$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: FGKJP4eQlDLxycofZ3dqBoYHHC9c+BDQJ80htMNWu9o= Subject key identifier: DA:17:DA:06:7F:FD:6B:35:4F:0A:D3:0A:BF:B7:A3:94:D5:0E:EB:2B Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 01DC Signing time: Sun 15 Jun 2025 02:01:49 +0000 Manifest this update: Sun 15 Jun 2025 02:01:49 +0000 Manifest next update: Sun 22 Jun 2025 02:01:49 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: zFS9/hOt3zZG9H5MChH0a+EtvWwuwa1b29pk4+7mLe0=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Jun 15 02:01:49 2025 GMT Not After : Jun 22 02:01:49 2025 GMT Subject: CN=684e298d-2234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:c1:69:55:d5:f3:a2:24:1b:16:c2:1f:94: 1c:3c:0f:68:0c:f0:b8:1b:c0:7a:f3:f0:e3:94:54: d8:68:c5:a9:55:e6:6f:9e:55:12:ed:3a:ea:4c:58: 7a:93:8d:20:56:20:ed:99:b4:b0:bd:68:f9:09:a5: 67:4a:d3:bc:13:b7:92:d7:65:75:71:4d:3a:73:8b: 10:0a:52:87:f3:02:bd:44:6d:a4:99:19:b9:5e:bf: 4b:62:ba:99:b7:4b:12:96:f3:9f:e3:cc:fd:9e:7a: 21:53:cd:d4:c1:5b:a6:6c:ea:e0:53:5f:66:04:26: 21:95:66:60:aa:14:6f:31:e1:73:04:ab:b7:0b:47: 5c:ce:0e:40:7b:35:40:5c:b8:5d:dc:a9:11:7a:32: ae:0a:6f:8e:45:b6:83:5d:45:0c:8e:a5:c7:4a:cf: 55:b5:07:88:29:5d:c5:60:12:e8:2d:de:3d:39:e0: 05:bb:02:fd:f1:cd:54:e9:b6:41:5b:2f:e4:ad:51: c3:5c:4e:61:9c:43:19:09:4d:a5:f3:56:b7:49:5c: e5:4a:9b:9b:18:06:6e:25:22:f8:1c:43:92:15:f4: 3e:0c:12:09:d5:90:b8:b2:c3:5b:6f:7c:77:d4:de: bc:08:6a:3f:5d:a8:f3:12:d6:34:e9:1a:11:bd:8a: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:17:DA:06:7F:FD:6B:35:4F:0A:D3:0A:BF:B7:A3:94:D5:0E:EB:2B X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:a1:90:e2:74:dd:0b:03:d7:08:11:c3:81:31:bb:27:9b:0c: 18:f4:0f:57:0e:77:46:98:8c:b3:c0:e0:97:df:d3:10:8c:fd: 9c:94:02:b7:74:04:25:70:f5:45:f6:f9:9b:3a:ee:1b:4c:6e: c0:ca:90:ca:0d:c0:ce:af:65:04:5e:2c:61:3b:5d:d8:3f:df: 75:63:ab:7a:e2:f6:5e:fc:86:29:54:2d:97:f4:41:4e:8a:77: 60:b7:b8:f2:07:94:fc:59:38:7b:84:24:44:c3:95:6f:17:ee: 12:ca:e2:ea:dc:82:4b:8d:04:d9:5e:ed:96:99:6f:71:43:13: 7e:5e:f0:ed:35:a4:de:98:e5:6b:ab:86:e6:2e:31:bd:90:7b: 56:cb:69:58:37:8d:e3:39:a0:41:71:53:dc:62:47:c6:40:e5: 4f:01:a1:7a:2b:ff:77:1d:b9:db:94:8b:d2:88:da:e3:26:99: 03:47:be:24:df:68:48:ac:dc:f6:e3:d9:49:2a:cb:40:09:53: 49:de:1f:a1:61:82:7a:7e:98:10:4f:74:2c:68:99:a5:ee:b6: 5f:d2:07:a1:99:14:db:83:a5:82:e4:fe:24:31:de:c8:fd:de: 90:e0:f9:f3:a1:20:d2:ee:0c:47:43:3c:71:0d:f1:e9:dd:c5: ff:83:e6:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUwNjE1MDIwMTQ5WhcNMjUwNjIyMDIwMTQ5WjAYMRYwFAYD VQQDEw02ODRlMjk4ZC0yMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAownBaVXV86IkGxbCH5QcPA9oDPC4G8B68/DjlFTYaMWpVeZvnlUS7TrqTFh6 k40gViDtmbSwvWj5CaVnStO8E7eS12V1cU06c4sQClKH8wK9RG2kmRm5Xr9LYrqZ t0sSlvOf48z9nnohU83UwVumbOrgU19mBCYhlWZgqhRvMeFzBKu3C0dczg5AezVA XLhd3KkRejKuCm+ORbaDXUUMjqXHSs9VtQeIKV3FYBLoLd49OeAFuwL98c1U6bZB Wy/krVHDXE5hnEMZCU2l81a3SVzlSpubGAZuJSL4HEOSFfQ+DBIJ1ZC4ssNbb3x3 1N68CGo/XajzEtY06RoRvYpSZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoX2gZ/ /Ws1TwrTCr+3o5TVDusrMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWoZDidN0LA9cIEcOBMbsnmwwY9A9XDndGmIyzwOCX39MQjP2clAK3 dAQlcPVF9vmbOu4bTG7AypDKDcDOr2UEXixhO13YP991Y6t64vZe/IYpVC2X9EFO indgt7jyB5T8WTh7hCREw5VvF+4SyuLq3IJLjQTZXu2WmW9xQxN+XvDtNaTemOVr q4bmLjG9kHtWy2lYN43jOaBBcVPcYkfGQOVPAaF6K/93HbnblIvSiNrjJpkDR74k 32hIrNz249lJKstACVNJ3h+hYYJ6fpgQT3QsaJml7rZf0gehmRTbg6WC5P4kMd7I /d6Q4PnzoSDS7gxHQzxxDfHp3cX/g+at -----END CERTIFICATE-----Generated at Sun Jun 15 08:37:18 2025 by rpki-client