$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: Rs9gH6gmVQgc0uaL1MTCQ4pEjlcfQIKdR+G/VLl+CJE= Subject key identifier: 4E:FA:39:A1:BA:B5:BF:33:25:4B:14:55:38:F3:60:5B:25:AB:EE:E7 Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 1F Signing time: Sat 31 May 2025 07:27:30 +0000 Manifest this update: Sat 31 May 2025 07:27:30 +0000 Manifest next update: Sat 07 Jun 2025 07:27:30 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: ZEp0Wn84SkcG+1BFQBkKCJ8Y3IK4GarUDgJViD3Oz/k=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: May 31 07:27:30 2025 GMT Not After : Jun 7 07:27:30 2025 GMT Subject: CN=683aaf62-09b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:ef:50:50:02:05:e1:97:bb:31:56:3c:3e: 0c:2d:bd:90:fd:cb:5b:b3:b3:25:30:2b:d6:79:2a: dc:a2:fe:3e:22:5f:58:08:21:cb:09:3a:bb:b1:9f: eb:fc:9e:62:b2:e0:54:f4:c0:9c:7e:9b:56:17:1b: 7f:c3:22:17:c3:a5:25:42:16:a1:69:ed:93:53:9b: 20:c1:c6:e3:ea:bc:da:07:e0:9d:f9:b5:87:27:38: 31:14:99:76:42:78:e9:87:b3:ae:3c:11:1c:80:bc: 98:12:ca:19:88:d2:32:3d:68:11:42:08:19:f7:06: 9d:ca:17:43:0d:03:74:fe:82:1a:25:af:6c:10:80: 07:7d:63:e6:57:5f:22:fd:db:e9:bf:7f:43:03:10: 23:dc:5b:d5:22:c1:21:ce:72:55:52:d3:0e:39:cf: f6:b7:2b:c3:01:5f:ad:b1:41:9e:5f:1f:d5:75:d6: f1:47:89:50:0b:02:29:16:3a:6d:65:92:51:93:3b: 79:92:35:c4:3d:83:00:5a:d8:13:ec:91:c3:90:25: 8b:76:d0:df:ac:70:93:10:f7:59:bb:b3:22:bc:5f: da:6a:43:40:7f:28:de:76:53:6a:1d:6e:82:48:b9: b4:e7:02:ae:a9:a1:9c:86:a5:a4:ca:cd:93:c7:29: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FA:39:A1:BA:B5:BF:33:25:4B:14:55:38:F3:60:5B:25:AB:EE:E7 X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:55:3c:ad:16:3b:d3:b9:42:b1:cb:9a:ac:db:59:4d:fa:f1: 13:cd:6a:d8:77:2c:98:8d:43:c6:77:d9:f8:29:b5:76:d5:59: 97:be:65:3e:60:f6:0f:78:15:cc:a1:d0:9a:2e:24:7d:5e:0e: bb:13:9b:41:ed:2e:f3:ad:b7:82:05:d3:65:17:50:80:93:95: c8:23:f2:9c:08:00:b9:6b:f8:34:2b:95:c6:00:64:a9:0c:44: 0c:e0:c4:97:44:c5:da:dd:82:fb:4b:e5:fc:f1:c9:91:45:c2: 6e:ba:5b:3d:63:29:90:3e:b7:bf:4f:82:be:a4:91:7f:ce:27: 70:5d:3d:de:ab:75:bf:a4:7b:25:24:0b:d2:57:a7:cf:18:97: 5f:96:bf:0f:71:a7:8c:8a:c4:22:68:ee:5f:a7:82:ec:6b:89: de:bd:1e:0c:82:20:66:fd:dc:a2:21:6d:c9:31:34:f8:9e:e5: 80:15:60:a6:6d:7e:26:5a:b2:a4:6b:35:12:0a:25:1a:be:c6: ea:05:f6:8a:81:53:a3:da:ef:3a:a7:8c:68:db:36:13:d7:c3: de:ed:4a:18:aa:75:bd:78:ba:f4:98:dd:9f:b8:a2:2e:4a:57: 3b:1c:1c:5c:4c:d0:a4:de:97:eb:32:5b:44:d3:b0:fb:37:14: 29:c3:ad:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTA1MzEwNzI3MzBaFw0yNTA2MDcwNzI3MzBaMBgxFjAUBgNV BAMTDTY4M2FhZjYyLTA5YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJhe9QUAIF4Ze7MVY8PgwtvZD9y1uzsyUwK9Z5Ktyi/j4iX1gIIcsJOruxn+v8 nmKy4FT0wJx+m1YXG3/DIhfDpSVCFqFp7ZNTmyDBxuPqvNoH4J35tYcnODEUmXZC eOmHs648ERyAvJgSyhmI0jI9aBFCCBn3Bp3KF0MNA3T+gholr2wQgAd9Y+ZXXyL9 2+m/f0MDECPcW9UiwSHOclVS0w45z/a3K8MBX62xQZ5fH9V11vFHiVALAikWOm1l klGTO3mSNcQ9gwBa2BPskcOQJYt20N+scJMQ91m7syK8X9pqQ0B/KN52U2odboJI ubTnAq6poZyGpaTKzZPHKVUrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTvo5obq1 vzMlSxRVOPNgWyWr7ucwHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlVPK0WO9O5QrHLmqzbWU368RPNath3LJiNQ8Z32fgptXbVWZe+ZT5g 9g94Fcyh0JouJH1eDrsTm0HtLvOtt4IF02UXUICTlcgj8pwIALlr+DQrlcYAZKkM RAzgxJdExdrdgvtL5fzxyZFFwm66Wz1jKZA+t79Pgr6kkX/OJ3BdPd6rdb+keyUk C9JXp88Yl1+Wvw9xp4yKxCJo7l+nguxrid69HgyCIGb93KIhbckxNPie5YAVYKZt fiZasqRrNRIKJRq+xuoF9oqBU6Pa7zqnjGjbNhPXw97tShiqdb14uvSY3Z+4oi5K VzscHFxM0KTel+syW0TTsPs3FCnDraE= -----END CERTIFICATE-----Generated at Sat May 31 15:55:06 2025 by rpki-client