$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: tXJi28Xm8gacea6MtQTAH71WDUY8KJDjo+P/LH8H1D8= Subject key identifier: 27:03:F4:56:D4:9A:37:C0:34:07:F9:43:AC:6C:4B:6A:E2:03:C3:5A Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0316 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 02F5 Signing time: Sat 17 May 2025 01:34:43 +0000 Manifest this update: Sat 17 May 2025 01:34:42 +0000 Manifest next update: Sat 24 May 2025 01:34:42 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: +MmkY8DKnb+lutL1lnl97iFmxgeQhhS1ZYc36IA9A3I=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 01:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 790 (0x316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: May 17 01:34:42 2025 GMT Not After : May 24 01:34:42 2025 GMT Subject: CN=6827e7b3-c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:2a:59:0a:56:fd:54:bd:1e:0d:d7:ae:15: bf:e2:ba:97:3e:4a:9c:90:5e:33:4f:19:53:97:42: f9:0d:90:77:2e:ba:01:0e:23:12:0b:45:a2:3d:ee: 26:44:e2:ef:be:2a:e8:99:2e:cf:d5:9f:be:ce:9d: a0:71:9f:16:6b:19:9c:2e:e5:59:bc:30:09:a2:64: 8a:04:56:9d:55:73:46:b0:f8:5a:1c:02:0a:e3:52: d3:33:e5:b4:27:1e:a6:23:94:43:9b:1e:5a:86:11: 01:de:2c:93:f6:8a:78:ab:cd:91:08:a9:e5:96:5b: cd:d1:ef:fc:7e:b2:18:88:06:73:54:e0:f7:5d:19: d1:05:86:f2:55:8a:ae:c0:95:c4:5c:5e:65:e3:55: 83:5d:38:1e:33:a5:da:0d:3f:73:6e:7d:6b:e8:88: 7c:2c:fd:ff:0c:c9:65:a7:0b:15:3e:ee:87:6e:95: 5e:0c:08:72:72:5f:65:98:58:61:d9:e0:58:48:bb: 01:5f:16:20:7b:1e:56:cc:c1:f6:80:f7:4f:5b:b6: 82:a2:63:fc:7b:bc:30:37:d6:46:0d:cf:09:45:c4: db:df:4f:5e:cd:47:06:63:44:18:f9:f3:86:5f:e6: 59:8b:83:ed:8a:80:7b:ec:1c:17:32:fc:16:d3:0c: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:F4:56:D4:9A:37:C0:34:07:F9:43:AC:6C:4B:6A:E2:03:C3:5A X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:66:86:9a:0d:44:c9:d1:f9:4d:8c:ac:76:8c:1f:db:f1:74: a2:f9:7a:48:f3:c3:b2:7b:bc:ca:48:20:f2:ed:fa:94:af:e7: 5e:05:2e:c3:40:44:10:ce:89:ef:25:41:7e:9d:2e:24:a2:53: 37:a9:ad:cd:af:2a:b8:ed:1b:29:72:d9:6b:b4:ab:97:be:04: 25:47:02:ef:dc:42:6c:d4:50:3c:82:87:16:02:01:92:fb:24: b4:60:77:59:16:72:d6:a0:46:5c:28:81:8e:93:27:28:26:9e: cc:af:59:d3:87:11:92:ed:7c:ed:5c:7a:25:67:cd:72:a1:00: e9:04:05:37:3e:a2:a3:b9:8b:1b:02:34:ea:a3:e7:9c:ac:9e: a6:50:74:ed:d5:58:72:82:5d:75:e1:0b:fe:f3:ea:d3:42:9c: b6:83:d2:84:3c:5f:3f:a6:9e:e6:ea:ab:4e:db:b0:88:61:ac: c5:6d:d0:dc:d5:70:f7:ee:30:6a:89:2b:79:b6:c6:29:a7:b3: 1e:f6:39:56:4e:79:d1:42:80:0d:f8:d6:9f:f0:f3:f5:b4:8b: 08:6d:c1:2b:bb:a4:52:68:1f:a4:a0:2e:ed:a7:4f:e2:4a:01: 6e:3e:80:0b:ae:01:90:ef:c6:90:3f:3b:76:06:33:d2:89:10: ce:36:1c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwNTE3MDEzNDQyWhcNMjUwNTI0MDEzNDQyWjAYMRYwFAYD VQQDEw02ODI3ZTdiMy1jMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6oqWQpW/VS9Hg3XrhW/4rqXPkqckF4zTxlTl0L5DZB3LroBDiMSC0WiPe4m ROLvviromS7P1Z++zp2gcZ8WaxmcLuVZvDAJomSKBFadVXNGsPhaHAIK41LTM+W0 Jx6mI5RDmx5ahhEB3iyT9op4q82RCKnlllvN0e/8frIYiAZzVOD3XRnRBYbyVYqu wJXEXF5l41WDXTgeM6XaDT9zbn1r6Ih8LP3/DMllpwsVPu6HbpVeDAhycl9lmFhh 2eBYSLsBXxYgex5WzMH2gPdPW7aComP8e7wwN9ZGDc8JRcTb309ezUcGY0QY+fOG X+ZZi4PtioB77BwXMvwW0wy1EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcD9FbU mjfANAf5Q6xsS2riA8NaMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnZoaaDUTJ0flNjKx2jB/b8XSi+XpI88Oye7zKSCDy7fqUr+deBS7D QEQQzonvJUF+nS4kolM3qa3Nryq47RspctlrtKuXvgQlRwLv3EJs1FA8gocWAgGS +yS0YHdZFnLWoEZcKIGOkycoJp7Mr1nThxGS7XztXHolZ81yoQDpBAU3PqKjuYsb AjTqo+ecrJ6mUHTt1Vhygl114Qv+8+rTQpy2g9KEPF8/pp7m6qtO27CIYazFbdDc 1XD37jBqiSt5tsYpp7Me9jlWTnnRQoAN+Naf8PP1tIsIbcEru6RSaB+koC7tp0/i SgFuPoALrgGQ78aQPzt2BjPSiRDONhwg -----END CERTIFICATE-----Generated at Sat May 17 06:55:14 2025 by rpki-client