$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: UbM/sK5cAA7l3bt5aytMm1gnWAMVxMmVl69tne9mYwg= Subject key identifier: 86:CD:84:E7:E0:D5:C2:94:F2:12:BD:25:77:B0:6B:AB:3F:24:83:44 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 0115 Signing time: Sun 29 Jun 2025 03:54:51 +0000 Manifest this update: Sun 29 Jun 2025 03:54:50 +0000 Manifest next update: Sun 06 Jul 2025 03:54:50 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: YbgnMUoe+d8U0mf5ihC+DxQQt7zZY8X6G7mBAPQT4Bs=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Jun 29 03:54:50 2025 GMT Not After : Jul 6 03:54:50 2025 GMT Subject: CN=6860b90a-77b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:c1:cd:12:97:98:2e:ea:1c:ff:72:11:2e: c1:c1:5f:65:de:de:52:1b:76:a1:97:de:95:30:15: 2a:ef:d7:91:e6:cc:d7:ac:63:3a:80:15:26:ae:eb: 5b:4a:54:b7:fa:d6:fa:bb:fa:60:d3:d0:58:cb:b5: 6c:67:0a:3f:f2:fa:3c:a7:1c:9b:4f:57:56:32:40: 05:24:e7:e1:d1:e9:d3:79:a6:bf:69:49:51:cd:dd: 7d:81:30:fc:09:4e:42:c0:05:4e:7f:cb:ca:67:86: 76:fa:93:57:ee:05:15:fe:15:ba:72:50:13:cb:cc: b4:9d:bf:52:99:71:a3:89:fa:3f:52:67:8e:6f:ee: 86:9c:68:e3:c2:fb:d3:df:7d:2a:8e:ca:00:58:8a: 0b:77:df:16:ac:54:ba:d9:5c:3d:ee:be:27:0a:2b: b4:dc:e9:a7:93:24:79:72:5e:1f:9f:fb:9d:25:43: 05:e8:ec:7c:74:7c:8f:be:35:5a:22:b8:c8:c8:3f: 5d:10:4a:33:d5:5e:61:ba:91:74:72:05:6a:e0:65: b1:ed:a8:bd:4e:b0:f2:ef:f3:fd:ed:da:db:5a:06: 2f:ef:f5:fc:86:50:b5:2d:60:b1:32:13:af:05:2e: 4e:08:fa:d4:24:cd:65:d1:99:9d:79:6b:e4:48:56: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CD:84:E7:E0:D5:C2:94:F2:12:BD:25:77:B0:6B:AB:3F:24:83:44 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:54:fa:58:26:85:c1:ed:e5:b7:12:26:fb:61:53:09:fa:eb: 20:51:13:5b:b6:9e:05:0f:ab:08:f3:45:60:96:56:68:29:0f: ca:48:72:da:ec:a2:09:e3:f3:5c:6c:64:29:67:93:e0:73:b3: f0:7e:af:1f:9a:bd:a1:cf:01:de:25:53:48:bc:b3:80:b5:3d: 84:db:8f:34:d9:74:44:3d:6a:74:46:98:a5:c6:d0:43:fc:83: ca:37:00:07:d8:78:36:f4:d8:7c:ae:60:df:f3:32:7f:9e:21: 82:1b:14:f0:22:3e:9b:5f:2e:2d:d9:7b:d9:55:b5:d9:07:61: 7d:6a:00:95:da:a7:ac:a6:0d:a6:85:21:bf:69:b2:89:3d:01: c3:44:b1:ae:55:55:4b:55:9b:f4:96:aa:4c:1a:83:c7:7c:ab: a4:a7:d4:62:26:6b:a5:46:82:df:a7:6e:76:a6:d0:16:f8:08: dc:51:63:ff:4f:de:3b:76:fc:4b:20:0c:54:06:40:02:f5:10: a6:7c:97:f0:3b:1d:86:e8:f3:64:67:26:f4:8a:68:f2:12:31: fd:bd:4c:82:d7:8a:ea:51:b4:34:50:70:44:bb:43:3a:1c:a0: 26:95:3a:03:bd:29:48:ed:1b:f0:e5:f2:74:3a:1a:46:f4:65: aa:ce:92:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwNjI5MDM1NDUwWhcNMjUwNzA2MDM1NDUwWjAYMRYwFAYD VQQDEw02ODYwYjkwYS03N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKvBzRKXmC7qHP9yES7BwV9l3t5SG3ahl96VMBUq79eR5szXrGM6gBUmrutb SlS3+tb6u/pg09BYy7VsZwo/8vo8pxybT1dWMkAFJOfh0enTeaa/aUlRzd19gTD8 CU5CwAVOf8vKZ4Z2+pNX7gUV/hW6clATy8y0nb9SmXGjifo/UmeOb+6GnGjjwvvT 330qjsoAWIoLd98WrFS62Vw97r4nCiu03OmnkyR5cl4fn/udJUMF6Ox8dHyPvjVa IrjIyD9dEEoz1V5hupF0cgVq4GWx7ai9TrDy7/P97drbWgYv7/X8hlC1LWCxMhOv BS5OCPrUJM1l0ZmdeWvkSFaRQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbNhOfg 1cKU8hK9JXewa6s/JINEMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVPpYJoXB7eW3Eib7YVMJ+usgURNbtp4FD6sI80VgllZoKQ/KSHLa 7KIJ4/NcbGQpZ5Pgc7Pwfq8fmr2hzwHeJVNIvLOAtT2E24802XREPWp0RpilxtBD /IPKNwAH2Hg29Nh8rmDf8zJ/niGCGxTwIj6bXy4t2XvZVbXZB2F9agCV2qespg2m hSG/abKJPQHDRLGuVVVLVZv0lqpMGoPHfKukp9RiJmulRoLfp252ptAW+AjcUWP/ T947dvxLIAxUBkAC9RCmfJfwOx2G6PNkZyb0imjyEjH9vUyC14rqUbQ0UHBEu0M6 HKAmlToDvSlI7Rvw5fJ0OhpG9GWqzpIn -----END CERTIFICATE-----Generated at Sun Jun 29 12:36:50 2025 by rpki-client