$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: z4U6k5zixLHImOonWvV7PELPpW1Vm3MkYr2Y374L1ms= Subject key identifier: 57:DF:56:08:1A:60:F9:C7:B6:5B:16:5B:75:94:1B:F2:50:AD:42:0E Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 01CC Signing time: Tue 13 May 2025 02:11:47 +0000 Manifest this update: Tue 13 May 2025 02:11:47 +0000 Manifest next update: Tue 20 May 2025 02:11:47 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: IF+wR2MOKXBXvEswGvPsrn7aROY1xoFvHqt2Uk4wYUg=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: May 13 02:11:47 2025 GMT Not After : May 20 02:11:47 2025 GMT Subject: CN=6822aa63-3d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:0c:ed:4b:fb:f7:47:7c:19:ec:5f:00:8a: ca:2b:ae:37:6b:80:a9:55:31:14:c8:81:b3:b4:2a: d6:aa:be:8f:23:8a:f4:41:b8:d1:1d:40:ca:9b:78: 4a:7b:a2:77:da:b3:34:aa:a8:fc:1c:79:5d:a9:40: 49:61:86:bd:7b:8a:c5:e3:de:2c:de:5e:30:2b:f5: d2:82:0b:95:7d:fe:e2:89:6e:b6:26:e3:d0:b4:4c: 56:56:13:bc:ad:cf:76:9a:0b:3f:af:2f:33:56:ba: 28:2d:25:08:d8:49:54:c4:71:24:5a:44:a9:16:58: 22:ef:12:52:6d:7f:5d:c7:3b:df:87:01:fc:8b:ae: ff:8a:e2:dc:36:b4:e4:47:67:bd:6d:ab:0c:39:55: ca:7a:d4:c9:58:67:2b:ca:6d:d4:a3:4a:f4:50:ed: 5f:b0:4b:be:53:50:4c:50:fc:ed:1c:bf:14:23:fb: 4e:94:4f:3a:00:67:aa:14:48:75:dc:4b:53:d8:93: 62:93:63:5e:de:8c:97:a0:69:b0:ce:01:83:43:bb: 5f:d3:96:89:e1:bd:85:75:59:c3:b6:6d:0b:3c:92: 3a:17:de:d2:8a:16:f0:7a:e7:b7:ca:94:0e:b8:43: f3:49:e5:6e:38:75:ff:49:93:50:ed:91:07:04:08: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DF:56:08:1A:60:F9:C7:B6:5B:16:5B:75:94:1B:F2:50:AD:42:0E X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6c:32:b5:c6:12:b5:7e:b5:98:fc:64:f5:f8:b6:e1:a9:ca: e0:fb:49:27:1b:35:0b:e4:95:4c:bc:01:eb:2e:32:4f:20:5e: 4f:9e:64:78:4f:76:42:ca:03:74:0e:dc:22:b2:b3:f2:d7:30: e4:34:c6:cd:88:d6:8e:43:23:69:cc:e6:24:d4:ab:b6:8b:cc: 16:6c:d7:cc:9d:11:dc:82:bb:fa:39:42:fb:94:d0:0c:0f:bb: 70:f9:97:a2:54:81:34:c4:28:38:27:59:bb:e9:db:10:f4:d0: 4c:b9:45:9e:5c:cd:96:95:af:24:98:2f:3d:69:3c:54:5a:f3: 86:fc:77:37:b8:36:b5:36:1f:a8:5e:bf:24:80:ec:ca:59:4d: 13:e5:5f:dc:81:74:2c:fa:98:a3:f0:35:4c:8a:30:2f:62:e4: bf:52:0e:62:a1:54:b2:f7:31:ae:26:44:77:ca:47:fd:37:ea: ab:bc:d4:c7:67:80:01:08:47:5b:4e:af:6d:63:d0:d9:5f:a0: 60:f4:fc:76:f5:e2:e2:1e:65:b4:4d:e3:9e:3e:e4:83:b2:5c: d2:f9:be:11:ea:6f:fd:14:af:d8:e8:57:45:15:32:e8:84:e4: bc:79:2c:33:1d:c4:a2:10:d5:28:32:58:74:76:3d:52:78:60: 5d:c0:a2:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUwNTEzMDIxMTQ3WhcNMjUwNTIwMDIxMTQ3WjAYMRYwFAYD VQQDEw02ODIyYWE2My0zZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VgM7Uv790d8GexfAIrKK643a4CpVTEUyIGztCrWqr6PI4r0QbjRHUDKm3hK e6J32rM0qqj8HHldqUBJYYa9e4rF494s3l4wK/XSgguVff7iiW62JuPQtExWVhO8 rc92mgs/ry8zVrooLSUI2ElUxHEkWkSpFlgi7xJSbX9dxzvfhwH8i67/iuLcNrTk R2e9basMOVXKetTJWGcrym3Uo0r0UO1fsEu+U1BMUPztHL8UI/tOlE86AGeqFEh1 3EtT2JNik2Ne3oyXoGmwzgGDQ7tf05aJ4b2FdVnDtm0LPJI6F97Sihbweue3ypQO uEPzSeVuOHX/SZNQ7ZEHBAh8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFffVgga YPnHtlsWW3WUG/JQrUIOMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbDK1xhK1frWY/GT1+Lbhqcrg+0knGzUL5JVMvAHrLjJPIF5PnmR4 T3ZCygN0DtwisrPy1zDkNMbNiNaOQyNpzOYk1Ku2i8wWbNfMnRHcgrv6OUL7lNAM D7tw+ZeiVIE0xCg4J1m76dsQ9NBMuUWeXM2Wla8kmC89aTxUWvOG/Hc3uDa1Nh+o Xr8kgOzKWU0T5V/cgXQs+pij8DVMijAvYuS/Ug5ioVSy9zGuJkR3ykf9N+qrvNTH Z4ABCEdbTq9tY9DZX6Bg9Px29eLiHmW0TeOePuSDslzS+b4R6m/9FK/Y6FdFFTLo hOS8eSwzHcSiENUoMlh0dj1SeGBdwKJP -----END CERTIFICATE-----Generated at Tue May 13 12:38:03 2025 by rpki-client