$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft File: jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft (raw, json) Hash identifier: xmzL4TFHhO6lxsQh4lesVXu2Hfhov+Uo/kfm5vSZ5IE= Subject key identifier: 41:5D:42:6C:C0:8A:C3:BA:31:17:C9:F4:89:29:A0:7E:35:13:C5:02 Authority key identifier: 8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 Certificate issuer: /CN=A915FDCF/serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Certificate serial: 0E93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft Manifest number: 1625 Signing time: Thu 24 Apr 2025 17:40:24 +0000 Manifest this update: Thu 24 Apr 2025 17:40:24 +0000 Manifest next update: Thu 01 May 2025 17:40:24 +0000 Files and hashes: 1: jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl (hash: dZDHq0Y6XtG7w1URyaORGKJAg3FvQu1GTLlRYrualck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3731 (0xe93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDCF, serialNumber=8E36BDF8E8B81865B427853F7C6BC532D0CA6D48 Validity Not Before: Apr 24 17:40:24 2025 GMT Not After : May 1 17:40:24 2025 GMT Subject: CN=680a7788-2f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:2f:06:68:5b:41:75:48:f2:bf:d5:d7:6f: b0:30:aa:7e:e1:96:1f:47:57:98:b1:50:66:3b:9d: 70:81:c9:b9:52:4b:97:e7:1e:b2:24:3c:22:6c:13: bc:ea:1d:9a:8c:9a:86:a4:a6:fa:a7:5c:61:0a:38: 20:cb:4d:59:73:56:c1:a1:c8:77:1b:e9:bb:86:21: 30:b9:2d:70:a2:11:af:ed:18:12:63:4a:6f:35:1e: 88:c9:8f:dc:a8:30:43:ea:26:35:b3:a1:53:3b:64: b5:d7:d2:2a:57:45:1f:49:10:f9:21:01:1d:26:e3: 6c:a1:a6:1e:8e:11:a7:17:67:31:4e:90:ae:ca:eb: d5:88:e5:39:40:c0:71:32:5a:29:2c:22:cd:61:ba: d6:c2:14:06:03:d6:17:7b:5e:86:a0:21:07:82:03: 0a:aa:5d:26:95:77:b1:ea:eb:38:5f:46:cf:f8:21: 30:40:06:48:c6:79:9f:cc:a5:d3:69:68:60:76:9e: 92:42:cf:2e:a5:22:6f:11:f6:ee:f5:19:9f:98:56: 34:f2:1a:ed:d9:d1:bf:95:64:29:64:6b:97:8f:65: 6a:a9:6b:1a:95:e3:54:27:6b:b7:e0:1a:17:76:c5: 50:8a:76:19:d5:14:c5:1f:71:3e:65:1a:29:ad:b7: fe:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5D:42:6C:C0:8A:C3:BA:31:17:C9:F4:89:29:A0:7E:35:13:C5:02 X509v3 Authority Key Identifier: keyid:8E:36:BD:F8:E8:B8:18:65:B4:27:85:3F:7C:6B:C5:32:D0:CA:6D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jja9-Oi4GGW0J4U_fGvFMtDKbUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDCF/F4FDF5EE8D4111E981516A32C4F9AE02/jja9-Oi4GGW0J4U_fGvFMtDKbUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:a1:26:6d:0a:ae:a2:17:21:5d:76:21:a5:7a:a1:e9:a0:9e: 82:9f:ab:51:47:db:67:21:bc:45:79:51:7d:42:4c:53:94:b9: c9:c8:36:13:0c:66:0c:6e:a0:58:47:cc:f4:9d:8e:4a:9e:64: 0e:2d:64:89:f5:16:b5:47:cb:3b:c9:48:43:05:32:07:42:a8: f8:23:31:fa:e4:3e:64:2a:4e:17:e8:b3:88:90:ef:69:fe:d9: c9:72:3e:48:ed:90:48:f8:57:d3:2d:b0:6c:26:5e:60:51:0f: 90:55:a7:98:3c:ed:59:41:c5:b6:ee:03:df:46:bc:85:0f:87: b4:b7:8c:13:f1:28:00:df:e7:1f:d1:5d:54:61:e4:19:e9:56: 7f:14:42:85:69:5d:2c:ba:a1:d3:84:04:89:2a:1a:95:f7:86: de:34:d9:a9:6d:f1:0e:86:dd:8f:87:12:5b:6a:14:ce:dd:0b: 12:bd:44:e9:26:5d:45:c7:c5:00:10:22:6e:af:25:21:ff:4a: 6e:bd:81:75:f9:8c:a4:92:86:7d:f7:f1:26:25:8b:07:23:91: 41:32:d8:c1:d7:a5:66:45:3a:52:70:dc:9c:55:cb:9b:bd:b7: 58:21:3b:36:f7:f1:60:d3:3b:e1:57:dd:f4:37:c6:6d:d3:54: e8:47:84:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQ0YxMTAvBgNVBAUTKDhFMzZCREY4RThCODE4NjVCNDI3ODUzRjdDNkJDNTMy RDBDQTZENDgwHhcNMjUwNDI0MTc0MDI0WhcNMjUwNTAxMTc0MDI0WjAYMRYwFAYD VQQDEw02ODBhNzc4OC0yZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPgvBmhbQXVI8r/V12+wMKp+4ZYfR1eYsVBmO51wgcm5UkuX5x6yJDwibBO8 6h2ajJqGpKb6p1xhCjggy01Zc1bBoch3G+m7hiEwuS1wohGv7RgSY0pvNR6IyY/c qDBD6iY1s6FTO2S119IqV0UfSRD5IQEdJuNsoaYejhGnF2cxTpCuyuvViOU5QMBx MlopLCLNYbrWwhQGA9YXe16GoCEHggMKql0mlXex6us4X0bP+CEwQAZIxnmfzKXT aWhgdp6SQs8upSJvEfbu9RmfmFY08hrt2dG/lWQpZGuXj2VqqWsaleNUJ2u34BoX dsVQinYZ1RTFH3E+ZRoprbf+HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFdQmzA isO6MRfJ9IkpoH41E8UCMB8GA1UdIwQYMBaAFI42vfjouBhltCeFP3xrxTLQym1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRDRi9GNEZERjVFRThE NDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdHVzBKNFVfZkd2Rk10REti VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pqYTktT2k0R0dXMEo0VV9mR3ZGTXRES2JVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRDRi9GNEZERjVFRThENDExMUU5ODE1MTZBMzJDNEY5QUUwMi9qamE5LU9pNEdH VzBKNFVfZkd2Rk10REtiVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0oSZtCq6iFyFddiGleqHpoJ6Cn6tRR9tnIbxFeVF9QkxTlLnJyDYT DGYMbqBYR8z0nY5KnmQOLWSJ9Ra1R8s7yUhDBTIHQqj4IzH65D5kKk4X6LOIkO9p /tnJcj5I7ZBI+FfTLbBsJl5gUQ+QVaeYPO1ZQcW27gPfRryFD4e0t4wT8SgA3+cf 0V1UYeQZ6VZ/FEKFaV0suqHThASJKhqV94beNNmpbfEOht2PhxJbahTO3QsSvUTp Jl1Fx8UAECJuryUh/0puvYF1+YykkoZ99/EmJYsHI5FBMtjB16VmRTpScNycVcub vbdYITs29/Fg0zvhV930N8Zt01ToR4QE -----END CERTIFICATE-----Generated at Sat Apr 26 08:31:56 2025 by rpki-client