$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft File: jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft (raw, json) Hash identifier: tpo1TV/Kj59u60NPHbx0UW2odl9DaQk+6PmbYtq2C6c= Subject key identifier: D2:14:ED:A8:37:2E:B4:D2:65:CE:17:AE:15:AB:A6:16:87:FC:78:A6 Authority key identifier: 8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 Certificate issuer: /CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Certificate serial: 0E9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft Manifest number: 1635 Signing time: Sat 10 May 2025 17:33:25 +0000 Manifest this update: Sat 10 May 2025 17:33:25 +0000 Manifest next update: Sat 17 May 2025 17:33:25 +0000 Files and hashes: 1: jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl (hash: 1u/JXKWOovJ4mFx9hwroRils9Jbe2d5/FJbKbm/wIWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3739 (0xe9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF, serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Validity Not Before: May 10 17:33:25 2025 GMT Not After : May 17 17:33:25 2025 GMT Subject: CN=681f8de5-e9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:ac:b5:c6:3b:0a:c0:a2:67:de:bd:65:34: 5b:3b:2b:3d:1b:66:69:32:cc:15:11:f7:bf:2a:cc: 85:12:e7:d4:1c:4f:d8:79:5c:8c:95:35:80:96:2d: ef:40:de:86:cb:9a:6d:b3:ee:92:a0:5d:8a:e3:e1: 0d:82:8f:2c:4e:05:8c:08:20:2e:75:d3:71:b0:7d: 67:ce:38:eb:3c:ac:c7:9c:bc:28:ae:a3:42:53:9c: 1e:f1:cd:84:40:d0:d2:cf:1a:44:d3:ac:68:1a:e5: cf:38:11:9e:82:ae:1f:84:bc:a0:88:0f:cc:d4:13: 3c:4a:c1:59:0d:c0:cb:83:e0:c8:bb:60:20:85:7b: 62:b3:c9:76:04:0d:27:6f:f5:98:d8:db:21:03:72: f4:1c:55:2a:67:17:cc:77:72:e9:b6:23:c8:34:bc: 7f:8a:77:8e:a2:d3:1a:21:44:c4:bf:99:ba:f4:1a: ab:bf:24:ea:87:55:b8:88:80:11:90:60:49:74:64: d7:1f:37:0e:4f:8c:77:98:76:7d:cb:38:ec:7c:e0: ef:00:0f:70:ea:36:3c:3b:a7:ea:13:62:6b:71:57: b6:b1:18:0b:62:c3:77:d5:99:fb:1b:f4:e7:f3:93: 7d:e4:dc:d5:94:e5:a8:ad:4f:4a:c3:f8:92:06:cf: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:ED:A8:37:2E:B4:D2:65:CE:17:AE:15:AB:A6:16:87:FC:78:A6 X509v3 Authority Key Identifier: keyid:8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:72:84:66:b0:0f:e3:e0:b7:7d:99:af:50:a9:5a:f8:88:9e: e1:cf:c3:2e:06:3f:80:0a:72:8b:51:dc:f2:4d:4b:0e:b0:9a: 40:f9:9d:ad:4d:04:b0:5e:b8:fe:57:f0:5d:f9:95:39:2b:15: 59:f6:d3:32:97:33:c3:60:1b:5d:de:c2:09:e2:61:09:0e:87: f0:f9:7d:b2:6d:56:46:81:21:59:a2:1a:0b:ca:fc:e8:e8:68: 14:9e:26:79:6a:13:49:e7:d1:af:d3:b7:f8:74:7b:7c:83:44: bd:ab:b0:52:75:26:46:31:a0:15:14:06:6a:f4:17:2b:3d:b1: 81:38:61:99:d6:5f:46:d9:08:19:6f:1f:6c:35:47:5d:70:b8: cf:eb:95:4d:7e:76:b5:da:e5:4a:d4:42:4e:37:dc:6e:99:21: e6:93:7c:76:e2:54:2d:2a:21:f8:a4:30:8d:d8:45:60:3d:59: fc:36:7d:49:e8:6c:9b:5e:1d:4b:e1:4e:63:32:d2:a9:d3:5e: 8f:75:d8:c3:95:66:75:99:e2:20:5f:bf:16:eb:4d:d4:91:bc: 05:01:c3:fd:3f:89:cb:5a:8c:1d:da:b2:cf:c1:e4:c7:2b:ae: b7:e3:0c:d0:63:38:90:73:cc:13:7a:eb:c5:93:db:33:7f:d4: 4f:f0:b6:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKDhFMzZCREY4RThCODE4NjVCNDI3ODUzRjdDNkJDNTMy RDBDQTZENDgwHhcNMjUwNTEwMTczMzI1WhcNMjUwNTE3MTczMzI1WjAYMRYwFAYD VQQDEw02ODFmOGRlNS1lOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GqstcY7CsCiZ969ZTRbOys9G2ZpMswVEfe/KsyFEufUHE/YeVyMlTWAli3v QN6Gy5pts+6SoF2K4+ENgo8sTgWMCCAuddNxsH1nzjjrPKzHnLworqNCU5we8c2E QNDSzxpE06xoGuXPOBGegq4fhLygiA/M1BM8SsFZDcDLg+DIu2AghXtis8l2BA0n b/WY2NshA3L0HFUqZxfMd3LptiPINLx/ineOotMaIUTEv5m69BqrvyTqh1W4iIAR kGBJdGTXHzcOT4x3mHZ9yzjsfODvAA9w6jY8O6fqE2JrcVe2sRgLYsN31Zn7G/Tn 85N95NzVlOWorU9Kw/iSBs+WIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIU7ag3 LrTSZc4XrhWrphaH/HimMB8GA1UdIwQYMBaAFI42vfjouBhltCeFP3xrxTLQym1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdHVzBKNFVfZkd2Rk10REti VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pqYTktT2k0R0dXMEo0VV9mR3ZGTXRES2JVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdH VzBKNFVfZkd2Rk10REtiVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOcoRmsA/j4Ld9ma9QqVr4iJ7hz8MuBj+ACnKLUdzyTUsOsJpA+Z2t TQSwXrj+V/Bd+ZU5KxVZ9tMylzPDYBtd3sIJ4mEJDofw+X2ybVZGgSFZohoLyvzo 6GgUniZ5ahNJ59Gv07f4dHt8g0S9q7BSdSZGMaAVFAZq9BcrPbGBOGGZ1l9G2QgZ bx9sNUddcLjP65VNfna12uVK1EJON9xumSHmk3x24lQtKiH4pDCN2EVgPVn8Nn1J 6GybXh1L4U5jMtKp016PddjDlWZ1meIgX78W603UkbwFAcP9P4nLWowd2rLPweTH K6634wzQYziQc8wTeuvFk9szf9RP8Lby -----END CERTIFICATE-----Generated at Mon May 12 19:08:24 2025 by rpki-client