$ rpki-client -vvf rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft File: jxv350cnod5CAcTAU1X-sX8hviA.mft (raw, json) Hash identifier: bmq6tspshDdMnkonzLtR1+NRtljqsPicw5q4phjY9fs= Subject key identifier: 36:05:05:CD:BC:9B:F5:F2:5B:E7:36:47:A3:25:BB:DF:FF:2B:A5:C0 Authority key identifier: 8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 Certificate issuer: /CN=A919B7ED/serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft Manifest number: 0766 Signing time: Sat 10 May 2025 21:16:45 +0000 Manifest this update: Sat 10 May 2025 21:16:45 +0000 Manifest next update: Sat 17 May 2025 21:16:45 +0000 Files and hashes: 1: jxv350cnod5CAcTAU1X-sX8hviA.crl (hash: s2uk4dq2R/hgXIC304WXIes3jCWb9paFKCF9pY5evAg=) 2: 188F1CDC1FFD11EBAB33D75FC4F9AE02.roa (hash: NO1EJh2qKLFO5ebkuXSnG9nCqgcYg/T5QnNIaPx24Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B7ED, serialNumber=8F1BF7E74727A1DE4201C4C05355FEB17F21BE20 Validity Not Before: May 10 21:16:45 2025 GMT Not After : May 17 21:16:45 2025 GMT Subject: CN=681fc23d-a69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:6c:4e:f8:ac:d2:d4:9f:5a:3b:65:3a:ca: 42:a3:71:7b:4e:90:75:57:0a:96:c5:62:8b:37:5d: e8:92:76:14:fa:4d:41:a6:7f:a7:c6:c8:55:b4:3f: da:21:8b:cf:42:b6:e5:b4:c2:f1:d6:e1:8b:0a:40: 7a:d7:c8:9e:9d:47:35:df:b2:3d:04:01:48:3a:ea: 06:85:8e:53:f6:2f:bf:dc:48:e7:0c:f2:fd:0e:f5: 8e:4a:70:c9:27:3a:4d:6b:60:79:73:cc:ae:9a:2d: c9:be:0a:25:12:03:cf:25:eb:69:f5:5e:07:a6:17: 37:33:1b:02:73:ea:61:b2:43:ab:79:76:98:30:12: 35:a7:d0:8d:c9:7d:4b:7d:14:00:5c:01:33:7e:f2: 70:61:89:17:56:82:53:da:f3:d4:bc:cb:03:8d:25: 3a:58:ec:79:f1:95:f3:9d:a7:c4:c9:2e:f4:20:0d: 54:8a:8b:b7:5c:08:6d:6d:05:bb:6f:f6:d7:00:0e: 9d:9b:97:78:b5:f7:6c:90:db:23:5e:17:1f:46:37: 12:02:68:40:f8:45:27:0a:31:df:1b:a6:ba:7b:d4: a6:a0:4a:29:d8:6b:a5:c7:cf:2c:c1:20:50:55:39: 0f:fc:db:a5:9a:02:30:32:37:56:3d:34:65:d7:61: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:05:CD:BC:9B:F5:F2:5B:E7:36:47:A3:25:BB:DF:FF:2B:A5:C0 X509v3 Authority Key Identifier: keyid:8F:1B:F7:E7:47:27:A1:DE:42:01:C4:C0:53:55:FE:B1:7F:21:BE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxv350cnod5CAcTAU1X-sX8hviA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7ED/308878981F3E11EBAA022A21C4F9AE02/jxv350cnod5CAcTAU1X-sX8hviA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e5:7c:6e:b5:2b:7d:d3:3f:25:4a:1f:c9:68:bc:8f:0f:49: 4f:f3:43:51:b2:79:c4:fb:04:f6:82:1a:1b:82:c8:b2:63:a6: fd:d1:b5:ee:3c:77:dd:7d:52:9b:f5:6b:83:64:0b:e2:55:93: 4b:55:ba:70:31:0d:d8:4b:e4:e0:4c:79:ed:87:18:c3:48:67: eb:43:d2:f1:1e:5c:a3:b3:27:71:45:13:9c:d3:01:f3:81:60: 76:33:e4:55:6e:b2:0b:b9:7d:75:74:e7:e1:34:91:f3:5b:cf: 57:31:ea:ee:c8:af:69:8c:24:c8:70:3d:50:a5:00:75:08:c2: 90:d7:31:9b:27:43:a4:93:3c:b4:70:55:c2:86:5a:80:b7:cc: aa:08:dc:aa:e4:5e:68:6b:56:cd:f1:9f:fc:bb:2e:da:4f:80: c2:43:48:04:09:dc:ad:89:7c:b0:c9:73:43:5f:06:5e:51:5b: 99:8a:16:a5:a9:f9:de:7d:73:20:0b:db:dc:0d:2b:19:7e:da: 23:7e:94:c4:62:d4:26:bb:e2:37:f1:91:cf:f3:07:eb:3e:86: e9:0f:73:ea:d3:c4:6c:2f:fb:f4:66:83:80:86:fe:20:8e:c1: ac:f8:83:1c:9b:ab:48:9a:7b:0a:0c:e8:a4:9e:9d:53:b1:73: 89:7c:d4:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI3RUQxMTAvBgNVBAUTKDhGMUJGN0U3NDcyN0ExREU0MjAxQzRDMDUzNTVGRUIx N0YyMUJFMjAwHhcNMjUwNTEwMjExNjQ1WhcNMjUwNTE3MjExNjQ1WjAYMRYwFAYD VQQDEw02ODFmYzIzZC1hNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jhsTvis0tSfWjtlOspCo3F7TpB1VwqWxWKLN13oknYU+k1Bpn+nxshVtD/a IYvPQrbltMLx1uGLCkB618ienUc137I9BAFIOuoGhY5T9i+/3EjnDPL9DvWOSnDJ JzpNa2B5c8yumi3JvgolEgPPJetp9V4Hphc3MxsCc+phskOreXaYMBI1p9CNyX1L fRQAXAEzfvJwYYkXVoJT2vPUvMsDjSU6WOx58ZXznafEyS70IA1Uiou3XAhtbQW7 b/bXAA6dm5d4tfdskNsjXhcfRjcSAmhA+EUnCjHfG6a6e9SmoEop2Gulx88swSBQ VTkP/NulmgIwMjdWPTRl12EYqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYFBc28 m/XyW+c2R6Mlu9//K6XAMB8GA1UdIwQYMBaAFI8b9+dHJ6HeQgHEwFNV/rF/Ib4g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjdFRC8zMDg4Nzg5ODFG M0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9kNUNBY1RBVTFYLXNYOGh2 aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4djM1MGNub2Q1Q0FjVEFVMVgtc1g4aHZpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjdFRC8zMDg4Nzg5ODFGM0UxMUVCQUEwMjJBMjFDNEY5QUUwMi9qeHYzNTBjbm9k NUNBY1RBVTFYLXNYOGh2aUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf5XxutSt90z8lSh/JaLyPD0lP80NRsnnE+wT2ghobgsiyY6b90bXu PHfdfVKb9WuDZAviVZNLVbpwMQ3YS+TgTHnthxjDSGfrQ9LxHlyjsydxRROc0wHz gWB2M+RVbrILuX11dOfhNJHzW89XMeruyK9pjCTIcD1QpQB1CMKQ1zGbJ0Okkzy0 cFXChlqAt8yqCNyq5F5oa1bN8Z/8uy7aT4DCQ0gECdytiXywyXNDXwZeUVuZihal qfnefXMgC9vcDSsZftojfpTEYtQmu+I38ZHP8wfrPobpD3Pq08RsL/v0ZoOAhv4g jsGs+IMcm6tImnsKDOiknp1TsXOJfNRb -----END CERTIFICATE-----Generated at Sun May 11 22:35:40 2025 by rpki-client