$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: PTFTChjoZUSKNJk3G7ylo7Ah19I6/KCNfA60Ve1M8zE= Subject key identifier: C1:CD:0A:85:BE:0A:E5:B0:6A:2C:EC:7E:54:2F:24:53:4E:72:9B:C2 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 02EB Signing time: Sun 27 Apr 2025 01:00:21 +0000 Manifest this update: Sun 27 Apr 2025 01:00:20 +0000 Manifest next update: Sun 04 May 2025 01:00:20 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: 4Zk72Ao+v8LmS0gxPul2Wq4FLcY91v6NmKTKkHADX14=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Apr 27 01:00:20 2025 GMT Not After : May 4 01:00:20 2025 GMT Subject: CN=680d81a5-37f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:5f:62:ae:cb:2b:5c:4a:ed:16:f1:82:56: 4c:3e:ad:9e:69:c6:29:cc:15:fb:5f:b8:3c:7f:7c: 0b:27:1e:12:f9:52:3c:ac:09:67:59:7b:52:bc:b4: f0:0d:5f:80:7e:cc:20:3e:d5:01:1e:ca:e6:41:c0: 01:1a:2c:29:29:42:05:0c:ac:64:fd:8d:ed:46:8a: a7:5a:2e:0e:81:bc:a5:43:c8:24:f2:67:0c:b7:90: 6c:bb:4c:c6:a5:60:cf:89:a7:35:ce:01:de:67:e6: 99:d3:12:f7:92:46:6f:db:04:89:aa:2a:03:b0:b5: 58:c4:43:44:2d:6a:49:a6:10:92:da:46:a5:55:c0: 36:10:80:f9:1b:e2:04:8e:77:56:4d:d8:f5:2f:a3: e5:66:88:00:e6:44:a6:a4:86:a4:9f:3d:6b:05:5e: aa:91:54:83:76:ec:d4:81:c9:f0:b7:df:f0:6c:77: 81:b3:3b:56:c4:20:56:8b:f2:b7:27:a3:16:7f:c1: 23:af:e7:82:2a:b6:bf:bf:01:07:4d:b1:29:8b:48: 05:66:b6:41:f8:c2:92:8c:a3:d7:3e:ff:4e:b4:05: 5a:ab:1e:98:3d:e2:7b:e9:6c:28:2e:ac:90:02:67: 11:6a:a8:25:38:98:62:c5:45:af:97:c3:5f:a5:c6: f7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CD:0A:85:BE:0A:E5:B0:6A:2C:EC:7E:54:2F:24:53:4E:72:9B:C2 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:eb:4e:a8:34:d0:a1:78:18:9f:e9:f0:8b:4a:38:8b:7b:5d: 4e:ea:0c:36:40:d4:30:5f:57:96:b7:4e:84:2f:98:5a:66:6c: be:5b:22:e6:39:0f:77:17:d4:56:82:58:53:f3:1b:d4:a3:35: 37:c1:00:e9:6e:32:e0:af:00:dd:87:3f:06:f2:2d:e6:bd:14: aa:25:89:fe:fe:b7:66:2c:b4:11:8a:a6:96:d0:2f:61:83:d0: dc:c0:19:d2:32:19:40:ec:09:21:c2:9f:13:19:d1:4b:4b:91: b2:57:8d:c2:c1:01:5d:c3:c7:1d:ec:92:7e:59:3e:92:83:89: 03:a1:e0:b4:27:fe:35:87:87:26:16:4a:a8:ff:18:8a:17:d5: 56:e6:99:14:42:1d:81:c6:0d:97:93:35:d9:26:14:41:d6:ed: a2:88:eb:a1:b0:1e:9a:d9:99:30:a1:de:81:2d:ee:ec:17:1a: 33:51:45:6a:a8:b4:93:ca:bf:c0:33:d3:4d:bc:d0:df:57:18: b2:f8:8a:f0:4e:75:c7:7d:cc:f5:c8:98:6a:41:61:f9:4b:c0: 1b:ab:da:fd:2b:dd:66:71:aa:32:bf:e4:7c:ac:10:0a:ab:c5: 76:d0:e4:82:f3:02:8c:90:12:d3:42:7b:f6:c9:f5:48:1e:e6: c4:60:c2:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwNDI3MDEwMDIwWhcNMjUwNTA0MDEwMDIwWjAYMRYwFAYD VQQDEw02ODBkODFhNS0zN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylBfYq7LK1xK7RbxglZMPq2eacYpzBX7X7g8f3wLJx4S+VI8rAlnWXtSvLTw DV+AfswgPtUBHsrmQcABGiwpKUIFDKxk/Y3tRoqnWi4OgbylQ8gk8mcMt5Bsu0zG pWDPiac1zgHeZ+aZ0xL3kkZv2wSJqioDsLVYxENELWpJphCS2kalVcA2EID5G+IE jndWTdj1L6PlZogA5kSmpIaknz1rBV6qkVSDduzUgcnwt9/wbHeBsztWxCBWi/K3 J6MWf8Ejr+eCKra/vwEHTbEpi0gFZrZB+MKSjKPXPv9OtAVaqx6YPeJ76WwoLqyQ AmcRaqglOJhixUWvl8Nfpcb39wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHNCoW+ CuWwaizsflQvJFNOcpvCMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn606oNNCheBif6fCLSjiLe11O6gw2QNQwX1eWt06EL5haZmy+WyLm OQ93F9RWglhT8xvUozU3wQDpbjLgrwDdhz8G8i3mvRSqJYn+/rdmLLQRiqaW0C9h g9DcwBnSMhlA7Akhwp8TGdFLS5GyV43CwQFdw8cd7JJ+WT6Sg4kDoeC0J/41h4cm Fkqo/xiKF9VW5pkUQh2Bxg2XkzXZJhRB1u2iiOuhsB6a2Zkwod6BLe7sFxozUUVq qLSTyr/AM9NNvNDfVxiy+IrwTnXHfcz1yJhqQWH5S8Abq9r9K91mcaoyv+R8rBAK q8V20OSC8wKMkBLTQnv2yfVIHubEYMLL -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net