$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: 8XFgq03OB2JfThSHon6R37vJ58+o8/eQCty2qn8EKjY= Subject key identifier: 37:B9:39:2C:DC:B1:7B:69:27:17:6F:F4:A6:58:7F:DB:28:3F:58:1D Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 011F Signing time: Sat 19 Jul 2025 04:55:23 +0000 Manifest this update: Sat 19 Jul 2025 04:55:23 +0000 Manifest next update: Sat 26 Jul 2025 04:55:23 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: RW2QkllpS0Y5BCLUmWMGo1ifhWXbbV2OyvDyMlvGtPk=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: Jul 19 04:55:23 2025 GMT Not After : Jul 26 04:55:23 2025 GMT Subject: CN=687b253b-9220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:53:89:57:ac:3e:95:c2:42:a4:ac:5e:aa: 5b:0a:d8:bc:7c:54:51:20:0f:9e:22:b3:3f:a5:bf: ca:1e:af:9e:63:f5:b3:b4:44:41:7b:cc:b0:c0:ac: 5a:f9:ca:9b:e1:58:9e:d0:15:61:e9:83:18:31:84: aa:52:39:30:16:f9:26:47:db:12:74:07:43:79:66: 37:dc:a7:be:0d:a0:be:82:4e:04:6f:6c:af:4a:16: 6f:1e:ef:54:27:1e:d0:6f:e0:d0:2f:a1:2a:de:69: e4:bd:a3:62:8a:c2:2c:b4:e4:f8:d9:49:cf:5c:43: 83:c9:d5:f0:e0:d3:03:b6:de:f3:dd:17:13:95:11: 26:06:15:21:75:ec:27:3e:ac:10:b2:20:9e:28:86: 79:d7:a7:2c:ce:a8:1e:1e:53:41:08:70:01:ca:d8: 61:c2:3e:15:8e:6c:d8:df:f3:9a:fb:b3:c4:36:79: 3f:e0:0d:6d:98:ba:9e:f6:07:75:ed:b3:5d:88:8d: 7b:ee:33:c4:8f:9c:e6:e0:a8:b0:3c:d9:fc:ec:f1: ce:18:84:bc:03:37:03:fc:41:14:e2:0e:3d:67:c2: 66:d9:45:32:44:b5:65:42:65:2c:98:6e:ee:84:a1: 5b:41:bd:9e:7b:29:61:f5:31:ed:1a:70:1d:52:2e: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:39:2C:DC:B1:7B:69:27:17:6F:F4:A6:58:7F:DB:28:3F:58:1D X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b8:dc:7f:07:e7:25:fe:b2:a0:d2:3a:0d:13:2d:51:99:18: 98:7d:c9:dc:0a:86:7d:02:79:e2:6a:55:40:08:07:90:d6:4b: dd:4c:a2:da:80:11:3e:de:ce:6e:43:d3:f4:9c:fb:19:77:3b: 43:3e:77:92:09:4d:80:dd:30:33:39:29:6d:f7:2f:b6:c8:5e: 5c:32:1b:ce:4e:94:9a:00:77:bb:57:0a:f6:4f:04:34:c2:ee: 86:73:1f:db:b6:bf:d0:e6:65:ed:c7:ea:a1:b1:cf:b4:c1:27: 05:6e:a5:ee:03:9e:69:cd:a6:28:bc:7b:9e:00:e8:90:95:e5: 4b:20:00:7b:64:49:ec:7d:07:a3:6c:e6:00:00:f6:03:d9:14: 16:be:62:05:17:c9:b9:78:b2:84:39:c1:26:db:12:33:40:9e: 8b:59:7f:7f:f5:62:84:72:1c:83:dd:86:05:73:e5:11:5d:82: b0:3b:f4:2f:55:b7:78:d1:78:05:b5:c8:59:02:f4:a1:22:66: e6:1c:d0:98:de:18:05:b8:c7:fc:e9:92:9b:65:7a:83:2a:10: db:00:b6:3b:04:9c:59:04:a7:f2:a1:03:da:03:6c:d8:5c:85: f3:ab:a2:83:50:0b:50:db:a2:25:19:93:bc:28:5c:2c:6d:ea: 94:14:87:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwNzE5MDQ1NTIzWhcNMjUwNzI2MDQ1NTIzWjAYMRYwFAYD VQQDEw02ODdiMjUzYi05MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx85TiVesPpXCQqSsXqpbCti8fFRRIA+eIrM/pb/KHq+eY/WztERBe8ywwKxa +cqb4Vie0BVh6YMYMYSqUjkwFvkmR9sSdAdDeWY33Ke+DaC+gk4Eb2yvShZvHu9U Jx7Qb+DQL6Eq3mnkvaNiisIstOT42UnPXEODydXw4NMDtt7z3RcTlREmBhUhdewn PqwQsiCeKIZ516cszqgeHlNBCHABythhwj4VjmzY3/Oa+7PENnk/4A1tmLqe9gd1 7bNdiI177jPEj5zm4KiwPNn87PHOGIS8AzcD/EEU4g49Z8Jm2UUyRLVlQmUsmG7u hKFbQb2eeylh9THtGnAdUi7+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe5OSzc sXtpJxdv9KZYf9soP1gdMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxuNx/B+cl/rKg0joNEy1RmRiYfcncCoZ9AnnialVACAeQ1kvdTKLa gBE+3s5uQ9P0nPsZdztDPneSCU2A3TAzOSlt9y+2yF5cMhvOTpSaAHe7Vwr2TwQ0 wu6Gcx/btr/Q5mXtx+qhsc+0wScFbqXuA55pzaYovHueAOiQleVLIAB7ZEnsfQej bOYAAPYD2RQWvmIFF8m5eLKEOcEm2xIzQJ6LWX9/9WKEchyD3YYFc+URXYKwO/Qv Vbd40XgFtchZAvShImbmHNCY3hgFuMf86ZKbZXqDKhDbALY7BJxZBKfyoQPaA2zY XIXzq6KDUAtQ26IlGZO8KFwsbeqUFIdW -----END CERTIFICATE-----Generated at Mon Jul 21 05:41:57 2025 by rpki-client