$ rpki-client -vvf rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft File: jsTj-v1QkSiuwsCHnmr5E54V6rY.mft (raw, json) Hash identifier: FSX7js3M23mM5GcAMFA9OHLm5Fi0fSzy0+S6wr45+T4= Subject key identifier: 24:CD:5C:9F:C7:44:C1:3C:7A:CC:46:D2:44:E2:39:5B:EA:BE:DB:70 Authority key identifier: 8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 Certificate issuer: /CN=A9142AA2/serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft Manifest number: 0232 Signing time: Fri 25 Apr 2025 01:40:57 +0000 Manifest this update: Fri 25 Apr 2025 01:40:57 +0000 Manifest next update: Fri 02 May 2025 01:40:57 +0000 Files and hashes: 1: jsTj-v1QkSiuwsCHnmr5E54V6rY.crl (hash: agW7pBrFk/jpahX9CVVLQTPpxXv/39tRdh23aXZyUmA=) 2: DD530B9222B111EDA3B74073C4F9AE02.roa (hash: bYO1Amr7/ABGR4G9K++l8TjNlm4b6fexGqE2t0jU2Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142AA2, serialNumber=8EC4E3FAFD509128AEC2C0879E6AF9139E15EAB6 Validity Not Before: Apr 25 01:40:57 2025 GMT Not After : May 2 01:40:57 2025 GMT Subject: CN=680ae829-7bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:fb:78:3a:6c:93:b1:d2:ac:ce:6f:91:8b: 5a:8b:1f:1c:01:d2:bf:0b:d7:bb:91:11:7f:93:28: 0f:0e:37:f4:36:41:7d:34:01:e5:c2:c6:81:de:13: 6d:34:5a:52:b8:3e:46:20:87:59:b2:3e:7d:41:d8: df:63:94:2b:b5:41:1f:b5:5d:70:75:1c:68:53:73: 5d:dd:5e:c9:3f:ad:d6:f5:fd:43:2f:2a:cc:1b:53: 0f:af:a2:96:e2:18:95:32:6e:07:d9:4a:cc:63:42: 82:d8:2c:81:8f:d8:c7:5d:c7:2d:32:c4:03:5b:62: d1:11:cc:3a:b2:91:b2:63:b6:7f:83:69:4d:fe:16: c5:3c:8f:21:ec:93:29:d5:4b:7b:fe:a3:51:41:4e: 89:37:5e:94:85:c9:45:ba:e1:7e:9d:53:7e:23:59: 0e:ba:e8:f8:00:f0:bb:a6:8f:c9:63:52:4e:3b:f4: 44:9d:04:89:da:74:e3:e4:bc:30:b8:f6:b1:df:db: 26:23:25:5c:45:eb:b4:63:8c:b4:90:fa:1a:20:3d: a4:fd:ec:8d:c0:13:94:3e:d6:56:68:68:34:9e:a6: 91:fc:5c:3e:85:ce:ed:ee:be:a1:38:53:71:99:e3: af:79:2b:60:4a:ea:17:c5:bf:49:ad:8d:9f:36:ab: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CD:5C:9F:C7:44:C1:3C:7A:CC:46:D2:44:E2:39:5B:EA:BE:DB:70 X509v3 Authority Key Identifier: keyid:8E:C4:E3:FA:FD:50:91:28:AE:C2:C0:87:9E:6A:F9:13:9E:15:EA:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsTj-v1QkSiuwsCHnmr5E54V6rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142AA2/3DA8A94422A211EDBC8A6C80C4F9AE02/jsTj-v1QkSiuwsCHnmr5E54V6rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fe:d0:82:f9:57:fb:0a:e7:a0:06:cc:f3:00:cd:65:83:2d: 42:90:63:67:65:24:ad:ed:c8:65:aa:0e:d0:cd:25:72:f6:c7: a6:08:c7:89:d6:ed:53:c2:fe:08:1e:33:d9:2a:47:72:6d:5c: ec:74:02:ce:cc:d0:72:c9:85:87:e9:47:83:7a:38:46:c2:9c: cf:78:a5:7d:d7:7d:f3:b9:98:3a:43:a6:f4:95:23:1c:b1:d3: 6d:3c:be:db:cf:04:a8:58:1f:bb:73:e0:57:eb:2d:b8:27:a8: a6:bf:b7:02:d5:df:bd:7b:5f:3a:e5:7f:d0:95:c0:ff:ed:a3: a1:3d:be:03:8e:b4:6c:e9:61:3c:2b:4b:5f:ec:f8:04:b4:a6: c3:32:dc:94:2c:02:c0:ae:f8:9b:54:00:18:c7:12:03:c3:a6: 26:5d:b0:d8:78:d3:70:52:ed:26:d5:5c:1e:22:89:4b:3f:98: 70:fc:b1:ef:f1:12:9b:c3:3a:ff:fe:be:7c:af:2f:7f:cc:a3: 2e:e4:26:0a:7f:ed:40:1b:7d:22:40:56:84:7f:41:41:15:0a: dd:13:8c:db:db:29:55:9a:99:cd:8b:85:7f:21:07:ce:e9:fe: 75:c9:aa:7b:b6:0d:e9:17:a0:76:8b:75:e7:4b:ae:4c:5f:ee: 25:db:dc:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBQTIxMTAvBgNVBAUTKDhFQzRFM0ZBRkQ1MDkxMjhBRUMyQzA4NzlFNkFGOTEz OUUxNUVBQjYwHhcNMjUwNDI1MDE0MDU3WhcNMjUwNTAyMDE0MDU3WjAYMRYwFAYD VQQDEw02ODBhZTgyOS03YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukT7eDpsk7HSrM5vkYtaix8cAdK/C9e7kRF/kygPDjf0NkF9NAHlwsaB3hNt NFpSuD5GIIdZsj59QdjfY5QrtUEftV1wdRxoU3Nd3V7JP63W9f1DLyrMG1MPr6KW 4hiVMm4H2UrMY0KC2CyBj9jHXcctMsQDW2LREcw6spGyY7Z/g2lN/hbFPI8h7JMp 1Ut7/qNRQU6JN16UhclFuuF+nVN+I1kOuuj4APC7po/JY1JOO/REnQSJ2nTj5Lww uPax39smIyVcReu0Y4y0kPoaID2k/eyNwBOUPtZWaGg0nqaR/Fw+hc7t7r6hOFNx meOveStgSuoXxb9JrY2fNqvLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTNXJ/H RME8esxG0kTiOVvqvttwMB8GA1UdIwQYMBaAFI7E4/r9UJEorsLAh55q+ROeFeq2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkFBMi8zREE4QTk0NDIy QTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtTaXV3c0NIbm1yNUU1NFY2 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzVGotdjFRa1NpdXdzQ0hubXI1RTU0VjZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkFBMi8zREE4QTk0NDIyQTIxMUVEQkM4QTZDODBDNEY5QUUwMi9qc1RqLXYxUWtT aXV3c0NIbm1yNUU1NFY2clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw/tCC+Vf7CuegBszzAM1lgy1CkGNnZSSt7chlqg7QzSVy9semCMeJ 1u1Twv4IHjPZKkdybVzsdALOzNByyYWH6UeDejhGwpzPeKV9133zuZg6Q6b0lSMc sdNtPL7bzwSoWB+7c+BX6y24J6imv7cC1d+9e1865X/QlcD/7aOhPb4DjrRs6WE8 K0tf7PgEtKbDMtyULALArvibVAAYxxIDw6YmXbDYeNNwUu0m1VweIolLP5hw/LHv 8RKbwzr//r58ry9/zKMu5CYKf+1AG30iQFaEf0FBFQrdE4zb2ylVmpnNi4V/IQfO 6f51yap7tg3pF6B2i3XnS65MX+4l29zO -----END CERTIFICATE-----Generated at Sat Apr 26 05:18:03 2025 by rpki-client