$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft File: JSwA6X56eGlZOIzyBKTH5kVYDGg.mft (raw, json) Hash identifier: 4pjeON55NfMwXR5czHLJjtjh3a6w9iifTn4jS9akVsU= Subject key identifier: 4B:FC:7B:93:95:08:6C:BF:80:CA:B6:13:A6:3A:EF:29:D0:C1:86:ED Authority key identifier: 25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 Certificate issuer: /CN=A919DA26/serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft Manifest number: 6E Signing time: Tue 17 Jun 2025 02:04:31 +0000 Manifest this update: Tue 17 Jun 2025 02:04:30 +0000 Manifest next update: Tue 24 Jun 2025 02:04:30 +0000 Files and hashes: 1: JSwA6X56eGlZOIzyBKTH5kVYDGg.crl (hash: eGb9zuyLXHAN2wihFNc63hhcOlBc8Txk5fBLpGabJ0w=) 2: F17996F2B21C11EFBDB2BA25C4F9AE02.roa (hash: Ha8TSc6ylXlULsjvosE3YzdnyL+kFFYkOUZjNUZAybA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA26, serialNumber=252C00E97E7A786959388CF204A4C7E645580C68 Validity Not Before: Jun 17 02:04:30 2025 GMT Not After : Jun 24 02:04:30 2025 GMT Subject: CN=6850cd2e-a0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:30:d6:b2:95:b0:5e:56:7f:3b:07:a0:94:33: 88:13:46:8d:18:a5:f9:42:dc:c5:d3:0b:78:2f:e8: ad:cc:1c:1e:09:65:a1:f6:e1:7d:55:a2:17:1f:71: a4:66:00:76:96:99:bc:78:94:7e:30:66:99:e9:07: 1d:26:36:f1:b3:41:d2:9c:dd:e7:6e:08:77:62:0a: f6:8f:9c:54:58:bb:ed:30:36:93:22:fd:13:56:fb: 32:f1:c0:a2:81:02:e8:53:24:72:c6:41:da:7c:fd: 0b:82:76:15:8e:9e:2e:55:78:56:dd:e8:d3:94:9a: 9b:5b:dc:76:16:bc:c9:37:11:e6:d8:86:2d:b2:75: 3f:93:1c:ee:cf:25:ff:c4:94:c3:79:f7:3c:0d:15: 14:7e:f7:a5:25:17:22:05:2a:9e:c0:6b:48:e9:28: d4:b6:81:68:ad:fb:21:45:19:6a:16:3a:01:7f:59: bd:b2:76:9f:42:a8:60:5a:a5:12:19:bf:88:92:ab: 98:2f:5f:6e:ab:ce:c6:3d:ad:42:d7:40:de:8d:ef: 87:83:f6:b9:3e:0c:9f:21:40:20:79:7a:2e:5e:82: b8:de:40:c4:60:1a:09:52:57:d1:64:10:b7:02:46: b7:d2:6c:2d:82:c3:d5:2a:7e:a4:32:42:4f:19:66: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FC:7B:93:95:08:6C:BF:80:CA:B6:13:A6:3A:EF:29:D0:C1:86:ED X509v3 Authority Key Identifier: keyid:25:2C:00:E9:7E:7A:78:69:59:38:8C:F2:04:A4:C7:E6:45:58:0C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JSwA6X56eGlZOIzyBKTH5kVYDGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/F5105E4CA2F711EFA2368F77C4F9AE02/JSwA6X56eGlZOIzyBKTH5kVYDGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:10:9e:2e:05:6a:66:2f:bb:0d:21:f4:62:99:16:ec:f9:4b: a8:f8:5b:d1:ae:d2:3b:5b:7e:19:35:5d:c4:86:a5:c2:19:27: cb:0c:72:c3:c2:52:2e:c0:44:56:56:a3:9e:dc:82:2b:fb:e7: 37:0a:59:0f:47:97:6a:86:6b:59:5e:06:7e:77:7e:4f:e2:8c: 96:b5:e1:d3:a5:77:a3:98:fa:81:24:54:6b:58:6b:c0:bc:24: dc:3e:0e:62:5a:81:1e:e4:75:4b:45:9b:94:80:cb:67:15:d1: 21:78:f4:5a:8e:c9:41:df:b9:17:be:af:a9:fc:2c:bd:0f:a6: 6a:ba:8a:54:3c:40:94:79:e6:91:11:37:8e:7e:f4:d5:ab:b4: cc:00:3d:1f:c1:9b:fb:2f:c8:c2:fd:cb:3e:90:a1:0a:8f:43: da:19:86:fc:50:ac:41:92:f0:c7:40:ca:34:a3:6e:f7:8a:b8: 14:a1:bb:36:57:46:18:8b:12:55:df:13:d2:64:59:dd:3b:f0: fb:b5:b7:53:fa:9a:a0:81:c8:1c:bd:46:c9:3c:3f:54:cb:1f: 26:69:0d:72:22:db:37:71:ef:ce:da:27:b4:c5:bf:b7:e0:86: f0:e5:18:e0:97:84:89:64:44:d5:d1:62:9f:36:0c:fd:44:1f: 50:ac:10:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 REEyNjExMC8GA1UEBRMoMjUyQzAwRTk3RTdBNzg2OTU5Mzg4Q0YyMDRBNEM3RTY0 NTU4MEM2ODAeFw0yNTA2MTcwMjA0MzBaFw0yNTA2MjQwMjA0MzBaMBgxFjAUBgNV BAMTDTY4NTBjZDJlLWEwYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqMNaylbBeVn87B6CUM4gTRo0YpflC3MXTC3gv6K3MHB4JZaH24X1VohcfcaRm AHaWmbx4lH4wZpnpBx0mNvGzQdKc3eduCHdiCvaPnFRYu+0wNpMi/RNW+zLxwKKB AuhTJHLGQdp8/QuCdhWOni5VeFbd6NOUmptb3HYWvMk3EebYhi2ydT+THO7PJf/E lMN59zwNFRR+96UlFyIFKp7Aa0jpKNS2gWit+yFFGWoWOgF/Wb2ydp9CqGBapRIZ v4iSq5gvX26rzsY9rULXQN6N74eD9rk+DJ8hQCB5ei5egrjeQMRgGglSV9FkELcC RrfSbC2Cw9UqfqQyQk8ZZp3RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS/x7k5UI bL+AyrYTpjrvKdDBhu0wHwYDVR0jBBgwFoAUJSwA6X56eGlZOIzyBKTH5kVYDGgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEQTI2L0Y1MTA1RTRDQTJG NzExRUZBMjM2OEY3N0M0RjlBRTAyL0pTd0E2WDU2ZUdsWk9JenlCS1RINWtWWURH Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvSlN3QTZYNTZlR2xaT0l6eUJLVEg1a1ZZREdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE QTI2L0Y1MTA1RTRDQTJGNzExRUZBMjM2OEY3N0M0RjlBRTAyL0pTd0E2WDU2ZUds Wk9JenlCS1RINWtWWURHZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHYQni4FamYvuw0h9GKZFuz5S6j4W9Gu0jtbfhk1XcSGpcIZJ8sMcsPC Ui7ARFZWo57cgiv75zcKWQ9Hl2qGa1leBn53fk/ijJa14dOld6OY+oEkVGtYa8C8 JNw+DmJagR7kdUtFm5SAy2cV0SF49FqOyUHfuRe+r6n8LL0Ppmq6ilQ8QJR55pER N45+9NWrtMwAPR/Bm/svyML9yz6QoQqPQ9oZhvxQrEGS8MdAyjSjbveKuBShuzZX RhiLElXfE9JkWd078Pu1t1P6mqCByBy9Rsk8P1TLHyZpDXIi2zdx787aJ7TFv7fg hvDlGOCXhIlkRNXRYp82DP1EH1CsEPQ= -----END CERTIFICATE-----Generated at Wed Jun 18 21:18:16 2025 by rpki-client