$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: NBndoQxYUD6VoapTgsfulLrJF+9B1OczmJ3MBvwmzag= Subject key identifier: A8:FE:4F:FA:3C:63:AF:69:D3:D7:06:65:A2:37:79:EC:F2:3B:C8:52 Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: E7 Signing time: Sat 29 Mar 2025 04:45:27 +0000 Manifest this update: Sat 29 Mar 2025 04:45:26 +0000 Manifest next update: Sat 05 Apr 2025 04:45:26 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: wi+beHPJMVXSEnfD9X3wx5ccggEneYN4uigzW8hLE8Q=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2 Validity Not Before: Mar 29 04:45:26 2025 GMT Not After : Apr 5 04:45:26 2025 GMT Subject: CN=67e77ae7-d3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:c8:33:e6:07:e3:35:88:80:2c:32:8d:17: 2c:e6:3d:ef:4f:3d:79:18:ca:90:13:df:e3:f8:9b: 4c:42:19:8d:af:ab:fd:c6:9d:75:d0:9c:23:7e:a5: 8f:31:87:ec:43:60:d8:96:49:d3:d3:48:24:39:58: 99:ff:17:f9:c6:b9:ea:e6:c1:19:f4:33:97:c1:55: 97:5c:38:ac:92:d0:a1:75:1d:19:bb:f7:1a:e6:2a: 92:4b:be:cf:b7:5f:c9:48:d4:b0:33:b0:9d:b7:4f: 80:12:9c:27:93:32:c0:31:71:43:c8:8a:a0:9f:d6: ce:ed:85:a1:c9:3f:f6:46:13:2b:8f:a3:d0:bc:6c: f7:f5:4e:75:54:6d:fc:a5:ef:56:c3:3f:3c:12:b0: d7:ec:b2:75:2f:76:8d:97:82:d8:87:26:9e:ff:c0: f3:ec:e1:48:89:f0:dd:b9:f9:44:89:b4:5d:b6:11: a6:66:f5:f5:b3:af:54:43:65:8b:00:81:0a:50:fb: e6:fa:1a:1c:5d:77:9f:d4:32:f9:80:00:7c:e7:21: b9:38:cd:08:36:99:aa:d7:e3:ee:10:09:30:90:70: b8:cc:12:93:84:8f:57:e6:bc:ea:c2:f5:a2:2d:f5: 0a:f4:d9:73:49:a1:15:4d:55:68:d4:1d:68:41:d4: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FE:4F:FA:3C:63:AF:69:D3:D7:06:65:A2:37:79:EC:F2:3B:C8:52 X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:32:94:5a:3d:d1:78:43:38:f0:8b:73:5c:5c:2e:77:37:98: fe:1e:8e:80:3c:f6:27:0d:0f:03:76:08:e8:c1:bc:0e:02:7b: d5:1f:88:87:f1:ed:b4:19:eb:78:95:6f:cc:18:25:db:b7:5c: 9c:72:5e:93:20:5b:b6:8b:ac:3e:78:83:cf:d0:7a:95:90:9b: c6:f4:a3:77:5d:e8:dd:c6:a1:21:7e:33:d4:51:de:66:b1:ea: 79:72:d8:be:dd:19:95:c0:ad:56:d4:6f:da:00:6d:d5:e9:7b: 74:50:79:7e:3f:15:86:d3:97:4a:1a:d8:3e:83:7e:36:c3:2d: c8:0c:a7:fe:ca:a5:71:0d:de:94:82:d2:b5:e6:f4:0d:fc:a2: 2a:7c:c3:10:8c:f8:bb:98:49:54:b4:de:24:dc:4d:83:23:2d: b4:69:56:f5:b0:25:34:ea:08:d7:fb:88:d7:65:8f:c4:a3:0e: a1:71:16:6c:f2:86:02:a9:bf:d9:a8:07:68:87:dd:02:89:86: aa:92:3d:63:07:44:1c:71:55:68:38:f5:ec:ef:eb:22:54:4b: 1a:07:10:76:bd:80:d1:b4:40:96:f3:dd:11:d4:9c:f3:14:4f: 55:49:25:8d:fc:7f:4f:d2:df:cb:8f:93:50:f4:a6:ba:94:d4: e2:80:34:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwMzI5MDQ0NTI2WhcNMjUwNDA1MDQ0NTI2WjAYMRYwFAYD VQQDEw02N2U3N2FlNy1kM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm7IM+YH4zWIgCwyjRcs5j3vTz15GMqQE9/j+JtMQhmNr6v9xp110JwjfqWP MYfsQ2DYlknT00gkOViZ/xf5xrnq5sEZ9DOXwVWXXDisktChdR0Zu/ca5iqSS77P t1/JSNSwM7Cdt0+AEpwnkzLAMXFDyIqgn9bO7YWhyT/2RhMrj6PQvGz39U51VG38 pe9Wwz88ErDX7LJ1L3aNl4LYhyae/8Dz7OFIifDduflEibRdthGmZvX1s69UQ2WL AIEKUPvm+hocXXef1DL5gAB85yG5OM0INpmq1+PuEAkwkHC4zBKThI9X5rzqwvWi LfUK9NlzSaEVTVVo1B1oQdSeVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj+T/o8 Y69p09cGZaI3eezyO8hSMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBMpRaPdF4Qzjwi3NcXC53N5j+Ho6APPYnDQ8DdgjowbwOAnvVH4iH 8e20Get4lW/MGCXbt1yccl6TIFu2i6w+eIPP0HqVkJvG9KN3XejdxqEhfjPUUd5m sep5cti+3RmVwK1W1G/aAG3V6Xt0UHl+PxWG05dKGtg+g342wy3IDKf+yqVxDd6U gtK15vQN/KIqfMMQjPi7mElUtN4k3E2DIy20aVb1sCU06gjX+4jXZY/Eow6hcRZs 8oYCqb/ZqAdoh90CiYaqkj1jB0QccVVoOPXs7+siVEsaBxB2vYDRtECW890R1Jzz FE9VSSWN/H9P0t/Lj5NQ9Ka6lNTigDTV -----END CERTIFICATE-----Generated at Sat Apr 5 03:43:58 2025 by rpki-client