$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: ceyphUqnOAl83B2xCAUdFvEIq2CRNCJ2arlS3K7fO6M= Subject key identifier: FF:32:0E:7C:A9:F1:0A:4E:39:4E:4E:BE:17:5B:D6:59:C2:B6:C6:DD Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 010D Signing time: Fri 13 Jun 2025 03:53:19 +0000 Manifest this update: Fri 13 Jun 2025 03:53:18 +0000 Manifest next update: Fri 20 Jun 2025 03:53:18 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: xVK8HGlVh8DC+CFNY7VJ2a0TCWsqHAq/isLDtjukSA8=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Jun 13 03:53:18 2025 GMT Not After : Jun 20 03:53:18 2025 GMT Subject: CN=684ba0af-28e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5d:b7:8f:da:9c:19:df:6e:35:54:69:ed:61: 61:27:ad:30:fa:34:a6:64:b2:1e:6a:d5:dc:18:72: 3b:ad:0a:02:fb:6e:85:f7:cc:ee:d2:3e:7a:75:08: 82:c4:70:0c:7a:20:3d:c6:8f:ea:f2:5d:d7:c2:a2: 20:ae:20:90:56:59:2b:93:00:7a:e2:4d:13:9c:a6: 7b:06:6c:8a:d9:cc:fc:c6:22:a2:8d:37:f2:f6:41: 5d:92:76:03:eb:a2:b4:fc:af:e3:13:09:38:e4:03: 3d:e4:98:21:68:e0:1f:f4:96:0d:c7:fb:18:e1:61: 19:b9:e6:7a:23:a8:a8:6b:c8:cf:4f:65:a5:6a:98: 74:14:eb:ef:68:e0:f7:be:b0:21:24:4c:74:b0:cd: 57:61:57:08:99:79:34:bb:e1:46:35:4e:b7:ad:00: 0a:3f:6d:dd:10:d0:1f:5f:c7:70:dc:e8:c3:a0:36: 2e:f9:5d:1b:f7:c2:e9:22:27:fe:e7:ca:60:e4:51: f8:18:60:ce:11:a5:13:59:9d:1e:ad:38:77:8c:58: 29:7f:48:5d:61:d9:32:b4:18:13:60:00:6f:1d:c2: 4e:e7:19:14:d7:1c:a3:14:a5:0a:36:75:16:bc:2b: ce:d1:13:b8:4f:b9:88:5f:d9:6b:dd:a6:c8:b3:b1: 44:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:32:0E:7C:A9:F1:0A:4E:39:4E:4E:BE:17:5B:D6:59:C2:B6:C6:DD X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:24:2e:30:41:54:6d:f7:7d:7b:cb:3c:14:3c:f0:5c:4a:bb: 71:74:86:b1:4b:38:2f:a4:3d:d3:91:fe:64:08:d7:42:70:56: 94:0e:7c:31:50:4f:16:f1:9c:f2:65:26:ed:aa:60:ac:09:90: 0f:08:a1:ae:04:cf:6e:75:a3:ba:e4:5a:64:f6:de:de:0b:68: ea:11:13:1c:14:dc:26:15:11:a4:61:10:5b:63:c3:7f:5b:c5: c7:49:d6:db:cd:86:93:de:c2:01:82:3a:a9:41:17:54:28:d4: e9:a1:01:99:e4:b3:39:d5:f5:4b:69:a4:49:02:8c:7b:c9:df: 20:1e:20:6d:66:2c:eb:5e:e1:a8:da:87:39:fb:49:01:c7:82: 81:f4:c7:db:9c:bc:81:8a:cf:f3:6f:07:2b:3b:15:45:07:2e: 36:58:cf:b0:ed:6a:3c:0b:7a:6d:3b:3d:4b:5d:8a:56:53:3f: 85:e8:ed:00:2d:53:e5:e6:58:dc:2e:bd:b2:23:b6:42:46:cc: 5c:eb:22:e5:78:93:11:56:2e:28:d3:85:a2:7f:24:e9:87:cc: 69:c6:b8:74:c6:85:0b:6a:35:8a:04:df:1c:b7:d2:70:04:b1: 52:ef:97:de:4a:5d:3a:1b:60:13:ff:cd:8b:fc:8c:bc:b9:b7: a9:51:cd:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwNjEzMDM1MzE4WhcNMjUwNjIwMDM1MzE4WjAYMRYwFAYD VQQDEw02ODRiYTBhZi0yOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7V23j9qcGd9uNVRp7WFhJ60w+jSmZLIeatXcGHI7rQoC+26F98zu0j56dQiC xHAMeiA9xo/q8l3XwqIgriCQVlkrkwB64k0TnKZ7BmyK2cz8xiKijTfy9kFdknYD 66K0/K/jEwk45AM95JghaOAf9JYNx/sY4WEZueZ6I6ioa8jPT2Wlaph0FOvvaOD3 vrAhJEx0sM1XYVcImXk0u+FGNU63rQAKP23dENAfX8dw3OjDoDYu+V0b98LpIif+ 58pg5FH4GGDOEaUTWZ0erTh3jFgpf0hdYdkytBgTYABvHcJO5xkU1xyjFKUKNnUW vCvO0RO4T7mIX9lr3abIs7FE7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8yDnyp 8QpOOU5Ovhdb1lnCtsbdMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzJC4wQVRt9317yzwUPPBcSrtxdIaxSzgvpD3Tkf5kCNdCcFaUDnwx UE8W8ZzyZSbtqmCsCZAPCKGuBM9udaO65Fpk9t7eC2jqERMcFNwmFRGkYRBbY8N/ W8XHSdbbzYaT3sIBgjqpQRdUKNTpoQGZ5LM51fVLaaRJAox7yd8gHiBtZizrXuGo 2oc5+0kBx4KB9MfbnLyBis/zbwcrOxVFBy42WM+w7Wo8C3ptOz1LXYpWUz+F6O0A LVPl5ljcLr2yI7ZCRsxc6yLleJMRVi4o04WifyTph8xpxrh0xoULajWKBN8ct9Jw BLFS75feSl06G2AT/82L/Iy8ubepUc2M -----END CERTIFICATE-----Generated at Sat Jun 14 17:10:39 2025 by rpki-client