$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: WkUdewrLqhWqfAlPqJxbWpUvexMZo38JrJ2FlznSRUE= Subject key identifier: AA:E7:C1:20:AA:02:77:3E:F5:0A:AA:C3:58:C0:86:64:9E:02:41:10 Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DA6 Signing time: Fri 04 Apr 2025 18:03:07 +0000 Manifest this update: Fri 04 Apr 2025 18:03:06 +0000 Manifest next update: Fri 11 Apr 2025 18:03:06 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: pnnk6ppzDgYVklkJOJq3D0/fbzsg5iASGdiBl1nz4wU=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1 Validity Not Before: Apr 4 18:03:06 2025 GMT Not After : Apr 11 18:03:06 2025 GMT Subject: CN=67f01edb-372f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d5:af:76:3c:ab:49:9b:66:17:0b:25:b8:53: 26:36:b4:30:d0:3c:45:ae:07:53:c4:52:f8:0a:3a: 21:52:12:8f:9d:53:59:cf:11:ea:ee:87:2c:53:8e: c1:d8:09:4c:de:bb:7c:b3:61:2c:4e:e3:b2:d2:cb: cf:d8:4f:6e:e9:2f:48:fb:a9:30:13:25:de:22:7f: 68:4b:c0:7d:01:54:59:1f:30:2c:ed:48:df:c7:a8: 6f:a1:0e:f0:40:36:69:1b:39:17:75:1a:88:60:4f: 43:11:db:4f:50:65:a8:f3:e0:d5:b7:2c:92:ca:6b: 0e:9a:c4:8f:e5:64:09:13:dd:8a:37:1a:ab:0b:68: f2:50:e6:22:4d:a1:24:e1:7f:69:cc:a0:e0:a9:38: 60:3f:a7:7a:f7:52:82:8f:68:32:e2:7d:61:6f:a5: ea:61:a8:f6:6b:3f:89:e4:1f:7e:34:71:40:06:14: 05:04:d2:68:d9:7a:13:3a:24:27:d3:0b:d1:9f:7e: 6a:a0:47:66:a7:24:19:70:f5:25:86:5f:35:bc:83: 01:15:18:4e:90:93:f7:26:22:50:6a:bc:a2:2a:ea: 39:5d:ca:fe:18:78:4b:29:89:c0:be:a4:b4:1b:63: d5:cd:69:89:ae:ed:09:59:c0:34:f1:c8:24:b4:8c: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E7:C1:20:AA:02:77:3E:F5:0A:AA:C3:58:C0:86:64:9E:02:41:10 X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:be:f4:61:07:0b:a5:d2:c8:01:52:96:72:7f:29:b2:ea: b9:24:73:60:75:80:7a:34:95:2d:48:14:85:d5:e0:b2:44:be: ce:89:cb:2f:10:f0:21:58:db:8f:ae:51:c5:5d:6d:fc:c4:45: bd:ec:b5:73:8e:e9:7b:a9:a2:f4:7b:c8:82:1e:11:2e:c9:64: 53:ad:e6:a7:37:a1:f6:01:68:03:cd:83:84:4a:b1:b2:60:00: fc:59:3a:5c:61:70:8f:61:27:a8:c7:58:3d:d5:c1:ee:b3:4b: 02:f4:66:fc:bc:e6:8c:57:b3:c0:e8:8c:dc:cd:02:97:63:ac: f8:9b:bf:57:53:14:13:21:ba:f8:d4:4b:39:7d:30:3d:b2:50: 88:e3:47:58:40:b9:e2:14:b6:75:91:99:c6:53:47:82:9d:d4: 09:96:dd:42:fb:c2:b2:47:ce:cf:75:b8:00:8f:16:04:31:c1: 6c:05:80:c8:98:cd:c6:e4:cf:7c:1d:da:61:ad:ad:62:d0:23: 4a:89:0e:0f:08:f4:5b:74:18:29:27:a6:3e:6a:ef:b2:62:e2: 25:ba:7f:40:eb:2b:cf:8f:95:c4:f0:b7:90:11:76:c2:c4:54: 46:4c:d0:5b:b3:e2:9f:cb:b1:0d:c0:3d:68:a6:82:89:40:b8: df:4f:67:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwNDA0MTgwMzA2WhcNMjUwNDExMTgwMzA2WjAYMRYwFAYD VQQDEw02N2YwMWVkYi0zNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29WvdjyrSZtmFwsluFMmNrQw0DxFrgdTxFL4CjohUhKPnVNZzxHq7ocsU47B 2AlM3rt8s2EsTuOy0svP2E9u6S9I+6kwEyXeIn9oS8B9AVRZHzAs7Ujfx6hvoQ7w QDZpGzkXdRqIYE9DEdtPUGWo8+DVtyySymsOmsSP5WQJE92KNxqrC2jyUOYiTaEk 4X9pzKDgqThgP6d691KCj2gy4n1hb6XqYaj2az+J5B9+NHFABhQFBNJo2XoTOiQn 0wvRn35qoEdmpyQZcPUlhl81vIMBFRhOkJP3JiJQaryiKuo5Xcr+GHhLKYnAvqS0 G2PVzWmJru0JWcA08cgktIytGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrnwSCq Anc+9Qqqw1jAhmSeAkEQMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKhL70YQcLpdLIAVKWcn8psuq5JHNgdYB6NJUtSBSF1eCyRL7Oicsv EPAhWNuPrlHFXW38xEW97LVzjul7qaL0e8iCHhEuyWRTreanN6H2AWgDzYOESrGy YAD8WTpcYXCPYSeox1g91cHus0sC9Gb8vOaMV7PA6IzczQKXY6z4m79XUxQTIbr4 1Es5fTA9slCI40dYQLniFLZ1kZnGU0eCndQJlt1C+8KyR87PdbgAjxYEMcFsBYDI mM3G5M98Hdphra1i0CNKiQ4PCPRbdBgpJ6Y+au+yYuIlun9A6yvPj5XE8LeQEXbC xFRGTNBbs+Kfy7ENwD1opoKJQLjfT2ec -----END CERTIFICATE-----Generated at Sat Apr 5 22:19:02 2025 by rpki-client