$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft File: JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft (raw, json) Hash identifier: WIqJgiRLjPyKoU8SoyMKfw/uqEVsM3uUBuvuwyiPTLw= Subject key identifier: E5:A9:9C:BF:91:E9:03:9F:73:45:A9:41:2A:50:0E:96:3B:3A:7B:0B Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Certificate serial: 0DCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft Manifest number: 0DC8 Signing time: Thu 12 Jun 2025 17:46:51 +0000 Manifest this update: Thu 12 Jun 2025 17:46:51 +0000 Manifest next update: Thu 19 Jun 2025 17:46:51 +0000 Files and hashes: 1: JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl (hash: SDdZgX9wJdR2DTLENDXq8flPts6EF03LlYiHc04V48M=) 2: 2FD106D2B92711E99D48BA23C4F9AE02.roa (hash: yxTidIFVAK1Xt0kWWO33LdfZQBwy5DfkOK/lacH9eUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3534 (0xdce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965 Validity Not Before: Jun 12 17:46:51 2025 GMT Not After : Jun 19 17:46:51 2025 GMT Subject: CN=684b128b-ead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:52:a7:a8:5b:3f:ee:71:21:0d:7b:5a:95: fe:81:09:32:69:4d:32:aa:93:ec:03:e1:c6:90:7d: c1:60:e9:96:eb:db:4d:20:ac:6a:2b:d6:79:62:0e: 59:92:85:30:4d:21:70:61:3b:4f:45:a1:a6:3d:88: 67:53:0a:d2:3e:c2:f6:3e:68:cf:6e:c9:03:57:98: e3:d8:67:d9:bd:9e:8a:19:6b:ab:8c:5e:66:12:c9: 95:ca:af:9a:f7:04:f4:b6:fe:0f:1b:70:2f:13:ec: ff:d3:a6:eb:c0:e7:a2:61:90:5c:41:78:f0:52:f0: 04:6a:61:92:4b:d0:0e:29:74:2c:1c:ff:b6:22:bf: 85:a9:ab:60:74:7d:db:ba:2f:6e:b9:26:40:89:e3: 93:57:c7:c2:6d:25:8e:6c:be:ae:39:18:1e:46:71: bc:3d:80:96:7c:80:23:4e:07:6d:78:b4:6a:fa:22: 5c:25:48:78:5f:d5:19:d2:59:13:5e:a1:a2:23:21: 5b:c6:44:54:b7:3f:7f:8c:eb:ea:33:8e:cd:a6:a7: 6d:07:ff:91:08:42:e8:81:14:68:b9:14:3f:35:57: 5a:21:ac:e1:eb:bf:28:11:e8:c5:de:e1:c2:56:9f: 3d:cf:1b:cc:62:24:d4:29:3c:ad:ba:77:9a:67:d2: e1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:9C:BF:91:E9:03:9F:73:45:A9:41:2A:50:0E:96:3B:3A:7B:0B X509v3 Authority Key Identifier: keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f0:29:61:f0:1a:cf:76:52:67:89:a6:3e:31:62:42:4a:29: e0:5c:4b:a4:29:58:05:2f:61:94:82:03:07:7d:c3:b7:78:58: 8b:8f:ea:2a:37:08:78:68:0c:4a:eb:9d:be:cb:33:21:0a:b6: bb:b6:4f:fa:e8:7d:e0:c7:45:b3:9e:3b:94:e9:74:1d:87:5f: 85:e8:a8:7b:87:4b:cb:f8:3d:77:79:33:41:10:e4:0e:bd:37: 1f:9d:14:d4:90:cf:63:53:0a:45:1f:6b:9e:2d:5f:c0:a0:04: 77:d9:4c:e5:63:58:44:22:ab:2b:53:d4:4d:a2:b2:4e:ba:d1: 2b:6b:71:87:7a:b6:1f:d4:ec:6f:02:f2:99:a3:90:d1:b9:43: ac:f3:cf:83:75:53:3e:42:9a:df:93:3f:8b:7c:3a:34:0b:25: ba:e5:93:47:24:c0:96:07:4a:e8:21:b6:e2:31:d6:c1:36:f1: 2d:c7:4c:cc:a4:6d:14:18:f5:ce:62:d5:9e:9a:a2:4a:a8:c1: c9:ec:4d:44:d5:86:e2:fd:21:09:2a:49:b4:6b:7b:fe:41:20: c7:b5:ad:cf:dd:dc:c4:fa:4a:d8:8c:3e:0b:20:e2:2c:d7:45: a9:d3:b4:de:e6:18:84:1d:9c:fe:76:ed:a7:ba:1d:98:38:f9: c1:85:e4:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE5QjExMTAvBgNVBAUTKDI1MjNBQ0UxNkZFRkRFNjIzOUUyNjhDNEUwNDZCNkM4 QzVGNjE5NjUwHhcNMjUwNjEyMTc0NjUxWhcNMjUwNjE5MTc0NjUxWjAYMRYwFAYD VQQDEw02ODRiMTI4Yi1lYWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+1Sp6hbP+5xIQ17WpX+gQkyaU0yqpPsA+HGkH3BYOmW69tNIKxqK9Z5Yg5Z koUwTSFwYTtPRaGmPYhnUwrSPsL2PmjPbskDV5jj2GfZvZ6KGWurjF5mEsmVyq+a 9wT0tv4PG3AvE+z/06brwOeiYZBcQXjwUvAEamGSS9AOKXQsHP+2Ir+FqatgdH3b ui9uuSZAieOTV8fCbSWObL6uORgeRnG8PYCWfIAjTgdteLRq+iJcJUh4X9UZ0lkT XqGiIyFbxkRUtz9/jOvqM47NpqdtB/+RCELogRRouRQ/NVdaIazh678oEejF3uHC Vp89zxvMYiTUKTytuneaZ9Lh+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWpnL+R 6QOfc0WpQSpQDpY7OnsLMB8GA1UdIwQYMBaAFCUjrOFv795iOeJoxOBGtsjF9hll MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTlCMS81Q0FDRjZBOEI5 MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNtSTU0bWpFNEVhMnlNWDJH V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTT3M0V192M21JNTRtakU0RWEyeU1YMkdXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTlCMS81Q0FDRjZBOEI5MjYxMUU5OTc1Mjg5MjJDNEY5QUUwMi9KU09zNFdfdjNt STU0bWpFNEVhMnlNWDJHV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu8Clh8BrPdlJniaY+MWJCSingXEukKVgFL2GUggMHfcO3eFiLj+oq Nwh4aAxK652+yzMhCra7tk/66H3gx0WznjuU6XQdh1+F6Kh7h0vL+D13eTNBEOQO vTcfnRTUkM9jUwpFH2ueLV/AoAR32UzlY1hEIqsrU9RNorJOutEra3GHerYf1Oxv AvKZo5DRuUOs88+DdVM+Qprfkz+LfDo0CyW65ZNHJMCWB0roIbbiMdbBNvEtx0zM pG0UGPXOYtWemqJKqMHJ7E1E1Ybi/SEJKkm0a3v+QSDHta3P3dzE+krYjD4LIOIs 10Wp07Te5hiEHZz+du2nuh2YOPnBheRY -----END CERTIFICATE-----Generated at Fri Jun 13 02:53:04 2025 by rpki-client