$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json) Hash identifier: NBjEfwtLa334aYhLxe1x7Q4lihrMcDijEPPv2ZBl9VI= Subject key identifier: 9D:83:E7:49:0B:57:ED:5A:09:8B:27:0C:C6:5C:90:9A:DA:89:98:E0 Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft Manifest number: 0145 Signing time: Mon 21 Jul 2025 04:24:44 +0000 Manifest this update: Mon 21 Jul 2025 04:24:43 +0000 Manifest next update: Mon 28 Jul 2025 04:24:43 +0000 Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: eVzZH8g6cZY3y6uNzGjouwqWI60xgJsaL8bgFif3YPM=) 2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: Rl9w6CUzjxjE3djp4v/H+q5yLTpTAQDlpkaUN8NUlSE=) 3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: IJ5dBAWAdmmwSlZZLj50q6aWGU/lknWXyUHgTjT04dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Validity Not Before: Jul 21 04:24:43 2025 GMT Not After : Jul 28 04:24:43 2025 GMT Subject: CN=687dc10c-64ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:24:c9:f0:4e:02:a4:28:98:06:75:0f:2d:e2: 5b:5d:24:3e:59:1b:3c:83:a4:c7:9b:c7:aa:52:a6: dc:56:22:b4:bf:e3:96:39:00:f1:d7:d8:0f:3d:97: 84:5a:d7:c9:b9:b8:f6:7b:79:7b:5f:6e:37:5f:cb: 7b:7b:2b:f8:fa:3c:c0:68:67:3e:77:af:71:1a:e1: 86:0d:7e:03:84:ff:f2:72:2b:b5:c6:3d:ee:24:91: 4f:e7:33:4c:a3:86:7c:a1:6d:06:0c:82:cb:0f:9b: ee:2f:cf:63:cd:2e:b4:e0:f2:bd:40:8a:87:63:0b: 3d:60:ff:aa:da:89:3a:36:1b:6e:82:58:ad:52:54: 04:1a:c5:1e:70:2d:9e:b4:6f:2c:16:38:b0:b5:85: 74:f0:29:aa:fb:47:f8:b6:e7:eb:36:99:87:43:17: 24:97:ec:ad:d1:fe:cc:e1:d3:50:e9:67:f7:eb:7e: fc:63:30:4a:ed:b7:05:c3:ac:23:f2:4d:b5:1d:88: c6:d9:77:f6:a9:ca:04:a7:40:23:16:93:d5:7d:01: ad:7f:d2:64:58:d4:12:cd:8c:16:97:7a:7c:41:01: 6e:78:ba:eb:08:ec:32:35:76:fc:71:95:fd:d3:b7: e3:a9:db:59:0f:af:0a:5d:41:e3:cf:fb:0e:43:3d: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:E7:49:0B:57:ED:5A:09:8B:27:0C:C6:5C:90:9A:DA:89:98:E0 X509v3 Authority Key Identifier: keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:5e:35:34:05:a7:90:d0:b9:bd:dd:28:b5:7a:a5:68:3a: e2:78:72:f1:d2:0b:cd:a9:a3:9c:9d:6d:46:c9:8b:e3:5c:0f: b3:41:14:05:fc:47:43:41:69:86:45:15:11:21:b0:fb:36:4c: 4f:56:c8:bd:5b:7d:5d:84:4d:3b:1a:a9:14:6e:ef:22:6b:08: 46:b5:d3:ff:dd:2f:da:bf:a7:2d:36:70:d8:5f:5f:dc:17:d0: 2a:a7:7c:f7:c3:1b:51:08:fd:ce:3a:29:95:3d:31:f2:23:3a: e1:dc:bc:0f:93:2c:13:7a:fc:e4:7a:f6:df:1c:6c:3a:00:b2: 08:14:8d:96:0d:6c:30:94:87:8b:95:c2:e4:bf:1f:5b:ad:fd: 97:40:54:a0:cd:b5:36:ab:7e:8a:06:16:33:cd:ec:d0:33:0d: 21:be:b4:90:8b:ee:67:b8:48:9c:4f:ba:20:65:b2:7c:90:12: 8d:3b:c5:d4:a6:7f:43:a5:ed:e5:d1:4c:3c:b1:7b:4a:01:6e: 05:ed:f7:40:39:2b:1a:31:19:38:a0:fe:7d:7a:41:5a:64:49: 7a:c2:38:38:fe:8a:36:19:65:16:e3:c2:16:a3:d4:d9:61:65: 33:1e:a9:8a:60:00:5c:52:98:8d:ca:23:7c:26:7a:18:49:c7: e5:af:2a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4 ODczOEU3NzgwHhcNMjUwNzIxMDQyNDQzWhcNMjUwNzI4MDQyNDQzWjAYMRYwFAYD VQQDEw02ODdkYzEwYy02NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyTJ8E4CpCiYBnUPLeJbXSQ+WRs8g6THm8eqUqbcViK0v+OWOQDx19gPPZeE WtfJubj2e3l7X243X8t7eyv4+jzAaGc+d69xGuGGDX4DhP/yciu1xj3uJJFP5zNM o4Z8oW0GDILLD5vuL89jzS604PK9QIqHYws9YP+q2ok6NhtuglitUlQEGsUecC2e tG8sFjiwtYV08Cmq+0f4tufrNpmHQxckl+yt0f7M4dNQ6Wf36378YzBK7bcFw6wj 8k21HYjG2Xf2qcoEp0AjFpPVfQGtf9JkWNQSzYwWl3p8QQFueLrrCOwyNXb8cZX9 07fjqdtZD68KXUHjz/sOQz0D6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2D50kL V+1aCYsnDMZckJraiZjgMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0 N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5 Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgfV41NAWnkNC5vd0otXqlaDrieHLx0gvNqaOcnW1GyYvjXA+zQRQF /EdDQWmGRRURIbD7NkxPVsi9W31dhE07GqkUbu8iawhGtdP/3S/av6ctNnDYX1/c F9Aqp3z3wxtRCP3OOimVPTHyIzrh3LwPkywTevzkevbfHGw6ALIIFI2WDWwwlIeL lcLkvx9brf2XQFSgzbU2q36KBhYzzezQMw0hvrSQi+5nuEicT7ogZbJ8kBKNO8XU pn9Dpe3l0Uw8sXtKAW4F7fdAOSsaMRk4oP59ekFaZEl6wjg4/oo2GWUW48IWo9TZ YWUzHqmKYABcUpiNyiN8JnoYScflryr/ -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:42 2025 by rpki-client