$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft File: JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft (raw, json) Hash identifier: vCCJGw/PdLBqYK/55pg+lSymFs1WEicRhAbhE8yfcJs= Subject key identifier: FA:E9:D4:F6:C5:11:D1:33:C9:86:90:9F:46:92:C4:C9:EE:8C:41:FA Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0D4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft Manifest number: 0D40 Signing time: Fri 30 May 2025 18:11:15 +0000 Manifest this update: Fri 30 May 2025 18:11:14 +0000 Manifest next update: Fri 06 Jun 2025 18:11:14 +0000 Files and hashes: 1: JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl (hash: OWmlIqQIZEUEWLrIsCx850I8AKA+J7bXj3KjqwDg+B8=) 2: DC5CA696596211EAB1A6C42AC4F9AE02.roa (hash: amV+0EsydUDHLdsh+us/wn9ioz7T7Kc6SJn5/ZtPF4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: May 30 18:11:14 2025 GMT Not After : Jun 6 18:11:14 2025 GMT Subject: CN=6839f4c2-bd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:a4:fc:76:8c:2a:f6:10:c3:62:02:44:7d: d0:46:e5:99:9c:ae:8c:d8:d9:24:db:48:41:5a:30: 1a:5e:2e:14:63:d0:4a:5e:39:e0:22:b5:67:a7:30: f3:d7:ec:2d:34:eb:39:43:58:e1:cb:14:79:df:55: 42:95:4d:4d:fa:ff:d1:39:e3:29:64:1f:17:17:28: bd:73:0d:e2:c3:32:d0:16:3a:97:1a:2c:34:c7:da: 5a:12:db:17:13:71:7b:fb:4e:2e:b7:02:7b:c3:fc: 2f:b5:dc:69:8e:9c:b3:76:15:a8:df:ba:b3:d7:3d: 81:3f:f1:d7:cc:97:2c:19:4e:a8:4e:f9:a9:fc:35: b7:67:f4:23:d5:7c:45:7e:78:a6:d4:20:17:f2:0a: dc:5d:4b:a7:c5:a2:a3:1f:48:bd:a2:d0:0f:79:d2: 1f:e9:b2:f2:15:53:3c:cb:f2:b6:ec:d0:15:46:6d: 20:44:68:1b:5d:43:ad:1d:82:e4:4b:59:8c:5a:05: 96:79:27:57:13:c6:19:d9:b7:94:84:de:7b:65:ab: 6c:21:47:cc:aa:98:86:7b:a3:e8:8b:36:d1:b9:2f: e8:59:51:ab:3a:14:d7:28:17:ba:d9:1a:37:30:c2: 75:28:cd:ab:8e:85:53:c2:e6:ed:51:20:86:45:a0: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:D4:F6:C5:11:D1:33:C9:86:90:9F:46:92:C4:C9:EE:8C:41:FA X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:94:f8:e0:3c:b9:5f:e3:3b:7b:49:a6:7d:01:f5:dc:a1:e2: a7:3d:ea:11:29:28:36:cd:60:03:92:26:d6:96:35:54:0a:ba: 7c:78:04:8a:cc:96:c9:bd:cc:f7:c9:1a:0e:a0:d7:13:9d:a9: a9:12:5e:83:b9:08:1b:32:5b:52:1f:7f:d9:84:61:34:71:b3: 08:bb:c6:24:3e:14:36:88:01:93:d7:43:4c:02:8e:64:bb:c6: f4:c8:01:c4:ec:37:5b:29:46:11:e7:d5:66:c3:9c:10:7a:dc: 0a:9b:f5:98:3b:89:2f:7a:99:d0:81:11:12:07:0d:75:cc:77: 49:a2:cf:fd:ed:cf:27:29:af:f9:23:43:fb:09:14:7b:e5:32: 87:fb:b9:81:86:b1:23:8d:55:ce:f5:45:06:13:37:88:9c:70: 7b:e1:6a:ea:26:ac:1a:19:c3:51:8a:85:2d:d8:0e:a6:0e:a1: 26:2c:09:6a:f2:bf:be:60:82:ca:70:a5:44:3a:2f:31:0c:49: 6b:7f:54:a7:28:f8:96:e0:08:37:1b:84:be:8f:ba:51:b1:25: 08:06:4f:35:ca:c4:7c:38:09:a6:06:ac:eb:7e:7b:f5:36:ff: 48:d9:87:76:30:5f:ed:56:2c:cd:af:da:5f:aa:5d:f2:b7:af: a3:9a:15:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUwNTMwMTgxMTE0WhcNMjUwNjA2MTgxMTE0WjAYMRYwFAYD VQQDEw02ODM5ZjRjMi1iZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0suk/HaMKvYQw2ICRH3QRuWZnK6M2Nkk20hBWjAaXi4UY9BKXjngIrVnpzDz 1+wtNOs5Q1jhyxR531VClU1N+v/ROeMpZB8XFyi9cw3iwzLQFjqXGiw0x9paEtsX E3F7+04utwJ7w/wvtdxpjpyzdhWo37qz1z2BP/HXzJcsGU6oTvmp/DW3Z/Qj1XxF fnim1CAX8grcXUunxaKjH0i9otAPedIf6bLyFVM8y/K27NAVRm0gRGgbXUOtHYLk S1mMWgWWeSdXE8YZ2beUhN57ZatsIUfMqpiGe6PoizbRuS/oWVGrOhTXKBe62Ro3 MMJ1KM2rjoVTwubtUSCGRaAVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrp1PbF EdEzyYaQn0aSxMnujEH6MB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNEMS80RjYwRUI5QUQ0OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpL Y29ENlh5OERNOXphdndQLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4lPjgPLlf4zt7SaZ9AfXcoeKnPeoRKSg2zWADkibWljVUCrp8eASK zJbJvcz3yRoOoNcTnampEl6DuQgbMltSH3/ZhGE0cbMIu8YkPhQ2iAGT10NMAo5k u8b0yAHE7DdbKUYR59Vmw5wQetwKm/WYO4kvepnQgRESBw11zHdJos/97c8nKa/5 I0P7CRR75TKH+7mBhrEjjVXO9UUGEzeInHB74WrqJqwaGcNRioUt2A6mDqEmLAlq 8r++YILKcKVEOi8xDElrf1SnKPiW4Ag3G4S+j7pRsSUIBk81ysR8OAmmBqzrfnv1 Nv9I2Yd2MF/tVizNr9pfql3yt6+jmhXO -----END CERTIFICATE-----Generated at Sat May 31 17:28:58 2025 by rpki-client