$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: WpWAIFVeHOE3ZjEUs0sKkg5CyspitGD5rSiDdrDYwA8= Subject key identifier: BD:96:6B:4C:66:49:79:21:F8:B7:22:0A:57:C6:2A:C1:0F:8B:3C:78 Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D2F Signing time: Thu 24 Apr 2025 17:59:12 +0000 Manifest this update: Thu 24 Apr 2025 17:59:11 +0000 Manifest next update: Thu 01 May 2025 17:59:11 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: zzYKKxqYoFXkrIiLLXDPBkE6ZZS3p1yvOeozpU8KIg8=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: Apr 24 17:59:11 2025 GMT Not After : May 1 17:59:11 2025 GMT Subject: CN=680a7bef-2a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:64:3c:46:92:c9:bf:a0:ff:2a:18:95:2a:2c: bb:c6:3f:01:01:37:80:1d:ce:bc:fb:9b:c9:1b:52: 8e:ed:ff:59:c7:be:9e:04:7d:35:cb:f0:61:ca:78: 96:e3:36:98:6a:5f:41:20:7d:d6:ac:cb:91:85:fa: 35:38:36:04:e8:5e:dd:fe:53:96:55:1f:2c:7e:3e: 9c:ee:d9:f1:07:ab:b8:db:5e:c4:e9:79:26:28:41: eb:16:6f:15:50:cd:f1:39:9d:1a:47:79:7e:ea:d4: d5:3d:dc:cd:3a:c2:21:8b:11:ba:5d:9f:84:08:7a: a3:78:d0:6a:e2:68:00:f8:94:81:9c:b0:8c:e2:07: b6:c9:eb:04:fc:4e:13:f9:40:4d:da:84:38:04:0a: f5:54:4a:c1:18:eb:f5:fe:77:9b:9c:ae:63:9b:a5: 30:4f:e3:b6:08:94:51:bb:b4:07:24:48:c8:36:fb: 09:5a:ab:32:75:66:de:49:77:76:ef:c8:70:8c:e8: c7:ec:ae:c7:cb:6d:98:e6:7c:83:a6:58:a7:0a:a4: ac:93:d3:2c:bb:e7:f1:b1:83:d9:1a:68:02:b5:6f: a0:6c:d1:0b:ba:54:8c:b8:49:f0:fc:bf:65:20:fb: 61:ef:45:43:0b:8f:d5:2b:9b:09:97:b0:f6:f1:ee: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:6B:4C:66:49:79:21:F8:B7:22:0A:57:C6:2A:C1:0F:8B:3C:78 X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:c8:50:85:f9:4b:aa:f3:2f:b0:ac:60:cc:e2:ae:d0:41:b0: d3:9b:b7:73:ed:fb:5a:34:ca:c1:a4:f1:74:a5:39:2f:de:b1: 08:d5:56:5a:2b:a2:60:de:51:4e:7b:e1:6b:bd:b2:9c:2f:b5: 37:b2:22:4f:c0:cd:22:cc:43:1a:4c:53:6a:02:63:43:67:48: 45:c7:0d:a7:e6:08:e6:02:50:c5:d9:ae:b9:2a:69:74:9d:96: 95:26:a6:86:35:71:e4:44:6f:ea:e8:e8:69:6c:ca:83:0b:c2: df:65:51:f8:80:3e:36:05:7b:41:81:ed:ac:cb:38:35:89:2a: af:7f:92:26:75:af:29:8b:17:88:5d:cd:e9:39:06:b9:88:4e: 7c:c0:8c:b6:a5:cf:68:64:c0:92:f6:97:8d:12:74:02:5a:67: f0:03:6b:eb:be:97:ee:bb:3f:29:75:63:2b:bf:b4:ee:7b:00: 59:a7:65:c4:42:23:01:01:a1:b2:9b:48:5a:37:5a:6f:ba:26: 92:d4:4c:5a:9b:25:1a:58:a7:fc:ca:9a:51:bf:67:9f:46:d3: 18:d0:b3:26:ea:77:92:9e:ff:8d:69:79:cf:97:fc:01:10:31: f4:0f:c4:f3:dc:c2:d5:15:7c:19:d8:af:e9:08:89:4a:33:66: ec:c2:68:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUwNDI0MTc1OTExWhcNMjUwNTAxMTc1OTExWjAYMRYwFAYD VQQDEw02ODBhN2JlZi0yYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+GQ8RpLJv6D/KhiVKiy7xj8BATeAHc68+5vJG1KO7f9Zx76eBH01y/BhyniW 4zaYal9BIH3WrMuRhfo1ODYE6F7d/lOWVR8sfj6c7tnxB6u4217E6XkmKEHrFm8V UM3xOZ0aR3l+6tTVPdzNOsIhixG6XZ+ECHqjeNBq4mgA+JSBnLCM4ge2yesE/E4T +UBN2oQ4BAr1VErBGOv1/nebnK5jm6UwT+O2CJRRu7QHJEjINvsJWqsydWbeSXd2 78hwjOjH7K7Hy22Y5nyDplinCqSsk9Msu+fxsYPZGmgCtW+gbNELulSMuEnw/L9l IPth70VDC4/VK5sJl7D28e6KbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2Wa0xm SXkh+LciClfGKsEPizx4MB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQyFCF+Uuq8y+wrGDM4q7QQbDTm7dz7ftaNMrBpPF0pTkv3rEI1VZa K6Jg3lFOe+FrvbKcL7U3siJPwM0izEMaTFNqAmNDZ0hFxw2n5gjmAlDF2a65Kml0 nZaVJqaGNXHkRG/q6OhpbMqDC8LfZVH4gD42BXtBge2syzg1iSqvf5Imda8pixeI Xc3pOQa5iE58wIy2pc9oZMCS9peNEnQCWmfwA2vrvpfuuz8pdWMrv7TuewBZp2XE QiMBAaGym0haN1pvuiaS1ExamyUaWKf8yppRv2efRtMY0LMm6neSnv+NaXnPl/wB EDH0D8Tz3MLVFXwZ2K/pCIlKM2bswmhq -----END CERTIFICATE-----Generated at Sat Apr 26 05:26:17 2025 by rpki-client