$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: s3knW+EQyLBqtu3CEn6B13VmX8UaSTB3XcfjrYMQaTE= Subject key identifier: D7:44:2E:E4:51:B3:22:B7:B9:D7:7C:30:C5:F2:B7:A1:56:7E:92:6E Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 024C Signing time: Tue 17 Jun 2025 01:23:35 +0000 Manifest this update: Tue 17 Jun 2025 01:23:35 +0000 Manifest next update: Tue 24 Jun 2025 01:23:35 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: tL3rLV808Y+BH3AzKQTbaCbrEY/6xzl207wPUj7ybPQ=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: bYO1Amr7/ABGR4G9K++l8TjNlm4b6fexGqE2t0jU2Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Jun 17 01:23:35 2025 GMT Not After : Jun 24 01:23:35 2025 GMT Subject: CN=6850c397-b684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:cc:b4:16:71:ef:c3:0e:7c:db:56:05:59: 66:08:3c:1a:9d:f3:b7:7c:9e:b1:74:dc:54:87:7e: 3a:d0:22:08:f3:f9:03:0a:de:50:39:aa:97:46:ec: 85:f7:5e:14:5b:59:30:b2:c1:e7:c0:60:5d:f4:d6: 44:14:52:8b:2b:99:03:be:ca:04:0b:04:4f:1e:ab: f4:c5:ee:61:62:80:27:37:0c:c9:2a:ac:11:eb:92: 7d:2d:b6:a6:75:02:84:29:64:9a:e3:6e:e3:d4:f3: a5:d9:2c:17:15:07:36:c0:1a:f4:a2:e7:2e:3a:04: 6e:78:e3:22:ce:e2:af:b4:f4:d0:af:ba:4e:78:fe: fc:d0:53:d6:0c:05:b8:c8:b7:c5:e2:c3:13:18:ae: e4:d2:ae:8d:7d:e6:57:f9:05:b2:44:90:f0:d0:48: 7f:0d:27:d0:5b:86:b2:ac:6b:c2:15:2f:cf:fe:7b: 53:7b:62:ab:86:21:48:db:37:b9:91:16:c4:16:39: 58:e9:97:e2:20:5a:2e:6d:92:3a:33:71:ad:3f:a6: 1b:bb:7c:62:0b:ce:8b:9d:5c:9f:ec:06:77:7e:5e: 41:bd:db:c3:c9:1a:1c:ff:67:4d:64:ea:0f:14:9d: a7:a6:44:48:f3:3e:b6:aa:f8:50:13:5a:f2:a6:18: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:44:2E:E4:51:B3:22:B7:B9:D7:7C:30:C5:F2:B7:A1:56:7E:92:6E X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d4:37:d2:b4:97:ac:5d:ac:84:03:5f:19:a3:19:8f:f9:4d: a2:2a:80:17:b2:97:41:21:a9:07:aa:66:18:df:4d:69:f1:e0: 35:be:6b:be:75:71:cc:59:bd:0d:ac:82:ff:f6:06:b1:df:b0: 95:c1:77:e4:3a:19:7c:e2:ef:aa:78:a4:23:17:a0:df:b3:50: 5d:e6:5f:f8:4b:7b:cc:ef:36:db:80:ed:78:c5:0e:56:fb:82: b3:d3:df:8a:3f:77:7b:32:3c:72:f7:25:f2:95:b4:5d:3b:ee: fc:6a:bb:55:26:57:70:b6:48:29:80:31:d2:94:65:da:63:51: 74:b9:21:37:fd:9f:e4:32:e1:f8:bc:95:16:27:54:f2:b7:e0: 21:3e:13:ce:30:1c:4e:a3:0d:c8:1c:4e:d0:15:1e:f0:af:8c: af:67:7f:89:32:61:a9:b0:67:09:1f:ff:d3:58:c8:a2:a7:8d: 70:8b:05:26:35:dc:82:56:0e:c9:34:31:d4:df:63:c0:e8:32: ca:20:44:6b:24:a3:08:2f:cd:d9:5b:ba:e9:96:38:61:e1:3d: ad:27:a1:8b:e0:a0:67:f4:5b:ca:db:17:ef:6a:0f:dc:a8:3a: 3e:3a:48:f7:c4:a0:16:95:89:b4:c7:4e:ed:d3:73:4d:12:d9: bf:96:d8:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjUwNjE3MDEyMzM1WhcNMjUwNjI0MDEyMzM1WjAYMRYwFAYD VQQDEw02ODUwYzM5Ny1iNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3zMtBZx78MOfNtWBVlmCDwanfO3fJ6xdNxUh3460CII8/kDCt5QOaqXRuyF 914UW1kwssHnwGBd9NZEFFKLK5kDvsoECwRPHqv0xe5hYoAnNwzJKqwR65J9Lbam dQKEKWSa427j1POl2SwXFQc2wBr0oucuOgRueOMizuKvtPTQr7pOeP780FPWDAW4 yLfF4sMTGK7k0q6NfeZX+QWyRJDw0Eh/DSfQW4ayrGvCFS/P/ntTe2KrhiFI2ze5 kRbEFjlY6ZfiIFoubZI6M3GtP6Ybu3xiC86LnVyf7AZ3fl5BvdvDyRoc/2dNZOoP FJ2npkRI8z62qvhQE1ryphgrqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdELuRR syK3udd8MMXyt6FWfpJuMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY1DfStJesXayEA18ZoxmP+U2iKoAXspdBIakHqmYY301p8eA1vmu+ dXHMWb0NrIL/9gax37CVwXfkOhl84u+qeKQjF6Dfs1Bd5l/4S3vM7zbbgO14xQ5W +4Kz09+KP3d7Mjxy9yXylbRdO+78artVJldwtkgpgDHSlGXaY1F0uSE3/Z/kMuH4 vJUWJ1Tyt+AhPhPOMBxOow3IHE7QFR7wr4yvZ3+JMmGpsGcJH//TWMiip41wiwUm NdyCVg7JNDHU32PA6DLKIERrJKMIL83ZW7rpljhh4T2tJ6GL4KBn9FvK2xfvag/c qDo+Okj3xKAWlYm0x07t03NNEtm/lthA -----END CERTIFICATE-----Generated at Wed Jun 18 06:39:25 2025 by rpki-client