$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft File: JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft (raw, json) Hash identifier: HN2Uwujql/sbt3Sj0UZW4nH1GRS5pbxJ1/x+NF61gLw= Subject key identifier: 97:3A:AA:C0:A5:94:7D:32:65:09:17:44:14:89:42:32:1C:03:1D:F2 Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 Certificate issuer: /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft Manifest number: 1246 Signing time: Sat 31 May 2025 19:48:28 +0000 Manifest this update: Sat 31 May 2025 19:48:28 +0000 Manifest next update: Sat 07 Jun 2025 19:48:28 +0000 Files and hashes: 1: JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl (hash: PiGlaADuDJLNQMV6JuW+QY5pgocanYqbcyVzPO/Cx0c=) 2: 5042B970E25B11EA9E988045C4F9AE02.roa (hash: E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3 Validity Not Before: May 31 19:48:28 2025 GMT Not After : Jun 7 19:48:28 2025 GMT Subject: CN=683b5d0c-5f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:db:da:f5:df:f0:7b:8b:37:6f:59:89:25:54: 5a:be:9e:8d:69:52:3d:2f:c8:8c:e4:b7:92:a3:89: a7:4d:64:bc:ae:be:0d:5e:4f:d6:71:f0:4e:9e:ec: cd:01:68:c5:4f:c6:e1:0e:d6:23:a2:e1:26:2c:6f: 78:a6:9f:3c:e4:41:46:65:99:bd:cd:48:f8:13:8c: 57:97:d4:1c:c6:bc:06:a3:58:30:0f:80:e6:da:b6: 74:69:8d:52:32:47:c2:c1:2d:a3:7f:ae:f2:d4:b1: ea:67:63:98:3f:ba:33:29:cf:8f:3c:e1:ae:73:84: 80:c9:1d:25:dc:f3:62:b1:01:81:fa:50:f1:7b:a7: db:64:b6:3f:5d:c1:e7:fe:a8:92:50:58:43:31:9b: c0:c8:db:42:29:c9:cb:f4:29:0a:64:4a:5d:e8:bc: fd:2b:f9:59:17:54:3e:f9:cb:38:3a:16:ba:c7:34: fe:b5:95:9d:c4:ce:3b:8e:0d:6b:84:ef:c3:12:72: b9:ca:6a:b3:86:3f:2d:9b:68:29:fc:6d:14:25:87: 7a:e9:aa:e4:e3:f5:b7:3f:31:b2:70:57:bc:0e:8b: ea:e5:ca:7d:53:c3:7e:45:80:ee:ac:cb:ec:69:30: 0c:fd:a7:14:e2:e3:51:74:b2:d0:50:80:72:ab:a4: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3A:AA:C0:A5:94:7D:32:65:09:17:44:14:89:42:32:1C:03:1D:F2 X509v3 Authority Key Identifier: keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:53:69:e0:d3:da:fc:a2:76:d1:c5:05:be:87:ee:0b:83:a9: 98:0e:4b:38:2c:b4:50:0e:ee:33:7e:06:05:b7:09:5c:75:e6: bd:2a:3c:ac:be:ae:70:24:e2:14:1b:49:35:3f:34:e5:cb:9d: 4a:33:61:0c:fd:b0:92:be:81:32:e9:81:86:e5:63:7a:b6:f4: 14:54:3a:59:a9:58:ac:a2:9b:e7:3f:92:09:49:1c:ab:a4:ef: f9:44:a8:bf:71:cd:66:dd:d7:72:c4:c2:4e:db:5b:09:e6:c8: 39:e6:83:66:bc:bf:88:7a:80:f5:c4:ab:c3:b1:8d:ec:40:71: 7d:4d:43:74:6a:e3:87:dc:47:cc:6f:9d:81:94:19:90:54:20: b5:6b:c8:17:b6:1b:d4:9f:80:32:9e:13:57:28:e6:0c:bd:7d: 88:37:d9:7b:1d:84:fa:fe:c4:0b:51:64:c5:86:ee:2f:bd:9a: 16:2b:46:ed:72:22:f2:e4:31:84:f9:09:98:b2:f2:3c:57:af: 6e:5f:1b:ef:23:3d:4a:12:35:ef:32:1a:a6:27:79:34:f2:7a: d4:04:0e:f9:87:42:7d:c9:48:eb:8a:b0:a9:78:e9:c3:e7:90: 76:d1:35:06:1b:e4:7e:0e:a4:8f:0c:13:a7:a3:88:00:7a:67: 09:41:e9:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKDI1MjFFREE0NkNENzBCODM5NzI2MDZEMzBEODgwRDcw MzQ5NUI4QjMwHhcNMjUwNTMxMTk0ODI4WhcNMjUwNjA3MTk0ODI4WjAYMRYwFAYD VQQDEw02ODNiNWQwYy01ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49va9d/we4s3b1mJJVRavp6NaVI9L8iM5LeSo4mnTWS8rr4NXk/WcfBOnuzN AWjFT8bhDtYjouEmLG94pp885EFGZZm9zUj4E4xXl9QcxrwGo1gwD4Dm2rZ0aY1S MkfCwS2jf67y1LHqZ2OYP7ozKc+PPOGuc4SAyR0l3PNisQGB+lDxe6fbZLY/XcHn /qiSUFhDMZvAyNtCKcnL9CkKZEpd6Lz9K/lZF1Q++cs4Oha6xzT+tZWdxM47jg1r hO/DEnK5ymqzhj8tm2gp/G0UJYd66ark4/W3PzGycFe8Dovq5cp9U8N+RYDurMvs aTAM/acU4uNRdLLQUIByq6ShdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJc6qsCl lH0yZQkXRBSJQjIcAx3yMB8GA1UdIwQYMBaAFCUh7aRs1wuDlyYG0w2IDXA0lbiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0T1hKZ2JURFlnTmNEU1Z1 TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTSHRwR3pYQzRPWEpnYlREWWdOY0RTVnVMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi9KU0h0cEd6WEM0 T1hKZ2JURFlnTmNEU1Z1TE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhU2ng09r8onbRxQW+h+4Lg6mYDks4LLRQDu4zfgYFtwlcdea9Kjys vq5wJOIUG0k1PzTly51KM2EM/bCSvoEy6YGG5WN6tvQUVDpZqVisopvnP5IJSRyr pO/5RKi/cc1m3ddyxMJO21sJ5sg55oNmvL+IeoD1xKvDsY3sQHF9TUN0auOH3EfM b52BlBmQVCC1a8gXthvUn4AynhNXKOYMvX2IN9l7HYT6/sQLUWTFhu4vvZoWK0bt ciLy5DGE+QmYsvI8V69uXxvvIz1KEjXvMhqmJ3k08nrUBA75h0J9yUjrirCpeOnD 55B20TUGG+R+DqSPDBOno4gAemcJQemT -----END CERTIFICATE-----Generated at Mon Jun 2 05:45:19 2025 by rpki-client