$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft File: JBKHZDDirPShqD5aV1x_l6srOy4.mft (raw, json) Hash identifier: SP3KWyiGESgnxKAbIyTf0x7e52MahgchDl4rLbG1r/8= Subject key identifier: F5:FE:7C:74:D9:D2:04:0F:7B:FA:9F:51:CD:C9:E2:D6:4C:25:B2:81 Authority key identifier: 24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E Certificate issuer: /CN=A918BBEF/serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft Manifest number: 0617 Signing time: Mon 12 May 2025 22:37:50 +0000 Manifest this update: Mon 12 May 2025 22:37:49 +0000 Manifest next update: Mon 19 May 2025 22:37:49 +0000 Files and hashes: 1: JBKHZDDirPShqD5aV1x_l6srOy4.crl (hash: LB7xE8dpJmoYLAIKBZ9zhumeK0tu6MXxgxeyGpLf/YY=) 2: 28D28DD0F1B511EE83596382C4F9AE02.roa (hash: mwRP961xtY2lPq9MW+s5fgbFnCinGV45dL2366gga8s=) 3: 07BB530CF1B511EEACF12582C4F9AE02.roa (hash: W99oRxw3I+qxKmMA4BJDWXe3wvdXS+ZW2rGIK9SdBKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBEF, serialNumber=2412876430E2ACF4A1A83E5A575C7F97AB2B3B2E Validity Not Before: May 12 22:37:49 2025 GMT Not After : May 19 22:37:49 2025 GMT Subject: CN=6822783e-5f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:15:ea:8e:33:48:3a:0b:97:72:3a:c8:2f: e3:98:b5:3f:d9:c1:93:8d:bc:df:15:4f:11:48:e0: b0:b3:70:5d:f0:4b:a3:d7:84:32:3d:cb:2c:93:86: b1:0e:2b:66:f9:c0:c2:f9:eb:0c:a8:0a:4c:4f:a2: 5f:cb:6e:42:28:76:86:30:bd:95:05:ff:78:f9:c6: 71:43:de:9e:ae:d3:ba:6b:59:0f:bb:76:7b:d0:ae: 36:da:de:1c:e6:18:1f:8f:10:30:c4:05:62:82:8a: 64:7e:7a:7d:e3:97:b3:ec:09:ce:c1:63:61:5e:73: 18:fa:b3:b8:71:e6:5f:af:8e:de:fc:cf:af:47:d8: 09:c2:0e:96:48:ac:de:52:b0:91:01:bb:71:86:5d: 91:52:48:67:7a:f9:d1:b8:df:aa:66:dd:a1:41:e3: 48:cd:bd:c1:cd:33:64:12:58:7b:21:61:e3:25:f9: 64:58:5f:f1:d6:8f:8c:e8:95:96:5b:c4:f8:a9:da: 09:26:a6:7b:f5:86:6c:cc:a4:77:10:72:ad:7a:88: b6:f0:e1:b2:e0:3f:fc:73:e1:61:cd:c1:5d:1a:cf: 7d:66:33:d1:60:49:71:43:e3:c1:d5:f6:6e:5a:97: 14:4e:2b:8f:b4:36:e2:2d:33:db:67:8f:4d:79:8c: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:7C:74:D9:D2:04:0F:7B:FA:9F:51:CD:C9:E2:D6:4C:25:B2:81 X509v3 Authority Key Identifier: keyid:24:12:87:64:30:E2:AC:F4:A1:A8:3E:5A:57:5C:7F:97:AB:2B:3B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JBKHZDDirPShqD5aV1x_l6srOy4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBEF/F791C37EA04211EB85699E21C4F9AE02/JBKHZDDirPShqD5aV1x_l6srOy4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:07:34:cc:38:12:84:28:5e:96:53:1a:a7:b7:55:cf:2f:22: 10:fd:73:a1:5b:4c:10:d7:77:48:e7:a7:f1:d1:98:9f:d1:7a: 97:6e:62:93:ea:95:8f:b0:e5:f4:62:11:6e:0b:03:06:db:ae: 71:ed:02:cf:16:b5:5b:a9:df:70:db:aa:b6:a5:d4:20:c5:2d: 2e:5f:64:c3:40:7a:08:30:c9:98:4a:54:6b:9a:6c:92:a5:2f: d4:34:f5:76:be:a5:d4:ec:d6:10:59:a7:26:c3:72:95:f6:23: c3:5a:4e:46:f2:b9:fb:72:b8:6e:d1:51:29:7b:8b:b1:12:5a: 96:60:0a:16:ea:30:d5:7a:7b:cd:44:20:3f:36:3c:de:26:3a: bb:81:54:b5:79:ae:a4:74:ce:76:a8:87:1f:5c:ec:ec:04:8e: 4e:11:b1:af:1f:e4:64:d8:1a:d0:24:08:86:db:f5:e7:c9:3e: 45:0b:2a:ce:16:10:4d:3a:e0:7f:5a:c3:e4:b9:60:6d:29:4d: e6:94:79:8f:2b:b1:25:10:f5:8d:b5:35:1e:2b:41:ca:22:6e: 86:ce:43:eb:4b:26:43:ad:a5:d2:5e:16:8b:fe:01:21:b3:fd: bd:94:10:e9:c3:b7:a7:1e:32:b9:92:e0:32:ef:03:9d:4d:76: 12:b4:c4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCRUYxMTAvBgNVBAUTKDI0MTI4NzY0MzBFMkFDRjRBMUE4M0U1QTU3NUM3Rjk3 QUIyQjNCMkUwHhcNMjUwNTEyMjIzNzQ5WhcNMjUwNTE5MjIzNzQ5WjAYMRYwFAYD VQQDEw02ODIyNzgzZS01ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtioV6o4zSDoLl3I6yC/jmLU/2cGTjbzfFU8RSOCws3Bd8Euj14QyPcssk4ax Ditm+cDC+esMqApMT6Jfy25CKHaGML2VBf94+cZxQ96ertO6a1kPu3Z70K422t4c 5hgfjxAwxAVigopkfnp945ez7AnOwWNhXnMY+rO4ceZfr47e/M+vR9gJwg6WSKze UrCRAbtxhl2RUkhnevnRuN+qZt2hQeNIzb3BzTNkElh7IWHjJflkWF/x1o+M6JWW W8T4qdoJJqZ79YZszKR3EHKteoi28OGy4D/8c+FhzcFdGs99ZjPRYElxQ+PB1fZu WpcUTiuPtDbiLTPbZ49NeYzDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX+fHTZ 0gQPe/qfUc3J4tZMJbKBMB8GA1UdIwQYMBaAFCQSh2Qw4qz0oag+Wldcf5erKzsu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJFRi9GNzkxQzM3RUEw NDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQU2hxRDVhVjF4X2w2c3JP eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pCS0haRERpclBTaHFENWFWMXhfbDZzck95NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJFRi9GNzkxQzM3RUEwNDIxMUVCODU2OTlFMjFDNEY5QUUwMi9KQktIWkREaXJQ U2hxRDVhVjF4X2w2c3JPeTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfBzTMOBKEKF6WUxqnt1XPLyIQ/XOhW0wQ13dI56fx0Zif0XqXbmKT 6pWPsOX0YhFuCwMG265x7QLPFrVbqd9w26q2pdQgxS0uX2TDQHoIMMmYSlRrmmyS pS/UNPV2vqXU7NYQWacmw3KV9iPDWk5G8rn7crhu0VEpe4uxElqWYAoW6jDVenvN RCA/NjzeJjq7gVS1ea6kdM52qIcfXOzsBI5OEbGvH+Rk2BrQJAiG2/XnyT5FCyrO FhBNOuB/WsPkuWBtKU3mlHmPK7ElEPWNtTUeK0HKIm6GzkPrSyZDraXSXhaL/gEh s/29lBDpw7enHjK5kuAy7wOdTXYStMQz -----END CERTIFICATE-----Generated at Wed May 14 09:21:37 2025 by rpki-client