$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft File: JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft (raw, json) Hash identifier: YerP1krooJGJF8vpj/zp2x4lS1wNLb0mW9affvue7Nc= Subject key identifier: 75:15:0E:0C:69:5E:9B:98:7A:9E:CD:24:65:90:8D:59:09:7B:51:65 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:28:36 +0000 Manifest this update: Tue 13 May 2025 05:28:36 +0000 Manifest next update: Tue 20 May 2025 05:28:36 +0000 Files and hashes: 1: JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl (hash: BHoFcKAyRwYFz67Dzs9p7hOwsxTUSF+Gen6Gibl0nRM=) 2: C470564044BD11EFA8F7157FC4F9AE02.roa (hash: UAQ2ui+thAeuq+PxdrfSFnEc0TOcjvunQ9qpCX61XwU=) 3: 08D9C8604ABE11EF8708395BC4F9AE02.roa (hash: MJuZKMR1FAapsiCyrMHIkWD3kY2RmS87dJHgOPkpAew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: May 13 05:28:36 2025 GMT Not After : May 20 05:28:36 2025 GMT Subject: CN=6822d884-963e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:91:13:a0:58:e5:14:9f:b7:50:15:e8:3f: 0e:6d:83:f2:60:24:25:3b:e6:10:82:e9:02:dd:7d: dc:0a:55:01:db:a5:90:23:d6:92:50:88:3e:92:ed: 74:09:57:3f:53:b7:5d:d5:34:56:37:1b:37:1d:50: 16:c9:4d:e8:97:30:09:02:c2:17:d0:7a:90:c9:e7: 16:00:b1:bc:8a:aa:4e:15:1b:65:38:38:1c:bb:3b: 44:2b:e3:0f:ec:0d:21:4c:4c:c0:a5:50:24:e4:f7: 4a:33:43:07:77:e4:a7:80:39:62:5a:ad:fc:60:64: e0:d4:3b:15:f2:e3:fc:77:3e:fd:09:55:70:f4:a4: 70:a1:d5:80:a8:fc:be:8d:88:6c:be:a2:45:73:bb: 53:eb:0e:3f:9a:03:c2:9b:26:dc:de:27:bc:31:89: 5b:2c:ee:07:3c:1b:6a:d3:8d:da:d7:d6:7c:bc:8b: fb:41:ab:27:f4:64:4c:f5:79:a8:93:fd:c4:8c:43: c6:1a:ed:b5:2e:93:fa:3c:b9:8d:80:da:79:60:15: 24:dd:33:01:e7:dd:9b:d3:45:ff:67:8a:41:d9:65: 93:fa:dc:4a:38:13:ab:dc:a5:4d:03:73:ee:54:98: b6:c5:b4:aa:d6:c8:e6:eb:e9:c2:e0:82:80:99:71: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:15:0E:0C:69:5E:9B:98:7A:9E:CD:24:65:90:8D:59:09:7B:51:65 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:aa:61:4b:ad:fb:68:fb:a8:da:e7:96:d8:db:34:99:1a:39: 2e:0e:bc:96:99:01:cc:62:6e:5f:0a:99:4d:77:e3:9b:b8:49: 2d:3c:86:77:0f:0a:99:24:40:65:da:5c:8f:3c:6d:8c:5b:af: 2c:61:ca:18:c6:02:54:a5:d2:08:46:0d:46:e1:00:91:f0:f2: f9:35:37:aa:67:c8:18:91:8d:a5:f6:59:39:69:20:d8:d6:20: ab:68:dd:af:93:c7:78:08:d4:b4:ce:0c:a2:63:43:f7:25:0f: a8:97:44:6f:8e:20:97:b6:bd:9f:bd:85:54:3b:5d:7c:1e:48: 0e:cc:c1:26:1e:a1:70:dd:68:8f:37:de:2f:c2:88:c3:1a:8b: 9f:b0:bf:b6:6a:03:8b:44:28:16:92:4f:b9:a1:4b:fd:82:f9: 5a:df:72:9f:e8:70:ad:b0:48:99:fd:16:2c:f0:30:68:68:8e: 40:8a:19:28:5b:f9:17:c9:4c:42:4e:bf:2f:2f:60:a4:40:a0: 72:2b:3d:4b:9f:ab:7c:77:a8:7c:a2:13:1a:b4:33:d4:61:b2: 7a:13:f7:20:20:ed:0a:a6:57:3f:e6:b4:7f:81:58:32:50:77: d5:89:dd:6d:8a:49:fd:d8:d9:da:a3:fa:47:31:a7:65:74:f9: bc:92:de:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwNTEzMDUyODM2WhcNMjUwNTIwMDUyODM2WjAYMRYwFAYD VQQDEw02ODIyZDg4NC05NjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIuRE6BY5RSft1AV6D8ObYPyYCQlO+YQgukC3X3cClUB26WQI9aSUIg+ku10 CVc/U7dd1TRWNxs3HVAWyU3olzAJAsIX0HqQyecWALG8iqpOFRtlODgcuztEK+MP 7A0hTEzApVAk5PdKM0MHd+SngDliWq38YGTg1DsV8uP8dz79CVVw9KRwodWAqPy+ jYhsvqJFc7tT6w4/mgPCmybc3ie8MYlbLO4HPBtq043a19Z8vIv7Qasn9GRM9Xmo k/3EjEPGGu21LpP6PLmNgNp5YBUk3TMB592b00X/Z4pB2WWT+txKOBOr3KVNA3Pu VJi2xbSq1sjm6+nC4IKAmXGxawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUVDgxp XpuYep7NJGWQjVkJe1FlMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8yRTBDQjU1RTQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9N MlpDd2lvOEVlZXBLLXpZWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdqmFLrfto+6ja55bY2zSZGjkuDryWmQHMYm5fCplNd+ObuEktPIZ3 DwqZJEBl2lyPPG2MW68sYcoYxgJUpdIIRg1G4QCR8PL5NTeqZ8gYkY2l9lk5aSDY 1iCraN2vk8d4CNS0zgyiY0P3JQ+ol0RvjiCXtr2fvYVUO118HkgOzMEmHqFw3WiP N94vwojDGoufsL+2agOLRCgWkk+5oUv9gvla33Kf6HCtsEiZ/RYs8DBoaI5Aihko W/kXyUxCTr8vL2CkQKByKz1Ln6t8d6h8ohMatDPUYbJ6E/cgIO0Kplc/5rR/gVgy UHfVid1tikn92Nnao/pHMadldPm8kt5t -----END CERTIFICATE-----Generated at Tue May 13 19:06:42 2025 by rpki-client