$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft File: JPDB2OP0opb9zesjWmxIO2styXo.mft (raw, json) Hash identifier: hc3KCtIFZ03ma0VlAp0KPy6xy0xgnCMNUX13Gr6RjaU= Subject key identifier: D2:FF:76:5E:07:3A:7C:DE:3F:5F:8C:F6:D4:81:5F:58:BB:3C:83:32 Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 27F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft Manifest number: 27D3 Signing time: Fri 30 May 2025 15:46:33 +0000 Manifest this update: Fri 30 May 2025 15:46:33 +0000 Manifest next update: Fri 06 Jun 2025 15:46:33 +0000 Files and hashes: 1: JPDB2OP0opb9zesjWmxIO2styXo.crl (hash: 99lW/+gVCcX3rXE2iSMw8Javu05sCU03o//5lzbclvw=) 2: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (hash: zYzRPHKgSeX768eROJRNf9tX7Mow08v94Ny1/BRKK1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10224 (0x27f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: May 30 15:46:33 2025 GMT Not After : Jun 6 15:46:33 2025 GMT Subject: CN=6839d2d9-cb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:66:42:2b:1b:03:04:b2:bc:a4:3d:f6:3f: 97:fd:fb:07:a3:d1:d0:9e:65:b3:bb:b6:31:94:d4: 1b:43:88:f6:a0:0e:04:54:31:81:64:d9:b9:36:59: ed:4a:c3:a8:4b:ac:d6:9e:0d:71:26:a0:68:74:a4: 52:58:2d:3a:c2:a5:5b:57:17:00:d8:47:7b:b7:17: 48:62:bd:bd:32:12:92:f6:58:e4:3d:3b:42:38:c6: fd:53:a3:48:44:03:f6:0a:f7:c5:7d:0e:46:a9:7f: 00:1c:13:99:6a:af:5a:92:e9:29:d3:53:52:cc:6e: 27:fd:1d:d1:d4:6a:b6:c3:d9:e2:12:21:7d:30:7c: 1d:e1:ff:e8:d2:65:31:69:2c:b8:9c:0f:fd:42:0a: 61:81:7a:e9:fa:7b:ff:40:89:50:33:4d:fa:cc:8f: 45:80:25:9a:74:fc:92:a8:92:ba:ec:e1:b6:db:8b: 52:2f:03:b7:b1:69:d2:d0:78:fb:12:a6:3e:db:b7: 21:55:2a:dd:02:07:a3:6e:05:74:60:26:c1:49:bf: 0d:2d:ac:87:ae:25:10:47:50:e7:f4:be:c3:75:d9: 52:47:a2:a2:ff:94:85:d1:68:fd:fd:c1:82:51:e2: 5d:7f:74:e9:6b:bd:2b:80:fc:01:00:94:4e:54:48: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:76:5E:07:3A:7C:DE:3F:5F:8C:F6:D4:81:5F:58:BB:3C:83:32 X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7b:3d:52:e6:c0:ba:52:0b:4b:8e:1c:2f:7b:b9:26:74:17: 59:fa:17:e0:17:d7:98:16:81:77:c4:cb:94:8b:71:41:4a:6a: 2d:d9:56:f2:d0:97:63:17:44:1d:d0:41:50:39:07:26:a9:75: 70:f0:4e:39:18:fb:95:f0:ce:3e:9c:23:f7:e2:12:93:48:bd: 75:7c:04:43:e1:5c:8d:8b:0b:6f:64:26:b8:89:cc:76:a0:d1: e9:95:65:7b:60:a6:58:47:d4:8e:9f:c6:09:12:7e:88:0d:ca: a5:bb:68:9c:69:7d:38:24:43:ae:0e:d1:ac:4e:a4:6a:54:c4: 51:06:b7:26:d1:49:5a:a7:b8:c6:af:30:07:04:5a:02:5a:f8: 61:39:27:54:42:3b:e4:70:b2:3e:c8:f8:7d:28:20:e6:e1:eb: 5d:4c:c3:bd:e2:00:94:9e:2e:32:45:6b:f3:46:dc:56:f6:b6: a3:19:b2:96:c0:0a:b9:ca:15:62:d3:22:69:3b:a9:d4:25:98: a2:0e:86:92:26:20:50:c1:79:ab:0f:6e:1c:b8:8c:b5:7a:f0: 43:60:be:f4:49:be:cf:18:f3:ff:61:a3:fc:18:15:b2:ab:6b: ce:7c:89:75:3f:ae:4e:b2:31:ee:e2:f0:2a:20:f0:90:b6:9f: d0:4f:e4:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjUwNTMwMTU0NjMzWhcNMjUwNjA2MTU0NjMzWjAYMRYwFAYD VQQDEw02ODM5ZDJkOS1jYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqFmQisbAwSyvKQ99j+X/fsHo9HQnmWzu7YxlNQbQ4j2oA4EVDGBZNm5Nlnt SsOoS6zWng1xJqBodKRSWC06wqVbVxcA2Ed7txdIYr29MhKS9ljkPTtCOMb9U6NI RAP2CvfFfQ5GqX8AHBOZaq9akukp01NSzG4n/R3R1Gq2w9niEiF9MHwd4f/o0mUx aSy4nA/9QgphgXrp+nv/QIlQM036zI9FgCWadPySqJK67OG224tSLwO3sWnS0Hj7 EqY+27chVSrdAgejbgV0YCbBSb8NLayHriUQR1Dn9L7DddlSR6Ki/5SF0Wj9/cGC UeJdf3Tpa70rgPwBAJROVEgLXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL/dl4H OnzeP1+M9tSBX1i7PIMyMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi8zMjg4QzMxMkEyRTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9w Yjl6ZXNqV214SU8yc3R5WG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0ez1S5sC6UgtLjhwve7kmdBdZ+hfgF9eYFoF3xMuUi3FBSmot2Vby 0JdjF0Qd0EFQOQcmqXVw8E45GPuV8M4+nCP34hKTSL11fARD4VyNiwtvZCa4icx2 oNHplWV7YKZYR9SOn8YJEn6IDcqlu2icaX04JEOuDtGsTqRqVMRRBrcm0Ulap7jG rzAHBFoCWvhhOSdUQjvkcLI+yPh9KCDm4etdTMO94gCUni4yRWvzRtxW9rajGbKW wAq5yhVi0yJpO6nUJZiiDoaSJiBQwXmrD24cuIy1evBDYL70Sb7PGPP/YaP8GBWy q2vOfIl1P65OsjHu4vAqIPCQtp/QT+SN -----END CERTIFICATE-----Generated at Sat May 31 14:49:42 2025 by rpki-client