7CauGXkAfqeGT +yXLxQQUmfuiJok/JjqBdiTomNU4+taXKO7vygTTC4/yS+kqb+aIdO0izVZEyBQb ORqojUqZhDWKz6vsrTkD077T90/0UjfRry8LUqxCgmqk7bnM3lg1kM50VlPWYlzN 1dNv8oivEOun2zu2dz1GzovMMRvzUcQ= -----END CERTIFICATE-----Generated at Sun May 11 16:02:39 2025 by rpki-client