$ rpki-client -vvf rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft File: JhOQ197eXRxAsfPigPOKCNqv3N4.mft (raw, json) Hash identifier: CbZh/tijHXJqL8EUzlTq+l1QRkyNrSxmkoxich5BKyg= Subject key identifier: 09:DC:E9:32:17:43:54:7E:4E:60:D8:3F:64:76:2E:9F:CD:6F:ED:6F Authority key identifier: 26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE Certificate issuer: /CN=A912E367/serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft Manifest number: 019B Signing time: Sun 27 Apr 2025 02:23:08 +0000 Manifest this update: Sun 27 Apr 2025 02:23:07 +0000 Manifest next update: Sun 04 May 2025 02:23:07 +0000 Files and hashes: 1: JhOQ197eXRxAsfPigPOKCNqv3N4.crl (hash: BlggPu1/LLr8j9c1ZHfLpAog+dQ4dnDlfzH6Ia/BDLU=) 2: 738195EEB11811ED997EA457C4F9AE02.roa (hash: Y3uWvVWc5h8AjMOh0rbq998afPQd3Tj5ztFh5AezKOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E367, serialNumber=261390D7DEDE5D1C40B1F3E280F38A08DAAFDCDE Validity Not Before: Apr 27 02:23:07 2025 GMT Not After : May 4 02:23:07 2025 GMT Subject: CN=680d950c-dc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:85:ff:73:38:68:64:92:6a:f3:1e:ce:93: c4:ab:e5:0f:24:6e:cc:30:06:8d:13:e1:c5:d1:76: 28:68:98:3f:82:9b:eb:ee:cf:c1:25:37:b9:7b:ab: 78:46:42:91:b0:4a:1e:90:2f:92:2d:06:0e:99:b2: eb:01:e1:0e:e3:2e:3a:f9:a5:5e:17:91:09:26:d3: 85:65:a2:10:36:dc:e3:05:1a:9e:6e:0a:20:d1:60: 9b:00:bf:e6:68:3e:fa:5d:b6:b1:8b:b9:81:0e:44: dd:d6:01:03:04:27:db:8f:1a:b1:70:88:32:e6:6d: 2e:5d:dc:bf:4e:f6:09:47:83:a6:54:93:d4:37:95: 84:12:a1:d5:6c:47:e5:2b:1f:88:c3:10:22:79:36: 25:cf:d3:83:b0:11:67:b8:43:44:bd:b7:27:fc:34: ee:aa:54:0e:99:0a:82:62:01:b9:2a:98:bd:1a:65: 39:9b:4e:98:fd:4a:03:7e:53:0b:17:80:75:71:12: b6:64:af:3e:df:de:26:cf:a7:9f:1a:fa:b3:a9:76: df:e5:0f:11:b9:08:81:6e:ab:b5:e0:98:48:53:f1: 0c:33:5f:a0:8f:ac:33:61:56:22:73:c8:3f:6d:3e: b9:30:96:e8:72:f8:fa:e4:af:cd:f7:02:b0:da:2d: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DC:E9:32:17:43:54:7E:4E:60:D8:3F:64:76:2E:9F:CD:6F:ED:6F X509v3 Authority Key Identifier: keyid:26:13:90:D7:DE:DE:5D:1C:40:B1:F3:E2:80:F3:8A:08:DA:AF:DC:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhOQ197eXRxAsfPigPOKCNqv3N4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E367/6BCECE0AADF011ED95D2B978C4F9AE02/JhOQ197eXRxAsfPigPOKCNqv3N4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2c:e2:47:0e:9a:a7:c8:bb:62:b7:30:e0:61:b7:f7:b7:fa: f1:6f:81:8d:77:c9:c1:f3:c8:8f:b8:83:8a:e7:56:d2:26:5d: 16:9d:f8:bb:ba:97:f6:79:6a:00:74:d6:d1:14:5b:5a:8e:3e: 9f:67:d8:cd:44:ec:79:6e:19:a6:71:20:36:98:cd:e0:7e:0f: 7e:2a:aa:89:54:f0:11:53:5d:89:1f:c8:37:7b:f7:c5:9c:b3: 1e:2b:af:bf:92:57:d6:93:38:a2:bd:c2:30:f9:d0:b1:22:06: 46:8d:05:e1:e3:62:1f:96:df:e7:15:db:71:47:66:eb:7a:0f: 4b:cf:76:f5:f0:08:d2:fe:b5:b8:50:85:0d:0f:b4:0c:e9:f1: a0:7d:b8:24:62:c3:a1:ee:7f:97:b4:94:88:b2:ae:9d:da:cf: 46:09:c2:fa:8d:ac:27:bb:eb:cf:e3:a7:16:98:a2:7f:9f:48: 1f:e8:24:2e:8a:2f:80:34:7b:79:1f:3d:b7:26:83:19:25:63: 88:a5:a1:c1:75:35:a2:59:67:a1:dd:d4:8a:f8:d4:46:8d:87: 5d:90:3e:47:92:ce:6c:6d:99:4b:e1:1d:3c:f2:0e:e5:d0:7b: ac:77:00:03:dd:5a:16:22:d5:86:81:58:3d:34:99:33:b3:44: 99:37:11:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzNjcxMTAvBgNVBAUTKDI2MTM5MEQ3REVERTVEMUM0MEIxRjNFMjgwRjM4QTA4 REFBRkRDREUwHhcNMjUwNDI3MDIyMzA3WhcNMjUwNTA0MDIyMzA3WjAYMRYwFAYD VQQDEw02ODBkOTUwYy1kYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuimF/3M4aGSSavMezpPEq+UPJG7MMAaNE+HF0XYoaJg/gpvr7s/BJTe5e6t4 RkKRsEoekC+SLQYOmbLrAeEO4y46+aVeF5EJJtOFZaIQNtzjBRqebgog0WCbAL/m aD76Xbaxi7mBDkTd1gEDBCfbjxqxcIgy5m0uXdy/TvYJR4OmVJPUN5WEEqHVbEfl Kx+IwxAieTYlz9ODsBFnuENEvbcn/DTuqlQOmQqCYgG5Kpi9GmU5m06Y/UoDflML F4B1cRK2ZK8+394mz6efGvqzqXbf5Q8RuQiBbqu14JhIU/EMM1+gj6wzYVYic8g/ bT65MJbocvj65K/N9wKw2i1FnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnc6TIX Q1R+TmDYP2R2Lp/Nb+1vMB8GA1UdIwQYMBaAFCYTkNfe3l0cQLHz4oDzigjar9ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTM2Ny82QkNFQ0UwQUFE RjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhSeEFzZlBpZ1BPS0NOcXYz TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poT1ExOTdlWFJ4QXNmUGlnUE9LQ05xdjNONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTM2Ny82QkNFQ0UwQUFERjAxMUVEOTVEMkI5NzhDNEY5QUUwMi9KaE9RMTk3ZVhS eEFzZlBpZ1BPS0NOcXYzTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKLOJHDpqnyLtitzDgYbf3t/rxb4GNd8nB88iPuIOK51bSJl0Wnfi7 upf2eWoAdNbRFFtajj6fZ9jNROx5bhmmcSA2mM3gfg9+KqqJVPARU12JH8g3e/fF nLMeK6+/klfWkziivcIw+dCxIgZGjQXh42Iflt/nFdtxR2breg9Lz3b18AjS/rW4 UIUND7QM6fGgfbgkYsOh7n+XtJSIsq6d2s9GCcL6jawnu+vP46cWmKJ/n0gf6CQu ii+ANHt5Hz23JoMZJWOIpaHBdTWiWWeh3dSK+NRGjYddkD5Hks5sbZlL4R088g7l 0HusdwAD3VoWItWGgVg9NJkzs0SZNxE2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net