$ rpki-client -vvf rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft File: JL-jY1L4TxqPpGnesOg26ANa5GY.mft (raw, json) Hash identifier: ir8Juc5H0kr7al2Ov/iD5VMUn5/CG7yPhMXDGUDd1Hk= Subject key identifier: EA:12:5F:40:CD:DB:05:BC:0D:51:CC:D1:A9:21:5C:EA:5E:D9:4F:7B Authority key identifier: 24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 Certificate issuer: /CN=A915D3E8/serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft Manifest number: 0827 Signing time: Fri 30 May 2025 21:03:21 +0000 Manifest this update: Fri 30 May 2025 21:03:21 +0000 Manifest next update: Fri 06 Jun 2025 21:03:21 +0000 Files and hashes: 1: JL-jY1L4TxqPpGnesOg26ANa5GY.crl (hash: XK1MxT9gsL0U0iYz96tceE18BJX4nUOOF9CQ7CBc12A=) 2: 72603CD6D28811EAB7D79A47C4F9AE02.roa (hash: 6Bc7j8sUdc3lR92uuO8CWG9pkmoXFTsfXQekCJg3xcI=) 3: 71DBA2E6D28811EAB7D79A47C4F9AE02.roa (hash: t7bI+leFxXguniwnyNd214UolzyAinJGbujLaZqsEZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D3E8, serialNumber=24BFA36352F84F1A8FA469DEB0E836E8035AE466 Validity Not Before: May 30 21:03:21 2025 GMT Not After : Jun 6 21:03:21 2025 GMT Subject: CN=683a1d19-fc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:b4:1a:c0:1c:7b:08:4a:44:2e:0e:a2:15: f4:e0:b2:18:c7:ea:93:c6:08:2b:ae:9e:54:83:85: b5:5b:ce:93:10:3c:a3:e7:b8:16:b4:0f:0f:ad:ba: 8a:25:0b:94:57:cb:4a:ac:6f:cb:f9:47:cc:82:47: 49:ef:57:07:99:1e:09:dd:4f:71:6a:3b:6b:de:fd: 84:28:2b:c7:78:d0:9b:de:9c:ac:ac:51:de:22:20: 9c:4b:3e:1b:71:da:09:45:fd:8f:d9:04:dc:e4:3d: 88:0c:5c:0a:f8:f0:bb:e7:0f:16:12:02:34:f3:e0: 5c:83:72:c7:bb:9a:28:69:67:ab:ce:63:35:43:27: c9:ee:cc:12:1e:2b:52:97:ad:ef:c4:12:a9:05:aa: cc:c1:7f:9e:e8:b6:8e:fe:5b:63:6b:b1:d3:72:af: 37:d0:b9:a4:7e:9a:50:ec:dc:f7:a0:12:9e:ca:8c: 1e:3c:3f:e4:8b:18:c9:6b:55:9a:13:33:39:aa:f2: 0f:39:a2:98:94:15:52:e3:8b:54:38:4d:b8:8a:76: d2:64:9c:19:46:2b:58:d1:c7:88:17:b0:71:2e:be: b5:87:5a:88:60:c9:e0:32:fe:03:1a:a1:b7:89:5f: fd:35:ac:5a:df:00:cf:98:0c:68:76:d9:ca:6d:5f: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:12:5F:40:CD:DB:05:BC:0D:51:CC:D1:A9:21:5C:EA:5E:D9:4F:7B X509v3 Authority Key Identifier: keyid:24:BF:A3:63:52:F8:4F:1A:8F:A4:69:DE:B0:E8:36:E8:03:5A:E4:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JL-jY1L4TxqPpGnesOg26ANa5GY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D3E8/3F1F0DDAD28711EA9E73E646C4F9AE02/JL-jY1L4TxqPpGnesOg26ANa5GY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:26:e1:6d:c5:3a:1d:22:c4:fc:46:9e:2d:74:c7:b9:af:13: 8c:77:f9:cc:c1:8d:4b:90:10:80:33:03:60:1d:0a:ed:43:f7: 54:f1:b4:e0:2b:28:4e:c1:3d:97:da:6d:26:0a:3d:d0:4a:4a: 48:b6:39:c5:23:99:eb:6f:0b:db:a7:fb:bb:52:3c:32:10:33: 91:a8:aa:ce:a9:9c:12:37:5f:3a:82:c2:4e:c5:01:f3:71:98: f0:34:18:9c:ed:ea:d1:57:dd:bf:66:e0:d7:ad:2c:ce:92:c5: 0e:cd:68:7c:1d:c9:52:d8:65:d4:69:0f:a3:86:94:fc:09:fc: e9:fd:33:98:f0:7b:1f:28:fc:b4:cb:dd:be:d4:24:37:ee:cb: 72:ff:5e:c8:02:07:2a:07:73:d4:63:79:ce:1c:f5:24:a6:cf: 8a:aa:8d:04:ce:14:b2:34:93:b1:04:4a:f2:58:5f:41:76:7f: e2:4a:da:7d:18:52:97:f5:cd:b0:b0:19:cf:11:ab:71:a6:0c: 31:a9:97:67:9a:1e:00:7f:9d:b3:6a:ae:96:f6:52:07:35:e6: 7e:c6:a4:b6:63:02:0e:94:75:15:e2:90:19:45:e9:1f:f6:bc: 94:a8:66:8b:47:96:96:1c:80:19:5b:27:98:ce:a6:a4:f9:c9: 00:29:7f:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQzRTgxMTAvBgNVBAUTKDI0QkZBMzYzNTJGODRGMUE4RkE0NjlERUIwRTgzNkU4 MDM1QUU0NjYwHhcNMjUwNTMwMjEwMzIxWhcNMjUwNjA2MjEwMzIxWjAYMRYwFAYD VQQDEw02ODNhMWQxOS1mYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNy0GsAcewhKRC4OohX04LIYx+qTxggrrp5Ug4W1W86TEDyj57gWtA8PrbqK JQuUV8tKrG/L+UfMgkdJ71cHmR4J3U9xajtr3v2EKCvHeNCb3pysrFHeIiCcSz4b cdoJRf2P2QTc5D2IDFwK+PC75w8WEgI08+Bcg3LHu5ooaWerzmM1QyfJ7swSHitS l63vxBKpBarMwX+e6LaO/ltja7HTcq830LmkfppQ7Nz3oBKeyowePD/kixjJa1Wa EzM5qvIPOaKYlBVS44tUOE24inbSZJwZRitY0ceIF7BxLr61h1qIYMngMv4DGqG3 iV/9Naxa3wDPmAxodtnKbV/8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoSX0DN 2wW8DVHM0akhXOpe2U97MB8GA1UdIwQYMBaAFCS/o2NS+E8aj6Rp3rDoNugDWuRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDNFOC8zRjFGMEREQUQy ODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4cVBwR25lc09nMjZBTmE1 R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMLWpZMUw0VHhxUHBHbmVzT2cyNkFOYTVHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDNFOC8zRjFGMEREQUQyODcxMUVBOUU3M0U2NDZDNEY5QUUwMi9KTC1qWTFMNFR4 cVBwR25lc09nMjZBTmE1R1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9JuFtxTodIsT8Rp4tdMe5rxOMd/nMwY1LkBCAMwNgHQrtQ/dU8bTg KyhOwT2X2m0mCj3QSkpItjnFI5nrbwvbp/u7UjwyEDORqKrOqZwSN186gsJOxQHz cZjwNBic7erRV92/ZuDXrSzOksUOzWh8HclS2GXUaQ+jhpT8Cfzp/TOY8HsfKPy0 y92+1CQ37sty/17IAgcqB3PUY3nOHPUkps+Kqo0EzhSyNJOxBEryWF9Bdn/iStp9 GFKX9c2wsBnPEatxpgwxqZdnmh4Af52zaq6W9lIHNeZ+xqS2YwIOlHUV4pAZRekf 9ryUqGaLR5aWHIAZWyeYzqak+ckAKX9r -----END CERTIFICATE-----Generated at Sat May 31 17:11:30 2025 by rpki-client