$ rpki-client -vvf rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft File: Jaw-SPLljojGBUR5jsZyQHa1NBM.mft (raw, json) Hash identifier: 6BqfpWhuPe8qlhdQ6Utz4O8EnZUNbZjXp8cXS2zitU0= Subject key identifier: 31:72:0D:96:27:B2:1B:E3:E6:6C:D7:5B:FE:AA:DE:A4:CC:E6:E7:61 Authority key identifier: 25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 Certificate issuer: /CN=A9153E2E/serialNumber=25AC3E48F2E58E88C60544798EC6724076B53413 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft Manifest number: 28 Signing time: Wed 09 Apr 2025 06:35:56 +0000 Manifest this update: Wed 09 Apr 2025 06:35:56 +0000 Manifest next update: Wed 16 Apr 2025 06:35:56 +0000 Files and hashes: 1: Jaw-SPLljojGBUR5jsZyQHa1NBM.crl (hash: 4kHlc+kPKX770mAfSiwkcikyg9W4XfgBwj9mu7CYDWw=) 2: 71C4845EDD9A11EF8CFB3566C4F9AE02.roa (hash: LzkuGFZUxj6+WvgGdYx8FBFSBGquSdSJrmGH+Nh7tDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153E2E Validity Not Before: Apr 9 06:35:56 2025 GMT Not After : Apr 16 06:35:56 2025 GMT Subject: CN=67f6154c-3649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:28:12:41:8b:19:9a:97:6d:2b:1f:87:14: d7:fc:d0:00:3f:b4:5b:4c:40:c6:b5:c4:e8:f4:a0: 0d:f1:88:4e:64:47:5b:29:dd:86:a4:f1:80:e3:8a: bd:53:61:c3:f9:d1:09:b4:60:8c:28:f9:ef:7c:95: b5:94:89:92:ce:a8:64:9f:08:cf:01:85:15:54:9f: be:06:56:31:8c:7e:d1:4c:e1:b7:f1:d2:f9:f4:c8: d7:b9:13:c4:5c:66:37:c6:a5:04:90:65:a3:31:57: 3a:77:84:59:cb:e8:6d:5e:ee:e1:42:48:e8:6f:a1: bc:e8:70:9e:92:65:e1:2d:e1:2c:00:9e:95:23:f8: bf:b8:be:7b:aa:ba:8f:9d:d3:ba:60:f7:36:9e:94: 6b:13:ae:b1:a0:71:fd:cc:af:83:05:44:82:91:61: 8f:9b:46:b7:0d:4c:13:4b:d5:d1:9e:53:17:32:87: 5b:44:72:15:ea:4a:16:16:b3:ae:7d:3a:ed:2d:56: 7b:5a:a0:24:4a:ed:09:ed:35:ff:ef:f5:82:a7:04: e8:66:86:f9:d4:a1:49:4d:87:a8:3e:09:24:0f:70: e8:1a:1d:36:a7:1b:7f:0a:b0:2f:52:b1:27:4f:e4: 5f:57:04:a7:88:55:4e:5a:39:1d:2b:de:a3:87:3c: 53:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:0D:96:27:B2:1B:E3:E6:6C:D7:5B:FE:AA:DE:A4:CC:E6:E7:61 X509v3 Authority Key Identifier: keyid:25:AC:3E:48:F2:E5:8E:88:C6:05:44:79:8E:C6:72:40:76:B5:34:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jaw-SPLljojGBUR5jsZyQHa1NBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153E2E/FFA35F04DD9811EFA9AF4346C4F9AE02/Jaw-SPLljojGBUR5jsZyQHa1NBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a9:35:62:82:1e:1c:c3:37:09:fa:4c:de:ef:b3:41:99:0c: ff:54:43:2a:c6:a6:28:d4:82:27:2e:74:fa:17:b9:07:3e:e9: b6:d1:39:5b:fa:ca:8a:50:3b:12:df:50:a4:2b:51:66:54:6d: 93:42:17:60:25:fe:3e:61:8a:d4:20:cf:f7:d3:f8:e9:57:08: 57:d3:2d:c2:5d:5f:bd:98:de:6e:34:0a:ae:ae:6e:a0:2b:2c: d0:75:bc:ef:d5:60:d6:8a:bb:1b:d9:73:51:11:a3:9f:9a:7e: 6a:ed:5c:fd:dd:28:fe:3c:c4:45:e8:73:7d:d2:61:43:74:71: 96:5f:4e:b6:09:14:3f:b3:d3:d9:96:2a:74:04:e0:fd:6e:b3: 66:7f:0d:24:51:15:68:93:f0:cb:b8:f4:13:82:9c:e9:ca:8f: 12:72:c4:3f:06:cf:30:48:3a:19:a1:95:1b:64:0d:e5:fd:80: df:b6:6f:9d:cc:b0:81:cc:2b:5f:3d:a7:bf:0e:b1:c5:6a:71: 62:ed:fe:94:f2:05:46:d7:56:2e:03:52:7a:a2:fe:5a:6d:f6: da:32:3e:db:0f:2d:73:98:ca:4f:95:16:d2:3d:21:21:8d:ca: da:e7:a3:a4:83:c8:1f:8d:29:c0:50:57:15:31:a6:0f:11:ae: 11:54:8d:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0UyRTExMC8GA1UEBRMoMjVBQzNFNDhGMkU1OEU4OEM2MDU0NDc5OEVDNjcyNDA3 NkI1MzQxMzAeFw0yNTA0MDkwNjM1NTZaFw0yNTA0MTYwNjM1NTZaMBgxFjAUBgNV BAMTDTY3ZjYxNTRjLTM2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDMygSQYsZmpdtKx+HFNf80AA/tFtMQMa1xOj0oA3xiE5kR1sp3Yak8YDjir1T YcP50Qm0YIwo+e98lbWUiZLOqGSfCM8BhRVUn74GVjGMftFM4bfx0vn0yNe5E8Rc ZjfGpQSQZaMxVzp3hFnL6G1e7uFCSOhvobzocJ6SZeEt4SwAnpUj+L+4vnuquo+d 07pg9zaelGsTrrGgcf3Mr4MFRIKRYY+bRrcNTBNL1dGeUxcyh1tEchXqShYWs659 Ou0tVntaoCRK7QntNf/v9YKnBOhmhvnUoUlNh6g+CSQPcOgaHTanG38KsC9SsSdP 5F9XBKeIVU5aOR0r3qOHPFNLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMXINliey G+PmbNdb/qrepMzm52EwHwYDVR0jBBgwFoAUJaw+SPLljojGBUR5jsZyQHa1NBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRTJFL0ZGQTM1RjA0REQ5 ODExRUZBOUFGNDM0NkM0RjlBRTAyL0phdy1TUExsam9qR0JVUjVqc1p5UUhhMU5C TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmF3LVNQTGxqb2pHQlVSNWpzWnlRSGExTkJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RTJFL0ZGQTM1RjA0REQ5ODExRUZBOUFGNDM0NkM0RjlBRTAyL0phdy1TUExsam9q R0JVUjVqc1p5UUhhMU5CTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWpNWKCHhzDNwn6TN7vs0GZDP9UQyrGpijUgicudPoXuQc+6bbROVv6 yopQOxLfUKQrUWZUbZNCF2Al/j5hitQgz/fT+OlXCFfTLcJdX72Y3m40Cq6ubqAr LNB1vO/VYNaKuxvZc1ERo5+afmrtXP3dKP48xEXoc33SYUN0cZZfTrYJFD+z09mW KnQE4P1us2Z/DSRRFWiT8Mu49BOCnOnKjxJyxD8GzzBIOhmhlRtkDeX9gN+2b53M sIHMK189p78OscVqcWLt/pTyBUbXVi4DUnqi/lpt9toyPtsPLXOYyk+VFtI9ISGN ytrno6SDyB+NKcBQVxUxpg8RrhFUjUo= -----END CERTIFICATE-----Generated at Thu Apr 10 16:56:23 2025 by rpki-client