$ rpki-client -vvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft File: JSBFeBemYmHoez5BhOhi2ka6nw0.mft (raw, json) Hash identifier: nr3uIqPPcCk/hkq4mKOikVpFPewZZJFnhIVMpY0tFSU= Subject key identifier: E3:CD:E3:01:67:70:E4:6F:12:A6:EE:23:E5:BF:89:21:5E:C3:4E:CF Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D Certificate issuer: /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft Manifest number: 0653 Signing time: Thu 24 Apr 2025 22:14:35 +0000 Manifest this update: Thu 24 Apr 2025 22:14:35 +0000 Manifest next update: Thu 01 May 2025 22:14:35 +0000 Files and hashes: 1: JSBFeBemYmHoez5BhOhi2ka6nw0.crl (hash: PrQGVq0zvJziMPpbptO23TOLj+4nC7HoY/mMJH1RdrM=) 2: 81ACEA76E74711EFA8F61A3DC4F9AE02.roa (hash: ukg+6KCGHkrsTy11bBIK1xYhpVPUVwZenM7mxd/8rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151EB5, serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D Validity Not Before: Apr 24 22:14:35 2025 GMT Not After : May 1 22:14:35 2025 GMT Subject: CN=680ab7cb-4c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:98:c6:a1:57:85:b8:29:f0:22:ce:9a:ac: a7:18:7a:ec:ca:f0:95:a7:65:e6:02:44:42:3d:06: 44:07:97:21:96:39:50:31:b9:3d:f4:7d:fb:92:99: 9b:3b:3a:d2:f0:cb:ed:86:52:77:b4:6d:84:19:7f: f0:7b:79:78:e2:b8:ab:76:02:ef:75:a8:88:2d:5a: 0d:5f:40:e1:76:bc:31:59:a5:a9:ad:ad:54:50:ea: a2:61:c3:e0:c6:ad:7e:21:f6:85:84:03:c4:10:dd: d0:21:eb:58:a9:0b:7b:3c:83:4e:3b:11:a0:9c:c0: f0:78:e1:37:26:dd:1b:9d:97:2d:de:ed:f9:c6:e8: da:6b:c6:b9:09:b2:b9:99:a1:90:47:f2:04:1a:95: e2:6f:42:c2:8d:ae:4e:b6:d9:2d:db:9c:ed:36:bb: d5:23:88:fa:76:c8:46:fc:b4:04:22:ab:b2:22:1b: a2:45:59:ff:a7:88:6c:c6:b0:d6:a4:9b:f7:22:40: 81:aa:7b:5a:43:87:89:0d:b4:46:d3:41:c1:bc:b1: bb:24:f5:d4:f5:a5:c9:cc:cb:51:c6:4c:a5:ec:53: 5f:8b:01:29:59:e4:20:ab:3c:10:c1:d7:04:b7:6f: cf:ec:6a:db:bf:3b:da:4b:ea:5d:43:e1:59:e9:21: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CD:E3:01:67:70:E4:6F:12:A6:EE:23:E5:BF:89:21:5E:C3:4E:CF X509v3 Authority Key Identifier: keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:35:e4:9f:9c:bc:9b:31:01:5b:1c:30:0f:99:cf:aa:38:0f: d7:14:56:4d:cf:17:f6:ef:9e:70:72:17:af:1b:dc:db:9b:af: 20:f3:5c:a5:51:89:4a:c4:61:5c:cc:f7:8a:91:11:bf:c2:6c: ba:63:fe:22:69:74:4c:fe:6e:28:9e:37:a4:be:f7:b4:2d:67: 46:3e:c7:a0:40:c3:ff:0d:11:91:9d:6f:fc:31:40:a8:51:0b: bf:6e:a0:0b:12:60:ec:98:cd:a4:d3:3d:0f:15:1e:f3:d9:66: 4d:3e:9b:4e:11:9f:3d:61:a7:ca:bd:10:5d:f3:2f:21:0c:55: a8:11:97:70:71:28:fa:a9:5e:67:61:7b:a0:c8:2c:97:20:70: 78:86:aa:57:c3:be:fb:30:a3:02:f3:db:38:4c:55:fd:3e:8d: e0:1d:8b:c4:98:4a:c4:a2:37:02:44:d5:fd:08:dc:e8:53:7c: 90:8a:cc:93:5e:ef:7c:dc:5d:bd:bc:38:18:f9:90:98:65:2f: 50:5f:05:74:c2:e8:bd:06:04:81:6b:fb:07:72:ce:64:f0:79: b8:66:ce:8a:6f:cb:46:c6:0d:d4:6c:60:7f:bb:52:4c:b8:26: 64:3b:b4:c5:39:6f:9e:d5:8b:fb:90:52:a9:e9:15:14:a6:a2: 33:33:b5:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFFQjUxMTAvBgNVBAUTKDI1MjA0NTc4MTdBNjYyNjFFODdCM0U0MTg0RTg2MkRB NDZCQTlGMEQwHhcNMjUwNDI0MjIxNDM1WhcNMjUwNTAxMjIxNDM1WjAYMRYwFAYD VQQDEw02ODBhYjdjYi00YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8eYxqFXhbgp8CLOmqynGHrsyvCVp2XmAkRCPQZEB5chljlQMbk99H37kpmb OzrS8MvthlJ3tG2EGX/we3l44rirdgLvdaiILVoNX0DhdrwxWaWpra1UUOqiYcPg xq1+IfaFhAPEEN3QIetYqQt7PINOOxGgnMDweOE3Jt0bnZct3u35xujaa8a5CbK5 maGQR/IEGpXib0LCja5Ottkt25ztNrvVI4j6dshG/LQEIquyIhuiRVn/p4hsxrDW pJv3IkCBqntaQ4eJDbRG00HBvLG7JPXU9aXJzMtRxkyl7FNfiwEpWeQgqzwQwdcE t2/P7GrbvzvaS+pdQ+FZ6SG0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPN4wFn cORvEqbuI+W/iSFew07PMB8GA1UdIwQYMBaAFCUgRXgXpmJh6Hs+QYToYtpGup8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUVCNS9DNTdFMzhGQzdG OUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVltSG9lejVCaE9oaTJrYTZu dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTQkZlQmVtWW1Ib2V6NUJoT2hpMmthNm53MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUVCNS9DNTdFMzhGQzdGOUMxMUVCQUZDOTE0NjZDNEY5QUUwMi9KU0JGZUJlbVlt SG9lejVCaE9oaTJrYTZudzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLNeSfnLybMQFbHDAPmc+qOA/XFFZNzxf2755wchevG9zbm68g81yl UYlKxGFczPeKkRG/wmy6Y/4iaXRM/m4onjekvve0LWdGPsegQMP/DRGRnW/8MUCo UQu/bqALEmDsmM2k0z0PFR7z2WZNPptOEZ89YafKvRBd8y8hDFWoEZdwcSj6qV5n YXugyCyXIHB4hqpXw777MKMC89s4TFX9Po3gHYvEmErEojcCRNX9CNzoU3yQisyT Xu983F29vDgY+ZCYZS9QXwV0wui9BgSBa/sHcs5k8Hm4Zs6Kb8tGxg3UbGB/u1JM uCZkO7TFOW+e1Yv7kFKp6RUUpqIzM7WJ -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:35 2025 by rpki-client