$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft File: JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json) Hash identifier: 5NK537IAhQZOSuGIM7Y5Y5hXY3jWA0niatQa72qDdVw= Subject key identifier: 91:24:33:57:83:4C:A2:DC:EA:04:B7:72:5D:BC:68:2D:D5:8C:99:AC Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft Manifest number: 8B Signing time: Fri 25 Apr 2025 05:30:49 +0000 Manifest this update: Fri 25 Apr 2025 05:30:49 +0000 Manifest next update: Fri 02 May 2025 05:30:49 +0000 Files and hashes: 1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: nSaUpGXsW4JM4ZCY3yYNAZr3sjCbpkVSp97ortjSGQA=) 2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Validity Not Before: Apr 25 05:30:49 2025 GMT Not After : May 2 05:30:49 2025 GMT Subject: CN=680b1e09-eada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:ac:2c:8b:46:94:d4:69:97:37:2b:89:1b: 1c:33:23:8f:5c:4a:cc:6a:a9:d1:54:28:50:a0:9c: 12:69:ed:00:18:c0:51:cb:61:bc:43:1e:f6:66:72: 8d:1f:79:e1:61:24:27:99:c6:39:9a:a8:32:30:2c: 0c:a1:56:ee:cb:19:c8:72:9e:74:19:a3:c4:55:a6: fe:a9:b3:0e:6f:75:33:d3:66:8e:4e:7f:24:45:ee: cf:19:b5:51:6b:9a:b5:79:72:0d:73:d8:67:a9:b4: ff:34:de:e6:2b:b4:25:f2:a3:e0:2c:6b:fb:76:a1: 91:24:8c:00:54:92:86:6b:f0:46:8c:5a:ad:d1:23: 1d:1d:29:77:88:17:7b:fb:0c:a9:35:a1:4f:e7:7c: 66:84:68:11:86:d4:b6:a1:4f:01:a5:7c:0b:db:6b: 18:dd:fc:aa:5e:6c:1b:8c:54:9f:64:10:f3:c3:4a: 80:50:47:8f:65:51:43:e4:11:98:a7:8a:0c:10:b3: c5:b5:54:67:ad:6c:7c:b0:41:74:ad:8b:34:43:ab: 52:83:0b:2f:71:43:42:dd:a2:9a:04:49:92:2e:bc: a9:ea:93:1e:2d:7e:3a:9b:63:86:be:6a:8a:24:bd: 20:3d:73:76:af:28:84:8b:d3:f6:da:e8:0c:a9:06: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:24:33:57:83:4C:A2:DC:EA:04:B7:72:5D:BC:68:2D:D5:8C:99:AC X509v3 Authority Key Identifier: keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:39:f9:20:3f:e0:5d:67:94:8b:d4:f8:a0:08:ac:87:e5: 91:90:8b:fa:41:42:5a:26:69:b9:b2:52:26:01:89:75:1f:76: 0a:d1:af:80:30:ad:30:00:7e:86:34:4c:a1:4b:61:2f:4b:df: 10:f5:be:81:65:bb:c1:e9:63:cc:44:d1:cd:d1:aa:f4:81:f0: e0:17:98:dd:bd:db:fe:3c:27:b0:35:e3:30:68:79:45:22:71: e5:c8:93:d2:b3:06:ad:45:6c:ee:cd:83:05:e6:ae:d6:6b:21: a6:22:6a:a9:19:dd:32:db:15:6f:27:4a:1b:fe:ee:04:78:f5: de:90:a9:af:22:99:7b:e1:4a:b7:8f:49:b1:c5:8a:d3:a5:d2: a8:f7:0e:ce:e1:c0:38:eb:76:03:b0:14:24:ed:5f:3b:a0:25: 8b:a0:25:df:eb:33:44:9a:2b:87:00:b8:99:a3:9c:ac:13:d2: 2d:76:8f:ba:12:89:80:f4:7f:d3:d6:2d:92:d3:58:73:fc:4f: 9b:56:f3:b3:54:b9:40:48:19:06:d4:22:68:ff:d4:29:3e:9e: 41:b1:f5:61:a7:a1:86:ff:5f:02:25:9e:45:01:28:73:fe:54: d1:67:0a:66:d4:b0:c4:ce:98:17:87:7f:a1:aa:86:df:97:b3: 4b:26:94:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjQxMTAvBgNVBAUTKDI0QjEwQzMxRDY5MUY4NDVGQ0VBRTNGRTMyMzFCRTU2 MDAyQkFDNkEwHhcNMjUwNDI1MDUzMDQ5WhcNMjUwNTAyMDUzMDQ5WjAYMRYwFAYD VQQDEw02ODBiMWUwOS1lYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gqsLItGlNRplzcriRscMyOPXErMaqnRVChQoJwSae0AGMBRy2G8Qx72ZnKN H3nhYSQnmcY5mqgyMCwMoVbuyxnIcp50GaPEVab+qbMOb3Uz02aOTn8kRe7PGbVR a5q1eXINc9hnqbT/NN7mK7Ql8qPgLGv7dqGRJIwAVJKGa/BGjFqt0SMdHSl3iBd7 +wypNaFP53xmhGgRhtS2oU8BpXwL22sY3fyqXmwbjFSfZBDzw0qAUEePZVFD5BGY p4oMELPFtVRnrWx8sEF0rYs0Q6tSgwsvcUNC3aKaBEmSLryp6pMeLX46m2OGvmqK JL0gPXN2ryiEi9P22ugMqQbNhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEkM1eD TKLc6gS3cl28aC3VjJmsMB8GA1UdIwQYMBaAFCSxDDHWkfhF/Orj/jIxvlYAK6xq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCNC8xRjMyMENGQzU1 RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1FWDg2dVAtTWpHLVZnQXJy R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMRU1NZGFSLUVYODZ1UC1NakctVmdBcnJHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCNC8xRjMyMENGQzU1RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1F WDg2dVAtTWpHLVZnQXJyR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHSTn5ID/gXWeUi9T4oAish+WRkIv6QUJaJmm5slImAYl1H3YK0a+A MK0wAH6GNEyhS2EvS98Q9b6BZbvB6WPMRNHN0ar0gfDgF5jdvdv+PCewNeMwaHlF InHlyJPSswatRWzuzYMF5q7WayGmImqpGd0y2xVvJ0ob/u4EePXekKmvIpl74Uq3 j0mxxYrTpdKo9w7O4cA463YDsBQk7V87oCWLoCXf6zNEmiuHALiZo5ysE9Itdo+6 EomA9H/T1i2S01hz/E+bVvOzVLlASBkG1CJo/9QpPp5BsfVhp6GG/18CJZ5FAShz /lTRZwpm1LDEzpgXh3+hqobfl7NLJpTN -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:27 2025 by rpki-client