$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft File: JsPnE2IHY5oG3HCDCOARdHuiccs.mft (raw, json) Hash identifier: v1i9k23YMnOv4BmiNjTlyFWBvNez3vZGuUBNdklP11E= Subject key identifier: 35:DC:23:81:00:6A:00:70:D8:7F:5A:20:AD:B3:61:9F:9E:AA:B6:0E Authority key identifier: 26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB Certificate issuer: /CN=A919DCD2/serialNumber=26C3E7136207639A06DC708308E011747BA271CB Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft Manifest number: 0106 Signing time: Sat 31 May 2025 04:37:39 +0000 Manifest this update: Sat 31 May 2025 04:37:38 +0000 Manifest next update: Sat 07 Jun 2025 04:37:38 +0000 Files and hashes: 1: JsPnE2IHY5oG3HCDCOARdHuiccs.crl (hash: hUDAapRWgP+xeWzGf/kN0BLl7aeW6xP6VcfEbw5IQ5I=) 2: 40C4FB74AB3A11EEA3CBE616C4F9AE02.roa (hash: Xw1yVSEQ67bcf1cGeyG5KK7DPit3J8QoWTCghERvhXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DCD2, serialNumber=26C3E7136207639A06DC708308E011747BA271CB Validity Not Before: May 31 04:37:38 2025 GMT Not After : Jun 7 04:37:38 2025 GMT Subject: CN=683a8793-5d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:b0:eb:4f:f0:b7:1a:0c:d3:45:93:d0:b9: 31:6c:dc:3d:87:fc:54:91:1e:5c:ff:98:cf:ba:06: f3:40:ce:a3:6c:3b:cd:44:9b:2c:df:7f:3a:7b:c6: f1:ff:da:95:12:52:ee:e8:e1:d7:a9:ec:ef:d5:52: 77:a8:cc:ae:90:c6:01:60:aa:19:a4:aa:7b:b2:fa: 8a:0f:fe:ba:d5:fe:80:9c:18:c6:50:7c:9e:22:2e: 9c:7a:18:10:62:b6:7d:1a:5c:f3:f1:4e:99:1c:53: 02:39:6f:89:c8:d3:94:25:4a:9c:8e:85:2a:79:cf: 10:98:06:8b:78:57:3f:18:99:51:44:44:2d:de:81: 63:86:75:64:2c:89:f3:26:2f:a3:98:43:c7:da:d9: 70:dd:e2:44:55:69:3e:7d:d9:e6:92:44:98:8c:9d: 83:0f:7b:5b:b4:42:05:47:0f:29:fd:4f:1b:76:7d: d7:52:ff:9d:67:3b:69:ec:e5:c0:5d:8f:43:9c:eb: c7:c6:4f:0f:14:ee:8c:bb:b2:54:0f:1e:12:0f:c2: 8d:84:d3:33:80:36:b2:8a:ca:75:22:1d:2b:14:5e: 94:78:8f:9d:f6:b4:2a:a3:4e:b0:bb:df:a4:9d:56: c4:4d:73:ad:aa:5e:29:d4:00:7d:a9:8a:4a:e1:4a: 8a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DC:23:81:00:6A:00:70:D8:7F:5A:20:AD:B3:61:9F:9E:AA:B6:0E X509v3 Authority Key Identifier: keyid:26:C3:E7:13:62:07:63:9A:06:DC:70:83:08:E0:11:74:7B:A2:71:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsPnE2IHY5oG3HCDCOARdHuiccs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCD2/EE51E5DCAB3911EEA1AB2316C4F9AE02/JsPnE2IHY5oG3HCDCOARdHuiccs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e4:11:a9:bc:11:e4:f2:f8:ba:04:ef:ec:30:74:a3:cd:55: 32:22:06:63:3d:e4:57:09:06:08:49:3e:52:aa:91:35:e5:86: b5:1c:93:b5:cf:29:28:1d:c5:ed:74:a8:25:82:5d:ae:2e:e1: 88:fe:0a:ff:e1:5d:da:b0:36:94:6a:b5:81:6a:34:21:29:3e: 7d:12:c5:d7:02:65:6b:05:a8:c9:98:90:2c:a0:60:d9:48:f9: 88:c9:86:05:ae:50:b9:bc:c7:15:ac:76:52:17:bd:b2:3a:39: a6:76:21:06:64:c7:d5:8b:8e:0e:41:44:be:79:8f:2f:b3:25: dd:63:25:c5:5e:15:64:d4:97:0b:9b:9f:b0:f8:55:c3:0d:b2: dc:34:e3:4c:8f:ab:a5:58:2c:f2:5f:20:00:81:f1:62:9e:c5: c1:94:b9:75:f8:1a:b6:d1:4f:27:9d:88:a4:87:5c:8e:86:65: 57:c2:80:e1:88:d7:a5:a2:f9:4c:5c:2f:92:5e:e0:7a:59:c1: 50:a9:bf:8b:75:1c:56:93:67:bc:6f:3e:e4:67:e0:d0:7c:2c: 28:40:af:53:0a:42:b7:a4:b8:0f:ee:ec:71:6d:66:49:85:d1: 06:ae:92:56:b4:9c:a6:e7:1f:32:e3:9e:0c:34:61:b2:ae:d2: 43:1d:c5:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDRDIxMTAvBgNVBAUTKDI2QzNFNzEzNjIwNzYzOUEwNkRDNzA4MzA4RTAxMTc0 N0JBMjcxQ0IwHhcNMjUwNTMxMDQzNzM4WhcNMjUwNjA3MDQzNzM4WjAYMRYwFAYD VQQDEw02ODNhODc5My01ZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPyw60/wtxoM00WT0LkxbNw9h/xUkR5c/5jPugbzQM6jbDvNRJss3386e8bx /9qVElLu6OHXqezv1VJ3qMyukMYBYKoZpKp7svqKD/661f6AnBjGUHyeIi6cehgQ YrZ9Glzz8U6ZHFMCOW+JyNOUJUqcjoUqec8QmAaLeFc/GJlRREQt3oFjhnVkLInz Ji+jmEPH2tlw3eJEVWk+fdnmkkSYjJ2DD3tbtEIFRw8p/U8bdn3XUv+dZztp7OXA XY9DnOvHxk8PFO6Mu7JUDx4SD8KNhNMzgDayisp1Ih0rFF6UeI+d9rQqo06wu9+k nVbETXOtql4p1AB9qYpK4UqK4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXcI4EA agBw2H9aIK2zYZ+eqrYOMB8GA1UdIwQYMBaAFCbD5xNiB2OaBtxwgwjgEXR7onHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RENEMi9FRTUxRTVEQ0FC MzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1b0czSENEQ09BUmRIdWlj Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzUG5FMklIWTVvRzNIQ0RDT0FSZEh1aWNjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RENEMi9FRTUxRTVEQ0FCMzkxMUVFQTFBQjIzMTZDNEY5QUUwMi9Kc1BuRTJJSFk1 b0czSENEQ09BUmRIdWljY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM5BGpvBHk8vi6BO/sMHSjzVUyIgZjPeRXCQYIST5SqpE15Ya1HJO1 zykoHcXtdKglgl2uLuGI/gr/4V3asDaUarWBajQhKT59EsXXAmVrBajJmJAsoGDZ SPmIyYYFrlC5vMcVrHZSF72yOjmmdiEGZMfVi44OQUS+eY8vsyXdYyXFXhVk1JcL m5+w+FXDDbLcNONMj6ulWCzyXyAAgfFinsXBlLl1+Bq20U8nnYikh1yOhmVXwoDh iNelovlMXC+SXuB6WcFQqb+LdRxWk2e8bz7kZ+DQfCwoQK9TCkK3pLgP7uxxbWZJ hdEGrpJWtJym5x8y454MNGGyrtJDHcXb -----END CERTIFICATE-----Generated at Sat May 31 14:35:10 2025 by rpki-client