$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft File: JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json) Hash identifier: bz0M5IlhBsn5EO2tIQm29rp3k6muHsV8UJDhu63eZdU= Subject key identifier: 43:C4:0B:B8:DF:60:3D:0B:C9:EC:76:EA:9B:19:F3:6D:D1:C4:5E:F3 Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 Certificate issuer: /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft Manifest number: 0639 Signing time: Sat 26 Apr 2025 22:17:40 +0000 Manifest this update: Sat 26 Apr 2025 22:17:39 +0000 Manifest next update: Sat 03 May 2025 22:17:39 +0000 Files and hashes: 1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: mXDQdQhg5OGKZN/cozpJljSK8FmaR1BUlwuqxZFJiT0=) 2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Validity Not Before: Apr 26 22:17:39 2025 GMT Not After : May 3 22:17:39 2025 GMT Subject: CN=680d5b83-d7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:2d:c4:00:df:b4:63:8b:48:d9:95:3d:de: 62:c6:1a:31:1b:c7:11:1d:90:21:aa:84:c6:10:96: 42:9d:57:5a:98:25:ad:6e:4b:ab:7b:7c:fe:c6:41: 36:3a:b4:db:3a:d9:83:1d:55:d6:57:05:23:aa:5e: 05:99:e4:55:1f:55:8b:c9:c3:91:66:56:44:9a:c1: c1:19:be:9f:a6:05:92:70:49:62:7e:b0:ab:57:3a: ce:4d:5b:3c:d7:8e:3e:9c:39:ca:8a:01:7d:ea:f1: d2:0d:f8:74:52:f6:db:35:31:63:74:06:08:d2:c2: c8:05:88:8f:f5:72:0f:9f:2b:bd:3c:8a:a4:c8:80: 72:a2:1e:19:d3:34:4b:71:04:99:66:77:53:f3:38: 45:7e:e3:69:cc:5e:12:14:bc:f4:f2:46:57:13:58: 64:eb:40:83:e9:1c:e6:e2:e2:a7:89:ea:3b:00:ec: 80:2e:c2:e0:86:53:53:0f:ee:b9:64:2e:74:48:9f: 91:d4:ad:a1:15:5a:38:63:c0:56:3c:a9:b8:7b:92: 7f:ce:64:d6:29:89:fd:8a:68:9b:2e:9b:d2:36:60: 87:4f:a0:a5:9a:38:73:62:33:99:e7:97:f7:0f:06: c6:ab:b5:58:c5:9c:8e:f2:81:3f:9a:01:73:3c:b1: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C4:0B:B8:DF:60:3D:0B:C9:EC:76:EA:9B:19:F3:6D:D1:C4:5E:F3 X509v3 Authority Key Identifier: keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1c:e0:81:2d:74:2f:18:66:fd:8c:04:8a:b8:e7:1a:8b:27: ad:26:02:7b:90:86:60:ee:3b:6a:89:b1:41:c2:85:a8:6c:1e: 9c:d1:62:65:a9:f3:4f:88:e8:0b:15:ae:48:cc:06:dd:72:6d: ed:e1:c2:bc:2a:df:c6:ac:71:04:f6:78:37:8a:7b:ed:77:f7: 10:ad:3a:6e:2d:12:cf:b9:20:e2:64:7a:45:9b:82:5a:fa:ee: fe:1c:4a:61:7c:da:bd:86:19:e6:24:eb:fb:f5:d2:54:d0:e0: 6e:73:2e:10:92:46:65:35:c4:39:bf:18:34:3a:75:67:f4:25: ff:13:aa:9f:3f:71:15:4d:ce:6b:6b:39:2f:35:69:5b:d2:64: c1:8f:f5:d2:6f:38:27:76:55:16:27:03:83:69:a2:e5:f0:30: ad:56:ea:31:94:8f:d0:f4:e6:c6:b3:2b:90:33:8d:35:23:82: 9d:75:5a:44:cb:20:34:da:26:6e:40:6f:5b:e8:32:ad:10:ec: 41:dd:09:82:b5:00:7c:e8:85:e2:6c:c2:50:f2:90:96:67:69: 9e:97:03:1c:67:d5:a7:f7:85:3f:e0:45:89:40:a0:7d:bd:e9: 9c:ff:a0:10:ee:5e:91:ed:3e:70:05:ee:92:7b:2f:4c:21:de: 55:d3:51:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEUxMTAvBgNVBAUTKDI2QThDODRDMjBEMDJBN0ZDNEFFRURFMTU1QzBCMzFC MDhFRTdCNjcwHhcNMjUwNDI2MjIxNzM5WhcNMjUwNTAzMjIxNzM5WjAYMRYwFAYD VQQDEw02ODBkNWI4My1kN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i0txADftGOLSNmVPd5ixhoxG8cRHZAhqoTGEJZCnVdamCWtbkure3z+xkE2 OrTbOtmDHVXWVwUjql4FmeRVH1WLycORZlZEmsHBGb6fpgWScElifrCrVzrOTVs8 144+nDnKigF96vHSDfh0UvbbNTFjdAYI0sLIBYiP9XIPnyu9PIqkyIByoh4Z0zRL cQSZZndT8zhFfuNpzF4SFLz08kZXE1hk60CD6Rzm4uKnieo7AOyALsLghlNTD+65 ZC50SJ+R1K2hFVo4Y8BWPKm4e5J/zmTWKYn9imibLpvSNmCHT6ClmjhzYjOZ55f3 DwbGq7VYxZyO8oE/mgFzPLFFLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPEC7jf YD0Lyex26psZ823RxF7zMB8GA1UdIwQYMBaAFCaoyEwg0Cp/xK7t4VXAsxsI7ntn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRS9DNkI1N0M4RThD OTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtuX0VydTNoVmNDekd3anVl MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pxaklUQ0RRS25fRXJ1M2hWY0N6R3dqdWUyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRS9DNkI1N0M4RThDOTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtu X0VydTNoVmNDekd3anVlMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsHOCBLXQvGGb9jASKuOcaiyetJgJ7kIZg7jtqibFBwoWobB6c0WJl qfNPiOgLFa5IzAbdcm3t4cK8Kt/GrHEE9ng3invtd/cQrTpuLRLPuSDiZHpFm4Ja +u7+HEphfNq9hhnmJOv79dJU0OBucy4QkkZlNcQ5vxg0OnVn9CX/E6qfP3EVTc5r azkvNWlb0mTBj/XSbzgndlUWJwODaaLl8DCtVuoxlI/Q9ObGsyuQM401I4KddVpE yyA02iZuQG9b6DKtEOxB3QmCtQB86IXibMJQ8pCWZ2melwMcZ9Wn94U/4EWJQKB9 vemc/6AQ7l6R7T5wBe6Sey9MId5V01G/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net