$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft File: JAYggSHro_x0NhyJ5jVgtJht3wg.mft (raw, json) Hash identifier: muo8gIJpIJ8izauanCbBjcVeqQbcpUve1IWSoN3lDbw= Subject key identifier: 2C:A4:A3:99:7C:94:3B:AA:02:BD:7F:D6:BA:DF:06:1B:70:FA:B7:9A Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08 Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft Manifest number: 078E Signing time: Fri 28 Mar 2025 21:34:15 +0000 Manifest this update: Fri 28 Mar 2025 21:34:14 +0000 Manifest next update: Fri 04 Apr 2025 21:34:14 +0000 Files and hashes: 1: JAYggSHro_x0NhyJ5jVgtJht3wg.crl (hash: QacuA3nAp2wJtbacMf8F6MkXOVpwjXh7IyHOqpvuOJA=) 2: 076948B2428E11EF912F3710C4F9AE02.roa (hash: TUrfxp2ZB674b0yMhOuMDImIoCsh/4WxM1ekk3XEVBs=) 3: 997C96220CC211ED8C32645BC4F9AE02.roa (hash: 5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=) 4: 9ADCD3BA0CC211ED8C32645BC4F9AE02.roa (hash: 9AR0wajPgZJi4aan8+IRMeXtcBiZo3LvqeT/rc/ePUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D35E Validity Not Before: Mar 28 21:34:14 2025 GMT Not After : Apr 4 21:34:14 2025 GMT Subject: CN=67e715d7-c0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:35:51:c5:e4:6e:1b:ac:19:ed:e6:06:44: 7a:84:c1:31:d5:2e:51:33:2d:fb:c7:cf:f8:c9:56: 97:a8:bf:e0:cd:11:37:6f:be:2a:e0:cf:5b:33:a6: 5c:b7:d8:57:0d:c8:03:63:16:4c:6c:91:43:63:9e: 5b:6d:fb:f1:35:a6:56:9f:72:fb:5a:00:3b:09:8a: fb:9e:37:ea:37:ac:29:6c:75:cc:0d:aa:37:b7:08: ca:ed:88:22:14:3b:5d:09:cc:92:ae:70:8c:e8:37: 1a:f8:eb:97:33:91:08:43:1b:0d:46:0e:7f:d1:c1: 09:ac:96:54:9b:20:15:c4:72:ae:49:18:f4:d8:bd: fe:68:56:62:a1:a6:c2:f5:68:c2:25:02:26:f9:1c: a1:7f:18:bb:2a:19:64:99:4c:d4:4b:1f:79:c9:89: bc:69:f8:bf:c8:63:fe:3c:1c:89:8c:1c:47:71:57: 26:00:37:b4:76:9f:06:84:84:d5:bf:94:2c:28:ae: 08:0f:21:b9:df:8d:16:c9:84:1a:94:86:d4:9c:48: 3e:50:2f:04:0f:d1:e9:50:3e:65:22:a9:b9:36:25: 52:3e:21:23:9f:13:4b:0c:ee:c5:2f:26:09:37:40: d7:0e:82:1c:da:78:73:d9:f4:a4:c1:c4:18:e1:41: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:A3:99:7C:94:3B:AA:02:BD:7F:D6:BA:DF:06:1B:70:FA:B7:9A X509v3 Authority Key Identifier: keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a9:d8:10:88:7e:eb:29:8a:59:82:05:75:b5:b2:9e:98:6a: 62:81:e5:0c:53:da:a8:f2:fe:08:4e:fe:30:38:5a:9c:06:c9: 14:0f:e3:70:6e:13:86:e3:0c:ff:3e:ba:6e:a5:9a:6f:b1:84: 87:a7:79:46:35:66:c1:14:43:3a:47:12:56:b9:6f:16:55:83: b7:c0:2b:21:8c:4b:c1:15:59:b6:84:9c:42:7e:d3:d7:7d:49: 03:f7:47:b7:a2:95:80:13:a2:86:d5:7a:62:bd:85:2a:46:de: 34:35:ab:87:97:31:52:74:00:7b:91:a8:97:b7:08:67:1c:a0: 69:93:51:d1:58:af:91:00:ef:6f:5c:63:e6:62:23:be:0c:ec: 2e:bd:f1:2a:ad:70:c3:ba:31:7e:2f:1d:49:68:c1:b8:fa:67: 13:1f:c6:25:bb:ef:32:82:f6:08:a7:59:62:fd:a6:28:1d:9f: 0f:20:5a:bb:b1:04:8e:eb:4d:91:d9:83:cf:a3:21:b4:cb:25: 22:04:02:a8:b0:51:2b:4d:ea:66:28:1b:1f:73:41:90:41:cf: da:dc:55:74:48:39:c6:49:9a:aa:a1:d4:f4:89:b9:c8:00:4f: b3:99:41:83:8e:13:3d:4d:39:81:1e:11:ba:3f:01:c8:59:02: e9:b3:a8:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0 OTg2RERGMDgwHhcNMjUwMzI4MjEzNDE0WhcNMjUwNDA0MjEzNDE0WjAYMRYwFAYD VQQDEw02N2U3MTVkNy1jMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw181UcXkbhusGe3mBkR6hMEx1S5RMy37x8/4yVaXqL/gzRE3b74q4M9bM6Zc t9hXDcgDYxZMbJFDY55bbfvxNaZWn3L7WgA7CYr7njfqN6wpbHXMDao3twjK7Ygi FDtdCcySrnCM6Dca+OuXM5EIQxsNRg5/0cEJrJZUmyAVxHKuSRj02L3+aFZioabC 9WjCJQIm+Ryhfxi7KhlkmUzUSx95yYm8afi/yGP+PByJjBxHcVcmADe0dp8GhITV v5QsKK4IDyG5340WyYQalIbUnEg+UC8ED9HpUD5lIqm5NiVSPiEjnxNLDO7FLyYJ N0DXDoIc2nhz2fSkwcQY4UFClwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyko5l8 lDuqAr1/1rrfBhtw+reaMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDM1RS83RDM5NEM2QTAxNkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9f eDBOaHlKNWpWZ3RKaHQzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMqdgQiH7rKYpZggV1tbKemGpigeUMU9qo8v4ITv4wOFqcBskUD+Nw bhOG4wz/PrpupZpvsYSHp3lGNWbBFEM6RxJWuW8WVYO3wCshjEvBFVm2hJxCftPX fUkD90e3opWAE6KG1XpivYUqRt40NauHlzFSdAB7kaiXtwhnHKBpk1HRWK+RAO9v XGPmYiO+DOwuvfEqrXDDujF+Lx1JaMG4+mcTH8Ylu+8ygvYIp1li/aYoHZ8PIFq7 sQSO602R2YPPoyG0yyUiBAKosFErTepmKBsfc0GQQc/a3FV0SDnGSZqqodT0ibnI AE+zmUGDjhM9TTmBHhG6PwHIWQLps6gV -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:51 2025 by rpki-client