$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: JQhBiHPkRh2Pn3CTgz6l+CEm/kRdgBd2VmKsGvNLZqs= Subject key identifier: AB:4E:10:71:6F:15:E9:85:8E:87:54:40:CD:A5:AC:E0:D8:A6:2B:6F Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: FB Signing time: Wed 07 May 2025 04:17:09 +0000 Manifest this update: Wed 07 May 2025 04:17:08 +0000 Manifest next update: Wed 14 May 2025 04:17:08 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: WMhr/rob8hdPwgk3A8fjD6uedQXHVIYCrHKXv4xAI0A=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 04:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: May 7 04:17:08 2025 GMT Not After : May 14 04:17:08 2025 GMT Subject: CN=681adec4-a1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:2f:28:d2:7e:33:20:05:b2:b3:a1:6f:ed: f8:be:b2:4f:bd:60:c1:45:d8:a2:6c:d8:48:61:29: 28:1d:0c:aa:c0:18:95:8b:85:99:bf:bd:4a:50:20: 1c:83:2e:6e:ec:e4:74:57:a2:d0:71:37:2d:46:90: 3c:4e:b5:b7:40:65:af:7b:3f:a5:30:81:e0:35:08: 78:ed:53:98:35:17:32:02:aa:3c:6b:d1:1a:de:5c: aa:e4:5e:48:62:e2:56:f5:4c:81:dc:65:56:14:f9: 94:fe:29:c7:4c:50:61:28:c6:65:8d:81:e5:69:a0: 9e:09:fc:a8:67:21:e6:a1:3a:2c:1a:9f:9c:83:52: ce:66:16:e7:d2:d3:ee:2b:23:f2:85:0a:62:11:2b: 40:d0:f4:fa:57:8c:11:d1:fb:cb:45:36:f3:29:9a: 9f:44:6f:98:2f:72:4a:e8:07:be:95:82:ce:49:f6: 41:b9:dc:9b:d8:44:15:48:a5:5c:8b:03:76:fc:1a: 58:48:c6:d5:26:8f:0a:46:25:e3:9e:eb:3e:ea:cb: 77:94:6b:9c:16:e5:7e:31:10:c0:70:9c:a4:d1:55: 0d:30:02:eb:06:63:fd:28:c5:b8:98:13:8a:cc:17: 0f:8e:71:c7:de:5c:3e:a5:0a:a0:9d:3c:69:5d:eb: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4E:10:71:6F:15:E9:85:8E:87:54:40:CD:A5:AC:E0:D8:A6:2B:6F X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:58:bf:19:a7:8c:80:1f:93:43:7b:e6:cd:b9:06:05:fd:93: 79:43:56:dc:17:0a:e9:6b:fe:a9:30:23:00:36:ca:6d:f1:65: db:6d:f7:3c:4a:bf:13:fe:cb:43:fa:76:23:9f:44:06:c8:4b: 3b:49:ed:09:de:9f:c2:d0:de:c6:01:66:61:95:83:f4:5c:6a: fb:2a:f1:4c:cf:03:55:d5:ec:cc:1f:5b:0b:cd:28:58:2d:c6: 8a:d9:72:5b:f0:95:0b:d2:21:fa:f2:75:69:e4:06:f9:39:3b: bb:6f:f3:52:7b:3f:e7:ac:4b:bf:17:4d:ed:f7:81:15:5a:18: a3:70:85:dc:f7:8f:2c:28:8b:e5:74:c9:2f:f4:3e:51:66:a9: 91:bc:bd:80:40:53:d7:3d:68:22:3f:0e:25:76:a2:f7:fc:bc: f5:ee:83:2a:5d:64:db:d1:81:ce:c7:ad:d5:57:ba:20:4d:49: a9:b0:a1:cd:fc:aa:dc:76:ff:8e:15:0e:f8:7c:cf:a9:98:08: 67:d6:ab:7c:f1:ce:c1:82:ac:21:f6:69:38:1b:99:78:d0:28: 85:0b:25:4f:a2:f7:a0:d7:cb:6a:c2:5e:3b:b9:9f:a0:3b:af: 21:1f:e6:af:9d:5c:45:22:c8:6c:00:cc:03:26:2a:9f:d1:ee: 4b:d7:a1:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwNTA3MDQxNzA4WhcNMjUwNTE0MDQxNzA4WjAYMRYwFAYD VQQDEw02ODFhZGVjNC1hMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo8vKNJ+MyAFsrOhb+34vrJPvWDBRdiibNhIYSkoHQyqwBiVi4WZv71KUCAc gy5u7OR0V6LQcTctRpA8TrW3QGWvez+lMIHgNQh47VOYNRcyAqo8a9Ea3lyq5F5I YuJW9UyB3GVWFPmU/inHTFBhKMZljYHlaaCeCfyoZyHmoTosGp+cg1LOZhbn0tPu KyPyhQpiEStA0PT6V4wR0fvLRTbzKZqfRG+YL3JK6Ae+lYLOSfZBudyb2EQVSKVc iwN2/BpYSMbVJo8KRiXjnus+6st3lGucFuV+MRDAcJyk0VUNMALrBmP9KMW4mBOK zBcPjnHH3lw+pQqgnTxpXetrywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtOEHFv FemFjodUQM2lrODYpitvMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVWL8Zp4yAH5NDe+bNuQYF/ZN5Q1bcFwrpa/6pMCMANspt8WXbbfc8 Sr8T/stD+nYjn0QGyEs7Se0J3p/C0N7GAWZhlYP0XGr7KvFMzwNV1ezMH1sLzShY LcaK2XJb8JUL0iH68nVp5Ab5OTu7b/NSez/nrEu/F03t94EVWhijcIXc948sKIvl dMkv9D5RZqmRvL2AQFPXPWgiPw4ldqL3/Lz17oMqXWTb0YHOx63VV7ogTUmpsKHN /Krcdv+OFQ74fM+pmAhn1qt88c7Bgqwh9mk4G5l40CiFCyVPoveg18tqwl47uZ+g O68hH+avnVxFIshsAMwDJiqf0e5L16G0 -----END CERTIFICATE-----Generated at Thu May 8 22:59:29 2025 by rpki-client