$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft File: JG9qS-FbAM_sDcOZpehDn5OckXQ.mft (raw, json) Hash identifier: jzLaV4iaZdza1JG3nYK7CxYKug4fTV02llrvFT2SS2A= Subject key identifier: 94:9A:5D:4C:88:9B:16:13:45:17:AE:76:2E:C3:2F:7B:7D:DC:07:8B Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft Manifest number: 06D2 Signing time: Sat 26 Apr 2025 21:48:42 +0000 Manifest this update: Sat 26 Apr 2025 21:48:42 +0000 Manifest next update: Sat 03 May 2025 21:48:42 +0000 Files and hashes: 1: JG9qS-FbAM_sDcOZpehDn5OckXQ.crl (hash: VMKSuiGccAbHaHA6Sho8Kmp40tO4zwdhVj54Bm5jOGQ=) 2: DF4767286F6211EEB3CA1222C4F9AE02.roa (hash: h7ET5rK/UTRVFMtJIjxgJTPauzAIz4YIbahkqpm3+GM=) 3: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (hash: jI8x+nsZP4P5+Lp//1d0h3kgd/U6B4j1xlc/fhuOkh4=) 4: D635A2BEAA6111EE851A6861C4F9AE02.roa (hash: X7/wtt04QWk9x+2X3bhJ9nLStWcZ9LhUojCxV8pCE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Apr 26 21:48:42 2025 GMT Not After : May 3 21:48:42 2025 GMT Subject: CN=680d54ba-2a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:f6:f4:77:74:f5:38:1a:55:3b:46:1a:c7: 38:95:f9:c5:aa:b7:4a:8b:13:e1:ab:d7:01:f0:fe: d3:11:73:89:35:2f:89:c2:33:31:03:df:33:cc:63: d7:7e:6c:42:4a:63:74:49:ad:1a:cb:31:f2:6f:e0: 62:45:f5:a3:d8:e0:6b:2a:39:51:d9:ef:75:6e:3c: e8:a1:68:a8:2b:ca:8d:fb:4d:c9:7e:5f:cb:60:24: a0:20:bc:2e:d6:b4:4d:21:75:c6:40:76:9f:83:72: cd:10:f3:a5:d2:94:c3:02:b2:e5:5c:9f:86:8c:d4: 03:d7:45:74:58:9c:00:5d:69:33:12:0d:51:a6:c6: 76:69:58:b8:70:e5:e8:36:55:8d:db:5b:e1:89:21: 9b:12:15:0a:d5:e6:9e:b6:29:92:80:60:15:0f:2b: ba:77:c3:a3:b9:77:5c:05:97:eb:65:a3:81:df:e2: 6a:df:a0:d3:18:a0:bb:02:b4:c6:34:b0:7e:c1:66: 2d:4f:40:e4:40:fa:11:bb:f9:fd:1e:a2:e2:8e:d5: 0b:c0:d1:41:8b:2f:fb:69:5a:2e:7f:42:c3:b9:28: d0:e7:b3:7a:e6:92:15:72:d6:2b:ec:1b:87:b4:14: 5c:34:fe:ff:fd:df:4b:6c:38:e0:ba:ec:4f:d1:4d: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9A:5D:4C:88:9B:16:13:45:17:AE:76:2E:C3:2F:7B:7D:DC:07:8B X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fc:4d:8b:e4:8c:e0:ef:2e:ad:5e:bc:55:8c:8b:39:dd:51: 8b:97:e6:9c:27:71:c0:d0:ee:d9:82:47:d6:05:63:b4:c4:14: 47:a6:44:cc:ab:24:db:c2:d9:64:e4:81:f1:60:e2:b6:a3:0a: 8c:78:b1:29:09:79:e1:16:5f:ad:ca:7a:5c:b7:c1:af:3d:87: 53:95:b6:aa:78:e7:60:6c:54:51:e5:57:5b:21:ed:29:0b:a3: b3:7d:4e:c9:19:8b:fa:bd:66:85:5d:19:75:45:10:8a:67:ab: 44:22:7f:6b:68:cb:57:85:0b:de:52:8c:7c:23:3a:84:1c:0b: f9:92:12:1c:56:94:67:33:7e:b4:6e:9d:ac:b3:1e:c4:1d:5e: ae:d3:49:77:10:dd:87:a5:a8:00:63:09:8f:69:52:9b:0d:1e: 8e:e2:81:c6:67:e3:07:37:ba:6c:f5:e7:bd:60:a2:2f:ea:b4: ea:af:5c:25:1e:a8:08:87:38:32:b8:0c:67:f5:3e:49:9b:f5: 51:7e:34:67:49:01:72:92:a8:65:20:c5:c4:03:4a:1b:1a:5c: 48:5e:c1:cb:64:e7:ff:f1:9f:91:47:a1:e9:30:b9:41:77:0d: 22:45:ee:5b:86:c6:a9:50:de:07:a4:1d:8c:f3:5a:16:83:cd: 65:51:cc:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwNDI2MjE0ODQyWhcNMjUwNTAzMjE0ODQyWjAYMRYwFAYD VQQDEw02ODBkNTRiYS0yYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt329Hd09TgaVTtGGsc4lfnFqrdKixPhq9cB8P7TEXOJNS+JwjMxA98zzGPX fmxCSmN0Sa0ayzHyb+BiRfWj2OBrKjlR2e91bjzooWioK8qN+03Jfl/LYCSgILwu 1rRNIXXGQHafg3LNEPOl0pTDArLlXJ+GjNQD10V0WJwAXWkzEg1RpsZ2aVi4cOXo NlWN21vhiSGbEhUK1eaetimSgGAVDyu6d8OjuXdcBZfrZaOB3+Jq36DTGKC7ArTG NLB+wWYtT0DkQPoRu/n9HqLijtULwNFBiy/7aVouf0LDuSjQ57N65pIVctYr7BuH tBRcNP7//d9LbDjguuxP0U2QnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSaXUyI mxYTRReudi7DL3t93AeLMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5Qi83MzNEQTRFODVCMzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFN X3NEY09acGVoRG41T2NrWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp/E2L5Izg7y6tXrxVjIs53VGLl+acJ3HA0O7ZgkfWBWO0xBRHpkTM qyTbwtlk5IHxYOK2owqMeLEpCXnhFl+tynpct8GvPYdTlbaqeOdgbFRR5VdbIe0p C6OzfU7JGYv6vWaFXRl1RRCKZ6tEIn9raMtXhQveUox8IzqEHAv5khIcVpRnM360 bp2ssx7EHV6u00l3EN2HpagAYwmPaVKbDR6O4oHGZ+MHN7ps9ee9YKIv6rTqr1wl HqgIhzgyuAxn9T5Jm/VRfjRnSQFykqhlIMXEA0obGlxIXsHLZOf/8Z+RR6HpMLlB dw0iRe5bhsapUN4HpB2M81oWg81lUczP -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:25 2025 by rpki-client on console.sobornost.net