$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft File: JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json) Hash identifier: jxd0znNBrBqIcvglbbc8NqgD4MEKNqwTfq8Np3HMtFs= Subject key identifier: 2A:12:F7:44:DB:D7:E4:ED:73:45:C9:43:43:52:B8:AE:51:30:A2:B4 Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft Manifest number: 014A Signing time: Sun 11 May 2025 03:12:21 +0000 Manifest this update: Sun 11 May 2025 03:12:21 +0000 Manifest next update: Sun 18 May 2025 03:12:21 +0000 Files and hashes: 1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: EP2o7ZDYHsYxfFeJAGQqvgcTySWDObcnbQzcA3AHFhE=) 2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=) 3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=) 4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Validity Not Before: May 11 03:12:21 2025 GMT Not After : May 18 03:12:21 2025 GMT Subject: CN=68201595-2fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:d2:a3:64:38:3c:e0:69:bf:42:3a:41:09: c4:76:9d:ec:a1:99:9a:f2:7d:d7:db:52:aa:ce:c1: 12:8b:a3:a5:25:a0:ec:28:ae:ea:c5:76:52:55:f9: 0d:5a:11:0d:59:86:da:6e:24:e6:fc:3b:89:58:a3: 08:7b:ba:74:32:54:46:a0:60:17:08:45:3f:e7:27: ed:94:ae:45:8b:03:f5:2b:80:8a:bf:26:54:1a:39: 38:10:0a:65:fa:23:fb:6c:ca:44:28:d1:1f:f3:b0: 97:4f:b9:f3:56:b0:ce:52:0f:ee:80:4f:cf:a6:1b: d4:ff:7f:05:e9:e6:79:bb:d8:af:5b:00:12:55:3f: 8b:ce:1d:89:bb:18:e0:bd:d0:27:00:38:9a:62:72: 17:8d:06:9b:14:27:3f:b2:2f:af:48:f9:a9:d8:b6: 16:ec:6f:d8:4f:07:ed:b6:9a:de:0c:84:a6:3f:ba: ed:86:6b:54:46:24:b7:d4:43:53:43:9e:cd:0b:87: 82:9f:8a:2e:df:ff:52:d6:93:04:b3:1f:77:4f:0e: f2:9d:13:9c:20:49:df:de:0f:ca:3c:7d:78:19:f7: b5:ed:99:4c:63:49:ca:38:7b:c9:bb:73:66:ba:56: 38:72:04:cb:a7:c0:88:a5:32:85:12:6c:c8:b0:99: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:12:F7:44:DB:D7:E4:ED:73:45:C9:43:43:52:B8:AE:51:30:A2:B4 X509v3 Authority Key Identifier: keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:10:8a:49:cb:08:c1:c6:4f:15:9d:9f:a8:77:59:f5:8c:36: 4e:ee:e8:fd:6e:2d:aa:f2:b6:af:1d:f6:f7:34:70:e1:4e:51: ef:c1:f3:8c:b1:69:1e:72:95:ff:50:4d:57:59:5b:1e:fb:93: 3d:57:88:00:b0:ef:92:f2:ab:ff:5f:64:54:fd:56:aa:ad:61: a6:d9:cb:83:5b:79:42:c3:8f:b9:95:c4:ee:d3:5b:09:bc:39: d4:38:b9:4f:43:af:cd:9a:92:a1:58:7f:ef:8f:19:1d:4f:b7: 1f:92:9f:b7:29:1c:c1:ea:e7:06:0b:d2:22:30:01:b8:64:93: b9:18:6b:e6:90:80:fd:e2:58:01:4d:3b:75:dc:7a:2c:8d:2b: 6e:be:ad:00:69:34:2d:24:db:1a:7c:8e:97:7b:b3:4a:81:8e: 68:83:4c:66:7c:d7:ef:a8:53:e9:63:f7:a2:fe:0f:9b:2f:76: d9:23:88:7b:50:51:f6:7f:19:f1:9c:71:8f:98:e6:21:ef:cd: 10:44:0a:59:00:c5:f1:8a:d1:c0:93:fc:7e:43:b1:97:2a:71: a5:03:d7:d2:3f:70:86:99:5d:c7:05:e5:5e:f3:1d:00:7b:58: b2:04:51:25:c6:73:eb:dc:1f:26:e3:cc:a5:91:96:f5:fa:78: 87:b5:83:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNDUxMTAvBgNVBAUTKDI0MzIwRUFGRjlBODIwQjhFREE1OUUwM0U0MDU1NUM1 RjM0RkVGQ0MwHhcNMjUwNTExMDMxMjIxWhcNMjUwNTE4MDMxMjIxWjAYMRYwFAYD VQQDEw02ODIwMTU5NS0yZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ/So2Q4POBpv0I6QQnEdp3soZma8n3X21KqzsESi6OlJaDsKK7qxXZSVfkN WhENWYbabiTm/DuJWKMIe7p0MlRGoGAXCEU/5yftlK5FiwP1K4CKvyZUGjk4EApl +iP7bMpEKNEf87CXT7nzVrDOUg/ugE/PphvU/38F6eZ5u9ivWwASVT+Lzh2Juxjg vdAnADiaYnIXjQabFCc/si+vSPmp2LYW7G/YTwfttpreDISmP7rthmtURiS31ENT Q57NC4eCn4ou3/9S1pMEsx93Tw7ynROcIEnf3g/KPH14Gfe17ZlMY0nKOHvJu3Nm ulY4cgTLp8CIpTKFEmzIsJmN9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoS90Tb 1+Ttc0XJQ0NSuK5RMKK0MB8GA1UdIwQYMBaAFCQyDq/5qCC47aWeA+QFVcXzT+/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY0NS8zMzYxMTlDNDQy RjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lManRwWjRENUFWVnhmTlA3 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY0NS8zMzYxMTlDNDQyRjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lM anRwWjRENUFWVnhmTlA3OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGEIpJywjBxk8VnZ+od1n1jDZO7uj9bi2q8ravHfb3NHDhTlHvwfOM sWkecpX/UE1XWVse+5M9V4gAsO+S8qv/X2RU/VaqrWGm2cuDW3lCw4+5lcTu01sJ vDnUOLlPQ6/NmpKhWH/vjxkdT7cfkp+3KRzB6ucGC9IiMAG4ZJO5GGvmkID94lgB TTt13HosjStuvq0AaTQtJNsafI6Xe7NKgY5og0xmfNfvqFPpY/ei/g+bL3bZI4h7 UFH2fxnxnHGPmOYh780QRApZAMXxitHAk/x+Q7GXKnGlA9fSP3CGmV3HBeVe8x0A e1iyBFElxnPr3B8m48ylkZb1+niHtYO8 -----END CERTIFICATE-----Generated at Sun May 11 21:59:46 2025 by rpki-client