$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft File: JWCLHD_M09zOv5lLkyXzou_nzO8.mft (raw, json) Hash identifier: cuWTmRWGiHldPezu0S9rBzyHpnDQdRszp3CDdkdW+BU= Subject key identifier: A4:4F:DC:34:8E:A4:86:35:DB:EA:74:9E:BB:75:00:15:4B:31:FB:13 Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft Manifest number: 01D4 Signing time: Sat 31 May 2025 02:33:43 +0000 Manifest this update: Sat 31 May 2025 02:33:42 +0000 Manifest next update: Sat 07 Jun 2025 02:33:42 +0000 Files and hashes: 1: JWCLHD_M09zOv5lLkyXzou_nzO8.crl (hash: FdI4fPkALLpPHM7w64SI+dlYjQ6Kv1rIWKr0YAjYLdw=) 2: CC70CB68724B11EDA156B97BC4F9AE02.roa (hash: HPAweJ5AgvKWJyiKKcipqvvFPZGOjwLjKkEzF7wcgEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: May 31 02:33:42 2025 GMT Not After : Jun 7 02:33:42 2025 GMT Subject: CN=683a6a87-825a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:c5:ee:86:d5:65:92:94:45:06:b0:89:81: d1:ab:34:76:d5:b4:f4:c8:fb:51:04:e1:cb:84:11: 57:1c:d4:68:e1:9e:0f:bf:75:4a:8f:17:2e:a3:dc: 02:7e:aa:42:01:f6:ff:6e:41:de:84:52:cf:48:84: 11:d2:d3:eb:7b:0c:aa:03:ac:01:64:75:53:60:0e: f7:7d:7a:9b:08:60:30:f9:76:a9:72:78:58:47:67: e9:71:35:d6:57:f5:10:5c:86:5f:70:44:f1:b1:ee: cc:b5:ec:34:1f:75:f7:7c:dd:72:d0:94:31:a2:af: 0c:d0:92:e0:56:0c:05:4b:a0:0a:ac:09:7a:9a:72: 3a:c2:ba:1a:aa:f2:db:a2:b4:ab:b7:26:0c:8f:a4: 8c:7c:d9:e7:5d:e1:ee:cf:a4:bb:4d:5d:08:f3:ea: 68:34:cf:7a:a0:3d:48:66:5c:f7:ec:35:dc:5e:21: a4:87:5a:a2:84:4c:3b:c2:0d:d1:72:e1:44:5f:0a: 9f:4f:65:13:4a:af:b8:df:b7:51:85:a7:97:30:33: 27:a8:aa:d0:c7:66:3a:11:df:13:48:73:51:81:d2: 58:b2:7a:b5:c0:67:31:91:e5:49:92:3d:4c:6d:5e: 12:94:42:ad:e2:91:5d:30:36:c5:b7:b2:12:1e:84: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4F:DC:34:8E:A4:86:35:DB:EA:74:9E:BB:75:00:15:4B:31:FB:13 X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ff:bc:23:d8:56:b3:ca:ab:b1:5a:92:ed:a4:1b:c0:f9:2b: 7b:56:ea:dd:8f:d3:f3:0d:5d:0b:4b:fc:e6:cb:e4:6c:20:6f: cd:9a:cf:e0:b2:9b:f6:f9:32:2f:3a:2b:11:2a:dc:c9:ed:e5: 28:5d:b9:fb:14:53:81:2b:e7:10:59:c7:e2:de:b5:53:2e:97: 3c:ee:68:c6:10:7d:e2:38:18:cd:2e:f4:0a:ee:93:86:8a:c5: 6f:0e:72:e3:14:83:8c:b2:a8:c4:b7:0f:ce:ff:dc:b7:12:cb: 23:fa:24:13:57:90:e5:85:ad:1b:bd:39:a2:5a:a6:d7:64:68: c9:9c:75:e5:45:90:81:9e:36:94:ae:f3:72:d8:94:4e:08:ba: 74:18:d7:23:66:6a:cb:9a:91:25:3a:5e:bd:fd:51:15:6e:b2: 72:ab:bc:40:f1:e7:dc:a6:f2:b3:71:5b:50:1d:f8:96:88:6d: c8:e0:d0:4f:81:12:70:25:82:5e:d7:5a:b3:4f:d3:d9:0e:67: 18:7f:ec:f5:15:b3:13:b1:41:78:14:88:95:f5:0d:83:c3:5e: 99:83:9d:97:65:f1:db:9b:33:0e:1c:6d:40:d2:90:2c:83:90: e1:9d:28:4e:07:fa:1d:d5:2c:1b:5c:6f:d8:6b:6a:07:c8:50: ec:2d:bf:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUwNTMxMDIzMzQyWhcNMjUwNjA3MDIzMzQyWjAYMRYwFAYD VQQDEw02ODNhNmE4Ny04MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/LF7obVZZKURQawiYHRqzR21bT0yPtRBOHLhBFXHNRo4Z4Pv3VKjxcuo9wC fqpCAfb/bkHehFLPSIQR0tPrewyqA6wBZHVTYA73fXqbCGAw+XapcnhYR2fpcTXW V/UQXIZfcETxse7Mtew0H3X3fN1y0JQxoq8M0JLgVgwFS6AKrAl6mnI6wroaqvLb orSrtyYMj6SMfNnnXeHuz6S7TV0I8+poNM96oD1IZlz37DXcXiGkh1qihEw7wg3R cuFEXwqfT2UTSq+437dRhaeXMDMnqKrQx2Y6Ed8TSHNRgdJYsnq1wGcxkeVJkj1M bV4SlEKt4pFdMDbFt7ISHoQwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRP3DSO pIY12+p0nrt1ABVLMfsTMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ZGNS8zRkU1Q0E4RTcyNDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5 ek92NWxMa3lYem91X256TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD/7wj2FazyquxWpLtpBvA+St7Vurdj9PzDV0LS/zmy+RsIG/Nms/g spv2+TIvOisRKtzJ7eUoXbn7FFOBK+cQWcfi3rVTLpc87mjGEH3iOBjNLvQK7pOG isVvDnLjFIOMsqjEtw/O/9y3Essj+iQTV5Dlha0bvTmiWqbXZGjJnHXlRZCBnjaU rvNy2JROCLp0GNcjZmrLmpElOl69/VEVbrJyq7xA8efcpvKzcVtQHfiWiG3I4NBP gRJwJYJe11qzT9PZDmcYf+z1FbMTsUF4FIiV9Q2Dw16Zg52XZfHbmzMOHG1A0pAs g5DhnShOB/od1SwbXG/Ya2oHyFDsLb80 -----END CERTIFICATE-----Generated at Sat May 31 17:03:28 2025 by rpki-client