$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: wnzGcuaXzHjiLqAZQC57v9CH9diLzxaldw07mOkcO5w= Subject key identifier: B7:5E:DC:7E:ED:59:46:AE:92:ED:B6:F9:22:03:D2:F3:49:87:96:2B Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DC9 Signing time: Sat 14 Jun 2025 17:48:35 +0000 Manifest this update: Sat 14 Jun 2025 17:48:34 +0000 Manifest next update: Sat 21 Jun 2025 17:48:34 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: q5ntf3AMHXGh9+9/QoRRkvm0FzDKXl/lfgIHwA0OsoQ=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3535 (0xdcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Jun 14 17:48:34 2025 GMT Not After : Jun 21 17:48:34 2025 GMT Subject: CN=684db5f3-6f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:39:c9:9f:d4:01:d6:ef:0b:96:c2:4a:db: 22:6c:a4:04:3e:9c:5f:c6:a4:0a:a8:6a:6c:f4:44: 6b:48:77:79:3e:7d:12:51:d2:3c:a3:98:98:cb:d1: 61:8e:2e:4f:af:b5:5e:b3:e6:10:9a:e1:01:f3:48: fc:af:f5:c7:f4:4a:db:03:88:7d:24:71:3b:89:af: e1:23:fd:31:a2:7f:c2:78:9b:5d:27:e7:a0:8c:bf: 20:10:83:74:24:18:40:80:43:cb:ca:ec:9e:8d:6f: 09:36:7a:f8:37:1c:f6:37:c4:bb:b0:cb:03:ea:74: 61:4a:b1:97:23:0c:d3:62:3e:e0:f5:00:f8:70:81: fb:c4:f7:d7:22:b4:85:52:db:d9:50:c2:19:c6:13: 92:98:da:10:cd:ef:5b:07:8e:ee:7f:9e:46:8f:a5: cb:ad:a8:1a:f7:2b:59:df:b4:eb:82:c3:47:79:6d: dc:fc:9c:94:85:83:fb:53:7f:6a:96:aa:fe:ef:3c: 3e:87:93:3c:d6:cb:ab:91:52:5b:78:3f:14:41:b5: 8f:e6:99:b5:a0:6e:f7:9f:b8:a8:ad:dd:69:f8:ce: 28:01:d7:d5:32:f3:bd:13:87:ce:a8:5d:cc:ac:83: 27:08:f2:59:f2:ed:e1:d3:c3:54:1e:a6:0c:9b:19: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:DC:7E:ED:59:46:AE:92:ED:B6:F9:22:03:D2:F3:49:87:96:2B X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:94:85:d9:cb:42:1f:f0:e0:92:01:9f:fa:9d:e4:e1:4b:c2: dd:70:ed:27:a5:ec:63:b6:e3:48:ff:ee:98:1f:39:8a:61:a3: 9f:bc:db:3a:28:d9:7c:f9:dd:c5:74:eb:f8:e8:b6:41:3a:bb: a6:33:56:22:bc:01:23:f1:5e:bb:96:ca:d2:70:ba:e9:6a:d2: 2f:20:42:dd:c1:73:fd:a0:3a:cb:6f:a4:e9:0a:35:7c:11:63: 2a:c6:bc:6e:57:e4:15:2a:e3:86:2f:15:f1:47:10:86:85:50: 39:8c:c9:f2:29:4b:c2:1b:c2:f5:00:ad:fa:24:f5:fe:f6:f9: f7:13:75:ee:1b:7a:47:03:90:b0:0c:e0:24:d3:76:cb:4b:c9: fa:a0:78:2a:13:e0:4f:9d:a5:74:ff:46:c1:97:c9:18:84:ee: c0:6c:56:83:cf:82:21:eb:e6:1f:ab:4a:a8:ec:50:74:f8:e6: 66:a0:ca:e7:cd:5d:be:8d:bb:25:12:ad:32:0f:31:ab:ff:4e: ba:ae:b3:23:64:c4:6f:12:d0:90:51:23:c9:35:d2:15:b3:e4: d8:fd:6d:10:e1:4f:2c:97:df:51:72:31:4b:a4:1e:92:71:93: 1c:d8:b7:96:ef:55:ee:20:86:a0:86:80:f2:ac:a4:f3:bd:8f: 83:62:dd:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwNjE0MTc0ODM0WhcNMjUwNjIxMTc0ODM0WjAYMRYwFAYD VQQDEw02ODRkYjVmMy02ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloo5yZ/UAdbvC5bCStsibKQEPpxfxqQKqGps9ERrSHd5Pn0SUdI8o5iYy9Fh ji5Pr7Ves+YQmuEB80j8r/XH9ErbA4h9JHE7ia/hI/0xon/CeJtdJ+egjL8gEIN0 JBhAgEPLyuyejW8JNnr4Nxz2N8S7sMsD6nRhSrGXIwzTYj7g9QD4cIH7xPfXIrSF UtvZUMIZxhOSmNoQze9bB47uf55Gj6XLraga9ytZ37TrgsNHeW3c/JyUhYP7U39q lqr+7zw+h5M81surkVJbeD8UQbWP5pm1oG73n7iord1p+M4oAdfVMvO9E4fOqF3M rIMnCPJZ8u3h08NUHqYMmxn+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLde3H7t WUauku22+SID0vNJh5YrMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADlIXZy0If8OCSAZ/6neThS8LdcO0npexjtuNI/+6YHzmKYaOfvNs6 KNl8+d3FdOv46LZBOrumM1YivAEj8V67lsrScLrpatIvIELdwXP9oDrLb6TpCjV8 EWMqxrxuV+QVKuOGLxXxRxCGhVA5jMnyKUvCG8L1AK36JPX+9vn3E3XuG3pHA5Cw DOAk03bLS8n6oHgqE+BPnaV0/0bBl8kYhO7AbFaDz4Ih6+Yfq0qo7FB0+OZmoMrn zV2+jbslEq0yDzGr/066rrMjZMRvEtCQUSPJNdIVs+TY/W0Q4U8sl99RcjFLpB6S cZMc2LeW71XuIIaghoDyrKTzvY+DYt3p -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:01 2025 by rpki-client