$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: tNR1TA29TlDduoNnHn9WWFtDZx351EoSNFU2d0nBGpg= Subject key identifier: F6:2B:0C:2D:2C:94:42:BE:58:CE:5C:24:D8:AD:69:E6:9B:6D:AF:B4 Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 19 Signing time: Thu 15 May 2025 07:16:59 +0000 Manifest this update: Thu 15 May 2025 07:16:58 +0000 Manifest next update: Thu 22 May 2025 07:16:58 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: bh/5h45Mk09LnGl4k1jjC+WtMl4trrJZ/F2Hm63UMg8=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: May 15 07:16:58 2025 GMT Not After : May 22 07:16:58 2025 GMT Subject: CN=682594eb-724f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:ee:dd:53:25:00:91:8b:43:34:06:7f:ea: 3c:d3:af:5d:b6:d8:61:a7:56:52:b4:39:f1:04:94: 48:ab:98:c7:20:c7:fb:cd:93:1e:2d:96:98:c7:8d: 97:5a:b8:ab:9c:69:9b:47:df:c5:48:7c:de:41:0e: c8:06:d7:9d:de:5d:37:13:c5:5b:44:d4:28:9c:27: 18:b8:e7:01:58:b2:76:f1:a4:f1:a0:9c:21:10:00: 54:2b:a5:18:e0:60:5f:a8:cc:0f:62:24:81:4b:64: c2:c0:16:b7:0d:6d:4c:6e:cd:fe:a8:96:94:44:0f: b1:ea:8b:76:bd:2e:35:df:c1:e7:49:b3:e8:d2:f9: 0b:20:c9:64:73:a0:20:d3:38:8b:61:de:37:ec:89: 11:a6:52:08:79:62:97:64:80:f8:81:0a:13:b6:74: 3f:2c:f7:75:32:23:15:b9:6d:59:ac:8e:a9:1b:5f: 24:2c:12:14:d4:ba:28:0e:0e:5f:03:8f:aa:09:0d: f6:5f:37:76:fe:46:65:14:5d:a0:d3:a1:0d:ce:e6: 66:f8:d2:2c:79:78:91:2f:60:e2:34:3e:85:11:e7: 7a:85:a0:7e:ce:b5:16:86:38:c3:9c:f2:82:4b:4a: 36:5d:35:32:a9:ae:95:66:25:fa:1a:ab:69:4e:e8: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:0C:2D:2C:94:42:BE:58:CE:5C:24:D8:AD:69:E6:9B:6D:AF:B4 X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4c:90:26:4a:ab:a7:9f:b1:e6:a2:be:a4:24:4d:3e:16:4a: 2e:02:d8:39:60:47:7b:a3:c6:cd:58:b5:36:bc:c3:f7:77:49: c0:01:98:31:67:f6:b4:9b:e1:97:a5:12:6c:25:f4:c1:d1:52: 41:3b:9d:93:dc:ea:0a:67:7c:9b:91:55:df:54:37:8d:bf:ea: 3a:a2:48:e8:af:6c:8e:8e:9f:61:7f:04:7e:60:f7:3f:fb:35: 57:c2:5c:20:5b:d2:ca:e2:f0:98:b9:75:43:28:7b:42:5e:c6: 39:87:80:87:ae:bd:b8:4e:1d:89:2b:fe:8a:f2:c4:77:01:25: 6e:76:fa:1d:9f:53:5f:4c:a4:61:a2:0d:6b:59:02:5d:a6:32: 9b:10:1b:f0:1d:de:09:60:ca:06:47:bd:08:16:59:ca:96:4a: d8:53:e2:64:39:c7:95:e0:5e:80:32:c3:e4:c2:1e:04:0f:35: 15:6d:9b:c0:60:3b:93:23:39:56:af:13:e1:92:57:66:7c:9a: e0:48:5f:35:df:c8:86:bb:84:3b:fe:d9:04:7a:02:85:2b:ac: 63:92:58:a9:d5:89:4d:23:64:30:dc:a4:83:18:cd:7c:00:38: b8:93:be:84:92:b9:1f:e7:9e:ab:d1:26:3a:71:46:a6:e0:26: a7:57:35:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTA1MTUwNzE2NThaFw0yNTA1MjIwNzE2NThaMBgxFjAUBgNV BAMTDTY4MjU5NGViLTcyNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm0u7dUyUAkYtDNAZ/6jzTr1222GGnVlK0OfEElEirmMcgx/vNkx4tlpjHjZda uKucaZtH38VIfN5BDsgG153eXTcTxVtE1CicJxi45wFYsnbxpPGgnCEQAFQrpRjg YF+ozA9iJIFLZMLAFrcNbUxuzf6olpRED7Hqi3a9LjXfwedJs+jS+QsgyWRzoCDT OIth3jfsiRGmUgh5YpdkgPiBChO2dD8s93UyIxW5bVmsjqkbXyQsEhTUuigODl8D j6oJDfZfN3b+RmUUXaDToQ3O5mb40ix5eJEvYOI0PoUR53qFoH7OtRaGOMOc8oJL SjZdNTKprpVmJfoaq2lO6MI7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9isMLSyU Qr5Yzlwk2K1p5pttr7QwHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGRMkCZKq6efseaivqQkTT4WSi4C2DlgR3ujxs1YtTa8w/d3ScABmDFn 9rSb4ZelEmwl9MHRUkE7nZPc6gpnfJuRVd9UN42/6jqiSOivbI6On2F/BH5g9z/7 NVfCXCBb0sri8Ji5dUMoe0JexjmHgIeuvbhOHYkr/oryxHcBJW52+h2fU19MpGGi DWtZAl2mMpsQG/Ad3glgygZHvQgWWcqWSthT4mQ5x5XgXoAyw+TCHgQPNRVtm8Bg O5MjOVavE+GSV2Z8muBIXzXfyIa7hDv+2QR6AoUrrGOSWKnViU0jZDDcpIMYzXwA OLiTvoSSuR/nnqvRJjpxRqbgJqdXNZA= -----END CERTIFICATE-----Generated at Fri May 16 04:37:15 2025 by rpki-client