$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: 5e38tIBOHrmyrMoDwMirSZat6LwEid/F5g6xImKPrA4= Subject key identifier: DE:79:A4:BC:CF:37:4B:C0:67:2A:D2:F7:73:DD:C1:C7:B8:8B:D6:8D Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 01C3 Signing time: Fri 25 Apr 2025 02:11:20 +0000 Manifest this update: Fri 25 Apr 2025 02:11:19 +0000 Manifest next update: Fri 02 May 2025 02:11:19 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: 6uviZZsO7wfLf+eqJg9yiORO9Q0fcb+Lbn5J+56MUFE=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Apr 25 02:11:19 2025 GMT Not After : May 2 02:11:19 2025 GMT Subject: CN=680aef47-5079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:1d:e5:00:0a:b1:91:6c:b9:8f:ef:61:2a: 4a:5d:d5:75:c9:97:a6:6a:f2:b0:96:25:0b:df:5d: fe:a3:27:89:64:27:a9:d6:8a:0d:85:70:85:d9:c1: 4a:c4:c3:b5:d6:31:94:f8:12:6a:c4:25:d4:c4:d1: 1b:ba:15:2f:9a:4e:e6:a1:d0:a5:03:f3:7e:74:c2: 61:19:34:ca:42:78:ce:dd:bf:d2:c6:7a:5a:56:9c: 36:bb:7e:f6:fc:79:43:d6:d1:13:9b:53:7b:76:ce: 2d:f0:90:e0:a1:55:c7:f9:c6:c0:f0:f8:20:68:52: 5c:58:36:75:6a:8e:da:2e:8f:90:0b:4e:da:af:23: b6:f7:87:5d:1b:3c:96:2f:82:18:dc:84:c2:eb:f4: d7:17:76:74:81:af:83:93:f8:ca:7b:d7:32:ea:8e: 97:81:df:b0:de:8d:fb:08:b7:d9:e8:82:2d:e2:b8: e3:d2:42:c0:1b:62:9f:ea:04:41:05:07:90:c5:80: 15:3c:72:20:b6:5a:2c:09:6d:da:f4:2d:c0:e1:54: 14:7c:36:f8:bd:e7:94:e0:15:1b:0d:83:39:56:41: 4f:71:fe:41:3a:71:10:9c:59:62:ee:93:9c:36:9c: 83:6c:7f:5b:3f:c4:cc:f4:3e:00:d0:cf:42:c0:88: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:A4:BC:CF:37:4B:C0:67:2A:D2:F7:73:DD:C1:C7:B8:8B:D6:8D X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2b:28:5b:fb:82:66:e5:82:b8:b5:f0:86:1b:e6:5e:b9:6f: e9:20:91:29:df:a1:4b:51:1f:4d:99:f3:4d:c4:a0:43:d8:51: 35:0e:bb:bc:5c:c2:b0:df:9a:4b:9b:7d:0b:6c:7c:0d:be:ff: 69:dd:92:7a:b2:7f:89:d2:07:6a:11:65:32:a5:13:32:30:47: 21:76:3f:24:01:80:6c:b3:1d:ba:31:01:02:61:3e:f5:6a:87: 4e:c3:af:ac:6a:29:89:dd:2e:1e:0a:8f:4e:13:71:73:dc:08: 38:7b:7b:03:39:93:27:b2:b7:d9:30:93:45:95:ce:50:b9:cc: ea:6e:04:52:c6:54:e1:90:68:85:d3:24:df:18:45:0f:df:91: a9:68:36:40:91:72:3d:56:b4:40:4b:e3:2b:98:ce:ba:a0:65: 5a:45:08:74:ab:47:24:c4:d8:59:e9:43:77:d3:2a:ed:54:ef: 1e:0b:95:6a:bf:b1:3d:56:cd:02:24:e6:cb:81:8f:a3:2a:2d: 60:88:8d:49:d1:94:be:06:7f:1d:f1:3a:9d:a8:fa:d2:7b:52: 9d:2a:a2:84:dc:b0:aa:0a:3a:c5:58:cb:60:73:ca:d8:78:c6: bb:5e:8b:2c:b1:ac:3a:25:01:df:34:35:3b:d7:26:5c:4c:a3: 45:06:3d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUwNDI1MDIxMTE5WhcNMjUwNTAyMDIxMTE5WjAYMRYwFAYD VQQDEw02ODBhZWY0Ny01MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfwd5QAKsZFsuY/vYSpKXdV1yZemavKwliUL313+oyeJZCep1ooNhXCF2cFK xMO11jGU+BJqxCXUxNEbuhUvmk7modClA/N+dMJhGTTKQnjO3b/SxnpaVpw2u372 /HlD1tETm1N7ds4t8JDgoVXH+cbA8PggaFJcWDZ1ao7aLo+QC07aryO294ddGzyW L4IY3ITC6/TXF3Z0ga+Dk/jKe9cy6o6Xgd+w3o37CLfZ6IIt4rjj0kLAG2Kf6gRB BQeQxYAVPHIgtlosCW3a9C3A4VQUfDb4veeU4BUbDYM5VkFPcf5BOnEQnFli7pOc NpyDbH9bP8TM9D4A0M9CwIgE/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN55pLzP N0vAZyrS93Pdwce4i9aNMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZKyhb+4Jm5YK4tfCGG+ZeuW/pIJEp36FLUR9NmfNNxKBD2FE1Dru8 XMKw35pLm30LbHwNvv9p3ZJ6sn+J0gdqEWUypRMyMEchdj8kAYBssx26MQECYT71 aodOw6+saimJ3S4eCo9OE3Fz3Ag4e3sDOZMnsrfZMJNFlc5QuczqbgRSxlThkGiF 0yTfGEUP35GpaDZAkXI9VrRAS+MrmM66oGVaRQh0q0ckxNhZ6UN30yrtVO8eC5Vq v7E9Vs0CJObLgY+jKi1giI1J0ZS+Bn8d8TqdqPrSe1KdKqKE3LCqCjrFWMtgc8rY eMa7Xosssaw6JQHfNDU71yZcTKNFBj3C -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:02 2025 by rpki-client