$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: qanhv7SwB2HP3eYUOLSD0Mjr2wW/adTa/Hz2N+QKnx8= Subject key identifier: C8:6D:53:8B:B3:64:CB:12:B8:56:32:31:25:3E:E1:2E:B5:41:4B:27 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 0127 Signing time: Sun 03 Aug 2025 04:57:41 +0000 Manifest this update: Sun 03 Aug 2025 04:57:41 +0000 Manifest next update: Sun 10 Aug 2025 04:57:41 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: I3NZYhZwTOQDwG0uyUo/UBkgs4fXD701q64noclXSDE=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Aug 3 04:57:41 2025 GMT Not After : Aug 10 04:57:41 2025 GMT Subject: CN=688eec45-3c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:d0:81:98:ab:58:e0:b5:52:77:ad:21:7d: 61:52:bc:05:f7:6d:5f:5a:7b:a6:98:68:62:38:4a: 22:54:d2:83:ec:69:d1:76:b6:1f:63:a9:50:c0:df: 3c:82:81:a8:15:3e:e8:32:3f:68:8a:eb:2e:13:da: a7:47:fd:e5:83:dc:c5:66:03:a0:ca:45:df:95:13: b1:fa:27:1e:71:b5:a6:0a:ed:4b:bd:a6:31:83:57: bb:6e:cf:95:a2:23:e2:a4:dc:99:6f:68:52:b9:03: 43:0f:d1:88:62:29:0e:96:d9:41:43:f7:f1:af:a9: 46:ba:3b:8b:ad:a9:54:cc:b8:38:0c:28:1a:64:6c: 21:f4:64:27:26:5b:f7:83:bf:e9:30:ff:92:05:c6: 2c:f6:b1:06:a6:b5:f8:59:38:54:24:f1:17:c8:9e: 46:b8:1e:3f:b8:63:00:21:cc:af:d2:49:d1:23:74: c8:5c:d4:20:d9:a6:50:42:57:69:54:7d:f1:83:69: 87:b3:5f:3e:61:19:18:eb:b3:84:09:4d:46:94:15: 0b:f6:bd:c3:fc:f6:54:19:ed:a7:49:48:ac:39:84: 9e:1e:ab:08:2d:bd:73:fb:0b:84:61:e4:3b:68:2b: 19:9e:f8:3e:a8:c5:3d:19:ef:f2:4a:e8:d5:41:37: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6D:53:8B:B3:64:CB:12:B8:56:32:31:25:3E:E1:2E:B5:41:4B:27 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b5:ed:cd:3a:46:4e:5e:2b:52:46:ba:9e:eb:51:c3:04:47: 28:b9:ec:6a:15:43:5d:dd:f8:72:b7:b9:c0:bd:7d:ad:63:39: a9:af:c7:a9:36:6e:c3:28:b1:29:c8:5a:5b:d7:d3:7d:6e:41: f9:9b:6d:53:0f:83:23:50:2f:fa:21:5e:71:6b:7e:3d:c8:eb: 3b:d9:08:e2:d0:a8:97:a9:b3:fb:81:c7:4c:74:81:ce:4c:ff: 76:65:70:e9:26:e3:57:df:14:bb:bb:31:3d:8d:8d:5e:0b:27: 20:74:cd:4c:f1:e2:8d:0a:ee:7a:54:e4:82:de:c5:67:ba:89: bb:05:4f:92:15:fb:5a:b2:a1:c1:02:5d:18:af:1a:30:87:2f: 8a:92:7e:3e:64:6b:ce:ba:46:b5:44:15:94:b0:4b:d3:55:76: 69:58:29:e3:3f:d8:93:fe:fa:f6:92:04:d2:6c:51:14:ba:20: e5:d6:8e:f1:46:27:59:76:e2:6a:ae:bf:72:8d:64:56:61:02: 63:dc:8b:5a:e4:34:58:15:a7:0b:42:f8:6c:f4:0f:6c:f2:76: b5:e8:b6:17:73:73:26:55:58:06:72:01:23:03:2f:6c:12:73: 43:0d:9c:67:0c:53:47:07:3e:82:6d:eb:42:39:26:82:06:44: f2:fd:8a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwODAzMDQ1NzQxWhcNMjUwODEwMDQ1NzQxWjAYMRYwFAYD VQQDEw02ODhlZWM0NS0zYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4nQgZirWOC1UnetIX1hUrwF921fWnummGhiOEoiVNKD7GnRdrYfY6lQwN88 goGoFT7oMj9oiusuE9qnR/3lg9zFZgOgykXflROx+icecbWmCu1LvaYxg1e7bs+V oiPipNyZb2hSuQNDD9GIYikOltlBQ/fxr6lGujuLralUzLg4DCgaZGwh9GQnJlv3 g7/pMP+SBcYs9rEGprX4WThUJPEXyJ5GuB4/uGMAIcyv0knRI3TIXNQg2aZQQldp VH3xg2mHs18+YRkY67OECU1GlBUL9r3D/PZUGe2nSUisOYSeHqsILb1z+wuEYeQ7 aCsZnvg+qMU9Ge/ySujVQTfNTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhtU4uz ZMsSuFYyMSU+4S61QUsnMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlte3NOkZOXitSRrqe61HDBEcouexqFUNd3fhyt7nAvX2tYzmpr8ep Nm7DKLEpyFpb19N9bkH5m21TD4MjUC/6IV5xa349yOs72Qji0KiXqbP7gcdMdIHO TP92ZXDpJuNX3xS7uzE9jY1eCycgdM1M8eKNCu56VOSC3sVnuom7BU+SFftasqHB Al0Yrxowhy+Kkn4+ZGvOuka1RBWUsEvTVXZpWCnjP9iT/vr2kgTSbFEUuiDl1o7x RidZduJqrr9yjWRWYQJj3Ita5DRYFacLQvhs9A9s8na16LYXc3MmVVgGcgEjAy9s EnNDDZxnDFNHBz6CbetCOSaCBkTy/YpE -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:39 2025 by rpki-client