$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json) Hash identifier: rYfemBCNG3aB0NtIUkUKW4dveung8c/LCD646puPQG0= Subject key identifier: 5D:D8:26:57:B6:05:41:A8:A4:27:A2:80:D3:0B:4E:CB:46:7D:8C:5D Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft Manifest number: 012B Signing time: Sat 31 May 2025 04:15:57 +0000 Manifest this update: Sat 31 May 2025 04:15:56 +0000 Manifest next update: Sat 07 Jun 2025 04:15:56 +0000 Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: fNVqQgjwJZArJPWn8VkvzovnyAvidiwbyAIXsEyJjUg=) 2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: Rl9w6CUzjxjE3djp4v/H+q5yLTpTAQDlpkaUN8NUlSE=) 3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: IJ5dBAWAdmmwSlZZLj50q6aWGU/lknWXyUHgTjT04dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Validity Not Before: May 31 04:15:56 2025 GMT Not After : Jun 7 04:15:56 2025 GMT Subject: CN=683a827c-769a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1d:2c:40:26:63:07:53:2a:d5:3c:09:29:d7: 96:c1:40:d6:d8:b8:49:20:41:80:33:3b:0a:bc:6a: b9:28:e6:8a:1f:18:c6:f9:8a:c0:f0:c3:7b:1f:29: 24:80:80:5e:23:6b:4c:5b:a4:b8:fe:76:6f:20:7b: 57:9c:34:c6:29:08:bd:d3:f0:5e:12:ec:f4:8e:45: 0e:3d:58:df:31:79:c9:0a:4b:b6:18:bd:9e:d5:35: f0:84:91:be:49:5a:6c:87:19:f3:83:aa:27:38:ea: b4:06:89:47:1e:f8:bb:18:eb:93:00:37:37:1c:c9: 02:cc:b7:61:52:72:73:55:d0:f4:a4:6d:32:e4:e5: bd:d1:e3:45:a4:5c:76:95:57:d3:01:29:30:d0:b6: 22:6c:8d:4e:b4:ae:e1:61:a4:82:3c:54:5a:04:e6: 71:af:74:ac:4c:80:47:bd:89:72:59:62:94:bd:2a: 80:2b:c3:0d:06:b4:e0:fa:32:dd:4f:2a:e2:16:12: 44:bd:2e:ba:d7:e3:60:39:3f:53:ba:95:bd:0a:ca: e8:a3:d7:bb:72:66:aa:9e:95:81:38:43:dd:36:7b: bd:7c:ae:01:b1:45:66:5c:7a:ae:69:f5:08:11:92: 82:8c:37:df:a4:36:57:7d:9f:c7:44:97:d9:5d:85: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D8:26:57:B6:05:41:A8:A4:27:A2:80:D3:0B:4E:CB:46:7D:8C:5D X509v3 Authority Key Identifier: keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:58:fb:17:02:03:0e:25:3f:16:9b:a9:1b:d9:97:87:31:e7: b4:a5:b3:e2:53:02:2c:80:69:00:bc:18:80:fe:09:e2:73:e8: 49:8e:70:0c:89:a7:27:e2:9d:d2:7b:a3:a1:9f:5f:49:37:81: 4d:96:c6:d0:de:18:60:32:b2:84:0c:79:0e:02:84:57:a1:ee: c9:da:c6:3b:28:d7:3d:9f:f9:c0:11:07:50:7b:d8:e3:a1:99: e9:df:26:26:dc:f9:93:57:40:a7:89:91:92:13:6e:aa:12:c9: 47:b9:31:8d:63:ee:8c:67:92:6d:9b:ad:39:fb:3f:d1:80:1c: 74:11:a6:06:fd:d3:59:96:cd:9a:91:0d:c0:a5:91:c6:53:e0: 21:6c:07:63:f7:1f:69:86:71:c6:e5:84:29:30:f6:d3:93:93: 3c:d2:50:15:3a:ac:08:d2:dd:c7:44:ac:8c:7c:5a:a4:3c:3e: ec:7d:1b:e2:39:33:f0:57:1f:45:b0:dc:ae:4b:02:91:24:bc: a6:b5:5f:7c:67:17:69:e9:6b:54:f4:25:97:38:b0:87:a8:d5: 50:15:a7:94:7f:de:0d:43:81:1d:e8:4f:f4:af:4d:8a:d3:fa: 96:cf:30:b8:20:4e:65:0c:cb:36:1e:23:b7:43:04:fb:86:6f: 68:73:5a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4 ODczOEU3NzgwHhcNMjUwNTMxMDQxNTU2WhcNMjUwNjA3MDQxNTU2WjAYMRYwFAYD VQQDEw02ODNhODI3Yy03NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h0sQCZjB1Mq1TwJKdeWwUDW2LhJIEGAMzsKvGq5KOaKHxjG+YrA8MN7Hykk gIBeI2tMW6S4/nZvIHtXnDTGKQi90/BeEuz0jkUOPVjfMXnJCku2GL2e1TXwhJG+ SVpshxnzg6onOOq0BolHHvi7GOuTADc3HMkCzLdhUnJzVdD0pG0y5OW90eNFpFx2 lVfTASkw0LYibI1OtK7hYaSCPFRaBOZxr3SsTIBHvYlyWWKUvSqAK8MNBrTg+jLd TyriFhJEvS661+NgOT9TupW9Csroo9e7cmaqnpWBOEPdNnu9fK4BsUVmXHquafUI EZKCjDffpDZXfZ/HRJfZXYVboQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3YJle2 BUGopCeigNMLTstGfYxdMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0 N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5 Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoWPsXAgMOJT8Wm6kb2ZeHMee0pbPiUwIsgGkAvBiA/gnic+hJjnAM iacn4p3Se6Ohn19JN4FNlsbQ3hhgMrKEDHkOAoRXoe7J2sY7KNc9n/nAEQdQe9jj oZnp3yYm3PmTV0CniZGSE26qEslHuTGNY+6MZ5Jtm605+z/RgBx0EaYG/dNZls2a kQ3ApZHGU+AhbAdj9x9phnHG5YQpMPbTk5M80lAVOqwI0t3HRKyMfFqkPD7sfRvi OTPwVx9FsNyuSwKRJLymtV98Zxdp6WtU9CWXOLCHqNVQFaeUf94NQ4Ed6E/0r02K 0/qWzzC4IE5lDMs2HiO3QwT7hm9oc1qy -----END CERTIFICATE-----Generated at Sat May 31 16:34:01 2025 by rpki-client