$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: mxTbIBTCpXho0N+eXYtu8YwuAkz7egDfysdF+BDbbgI= Subject key identifier: FF:A9:8A:D5:D2:91:62:CC:49:63:F3:1C:8B:B3:84:58:A7:E4:8F:D5 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 1231 Signing time: Mon 12 May 2025 19:34:20 +0000 Manifest this update: Mon 12 May 2025 19:34:19 +0000 Manifest next update: Mon 19 May 2025 19:34:19 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: WHHsg8Nc9Q9bMZkSvC4/6ke45WxSJmBdozRh2JZ5mj4=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: m9vtjIJIq2t72L0Goc5PW0dIrS3vnSSj4P2xta8ZeoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: May 12 19:34:19 2025 GMT Not After : May 19 19:34:19 2025 GMT Subject: CN=68224d3c-984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:5c:03:2a:4c:5d:b6:4a:b9:52:90:cb:b1: b0:dd:a6:71:cc:32:a7:08:89:a7:38:5d:27:27:b5: aa:30:ca:a1:81:b8:38:d7:1f:0f:27:f5:e9:d7:85: fb:f8:ce:79:9b:df:e3:e3:cd:fa:d7:62:b5:3d:c8: d2:56:78:ef:57:83:4e:30:75:e4:7a:b6:45:79:04: 7b:b6:43:c2:67:d7:99:36:e4:21:c7:6e:0e:28:f2: 7e:e0:75:cb:cf:e6:01:09:d4:b0:2a:75:3f:73:46: 1f:b5:75:e7:18:d2:58:fc:96:83:50:89:53:e5:f6: 14:5a:fa:4a:a5:2e:59:08:8f:fd:d2:c9:8e:52:7f: 57:12:81:00:f5:cf:16:1a:f9:b7:de:c6:51:2c:bd: a4:6f:bd:28:a4:2c:21:3b:3b:28:ba:44:67:bc:a7: 5b:aa:07:b8:a3:84:5f:da:84:a3:92:1a:33:3a:65: b8:4c:ec:04:02:3e:82:eb:d0:a7:29:20:0a:90:4b: d3:20:68:5f:e8:6d:62:46:10:88:c0:01:a0:f4:18: 43:cc:c9:0a:7c:c2:20:b7:83:b3:da:ec:ef:be:fd: d2:ca:f1:8d:dc:b6:02:d0:50:d0:65:ec:c5:0b:1f: af:d8:39:04:aa:cf:a8:97:35:aa:eb:eb:0c:6f:26: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A9:8A:D5:D2:91:62:CC:49:63:F3:1C:8B:B3:84:58:A7:E4:8F:D5 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bf:7a:7b:53:07:92:00:f2:ee:81:2c:66:e5:54:9c:d0:68: 10:59:2f:50:be:ab:1b:56:c5:63:ab:ef:90:7b:54:f1:ed:6d: c0:e8:09:6f:d3:05:3b:b0:ff:ed:c6:9e:7c:d7:da:b0:2b:11: ef:0e:e6:c6:99:61:af:e8:ba:3c:a4:b5:4a:51:66:85:7f:45: 54:9f:83:2f:25:bf:1d:77:ce:e4:a4:91:65:49:c9:2a:04:47: 66:ba:9d:90:b1:83:19:09:62:39:0f:e4:04:23:df:d0:94:33: 59:2c:a4:72:01:cd:c8:04:62:ac:94:55:2c:c9:62:a2:5f:40: 86:a3:0d:19:37:bc:d9:20:3e:ec:e5:5b:7f:be:19:32:99:49: b4:8c:68:40:2e:46:5f:05:29:dd:71:8c:87:20:45:e7:67:f1: 0c:6f:0f:c2:f1:1c:b7:b2:0b:e7:57:3c:48:8e:42:99:e3:cb: 62:bb:6f:81:f6:24:5d:a0:23:e2:2c:28:6f:69:60:b9:aa:c1: 8a:30:8f:ee:7a:e6:4e:f2:a6:76:97:8b:8f:09:51:e5:7f:97: 37:9a:d4:39:41:eb:4e:e9:d9:00:41:6c:38:c1:22:08:24:cf: 62:4e:80:c2:6c:1e:cd:f0:8e:49:b0:f8:19:b7:e3:91:3b:e2: 32:d4:3e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUwNTEyMTkzNDE5WhcNMjUwNTE5MTkzNDE5WjAYMRYwFAYD VQQDEw02ODIyNGQzYy05ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fJcAypMXbZKuVKQy7Gw3aZxzDKnCImnOF0nJ7WqMMqhgbg41x8PJ/Xp14X7 +M55m9/j483612K1PcjSVnjvV4NOMHXkerZFeQR7tkPCZ9eZNuQhx24OKPJ+4HXL z+YBCdSwKnU/c0YftXXnGNJY/JaDUIlT5fYUWvpKpS5ZCI/90smOUn9XEoEA9c8W Gvm33sZRLL2kb70opCwhOzsoukRnvKdbqge4o4Rf2oSjkhozOmW4TOwEAj6C69Cn KSAKkEvTIGhf6G1iRhCIwAGg9BhDzMkKfMIgt4Oz2uzvvv3SyvGN3LYC0FDQZezF Cx+v2DkEqs+olzWq6+sMbyYocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+pitXS kWLMSWPzHIuzhFin5I/VMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/v3p7UweSAPLugSxm5VSc0GgQWS9QvqsbVsVjq++Qe1Tx7W3A6Alv 0wU7sP/txp5819qwKxHvDubGmWGv6Lo8pLVKUWaFf0VUn4MvJb8dd87kpJFlSckq BEdmup2QsYMZCWI5D+QEI9/QlDNZLKRyAc3IBGKslFUsyWKiX0CGow0ZN7zZID7s 5Vt/vhkymUm0jGhALkZfBSndcYyHIEXnZ/EMbw/C8Ry3sgvnVzxIjkKZ48tiu2+B 9iRdoCPiLChvaWC5qsGKMI/ueuZO8qZ2l4uPCVHlf5c3mtQ5QetO6dkAQWw4wSII JM9iToDCbB7N8I5JsPgZt+ORO+Iy1D7Q -----END CERTIFICATE-----Generated at Wed May 14 11:42:04 2025 by rpki-client