$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json) Hash identifier: VCmfY9yP519GI1/I5vYcPFn9U2LHyxRG5xpCLJooa8E= Subject key identifier: EC:63:BA:6A:89:95:A7:A7:44:1F:9D:56:BA:91:1E:AB:1C:D6:78:A7 Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft Manifest number: 0363 Signing time: Sat 31 May 2025 01:08:50 +0000 Manifest this update: Sat 31 May 2025 01:08:49 +0000 Manifest next update: Sat 07 Jun 2025 01:08:49 +0000 Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: NccRtDWbhSZFWFXcah3I734XeDVhT+wcIXKAbwr0YBQ=) 2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Validity Not Before: May 31 01:08:49 2025 GMT Not After : Jun 7 01:08:49 2025 GMT Subject: CN=683a56a1-9e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:e8:a7:93:b0:17:24:47:48:0b:d0:55:5b: 94:37:6f:51:91:b8:95:ed:3f:27:93:a7:1d:1f:b7: d3:7b:18:3d:32:e8:2a:e5:7c:fb:5b:fe:e8:02:d3: 45:89:22:c6:b4:b1:5d:aa:8a:6b:3d:b0:2c:43:d2: 29:04:89:c3:0b:e4:a1:9f:f0:04:91:68:3b:3a:8a: a3:a7:28:de:31:27:a8:92:56:e6:d0:24:10:fd:fd: 9d:9f:56:87:6b:c2:c1:c8:55:b0:c0:ec:10:f6:f3: e8:45:a6:c3:7f:4f:49:c3:24:32:8e:97:b3:0a:6c: ea:2a:f0:85:96:7f:d6:b4:4e:7a:29:9d:ce:bb:88: ba:89:03:f6:45:c9:d8:96:29:0e:88:34:47:b4:05: dc:fb:31:85:97:d5:fe:3d:35:f3:56:68:e4:58:cf: 0f:31:04:7b:56:c4:09:d4:af:34:f8:75:02:59:25: 8f:c0:21:90:c5:37:f8:84:3b:59:b3:4d:af:24:20: 10:a2:48:bf:3b:0a:af:b3:de:f2:e4:b3:f5:33:ba: 17:97:ab:e8:50:0a:fe:c6:74:fa:c0:23:1c:10:8f: 6c:16:22:a7:5b:4e:8f:1c:64:ed:8e:5e:39:45:be: f1:27:8a:a3:56:a9:be:43:76:17:29:a9:4d:f7:93: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:63:BA:6A:89:95:A7:A7:44:1F:9D:56:BA:91:1E:AB:1C:D6:78:A7 X509v3 Authority Key Identifier: keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cd:89:be:c9:f2:4d:12:b0:fe:73:cb:a8:d1:93:16:36:59: c3:37:ba:f7:3c:e5:f5:2f:5a:6a:81:9a:86:ac:3a:70:26:42: 22:c2:6f:2c:d9:5b:a3:40:67:50:13:92:c8:82:44:cd:cf:10: 12:a8:0b:83:30:b2:2b:26:b7:36:4b:76:74:89:d1:03:5f:63: 18:a4:5b:69:e2:dc:ad:34:6e:8e:29:5a:9e:5e:0d:f8:f7:d3: 7d:1f:ca:6d:8c:20:1f:d6:5e:23:84:5d:10:a8:a7:1f:43:be: 51:b4:6f:f3:94:b1:d3:ff:38:88:93:6b:24:4d:33:fd:dd:43: 9a:e0:4a:a0:33:fc:6d:4f:61:9c:21:50:1b:61:a5:12:85:c8: e4:c2:3c:62:8e:48:31:fa:12:77:63:e2:7a:44:30:1e:75:0f: 6b:cb:83:4c:31:bd:da:fb:b3:a7:2a:d0:ad:8e:16:dc:af:e2: 8d:4b:3a:41:4e:e0:e3:ee:72:7a:3f:fa:62:bf:18:a5:18:07: f7:03:49:9f:21:ac:36:ee:36:92:9b:52:27:0c:41:41:39:ac: f0:22:f5:83:fb:3b:2a:f6:ba:40:ee:62:98:fa:a2:cd:10:50: 2c:31:cb:10:5c:9f:35:a9:1b:e3:2e:15:7c:8c:b5:fd:e0:ff: 9f:5b:d0:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1OTIxMTAvBgNVBAUTKDI0MEVDMTVEMTQ0NEQ0M0YwNzdDOTRENDhCRUVEMUFG MDkwNzREM0QwHhcNMjUwNTMxMDEwODQ5WhcNMjUwNjA3MDEwODQ5WjAYMRYwFAYD VQQDEw02ODNhNTZhMS05ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/nop5OwFyRHSAvQVVuUN29RkbiV7T8nk6cdH7fTexg9Mugq5Xz7W/7oAtNF iSLGtLFdqoprPbAsQ9IpBInDC+Shn/AEkWg7OoqjpyjeMSeoklbm0CQQ/f2dn1aH a8LByFWwwOwQ9vPoRabDf09JwyQyjpezCmzqKvCFln/WtE56KZ3Ou4i6iQP2RcnY likOiDRHtAXc+zGFl9X+PTXzVmjkWM8PMQR7VsQJ1K80+HUCWSWPwCGQxTf4hDtZ s02vJCAQoki/Owqvs97y5LP1M7oXl6voUAr+xnT6wCMcEI9sFiKnW06PHGTtjl45 Rb7xJ4qjVqm+Q3YXKalN95PKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxjumqJ laenRB+dVrqRHqsc1ninMB8GA1UdIwQYMBaAFCQOwV0URNQ/B3yU1Ivu0a8JB009 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU5Mi81MUUxMjcyQUIw RjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFEOEhmSlRVaS03UnJ3a0hU VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBN0JYUlJFMUQ4SGZKVFVpLTdScndrSFRUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU5Mi81MUUxMjcyQUIwRjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFE OEhmSlRVaS03UnJ3a0hUVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfzYm+yfJNErD+c8uo0ZMWNlnDN7r3POX1L1pqgZqGrDpwJkIiwm8s 2VujQGdQE5LIgkTNzxASqAuDMLIrJrc2S3Z0idEDX2MYpFtp4tytNG6OKVqeXg34 99N9H8ptjCAf1l4jhF0QqKcfQ75RtG/zlLHT/ziIk2skTTP93UOa4EqgM/xtT2Gc IVAbYaUShcjkwjxijkgx+hJ3Y+J6RDAedQ9ry4NMMb3a+7OnKtCtjhbcr+KNSzpB TuDj7nJ6P/pivxilGAf3A0mfIaw27jaSm1InDEFBOazwIvWD+zsq9rpA7mKY+qLN EFAsMcsQXJ81qRvjLhV8jLX94P+fW9Dd -----END CERTIFICATE-----Generated at Sat May 31 17:00:24 2025 by rpki-client