$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: 6DIqdeLe0lVN9yU2wVbrSJXGwX5y2ubx3M3EWwTRZRY= Subject key identifier: B4:65:ED:79:B4:82:73:B5:07:EE:18:95:E6:60:6E:53:DA:F8:2E:39 Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D25 Signing time: Fri 04 Apr 2025 18:09:15 +0000 Manifest this update: Fri 04 Apr 2025 18:09:15 +0000 Manifest next update: Fri 11 Apr 2025 18:09:15 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: WViEWlJ46wKDVZw7v8a0d86x2M4I2gxg6BTMaf3sPRU=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1 Validity Not Before: Apr 4 18:09:15 2025 GMT Not After : Apr 11 18:09:15 2025 GMT Subject: CN=67f0204b-2b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:20:0f:6c:8b:9e:9d:79:25:c7:89:a1:96: ea:be:9c:db:6e:7c:87:ac:a5:1c:a7:fd:21:3a:d8: 1c:3e:75:c7:44:ed:e5:c8:fe:72:71:9a:77:b8:e5: e8:e3:e4:0a:a2:08:25:9f:f0:9f:0a:42:df:10:80: a4:18:49:26:4e:e0:ff:bb:fb:78:58:8f:e5:2e:55: 8c:0f:3b:0b:4d:7a:43:3e:83:c7:65:56:7a:57:5a: e2:52:a5:db:75:90:56:63:92:5d:cf:2e:1d:6e:31: 3c:bc:de:e3:54:78:32:6f:cb:6d:33:8f:9f:c6:3b: a8:08:f8:80:65:0b:61:19:b8:a1:be:b0:49:8b:cf: 00:50:c9:a0:96:50:27:c1:2e:b1:54:c7:8b:7a:56: 6e:69:9b:00:aa:48:3d:b6:d2:83:a9:65:93:fb:c0: 5f:24:cf:99:96:ec:7c:2b:ab:80:b8:e7:61:3d:72: fe:1a:77:55:4d:45:0f:ba:c7:f1:41:cd:50:64:81: 56:62:f8:cc:68:0c:cb:2c:08:4a:b3:92:64:f3:b2: 13:96:10:41:5f:7c:d3:45:fd:61:c1:27:68:dd:ff: ce:4a:c2:1d:70:64:29:ca:76:b3:82:9d:24:38:48: 05:b2:8f:3b:67:b9:f8:5f:b6:c6:e0:b5:22:94:a2: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:65:ED:79:B4:82:73:B5:07:EE:18:95:E6:60:6E:53:DA:F8:2E:39 X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d9:8c:1b:b0:2b:2a:ba:4f:45:04:a9:fb:56:9a:c8:c9:52: 59:5a:1c:af:4c:14:87:8a:d0:ad:e2:cc:c5:eb:60:c7:30:c1: 81:f6:98:44:1b:26:8d:10:9e:d2:44:54:84:43:4c:86:1d:35: 0f:c7:42:d2:fd:4a:39:a1:02:d7:c7:fd:d8:ae:24:b9:1c:04: be:b6:37:ec:f3:27:a9:15:04:2c:69:a1:37:d6:8c:f2:52:39: 03:04:e0:e2:9c:d6:d8:ff:6e:12:37:c9:ce:a0:5a:10:66:5e: 52:3e:c8:74:52:49:b2:c2:5c:3b:e4:2e:a2:29:7e:4a:1a:f8: b2:54:eb:04:d1:ef:0e:39:fe:f0:60:b1:ae:21:99:3c:90:3d: cf:e0:93:8e:a8:56:2d:c9:66:6a:02:78:a0:f3:ac:81:1e:9e: 9d:1c:0f:a3:0b:87:c1:3d:f0:dc:fc:cf:c2:35:76:62:50:a6: 1f:bb:c1:67:3b:5d:dd:3c:a3:ef:45:e8:a8:66:4b:c5:b3:b3: 50:9e:71:ef:7f:81:bb:7d:5c:9b:f9:1f:6a:bd:13:18:fe:3d: 80:bc:93:fc:81:a7:8b:34:56:a7:77:37:c9:fb:b4:41:17:ca: e3:70:bf:ca:5b:67:63:aa:b8:4d:c8:4e:07:44:d5:62:ae:aa: 20:1c:51:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUwNDA0MTgwOTE1WhcNMjUwNDExMTgwOTE1WjAYMRYwFAYD VQQDEw02N2YwMjA0Yi0yYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01kgD2yLnp15JceJoZbqvpzbbnyHrKUcp/0hOtgcPnXHRO3lyP5ycZp3uOXo 4+QKoggln/CfCkLfEICkGEkmTuD/u/t4WI/lLlWMDzsLTXpDPoPHZVZ6V1riUqXb dZBWY5Jdzy4dbjE8vN7jVHgyb8ttM4+fxjuoCPiAZQthGbihvrBJi88AUMmgllAn wS6xVMeLelZuaZsAqkg9ttKDqWWT+8BfJM+Zlux8K6uAuOdhPXL+GndVTUUPusfx Qc1QZIFWYvjMaAzLLAhKs5Jk87ITlhBBX3zTRf1hwSdo3f/OSsIdcGQpynazgp0k OEgFso87Z7n4X7bG4LUilKI0uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRl7Xm0 gnO1B+4YleZgblPa+C45MB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD2YwbsCsquk9FBKn7VprIyVJZWhyvTBSHitCt4szF62DHMMGB9phE GyaNEJ7SRFSEQ0yGHTUPx0LS/Uo5oQLXx/3YriS5HAS+tjfs8yepFQQsaaE31ozy UjkDBODinNbY/24SN8nOoFoQZl5SPsh0Ukmywlw75C6iKX5KGviyVOsE0e8OOf7w YLGuIZk8kD3P4JOOqFYtyWZqAnig86yBHp6dHA+jC4fBPfDc/M/CNXZiUKYfu8Fn O13dPKPvReioZkvFs7NQnnHvf4G7fVyb+R9qvRMY/j2AvJP8gaeLNFandzfJ+7RB F8rjcL/KW2djqrhNyE4HRNVirqogHFFO -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:41 2025 by rpki-client