$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: hCimHiYsbkoRuXiowphtrEl6oCAvrcQndz9fr0R2tsw= Subject key identifier: E6:6F:6D:3F:5F:D4:4E:3C:EE:60:E9:FE:A0:70:13:68:27:7B:BA:41 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 02EA Signing time: Fri 25 Apr 2025 01:07:55 +0000 Manifest this update: Fri 25 Apr 2025 01:07:54 +0000 Manifest next update: Fri 02 May 2025 01:07:54 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: SNv0NKjYh+q2kk4xz4Gzdqw3V0u5Kf8Q/4pqmWlPmmo=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Apr 25 01:07:54 2025 GMT Not After : May 2 01:07:54 2025 GMT Subject: CN=680ae06a-301d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:c7:2b:1c:56:78:28:33:9d:c8:a8:71:10: a0:4a:b1:6c:2e:93:f8:1b:2a:e8:4d:3c:96:92:9f: bb:73:ae:3a:bf:7a:cf:2c:7f:28:e0:68:f1:f7:f2: 68:d7:5e:b9:32:b7:ac:19:a8:b4:10:eb:33:94:93: 5e:ca:0b:15:d2:24:15:36:6a:e3:d6:21:0e:28:97: b2:12:83:1e:ba:9f:4d:5a:5f:74:34:21:a2:83:c9: 26:5c:21:44:4f:c6:61:0c:7d:4b:d1:b5:34:96:08: 54:3d:86:5a:8b:e6:c0:40:98:81:29:c5:a7:d7:a0: c1:bc:5d:6d:d5:d9:39:a3:e6:09:3f:28:c0:26:6d: 95:77:ea:b3:6e:8e:37:e0:30:b7:e8:7e:a2:6e:e9: 0f:be:eb:82:63:f1:48:1a:a7:94:a3:f1:d2:83:44: 64:a5:5c:c7:21:75:ba:93:68:60:38:9b:19:d6:c1: 2c:21:d9:d2:89:1b:fc:d2:ea:88:0f:ca:93:9c:d2: ef:cf:33:81:4d:d0:b4:bc:99:d0:4d:9e:a9:dd:81: 40:64:73:71:61:80:b0:ea:97:24:e6:66:d8:9f:4e: 7f:e6:bc:20:67:03:5f:70:0e:52:20:ca:af:36:ea: 3c:87:47:0d:e7:25:ea:1a:7d:b6:54:ee:6b:ed:57: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6F:6D:3F:5F:D4:4E:3C:EE:60:E9:FE:A0:70:13:68:27:7B:BA:41 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7f:68:6d:63:c6:34:d8:d5:85:b9:dd:f5:fb:b3:83:97:b7: cd:70:c0:bc:91:2f:5a:b6:c2:6c:8d:10:68:1b:87:6f:17:0a: 7d:08:57:30:92:34:79:c4:94:6a:08:f0:50:2d:c5:af:d1:fe: bb:3e:16:54:67:39:2b:1e:0b:5f:79:2a:99:81:c9:ab:c5:70: e1:11:11:6f:8f:04:20:41:4f:c1:34:36:07:70:ee:f9:f8:c1: 52:f6:ee:ea:25:0f:21:c2:8d:a6:21:a4:5f:a3:c8:03:49:07: 7d:e5:51:18:c7:ec:bf:9c:dc:11:9f:2d:89:c9:48:21:41:07: e6:f6:0f:ca:a5:d7:85:56:b4:e9:8b:f7:d5:d3:49:66:8e:85: 19:e5:ca:70:20:5a:a4:89:f1:39:c4:b7:3d:aa:40:57:28:c0: d1:03:9f:69:a6:1e:0b:39:d7:71:f9:d7:c6:13:33:42:b1:f5: 05:6e:c1:9d:99:45:fb:a7:13:fc:73:d6:0b:73:69:57:1f:b5: 6c:c4:33:37:97:16:90:81:c0:b1:fc:ca:26:68:91:a8:91:e1: e9:18:37:1d:39:5c:f9:47:0a:39:97:f0:71:5b:0c:8a:cb:f0: 3b:20:4c:17:be:48:ef:db:4d:0e:ca:12:9e:58:ae:15:ee:41: b8:6c:7b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwNDI1MDEwNzU0WhcNMjUwNTAyMDEwNzU0WjAYMRYwFAYD VQQDEw02ODBhZTA2YS0zMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLbHKxxWeCgznciocRCgSrFsLpP4GyroTTyWkp+7c646v3rPLH8o4Gjx9/Jo 1165MresGai0EOszlJNeygsV0iQVNmrj1iEOKJeyEoMeup9NWl90NCGig8kmXCFE T8ZhDH1L0bU0lghUPYZai+bAQJiBKcWn16DBvF1t1dk5o+YJPyjAJm2Vd+qzbo43 4DC36H6ibukPvuuCY/FIGqeUo/HSg0RkpVzHIXW6k2hgOJsZ1sEsIdnSiRv80uqI D8qTnNLvzzOBTdC0vJnQTZ6p3YFAZHNxYYCw6pck5mbYn05/5rwgZwNfcA5SIMqv Nuo8h0cN5yXqGn22VO5r7VcVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZvbT9f 1E487mDp/qBwE2gne7pBMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9f2htY8Y02NWFud31+7ODl7fNcMC8kS9atsJsjRBoG4dvFwp9CFcw kjR5xJRqCPBQLcWv0f67PhZUZzkrHgtfeSqZgcmrxXDhERFvjwQgQU/BNDYHcO75 +MFS9u7qJQ8hwo2mIaRfo8gDSQd95VEYx+y/nNwRny2JyUghQQfm9g/KpdeFVrTp i/fV00lmjoUZ5cpwIFqkifE5xLc9qkBXKMDRA59pph4LOddx+dfGEzNCsfUFbsGd mUX7pxP8c9YLc2lXH7VsxDM3lxaQgcCx/MomaJGokeHpGDcdOVz5Rwo5l/BxWwyK y/A7IEwXvkjv200OyhKeWK4V7kG4bHu1 -----END CERTIFICATE-----Generated at Sat Apr 26 17:19:19 2025 by rpki-client