$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft File: JbCzFZvpDPGiOyUhpSER_wOQXvc.mft (raw, json) Hash identifier: N+zl+mTcu22hXjjhZMayxKgfcluyUi/QAEX9ZVSxRkk= Subject key identifier: 16:31:D8:79:64:B4:1E:42:57:51:32:B3:F1:88:88:0E:EE:5B:98:A8 Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 Certificate issuer: /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft Manifest number: 10 Signing time: Sun 27 Apr 2025 06:54:08 +0000 Manifest this update: Sun 27 Apr 2025 06:54:07 +0000 Manifest next update: Sun 04 May 2025 06:54:07 +0000 Files and hashes: 1: JbCzFZvpDPGiOyUhpSER_wOQXvc.crl (hash: VjlDqRqQskXP9o3v9n9uHvUbi87MdjuOSFsiXhX3f18=) 2: 3051CA240FBB11F0B9C1D274C4F9AE02.roa (hash: LQXESBC03M55eTRwU/sXkaRTACDEQkRKoyFYlNpa2vw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7 Validity Not Before: Apr 27 06:54:07 2025 GMT Not After : May 4 06:54:07 2025 GMT Subject: CN=680dd48f-a99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:ae:0e:49:16:ab:2a:c6:64:18:6e:e0:02: 57:d9:6c:39:31:fe:cd:da:22:08:75:f6:7c:8c:f3: a0:9c:3a:f3:07:58:b8:86:6d:1a:98:f2:7b:d1:25: 91:91:b0:70:c3:a7:a2:13:85:d3:fa:5c:a0:b6:be: 3a:9f:7e:8a:3a:63:d8:bb:14:91:5a:c9:35:58:50: 3b:ae:ed:6d:14:12:cc:8a:a9:a7:e7:8e:23:a5:e4: 14:5b:46:c5:0b:53:d9:ae:b7:26:17:b1:4f:fc:47: bb:2a:7e:f5:bd:6a:0f:bb:44:14:fe:f6:4a:ab:92: cf:5f:7e:09:1b:27:5a:d3:f3:d3:1e:a7:31:64:20: 40:1f:fb:5c:55:1b:6a:0b:c9:f4:42:c3:d1:6c:57: e9:9d:36:19:3b:f7:5e:6f:da:84:d3:df:22:e1:4d: ff:9e:df:66:13:2f:97:54:0e:70:44:70:52:14:c7: d9:a0:a3:bf:9e:fe:8d:32:a4:66:2c:ff:09:58:37: 3e:c9:69:5b:c4:59:15:14:51:4d:96:0b:3c:62:73: d6:fa:28:e6:5c:c6:f9:0b:7e:1e:d8:c4:e2:0e:c4: fb:3d:02:f4:dc:1a:cd:91:c6:0b:38:cb:19:4a:2d: 5e:c3:f6:d0:ee:a5:a7:7e:84:9c:93:f6:21:25:a2: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:31:D8:79:64:B4:1E:42:57:51:32:B3:F1:88:88:0E:EE:5B:98:A8 X509v3 Authority Key Identifier: keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f6:41:d0:3c:42:3e:14:19:e4:e1:d6:51:2c:bd:22:4a:84: 8a:50:9b:3d:97:da:0a:1f:d3:cc:ba:5f:95:ba:bd:ca:d4:f1: f4:c9:b3:07:b7:b9:c4:f4:50:2c:2f:71:79:1a:d6:21:ab:04: 24:74:81:a5:ff:0e:9a:79:79:6f:bb:5d:72:f6:1f:3c:95:64: f9:67:0c:29:41:35:2e:c6:64:25:5d:dc:ec:d4:a5:0e:ef:84: d5:d5:d0:d2:6f:25:66:09:8f:2c:5f:b9:ea:6f:2c:81:7d:93: 93:38:f5:58:ba:86:33:ad:97:94:9c:eb:cb:cc:3b:1a:36:43: 55:b6:e2:b3:e9:dd:66:ed:75:fb:bf:f2:b3:9a:7f:0d:07:b9: 8c:f3:71:b3:ef:1e:92:ec:bb:31:53:d1:37:cc:c4:ca:b6:a1: 0c:4b:07:d8:02:4b:76:2b:61:9b:0a:ae:c0:ab:8b:bd:0a:90: 79:f6:1e:38:cb:2f:6c:7c:5c:b2:e5:6a:73:93:af:6e:db:7a: eb:9e:45:97:13:f2:1e:07:22:6e:f1:22:17:d6:5c:49:7c:7a: 12:91:61:1b:21:4d:c1:bd:d4:5c:34:0f:47:bd:16:4e:eb:a3: 12:57:5b:46:3e:a4:a8:15:a5:d1:d0:10:4d:17:87:4b:20:b3: 99:27:e4:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QTcxNjExMC8GA1UEBRMoMjVCMEIzMTU5QkU5MENGMUEyM0IyNTIxQTUyMTExRkYw MzkwNUVGNzAeFw0yNTA0MjcwNjU0MDdaFw0yNTA1MDQwNjU0MDdaMBgxFjAUBgNV BAMTDTY4MGRkNDhmLWE5OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9bq4OSRarKsZkGG7gAlfZbDkx/s3aIgh19nyM86CcOvMHWLiGbRqY8nvRJZGR sHDDp6IThdP6XKC2vjqffoo6Y9i7FJFayTVYUDuu7W0UEsyKqafnjiOl5BRbRsUL U9mutyYXsU/8R7sqfvW9ag+7RBT+9kqrks9ffgkbJ1rT89MepzFkIEAf+1xVG2oL yfRCw9FsV+mdNhk7915v2oTT3yLhTf+e32YTL5dUDnBEcFIUx9mgo7+e/o0ypGYs /wlYNz7JaVvEWRUUUU2WCzxic9b6KOZcxvkLfh7YxOIOxPs9AvTcGs2Rxgs4yxlK LV7D9tDupad+hJyT9iElouAhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFjHYeWS0 HkJXUTKz8YiIDu5bmKgwHwYDVR0jBBgwFoAUJbCzFZvpDPGiOyUhpSER/wOQXvcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBNzE2LzYwMTlEM0ZDMEY5 QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBHaU95VWhwU0VSX3dPUVh2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmJDekZadnBEUEdpT3lVaHBTRVJfd09RWHZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB NzE2LzYwMTlEM0ZDMEY5QjExRjBBQkM4NDA3NEM0RjlBRTAyL0piQ3pGWnZwRFBH aU95VWhwU0VSX3dPUVh2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK72QdA8Qj4UGeTh1lEsvSJKhIpQmz2X2gof08y6X5W6vcrU8fTJswe3 ucT0UCwvcXka1iGrBCR0gaX/Dpp5eW+7XXL2HzyVZPlnDClBNS7GZCVd3OzUpQ7v hNXV0NJvJWYJjyxfuepvLIF9k5M49Vi6hjOtl5Sc68vMOxo2Q1W24rPp3Wbtdfu/ 8rOafw0HuYzzcbPvHpLsuzFT0TfMxMq2oQxLB9gCS3YrYZsKrsCri70KkHn2HjjL L2x8XLLlanOTr27beuueRZcT8h4HIm7xIhfWXEl8ehKRYRshTcG91Fw0D0e9Fk7r oxJXW0Y+pKgVpdHQEE0Xh0sgs5kn5EE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net