$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: rgEhydwe6VJtgIhASO5ad/GwDWyPACCuR1nFH1q4E4A= Subject key identifier: 4D:06:DF:88:E9:DC:D7:B3:B9:11:6C:77:5E:98:41:11:22:3B:EB:A8 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 01E5 Signing time: Thu 03 Jul 2025 02:44:23 +0000 Manifest this update: Thu 03 Jul 2025 02:44:23 +0000 Manifest next update: Thu 10 Jul 2025 02:44:23 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: a8LN9GHFIWt7U9FMt7r2D2vL6lu9NsuFJ4b7B6X6mfs=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Jul 3 02:44:23 2025 GMT Not After : Jul 10 02:44:23 2025 GMT Subject: CN=6865ee87-2d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:1f:5f:1e:68:df:da:5d:c8:53:3f:11:57: 08:a5:02:bf:09:2d:ba:4a:4c:81:18:51:af:15:7b: 57:91:d5:cf:68:2f:b6:95:3a:4e:60:bd:5c:8e:cc: 02:64:b3:f8:0b:86:0e:c2:24:a4:50:80:44:5c:ba: c7:17:0e:59:75:26:56:c4:ff:32:41:e7:d8:a3:77: 23:ee:03:33:ec:38:9b:69:2b:ba:d4:82:94:c6:8d: 0b:18:d3:68:e2:5b:01:c7:67:cf:69:4e:d6:47:86: de:79:46:f0:69:61:00:34:88:23:9b:99:53:b9:d5: 97:8c:c1:9f:b9:1c:65:87:8d:91:03:32:5e:62:b0: 28:a3:ce:54:88:d3:d5:31:36:54:34:c2:1f:03:6b: 4c:49:88:72:84:ba:0c:1e:3f:33:0d:0d:39:ac:c5: 17:a4:e6:93:e6:a5:17:33:59:52:e7:bd:62:5d:06: 36:28:62:44:6d:2c:a9:e0:3e:3d:f4:58:8b:1b:5e: e8:3b:95:e2:2f:9a:bd:51:c3:63:9a:21:7e:34:36: a3:3e:12:8d:9a:f9:a5:42:ea:ef:2c:e4:95:e8:e8: 14:b5:63:ac:ff:a1:30:23:97:c2:cb:0d:d5:82:25: 2b:2f:24:fc:9e:07:0b:b4:27:08:b9:23:0b:ec:fe: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:06:DF:88:E9:DC:D7:B3:B9:11:6C:77:5E:98:41:11:22:3B:EB:A8 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:3a:d4:e1:b3:cd:2c:53:c5:d5:bd:18:59:ea:ad:cc:dc: 7c:0d:a9:84:99:52:5c:ce:e9:b1:b1:af:dd:40:c7:74:12:0c: 06:02:5a:b1:b2:a5:e8:25:74:fe:9f:b0:e0:06:c1:d0:73:6a: 17:a4:e9:83:2a:85:a0:ba:6f:75:e7:96:19:1d:63:a7:24:fa: 74:9e:be:a1:4d:7c:7c:64:4a:0d:87:8b:51:cc:dd:32:e2:17: 30:1e:b6:8e:3e:57:77:47:53:f0:d8:07:d9:01:d9:16:20:44: e2:2e:71:b3:e9:ed:e2:47:11:e5:70:24:d3:dc:0f:71:b8:25: 0a:da:f9:ce:37:eb:9e:fb:89:7b:e4:09:3a:1e:e0:3a:f1:35: d3:25:ae:f8:29:69:50:2a:66:03:da:14:86:14:60:df:50:df: d2:41:3f:23:d2:87:1c:65:52:50:58:eb:f9:05:55:b3:16:8b: c2:bd:74:26:20:c9:9c:96:38:a9:92:a2:a7:41:22:d8:e4:0c: ab:79:3c:47:fe:87:85:a9:16:6b:84:25:4f:7a:e9:76:61:29: 8a:e1:f6:88:72:80:a2:be:7d:1a:3d:f2:b2:99:dc:6b:fd:a9: 74:38:9b:c1:03:4d:b7:38:de:8e:d0:c9:b2:0c:f3:28:51:93: b7:0c:ff:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUwNzAzMDI0NDIzWhcNMjUwNzEwMDI0NDIzWjAYMRYwFAYD VQQDEw02ODY1ZWU4Ny0yZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nYfXx5o39pdyFM/EVcIpQK/CS26SkyBGFGvFXtXkdXPaC+2lTpOYL1cjswC ZLP4C4YOwiSkUIBEXLrHFw5ZdSZWxP8yQefYo3cj7gMz7DibaSu61IKUxo0LGNNo 4lsBx2fPaU7WR4beeUbwaWEANIgjm5lTudWXjMGfuRxlh42RAzJeYrAoo85UiNPV MTZUNMIfA2tMSYhyhLoMHj8zDQ05rMUXpOaT5qUXM1lS571iXQY2KGJEbSyp4D49 9FiLG17oO5XiL5q9UcNjmiF+NDajPhKNmvmlQurvLOSV6OgUtWOs/6EwI5fCyw3V giUrLyT8ngcLtCcIuSML7P6EMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0G34jp 3NezuRFsd16YQREiO+uoMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPizrU4bPNLFPF1b0YWeqtzNx8DamEmVJczumxsa/dQMd0EgwGAlqx sqXoJXT+n7DgBsHQc2oXpOmDKoWgum9155YZHWOnJPp0nr6hTXx8ZEoNh4tRzN0y 4hcwHraOPld3R1Pw2AfZAdkWIETiLnGz6e3iRxHlcCTT3A9xuCUK2vnON+ue+4l7 5Ak6HuA68TXTJa74KWlQKmYD2hSGFGDfUN/SQT8j0occZVJQWOv5BVWzFovCvXQm IMmcljipkqKnQSLY5AyreTxH/oeFqRZrhCVPeul2YSmK4faIcoCivn0aPfKymdxr /al0OJvBA023ON6O0MmyDPMoUZO3DP9w -----END CERTIFICATE-----Generated at Fri Jul 4 22:03:36 2025 by rpki-client