$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json) Hash identifier: 4YVs89eC08FXXZVmCNwUXVgkMRt0fwOhbQPvfRiB6CM= Subject key identifier: C2:64:23:E8:A1:D0:8E:42:11:38:C3:D9:4F:EC:CB:96:90:AD:19:86 Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft Manifest number: 0122 Signing time: Sun 11 May 2025 03:35:37 +0000 Manifest this update: Sun 11 May 2025 03:35:36 +0000 Manifest next update: Sun 18 May 2025 03:35:36 +0000 Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: +1SPO62eZp0HIkbSv+DAjCHsxiwD4xoXtETLEDk5qHU=) 2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: Rl9w6CUzjxjE3djp4v/H+q5yLTpTAQDlpkaUN8NUlSE=) 3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: IJ5dBAWAdmmwSlZZLj50q6aWGU/lknWXyUHgTjT04dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Validity Not Before: May 11 03:35:36 2025 GMT Not After : May 18 03:35:36 2025 GMT Subject: CN=68201b08-6029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:27:fe:e8:95:31:38:29:9b:18:d3:67:5d: 2e:1d:4d:71:e4:6c:42:e8:78:22:52:96:b3:6d:95: c4:92:9d:bf:4b:52:dc:8d:cf:41:74:ee:21:62:5d: 0c:12:82:f3:00:d5:db:7f:ab:4b:29:24:00:82:59: 85:90:26:c5:25:44:7b:46:da:65:c6:ca:45:ed:e5: ea:1f:ee:3f:a1:2b:d8:b3:cf:75:df:e1:b8:f9:ea: 2a:5d:59:04:ba:7b:e4:0a:57:58:c5:a9:78:a1:a8: 0b:99:ae:f6:31:07:21:e5:42:77:ef:82:40:32:34: 46:c8:8f:ce:34:af:e6:58:96:b3:c0:74:5a:26:ab: ae:ee:80:46:83:1f:1c:5b:4e:8f:f5:fb:7d:83:6a: ab:a4:17:9d:49:3e:1a:53:5b:af:9b:3c:9b:07:62: b4:2b:e8:18:e1:64:2b:ed:46:e5:36:dc:6b:2c:31: c9:83:69:78:2a:4c:1a:0b:96:ba:69:8d:f9:dc:b7: 56:3f:67:1e:e5:cd:25:ca:f9:75:65:15:d9:59:0d: af:28:44:36:95:4c:52:df:39:ec:56:64:c0:d2:c6: 99:18:c9:7a:10:d3:3b:41:4e:3b:b8:56:af:6c:e8: 4d:20:f6:41:5f:30:c2:72:37:7b:06:b9:ea:f4:f0: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:64:23:E8:A1:D0:8E:42:11:38:C3:D9:4F:EC:CB:96:90:AD:19:86 X509v3 Authority Key Identifier: keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b7:38:ef:24:5d:eb:ef:66:b1:5d:bb:54:0d:be:27:cf:24: aa:b2:61:f2:d6:c7:00:46:c5:72:5a:1f:1c:08:82:50:0d:d3: 25:68:4e:8e:73:82:69:57:14:ac:ec:55:19:8b:54:51:32:e1: 3e:bc:b6:1b:74:66:cf:ed:3a:07:e8:1d:3a:f2:da:a9:4b:a6: c2:11:be:90:b0:a0:b3:35:39:cc:6c:8a:a2:53:6d:2e:c3:9f: 30:0a:58:44:bc:48:fd:4c:42:3f:ec:77:d7:b0:5d:27:34:c5: 16:ac:62:bd:10:cd:de:d5:62:e1:34:e1:6b:b2:51:25:fd:64: 45:c1:ca:0f:c1:55:ba:99:31:a3:67:0b:ad:9b:69:2a:fa:2b: 57:9a:93:ef:fa:f0:18:1c:71:a7:ba:cf:e6:ec:d1:1d:1b:eb: a7:bb:63:c9:b0:a4:4c:eb:9f:e8:fe:71:91:d7:98:0e:f3:72: 74:e2:ca:94:b2:f8:a0:f1:0b:dc:e5:39:61:77:a1:12:7f:19: 73:c0:ab:c1:f6:44:3e:b4:f3:e1:f1:2d:db:d0:b2:ea:38:e1: 2b:c4:91:2d:a2:c2:6a:dd:2d:8e:99:24:d8:66:a8:f3:d7:41: 47:cf:0c:b8:c3:8d:40:c3:43:b2:32:4e:d1:df:05:9e:f7:db: 1f:5a:d0:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4 ODczOEU3NzgwHhcNMjUwNTExMDMzNTM2WhcNMjUwNTE4MDMzNTM2WjAYMRYwFAYD VQQDEw02ODIwMWIwOC02MDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpsn/uiVMTgpmxjTZ10uHU1x5GxC6HgiUpazbZXEkp2/S1Lcjc9BdO4hYl0M EoLzANXbf6tLKSQAglmFkCbFJUR7RtplxspF7eXqH+4/oSvYs8913+G4+eoqXVkE unvkCldYxal4oagLma72MQch5UJ374JAMjRGyI/ONK/mWJazwHRaJquu7oBGgx8c W06P9ft9g2qrpBedST4aU1uvmzybB2K0K+gY4WQr7UblNtxrLDHJg2l4KkwaC5a6 aY353LdWP2ce5c0lyvl1ZRXZWQ2vKEQ2lUxS3znsVmTA0saZGMl6ENM7QU47uFav bOhNIPZBXzDCcjd7Brnq9PCwBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJkI+ih 0I5CETjD2U/sy5aQrRmGMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0 N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5 Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0tzjvJF3r72axXbtUDb4nzySqsmHy1scARsVyWh8cCIJQDdMlaE6O c4JpVxSs7FUZi1RRMuE+vLYbdGbP7ToH6B068tqpS6bCEb6QsKCzNTnMbIqiU20u w58wClhEvEj9TEI/7HfXsF0nNMUWrGK9EM3e1WLhNOFrslEl/WRFwcoPwVW6mTGj Zwutm2kq+itXmpPv+vAYHHGnus/m7NEdG+unu2PJsKRM65/o/nGR15gO83J04sqU svig8Qvc5Tlhd6ESfxlzwKvB9kQ+tPPh8S3b0LLqOOErxJEtosJq3S2OmSTYZqjz 10FHzwy4w41Aw0OyMk7R3wWe99sfWtDA -----END CERTIFICATE-----Generated at Mon May 12 11:22:55 2025 by rpki-client