$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft File: JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft (raw, json) Hash identifier: 8qqgYvtKcZQbw55D9wt0Dfg6eUn+IPADRMkovgiS/zI= Subject key identifier: 51:EF:5A:FF:D0:DB:23:EB:05:88:29:33:EE:C2:9E:14:BC:B9:F1:43 Authority key identifier: 25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 Certificate issuer: /CN=A91AF4CC/serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft Manifest number: 73 Signing time: Tue 03 Jun 2025 06:36:59 +0000 Manifest this update: Tue 03 Jun 2025 06:36:59 +0000 Manifest next update: Tue 10 Jun 2025 06:36:59 +0000 Files and hashes: 1: JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl (hash: ZK5pseduzGoDs9iwYTfasfN8m7hoRMXmbKGMUB7KcQQ=) 2: 34EEE440914911EFAD03F553C4F9AE02.roa (hash: RWa5lrlutTMngpTm0HkOapuE36iZOEv43n5poC2mt1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=252A5A58C2C2393682BBF2BBC4612341C11D8419 Validity Not Before: Jun 3 06:36:59 2025 GMT Not After : Jun 10 06:36:59 2025 GMT Subject: CN=683e980b-778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:fb:53:45:04:dd:91:75:3b:c1:82:43:11: 8b:96:f6:0b:6c:e5:a2:a4:6f:4a:28:53:a8:cb:b9: e9:81:c8:06:8a:09:e0:c7:da:83:67:88:d8:f6:21: c2:9e:d8:5d:48:c1:7b:89:ba:ce:60:9c:bb:b3:ad: b2:bb:82:66:80:af:4d:b8:54:fa:a3:70:79:68:cf: b4:d9:fa:4a:e4:43:a9:57:3c:0f:83:6a:42:71:ef: 66:b8:10:13:1a:c0:3c:57:c4:35:9f:dc:5b:17:64: e9:75:48:ab:4a:e0:37:06:79:e3:47:b5:a7:f6:a0: 2e:86:59:f9:9c:a5:20:c8:41:e6:a1:49:31:35:ca: 0a:9c:c9:97:2f:56:18:b0:5d:83:2d:ff:3f:a4:0b: 2e:ae:d8:a5:53:20:e7:a4:42:97:d1:3a:de:ee:b7: ff:9b:8e:45:93:61:59:01:d8:74:5d:53:fb:82:9c: d1:8a:59:3b:4d:45:9f:b5:1d:ec:b3:d5:3e:89:95: 1e:f9:54:48:59:cc:cf:ca:22:c1:ae:bc:db:1c:5a: 1f:0e:71:be:88:40:4a:7d:cd:6b:d1:2c:c1:5b:15: 7d:5c:58:29:8b:b9:66:21:3e:3a:91:03:dd:dc:f6: 3f:a3:05:82:bd:1a:46:a4:12:fc:af:7c:31:7e:7e: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EF:5A:FF:D0:DB:23:EB:05:88:29:33:EE:C2:9E:14:BC:B9:F1:43 X509v3 Authority Key Identifier: keyid:25:2A:5A:58:C2:C2:39:36:82:BB:F2:BB:C4:61:23:41:C1:1D:84:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSpaWMLCOTaCu_K7xGEjQcEdhBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/CC68E3DA914811EF87EADD52C4F9AE02/JSpaWMLCOTaCu_K7xGEjQcEdhBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e8:1b:72:7c:e2:e1:d4:b5:8a:ef:78:e1:ef:54:88:c6:9d: 76:eb:af:6e:51:82:e0:f3:4a:de:4f:6b:ac:6d:07:0f:88:75: 5c:4d:54:37:59:d0:07:3a:eb:cd:29:30:6a:06:b2:05:23:ee: e8:e5:c3:c0:a9:79:a8:c9:25:2d:f8:26:0a:b1:8a:e4:7a:4d: 13:4b:cf:6e:21:7c:e4:f2:ea:30:0b:de:b8:37:de:9d:03:7b: b4:7d:50:c9:37:c8:8b:3b:dc:74:a5:5c:25:3e:0b:cf:eb:2f: f9:f3:1c:54:65:16:2a:7f:b7:9b:4e:76:35:d6:ba:75:d2:5d: ca:62:f4:85:07:24:0d:78:97:e6:6f:50:fe:3e:82:df:00:ab: 21:b6:e8:58:a7:25:c6:55:43:b6:ed:cc:b4:d8:31:db:9d:c8: 6b:cc:b0:27:dd:3b:92:28:b0:90:f2:df:60:af:b9:2a:4f:ba: 3c:1e:c3:3b:26:bf:f5:7f:04:6f:4b:3c:90:98:b7:68:29:3b: 5e:c9:05:a6:17:03:5b:88:c3:92:ab:7b:f8:44:00:17:1a:03: be:e9:48:9e:42:dd:04:a5:ee:6e:5f:c5:57:a8:a9:04:7a:fe: 74:9d:1b:e0:04:55:d3:9e:c1:15:58:34:c6:c5:6d:bf:45:32: d0:16:a4:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjRDQzExMC8GA1UEBRMoMjUyQTVBNThDMkMyMzkzNjgyQkJGMkJCQzQ2MTIzNDFD MTFEODQxOTAeFw0yNTA2MDMwNjM2NTlaFw0yNTA2MTAwNjM2NTlaMBgxFjAUBgNV BAMTDTY4M2U5ODBiLTc3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA6PtTRQTdkXU7wYJDEYuW9gts5aKkb0ooU6jLuemByAaKCeDH2oNniNj2IcKe 2F1IwXuJus5gnLuzrbK7gmaAr024VPqjcHloz7TZ+krkQ6lXPA+DakJx72a4EBMa wDxXxDWf3FsXZOl1SKtK4DcGeeNHtaf2oC6GWfmcpSDIQeahSTE1ygqcyZcvVhiw XYMt/z+kCy6u2KVTIOekQpfROt7ut/+bjkWTYVkB2HRdU/uCnNGKWTtNRZ+1Heyz 1T6JlR75VEhZzM/KIsGuvNscWh8Ocb6IQEp9zWvRLMFbFX1cWCmLuWYhPjqRA93c 9j+jBYK9GkakEvyvfDF+ftHbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUe9a/9Db I+sFiCkz7sKeFLy58UMwHwYDVR0jBBgwFoAUJSpaWMLCOTaCu/K7xGEjQcEdhBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNENDL0NDNjhFM0RBOTE0 ODExRUY4N0VBREQ1MkM0RjlBRTAyL0pTcGFXTUxDT1RhQ3VfSzd4R0VqUWNFZGhC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSlNwYVdNTENPVGFDdV9LN3hHRWpRY0VkaEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NENDL0NDNjhFM0RBOTE0ODExRUY4N0VBREQ1MkM0RjlBRTAyL0pTcGFXTUxDT1Rh Q3VfSzd4R0VqUWNFZGhCay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEroG3J84uHUtYrveOHvVIjGnXbrr25RguDzSt5Pa6xtBw+IdVxNVDdZ 0Ac6680pMGoGsgUj7ujlw8CpeajJJS34JgqxiuR6TRNLz24hfOTy6jAL3rg33p0D e7R9UMk3yIs73HSlXCU+C8/rL/nzHFRlFip/t5tOdjXWunXSXcpi9IUHJA14l+Zv UP4+gt8AqyG26FinJcZVQ7btzLTYMdudyGvMsCfdO5IosJDy32CvuSpPujwewzsm v/V/BG9LPJCYt2gpO17JBaYXA1uIw5Kre/hEABcaA77pSJ5C3QSl7m5fxVeoqQR6 /nSdG+AEVdOewRVYNMbFbb9FMtAWpEI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:27 2025 by rpki-client