$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft File: JthkXujuOl0esdLfl5uFSbh2Hio.mft (raw, json) Hash identifier: rLupahdcNdRYvUBxga7uuV6b8qEU9ri3cM7Jy1Pcarg= Subject key identifier: 92:1B:B0:1C:E4:01:AD:D4:AB:45:CC:53:CF:57:F9:07:60:7F:20:6B Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft Manifest number: 7B Signing time: Sun 11 May 2025 05:30:01 +0000 Manifest this update: Sun 11 May 2025 05:30:00 +0000 Manifest next update: Sun 18 May 2025 05:30:00 +0000 Files and hashes: 1: JthkXujuOl0esdLfl5uFSbh2Hio.crl (hash: Q4ydbsnMW6OQRyKIo+3lgKtndE4bvdfC4HTue/qeLNc=) 2: B0D54166830311EFBF66FC21C4F9AE02.roa (hash: tZx4V13WdS1YqkwOo/f+c5fdIh0lni7XzhM0Rn3v6tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A Validity Not Before: May 11 05:30:00 2025 GMT Not After : May 18 05:30:00 2025 GMT Subject: CN=682035d8-38ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:d6:e2:a2:cd:01:39:68:c8:04:e5:bb:ac: e4:51:73:2b:0b:0d:c2:4c:0e:53:8f:8f:69:4c:6d: 3d:b8:30:64:72:05:0e:51:50:16:67:51:d4:30:7b: 6a:55:55:4b:ca:c7:f9:90:48:87:e5:7b:a4:26:50: 2d:9f:c2:8e:db:ac:db:19:55:4d:5a:71:6c:5b:5b: 43:9c:24:44:85:95:b9:ac:93:fe:13:56:75:75:37: 83:bd:cb:9d:41:02:9a:07:52:3f:55:c6:cd:88:1f: 65:4b:c1:8b:4d:88:40:fe:4f:ce:ad:a7:4f:47:d0: 6c:1d:14:21:06:99:25:79:17:a4:80:e3:04:4c:e4: 8d:bf:80:2d:be:8b:4d:2c:5f:26:eb:4d:e3:15:90: 42:6c:87:5e:3a:fb:c0:0f:d5:1b:39:85:8a:ba:20: 4a:49:45:81:b7:36:43:04:e9:96:3d:0e:9c:cb:33: 3d:32:bd:16:e5:61:f9:3a:89:6f:06:61:de:d1:7c: 48:0e:a5:9e:0f:e6:98:27:62:01:7d:a9:18:2f:e8: 81:2a:2b:08:ac:5a:ee:57:ac:e5:c7:c1:d6:b7:02: 8b:55:23:a2:67:41:56:86:1b:56:3c:53:1c:11:44: dc:ca:dc:de:75:49:17:21:25:86:3d:86:82:4c:db: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:B0:1C:E4:01:AD:D4:AB:45:CC:53:CF:57:F9:07:60:7F:20:6B X509v3 Authority Key Identifier: keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d2:29:6e:86:45:5e:c8:c9:07:0e:69:1e:9e:22:16:9e:09: a4:6e:d5:f6:79:34:ee:00:a5:b8:8c:ef:12:1a:27:e3:48:a1: c0:17:04:65:78:30:b6:b6:2b:a0:b1:77:53:29:0f:58:11:4b: 98:69:ab:19:90:56:f9:56:e3:09:e6:4f:b6:e6:19:5c:af:8e: 78:84:15:8b:80:b8:2d:55:ee:49:b6:e1:fc:18:a5:89:2b:8e: 57:c7:8a:6d:f6:42:d8:4c:f5:e2:d2:41:2f:fe:bb:4d:0a:a9: b0:0e:dc:f9:28:dd:37:4d:00:a0:4f:8c:44:e5:15:fe:2c:ae: 30:cb:ac:02:fe:61:51:67:e4:8e:d8:3f:ff:a8:32:ad:5a:4f: b7:13:80:36:1d:23:63:58:86:c1:d6:90:1e:96:75:f3:0d:5c: 8f:36:bd:09:6b:64:59:df:d9:9c:06:7d:f9:6e:4a:36:14:55: fe:f7:ed:24:66:29:5b:56:9b:23:fa:38:c3:66:9c:ba:5f:e6: 68:a2:ae:c4:71:93:bf:f4:e2:7f:3a:67:1d:5f:de:95:49:68: 78:28:33:4c:15:dc:a0:4b:9b:4b:67:85:f4:07:7e:16:4b:ec: c0:0d:7d:cf:8e:1a:be:f7:59:01:f0:9f:4e:74:01:fe:40:91: 15:a0:c8:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDZDMTExMC8GA1UEBRMoMjZEODY0NUVFOEVFM0E1RDFFQjFEMkRGOTc5Qjg1NDlC ODc2MUUyQTAeFw0yNTA1MTEwNTMwMDBaFw0yNTA1MTgwNTMwMDBaMBgxFjAUBgNV BAMTDTY4MjAzNWQ4LTM4ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs4Nbios0BOWjIBOW7rORRcysLDcJMDlOPj2lMbT24MGRyBQ5RUBZnUdQwe2pV VUvKx/mQSIfle6QmUC2fwo7brNsZVU1acWxbW0OcJESFlbmsk/4TVnV1N4O9y51B ApoHUj9Vxs2IH2VLwYtNiED+T86tp09H0GwdFCEGmSV5F6SA4wRM5I2/gC2+i00s XybrTeMVkEJsh146+8AP1Rs5hYq6IEpJRYG3NkME6ZY9DpzLMz0yvRblYfk6iW8G Yd7RfEgOpZ4P5pgnYgF9qRgv6IEqKwisWu5XrOXHwda3AotVI6JnQVaGG1Y8UxwR RNzK3N51SRchJYY9hoJM2yCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkhuwHOQB rdSrRcxTz1f5B2B/IGswHwYDVR0jBBgwFoAUJthkXujuOl0esdLfl5uFSbh2Hiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZENkMxL0RCNzA0NEUyN0Ey NjExRUZBRjA3QjY1NUM0RjlBRTAyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnRoa1h1anVPbDBlc2RMZmw1dUZTYmgySGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE NkMxL0RCNzA0NEUyN0EyNjExRUZBRjA3QjY1NUM0RjlBRTAyL0p0aGtYdWp1T2ww ZXNkTGZsNXVGU2JoMkhpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbSKW6GRV7IyQcOaR6eIhaeCaRu1fZ5NO4ApbiM7xIaJ+NIocAXBGV4 MLa2K6Cxd1MpD1gRS5hpqxmQVvlW4wnmT7bmGVyvjniEFYuAuC1V7km24fwYpYkr jlfHim32QthM9eLSQS/+u00KqbAO3Pko3TdNAKBPjETlFf4srjDLrAL+YVFn5I7Y P/+oMq1aT7cTgDYdI2NYhsHWkB6WdfMNXI82vQlrZFnf2ZwGffluSjYUVf737SRm KVtWmyP6OMNmnLpf5miirsRxk7/04n86Zx1f3pVJaHgoM0wV3KBLm0tnhfQHfhZL 7MANfc+OGr73WQHwn050Af5AkRWgyDk= -----END CERTIFICATE-----Generated at Tue May 13 06:49:03 2025 by rpki-client