$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft File: JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft (raw, json) Hash identifier: WRqQ1yztS8zcklp41myDBk6yY1iOzeTT6k6KTznYTvY= Subject key identifier: AA:C2:EF:96:68:E3:66:62:60:EF:CF:AE:60:BE:00:A0:07:59:98:FC Authority key identifier: 26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 Certificate issuer: /CN=A91DD5EC/serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft Manifest number: 016E Signing time: Mon 05 May 2025 02:49:22 +0000 Manifest this update: Mon 05 May 2025 02:49:21 +0000 Manifest next update: Mon 12 May 2025 02:49:21 +0000 Files and hashes: 1: JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl (hash: Rxdq59QhdyRm7EjOHq5Q7Ms7ZHCIvgSUod4gzjr+uSU=) 2: EB75D8C4FDE111ED848B004CC4F9AE02.roa (hash: bEYOw16YffGMy8yneXxHr3Zrg83Aj3Be9wOSROcVCMY=) 3: 2DDB3932FF4711EDA9459E3DC4F9AE02.roa (hash: 43u6VU4uVf/bt9Gf14qd7/mI+N905JTL9noJWyloshU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5EC, serialNumber=26B2C8462FEA1DA514166B5B1390AD0CC277A5A8 Validity Not Before: May 5 02:49:21 2025 GMT Not After : May 12 02:49:21 2025 GMT Subject: CN=68182732-8334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:bc:d4:b8:c1:be:90:8f:7f:37:7c:3e:de: 41:06:7b:0b:4c:53:4e:9d:c2:83:0d:c7:ec:0a:ed: 53:ec:c3:41:84:24:07:71:f2:b3:6c:97:72:df:56: 0f:dd:12:0f:50:94:47:7e:fa:0f:a9:17:a0:ea:b3: 92:0b:f8:32:2c:5f:a8:26:b0:39:a0:5a:2f:c7:9d: 47:57:44:5c:aa:c7:5e:bc:1a:11:a1:9a:43:1e:ed: ce:48:42:bd:f6:a5:59:cf:d6:a5:39:bd:0e:35:f6: eb:3e:9e:83:23:dc:31:f5:e3:26:41:cd:87:e3:af: f7:11:98:e4:ee:d8:a8:ff:91:31:59:5f:db:e4:d1: d8:33:40:02:f1:c3:74:88:f2:a8:ad:e0:d9:60:87: c7:62:b2:09:18:cc:60:b4:75:29:bc:7a:7e:2c:21: 10:45:d0:85:42:18:8e:3e:fe:89:6d:f8:4a:c6:6b: 64:6e:7d:ff:bb:cd:97:99:65:72:92:96:05:53:2c: 5a:58:1e:9e:7a:b6:0a:cd:cf:59:3b:bc:87:a0:2e: 3f:6e:0b:f1:af:59:14:ce:75:5c:42:16:01:d3:71: 01:eb:a1:e7:87:93:d7:a6:f1:d2:4a:1f:0c:72:1c: d1:a3:d0:63:1b:ee:02:da:64:b2:94:10:64:bc:fb: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C2:EF:96:68:E3:66:62:60:EF:CF:AE:60:BE:00:A0:07:59:98:FC X509v3 Authority Key Identifier: keyid:26:B2:C8:46:2F:EA:1D:A5:14:16:6B:5B:13:90:AD:0C:C2:77:A5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JrLIRi_qHaUUFmtbE5CtDMJ3pag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5EC/05315DEEFDDB11EDA032BF42C4F9AE02/JrLIRi_qHaUUFmtbE5CtDMJ3pag.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:20:1f:49:3b:a2:7d:71:3d:44:c5:f0:7f:77:80:d4:f9:77: 01:fe:14:ff:ac:5f:15:8d:c6:d1:e4:0b:54:c6:40:7e:4d:e8: 5e:f3:6b:55:3d:6d:8e:92:52:cc:9b:71:fc:91:29:90:37:96: 6b:3a:89:25:f4:1a:16:c6:46:3f:f6:58:40:2e:69:46:53:51: 5c:c9:e1:7e:80:14:b7:80:46:4b:fb:35:8c:a1:be:cb:e1:d0: 95:cc:40:2e:c2:c1:6f:3d:0c:51:35:d7:53:a1:53:e2:22:ad: 0e:da:88:15:a3:d6:10:ac:94:95:93:ef:1e:f6:9b:bd:d4:d9: 19:33:64:3a:81:c8:bd:5f:fb:74:7f:ee:1f:4c:6f:13:09:b7: 0f:e6:43:0c:80:c5:e0:0a:d8:25:26:e9:4c:df:95:fb:07:42: 9d:33:d4:2a:f2:2a:c6:ea:96:29:cc:f3:a3:93:43:d2:de:01: ce:6c:84:50:90:8f:4d:8a:41:70:00:ae:1e:f5:13:13:0f:cc: 2f:00:be:6e:39:e1:c6:16:85:9b:20:bb:d8:f0:8a:84:9b:1c: fb:4a:54:c4:76:f6:57:6e:f3:95:0f:76:e8:47:0a:ee:b7:0d: 95:3a:77:2c:1d:44:41:7a:74:29:cb:22:07:c2:f2:b8:9f:ab: 3f:fe:c5:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RUMxMTAvBgNVBAUTKDI2QjJDODQ2MkZFQTFEQTUxNDE2NkI1QjEzOTBBRDBD QzI3N0E1QTgwHhcNMjUwNTA1MDI0OTIxWhcNMjUwNTEyMDI0OTIxWjAYMRYwFAYD VQQDEw02ODE4MjczMi04MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsK81LjBvpCPfzd8Pt5BBnsLTFNOncKDDcfsCu1T7MNBhCQHcfKzbJdy31YP 3RIPUJRHfvoPqReg6rOSC/gyLF+oJrA5oFovx51HV0RcqsdevBoRoZpDHu3OSEK9 9qVZz9alOb0ONfbrPp6DI9wx9eMmQc2H46/3EZjk7tio/5ExWV/b5NHYM0AC8cN0 iPKoreDZYIfHYrIJGMxgtHUpvHp+LCEQRdCFQhiOPv6JbfhKxmtkbn3/u82XmWVy kpYFUyxaWB6eerYKzc9ZO7yHoC4/bgvxr1kUznVcQhYB03EB66Hnh5PXpvHSSh8M chzRo9BjG+4C2mSylBBkvPuzSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrC75Zo 42ZiYO/PrmC+AKAHWZj8MB8GA1UdIwQYMBaAFCayyEYv6h2lFBZrWxOQrQzCd6Wo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFQy8wNTMxNURFRUZE REIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhhVVVGbXRiRTVDdERNSjNw YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyTElSaV9xSGFVVUZtdGJFNUN0RE1KM3BhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFQy8wNTMxNURFRUZEREIxMUVEQTAzMkJGNDJDNEY5QUUwMi9KckxJUmlfcUhh VVVGbXRiRTVDdERNSjNwYWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChIB9JO6J9cT1ExfB/d4DU+XcB/hT/rF8VjcbR5AtUxkB+Tehe82tV PW2OklLMm3H8kSmQN5ZrOokl9BoWxkY/9lhALmlGU1FcyeF+gBS3gEZL+zWMob7L 4dCVzEAuwsFvPQxRNddToVPiIq0O2ogVo9YQrJSVk+8e9pu91NkZM2Q6gci9X/t0 f+4fTG8TCbcP5kMMgMXgCtglJulM35X7B0KdM9Qq8irG6pYpzPOjk0PS3gHObIRQ kI9NikFwAK4e9RMTD8wvAL5uOeHGFoWbILvY8IqEmxz7SlTEdvZXbvOVD3boRwru tw2VOncsHURBenQpyyIHwvK4n6s//sXH -----END CERTIFICATE-----Generated at Tue May 6 11:46:52 2025 by rpki-client