$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft File: JLEMMdaR-EX86uP-MjG-VgArrGo.mft (raw, json) Hash identifier: W29667Qrs/L1uKBd7z0GlDi03d9OxV1kqqW8waQpKYY= Subject key identifier: A1:FA:77:18:4F:C7:E2:14:A3:E7:C3:9C:4D:BE:F5:3C:60:0E:96:B1 Authority key identifier: 24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A Certificate issuer: /CN=A919C7B4/serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft Manifest number: 9C Signing time: Sat 31 May 2025 05:52:25 +0000 Manifest this update: Sat 31 May 2025 05:52:25 +0000 Manifest next update: Sat 07 Jun 2025 05:52:25 +0000 Files and hashes: 1: JLEMMdaR-EX86uP-MjG-VgArrGo.crl (hash: UR5RBOkcXWmpkd7ULPA1LkTmQAcrqinVgMzsexegWA8=) 2: 8955AA3A55F511EF986BFA6AC4F9AE02.roa (hash: gK7rFMTbH3ZAUQSAvd96n0DjbHKwNrJcH/9NErP3rzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B4, serialNumber=24B10C31D691F845FCEAE3FE3231BE56002BAC6A Validity Not Before: May 31 05:52:25 2025 GMT Not After : Jun 7 05:52:25 2025 GMT Subject: CN=683a9919-344d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:0a:60:c1:8d:32:66:68:af:1b:32:1c:ce: 3b:0b:56:8a:8a:7f:3e:04:8b:86:dd:fe:b6:c9:e4: e5:ea:77:6a:d2:49:13:90:2e:e3:19:a1:58:b8:46: 60:90:86:81:19:ee:70:98:a9:3b:cc:a0:32:db:91: 06:c9:2b:fa:84:0e:34:7d:bc:73:0a:c4:61:ef:03: ae:59:6d:3b:49:04:77:11:93:11:be:68:a3:df:ca: 98:1c:f8:c3:cb:54:c8:e1:f0:b3:2b:cc:e8:4c:5e: 70:50:28:31:dd:79:7b:ab:14:6f:26:e3:6a:44:55: c7:ad:8d:a1:ea:49:05:64:02:09:33:48:bd:d2:d2: 88:a4:c1:5c:04:ab:b4:97:65:9a:ed:80:f8:6a:ff: 3f:89:51:74:1a:54:42:20:df:49:d2:ae:48:e5:a6: 07:99:85:f2:36:34:49:b5:3c:d3:35:02:8a:b3:e3: 4c:70:1e:aa:7e:cb:52:62:60:7c:ee:57:1d:23:1e: 34:5d:13:fa:85:ca:c9:d0:fc:46:e5:e8:f7:e4:0c: fd:f6:65:5e:4f:d9:c8:73:51:52:f2:0f:33:39:2b: 84:e6:dc:1c:20:55:d5:e2:15:a1:e5:ce:3f:63:e2: 52:bb:5e:a4:9e:a0:ae:70:30:75:74:3c:29:33:7d: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FA:77:18:4F:C7:E2:14:A3:E7:C3:9C:4D:BE:F5:3C:60:0E:96:B1 X509v3 Authority Key Identifier: keyid:24:B1:0C:31:D6:91:F8:45:FC:EA:E3:FE:32:31:BE:56:00:2B:AC:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLEMMdaR-EX86uP-MjG-VgArrGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B4/1F320CFC55F011EF99EBD820C4F9AE02/JLEMMdaR-EX86uP-MjG-VgArrGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:47:a1:99:b4:a0:fe:b2:66:7b:e6:2a:3c:2f:65:c4:b9:05: df:ae:ec:f8:1a:5c:d7:45:13:c8:69:16:a0:c7:d9:3e:b0:19: 4b:b9:3d:66:38:8a:54:7a:d5:8c:31:ff:ed:14:2a:df:3e:33: 9c:13:1d:9a:9b:15:d4:ea:64:47:6c:c8:16:3a:eb:8d:59:a2: 8f:aa:c2:ab:40:15:c3:a0:cf:2c:19:a7:02:93:ff:3c:d6:50: 6e:0d:5e:af:d5:b0:09:cb:95:62:aa:d3:84:0e:2d:3c:f8:ce: 72:12:b0:c7:09:19:7a:f9:7c:42:51:fe:d8:b4:f2:d2:2b:10: 16:ab:83:f9:69:5f:5c:bb:59:d1:9d:18:d2:53:09:ac:bd:4c: 0d:74:28:c1:e2:4a:51:47:1c:10:74:01:db:2d:b4:26:52:b8: b0:d5:6b:f0:44:ea:4b:a9:26:9e:1c:11:72:0f:d1:06:d0:ac: 78:b4:73:42:95:1e:d2:aa:39:05:0a:be:81:04:8d:b5:c1:ff: 68:d8:49:ae:c7:83:a6:54:42:d4:50:1b:24:9e:10:45:04:82: 35:7d:22:fd:26:43:ce:1d:de:03:90:a8:26:55:3f:50:03:47: 71:dd:4d:12:95:82:f7:1f:1a:04:e2:9b:3c:9a:8c:bb:ab:eb: 72:9c:13:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjQxMTAvBgNVBAUTKDI0QjEwQzMxRDY5MUY4NDVGQ0VBRTNGRTMyMzFCRTU2 MDAyQkFDNkEwHhcNMjUwNTMxMDU1MjI1WhcNMjUwNjA3MDU1MjI1WjAYMRYwFAYD VQQDEw02ODNhOTkxOS0zNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFAKYMGNMmZorxsyHM47C1aKin8+BIuG3f62yeTl6ndq0kkTkC7jGaFYuEZg kIaBGe5wmKk7zKAy25EGySv6hA40fbxzCsRh7wOuWW07SQR3EZMRvmij38qYHPjD y1TI4fCzK8zoTF5wUCgx3Xl7qxRvJuNqRFXHrY2h6kkFZAIJM0i90tKIpMFcBKu0 l2Wa7YD4av8/iVF0GlRCIN9J0q5I5aYHmYXyNjRJtTzTNQKKs+NMcB6qfstSYmB8 7lcdIx40XRP6hcrJ0PxG5ej35Az99mVeT9nIc1FS8g8zOSuE5twcIFXV4hWh5c4/ Y+JSu16knqCucDB1dDwpM33IrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH6dxhP x+IUo+fDnE2+9TxgDpaxMB8GA1UdIwQYMBaAFCSxDDHWkfhF/Orj/jIxvlYAK6xq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCNC8xRjMyMENGQzU1 RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1FWDg2dVAtTWpHLVZnQXJy R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pMRU1NZGFSLUVYODZ1UC1NakctVmdBcnJHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCNC8xRjMyMENGQzU1RjAxMUVGOTlFQkQ4MjBDNEY5QUUwMi9KTEVNTWRhUi1F WDg2dVAtTWpHLVZnQXJyR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgR6GZtKD+smZ75io8L2XEuQXfruz4GlzXRRPIaRagx9k+sBlLuT1m OIpUetWMMf/tFCrfPjOcEx2amxXU6mRHbMgWOuuNWaKPqsKrQBXDoM8sGacCk/88 1lBuDV6v1bAJy5ViqtOEDi08+M5yErDHCRl6+XxCUf7YtPLSKxAWq4P5aV9cu1nR nRjSUwmsvUwNdCjB4kpRRxwQdAHbLbQmUriw1WvwROpLqSaeHBFyD9EG0Kx4tHNC lR7SqjkFCr6BBI21wf9o2Emux4OmVELUUBsknhBFBII1fSL9JkPOHd4DkKgmVT9Q A0dx3U0SlYL3HxoE4ps8moy7q+tynBMv -----END CERTIFICATE-----Generated at Sat May 31 15:23:09 2025 by rpki-client