$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: /E+OgbH1m+bIgqBn/YUu+Sm7Ei0XHQQJNP2dB4uld50= Subject key identifier: D7:CD:39:83:6E:96:34:79:56:4B:5E:EB:9A:6D:8B:B8:F0:45:58:F9 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 1254 Signing time: Sat 14 Jun 2025 19:31:26 +0000 Manifest this update: Sat 14 Jun 2025 19:31:26 +0000 Manifest next update: Sat 21 Jun 2025 19:31:26 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: Ne7M2vX6+Y4eJFTM4NBRMvaIB3uQg0HNMFv/Q2imIOI=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: Jun 14 19:31:26 2025 GMT Not After : Jun 21 19:31:26 2025 GMT Subject: CN=684dce0e-1e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:5c:b8:cc:e1:7a:99:ce:e7:bf:90:eb:1e: b3:8c:5d:bc:54:25:95:c7:1d:15:28:1e:2d:c6:b8: de:d9:1f:c8:e6:7f:3b:41:a0:88:ec:e3:f0:28:af: a0:98:be:f7:b1:5c:72:8e:d7:c9:91:af:06:cd:8b: 0a:0d:af:f0:b9:42:8b:48:ea:5c:15:78:47:f0:3f: fa:06:e3:13:41:de:38:f4:cb:b5:b6:16:02:c0:a3: 97:81:98:00:f1:42:e7:e1:f2:ec:b9:67:36:65:7d: 58:f8:88:1c:25:e6:f9:62:25:bf:45:70:2f:d6:28: b2:e6:40:f8:bd:07:e9:68:22:f3:4d:30:d1:e5:51: 5b:4a:4e:12:0c:c3:6f:4e:d2:45:97:88:45:86:7d: 8f:ee:f3:13:78:3d:98:95:98:b7:ad:d4:7e:f3:ce: a0:7c:2d:c2:26:2f:a7:cb:f5:3e:76:6b:e4:48:e6: 9c:1e:48:74:e0:00:66:48:f8:3d:9e:79:95:b9:d3: db:d3:5d:60:2d:de:f6:2b:37:ed:6f:f8:91:0b:97: 6e:5e:d8:00:84:c9:5b:b0:7e:32:fb:a2:14:77:60: 89:0d:a3:76:0d:6c:38:cd:79:cb:da:62:02:ce:09: f7:ef:76:b1:7d:6d:52:28:ab:bd:12:9c:af:c8:df: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CD:39:83:6E:96:34:79:56:4B:5E:EB:9A:6D:8B:B8:F0:45:58:F9 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f1:a6:a9:b4:fc:ef:ca:e8:51:16:5b:be:98:05:39:55:0a: 9c:34:17:c7:35:9a:f3:66:9b:63:0a:d3:f1:af:ae:95:72:17: 02:77:2c:30:15:14:2c:67:1c:17:9b:e7:11:03:d0:78:5c:ba: b9:58:e0:c2:24:be:7b:a8:2a:05:44:b6:ca:bd:a7:7c:7a:ad: 56:9c:0e:da:92:fb:60:6d:69:3e:2c:a4:d5:c2:bb:4c:32:f8: 17:8e:f8:55:31:5b:2b:6a:c1:19:e8:dd:3e:e7:e1:c7:a0:5e: a7:d7:ed:c9:cb:2a:b6:9b:7c:ea:7c:41:3b:34:a2:ea:6d:f1: d6:06:91:84:6f:0a:eb:98:46:f9:50:06:d3:26:17:24:3e:a8: 2c:29:2e:e2:85:a1:a4:c4:a9:90:7e:0b:b5:e7:72:74:2c:79: 9d:03:62:f3:09:bd:6e:ac:8f:e8:6b:95:34:10:96:59:7a:b6: 82:5a:b7:f7:7b:81:44:5d:76:19:7a:ba:a4:08:5b:89:95:58: 38:64:ec:55:5b:97:84:0a:a2:9c:ee:0e:c5:1c:df:25:63:ae: e4:30:77:ee:bf:f4:cd:30:29:a5:f6:c8:11:b8:af:15:b3:fe: fe:b0:57:9f:0f:d8:22:4b:54:46:e2:ad:39:68:85:d9:2a:ef: 77:aa:9d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUwNjE0MTkzMTI2WhcNMjUwNjIxMTkzMTI2WjAYMRYwFAYD VQQDEw02ODRkY2UwZS0xZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAladcuMzhepnO57+Q6x6zjF28VCWVxx0VKB4txrje2R/I5n87QaCI7OPwKK+g mL73sVxyjtfJka8GzYsKDa/wuUKLSOpcFXhH8D/6BuMTQd449Mu1thYCwKOXgZgA 8ULn4fLsuWc2ZX1Y+IgcJeb5YiW/RXAv1iiy5kD4vQfpaCLzTTDR5VFbSk4SDMNv TtJFl4hFhn2P7vMTeD2YlZi3rdR+886gfC3CJi+ny/U+dmvkSOacHkh04ABmSPg9 nnmVudPb011gLd72Kzftb/iRC5duXtgAhMlbsH4y+6IUd2CJDaN2DWw4zXnL2mIC zgn373axfW1SKKu9EpyvyN+DAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfNOYNu ljR5Vkte65pti7jwRVj5MB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh8aaptPzvyuhRFlu+mAU5VQqcNBfHNZrzZptjCtPxr66VchcCdyww FRQsZxwXm+cRA9B4XLq5WODCJL57qCoFRLbKvad8eq1WnA7akvtgbWk+LKTVwrtM MvgXjvhVMVsrasEZ6N0+5+HHoF6n1+3Jyyq2m3zqfEE7NKLqbfHWBpGEbwrrmEb5 UAbTJhckPqgsKS7ihaGkxKmQfgu153J0LHmdA2LzCb1urI/oa5U0EJZZeraCWrf3 e4FEXXYZerqkCFuJlVg4ZOxVW5eECqKc7g7FHN8lY67kMHfuv/TNMCml9sgRuK8V s/7+sFefD9giS1RG4q05aIXZKu93qp3b -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:01 2025 by rpki-client