$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: yL16P2IST5ogP3dGxdNRIi1OETp89NeBwVCN7mD0Kew= Subject key identifier: 20:A3:7B:C1:46:EA:BA:04:CE:90:1B:AB:59:E2:63:8F:CD:FC:2D:BF Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: F5 Signing time: Fri 25 Apr 2025 04:16:12 +0000 Manifest this update: Fri 25 Apr 2025 04:16:11 +0000 Manifest next update: Fri 02 May 2025 04:16:11 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: Kc6Damf10UgFGa1BW1Ta463ZzJ6du18qXilvJIKPx3Y=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Apr 25 04:16:11 2025 GMT Not After : May 2 04:16:11 2025 GMT Subject: CN=680b0c8b-3924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:c7:42:90:17:6b:76:49:54:95:da:6d:aa: 7f:85:21:ed:a4:77:28:18:64:e7:9e:50:2d:b4:48: af:ce:49:00:fd:73:d2:09:92:16:1f:6d:fb:46:23: 25:b6:78:c4:1d:d2:22:f1:c7:4d:31:8d:fc:bc:78: 5a:75:09:fe:36:18:7e:90:8a:a0:6e:df:e3:34:bc: 0e:00:f7:43:bf:4f:1b:ac:a8:e7:86:d8:0e:13:bd: 65:76:8d:cb:a2:6c:ff:74:0e:97:12:ae:a5:5f:bf: 0f:60:ce:c4:a3:80:9d:ea:da:df:50:cf:02:0f:04: 18:73:ab:53:b8:9d:3b:c4:62:31:08:53:da:0c:2a: 65:b9:ba:f8:74:f6:1a:b1:73:16:54:f8:43:b8:e1: d1:fd:bb:f3:b9:40:9e:63:e8:55:bb:db:19:1b:30: d0:a5:7d:c0:06:9e:43:ea:78:ad:e6:1c:ca:e7:07: da:44:20:76:0d:49:40:b8:ee:b8:29:41:db:c1:e1: ac:9b:4d:03:eb:68:af:92:18:6f:17:aa:0f:bc:32: 36:2b:e5:ae:3d:c7:b3:b8:87:1e:d2:b8:f5:2d:c1: c5:47:01:cb:84:36:1b:1a:e6:31:45:f2:16:a3:ee: 43:8b:21:31:48:b3:54:8f:02:a1:89:e8:79:c2:e3: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A3:7B:C1:46:EA:BA:04:CE:90:1B:AB:59:E2:63:8F:CD:FC:2D:BF X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:77:ae:3a:3f:61:b7:c7:4d:0e:82:8a:07:ea:42:15:b4:79: d9:53:ca:c7:3b:d7:3c:db:be:2d:de:23:20:7a:4e:a6:c6:db: 17:6a:51:b5:c6:06:63:09:50:05:d0:42:80:4a:29:45:80:f4: 18:1a:83:90:fb:00:ff:91:ed:bd:2a:9d:0a:f5:ed:dd:33:eb: fa:f8:77:62:aa:85:24:ac:d0:af:b3:53:40:fc:e7:22:2a:c8: b6:ee:f2:9f:b3:7b:dd:b5:0b:29:1f:38:8e:1a:fc:19:4f:fa: 7b:0a:f1:25:84:d1:b3:30:e0:d1:de:69:67:f2:a0:83:a5:51: f1:ee:89:9d:e4:cf:3b:ab:b6:b6:72:2c:8a:0f:df:d7:44:58: 4e:17:35:b4:07:2e:08:83:43:78:19:64:68:b9:0c:1f:af:6c: 6e:e1:bf:44:67:cf:8e:c2:e3:47:23:31:6c:e5:fb:06:df:33: 45:1e:09:b8:b8:96:32:bb:51:bb:4a:0a:4d:85:8d:12:e7:08: f2:0f:bc:85:e4:de:9b:9e:bf:d3:d1:ba:be:07:40:66:8f:38: ba:2a:a2:88:1f:b5:30:cb:cd:7c:47:21:4d:22:05:87:b0:73: e7:32:6a:b8:d6:73:9b:d1:bb:2c:4c:91:80:82:88:a8:37:7d: 68:f1:1b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwNDI1MDQxNjExWhcNMjUwNTAyMDQxNjExWjAYMRYwFAYD VQQDEw02ODBiMGM4Yi0zOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWrHQpAXa3ZJVJXabap/hSHtpHcoGGTnnlAttEivzkkA/XPSCZIWH237RiMl tnjEHdIi8cdNMY38vHhadQn+Nhh+kIqgbt/jNLwOAPdDv08brKjnhtgOE71ldo3L omz/dA6XEq6lX78PYM7Eo4Cd6trfUM8CDwQYc6tTuJ07xGIxCFPaDCplubr4dPYa sXMWVPhDuOHR/bvzuUCeY+hVu9sZGzDQpX3ABp5D6nit5hzK5wfaRCB2DUlAuO64 KUHbweGsm00D62ivkhhvF6oPvDI2K+WuPcezuIce0rj1LcHFRwHLhDYbGuYxRfIW o+5DiyExSLNUjwKhieh5wuNB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCje8FG 6roEzpAbq1niY4/N/C2/MB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnd646P2G3x00OgooH6kIVtHnZU8rHO9c8274t3iMgek6mxtsXalG1 xgZjCVAF0EKASilFgPQYGoOQ+wD/ke29Kp0K9e3dM+v6+HdiqoUkrNCvs1NA/Oci Ksi27vKfs3vdtQspHziOGvwZT/p7CvElhNGzMODR3mln8qCDpVHx7omd5M87q7a2 ciyKD9/XRFhOFzW0By4Ig0N4GWRouQwfr2xu4b9EZ8+OwuNHIzFs5fsG3zNFHgm4 uJYyu1G7SgpNhY0S5wjyD7yF5N6bnr/T0bq+B0Bmjzi6KqKIH7Uwy818RyFNIgWH sHPnMmq41nOb0bssTJGAgoioN31o8Rv6 -----END CERTIFICATE-----Generated at Sat Apr 26 12:52:01 2025 by rpki-client