$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: 1k2mErJMGEPFWcVU1saH7KExVIt5KdegPxaC97VNdPE= Subject key identifier: 5D:1B:2E:BF:36:01:D9:BE:CD:75:72:D5:2C:EC:50:E6:28:0B:82:18 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 02FC Signing time: Sun 01 Jun 2025 01:33:09 +0000 Manifest this update: Sun 01 Jun 2025 01:33:08 +0000 Manifest next update: Sun 08 Jun 2025 01:33:08 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: 8cJ9pRWL7JSdu1bXsfsQYHzrn9TgrgGwxDRJ5NUbUxA=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jun 1 01:33:08 2025 GMT Not After : Jun 8 01:33:08 2025 GMT Subject: CN=683badd4-2773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:9d:9e:6b:bf:0f:ac:41:f0:04:38:93:bf: 29:ab:41:4c:b2:6e:72:4b:f6:aa:12:7c:d5:28:60: e0:6b:8f:ec:c2:1c:20:7b:48:b8:5f:ee:11:28:27: a1:ad:19:2c:92:7a:36:56:1d:a4:17:ef:f0:5c:3b: 05:a8:31:2c:2e:18:4a:1c:f9:74:9e:d4:ca:d2:33: eb:f6:0e:cb:38:31:d9:db:73:75:86:7d:bd:93:4b: 80:89:1e:8b:ed:6e:a4:3a:f6:83:c6:80:6d:0d:28: 19:df:b8:c3:c1:a1:58:ae:d3:fd:58:8e:17:8f:5b: c9:74:1d:ef:6b:3a:6a:79:b0:ad:0b:44:86:13:72: 01:ff:24:0d:28:43:5e:a0:32:cc:ad:61:56:4f:88: e9:6b:00:af:ae:a3:01:ff:ea:37:78:20:9f:f5:7e: 3c:21:bb:88:1f:c4:dd:ff:e3:54:23:ac:a4:b9:d7: 08:dc:70:12:3e:82:96:52:f6:b4:c5:38:2e:eb:e9: d3:71:3b:65:48:aa:24:17:2b:c4:ec:2a:23:68:88: 7a:40:e0:50:7b:f0:d3:cf:d0:e9:45:78:c7:36:57: 55:54:93:e2:2e:67:4c:46:5a:49:f8:14:09:f3:22: e5:58:1a:12:a8:85:0a:ca:b7:aa:13:da:1a:df:65: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:2E:BF:36:01:D9:BE:CD:75:72:D5:2C:EC:50:E6:28:0B:82:18 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:18:4e:05:a9:98:11:52:fc:17:62:15:e4:2f:95:5e:d4:50: ab:f5:b7:da:f6:9c:14:eb:1b:e9:b0:fd:22:94:4d:02:61:c1: 5e:29:d2:d6:6e:ba:46:93:95:e3:61:36:7a:b4:d9:8c:59:46: bb:9a:70:2c:5c:b5:37:17:d4:63:3f:c5:d8:d9:76:0a:ce:23: 07:bf:2e:11:46:4c:1d:1b:3c:72:f8:a8:88:79:14:0c:1b:79: 83:9e:96:8e:37:be:ee:82:e9:8b:00:c8:78:70:77:87:c0:79: 02:da:89:b4:66:65:7c:8c:4d:36:86:07:3f:53:7d:4c:61:10: 1d:02:3e:ee:aa:1b:97:54:e4:8b:6a:5c:ff:8f:96:51:33:50: 1b:5c:6b:71:85:ea:42:dd:47:b9:68:19:a5:c2:c2:d5:63:2d: fe:b0:a6:ea:6c:bc:d5:ac:48:5c:16:a3:c8:dd:93:fb:b1:e3: f5:5f:3e:47:c2:87:89:00:7e:2a:f4:58:59:e2:77:6e:b2:7c: 98:83:8c:68:2d:db:05:0f:39:a4:ea:e0:a9:8a:55:c9:96:9d: 0b:23:91:24:20:0d:9c:ca:b2:a6:cf:aa:cf:fe:cd:75:f9:66: 19:0a:d7:50:2c:e2:6e:a1:13:6b:e1:2e:60:3a:51:e4:a0:18: 2c:2b:e3:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwNjAxMDEzMzA4WhcNMjUwNjA4MDEzMzA4WjAYMRYwFAYD VQQDEw02ODNiYWRkNC0yNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MWdnmu/D6xB8AQ4k78pq0FMsm5yS/aqEnzVKGDga4/swhwge0i4X+4RKCeh rRkskno2Vh2kF+/wXDsFqDEsLhhKHPl0ntTK0jPr9g7LODHZ23N1hn29k0uAiR6L 7W6kOvaDxoBtDSgZ37jDwaFYrtP9WI4Xj1vJdB3vazpqebCtC0SGE3IB/yQNKENe oDLMrWFWT4jpawCvrqMB/+o3eCCf9X48IbuIH8Td/+NUI6ykudcI3HASPoKWUva0 xTgu6+nTcTtlSKokFyvE7CojaIh6QOBQe/DTz9DpRXjHNldVVJPiLmdMRlpJ+BQJ 8yLlWBoSqIUKyreqE9oa32WzyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0bLr82 Adm+zXVy1SzsUOYoC4IYMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwGE4FqZgRUvwXYhXkL5Ve1FCr9bfa9pwU6xvpsP0ilE0CYcFeKdLW brpGk5XjYTZ6tNmMWUa7mnAsXLU3F9RjP8XY2XYKziMHvy4RRkwdGzxy+KiIeRQM G3mDnpaON77ugumLAMh4cHeHwHkC2om0ZmV8jE02hgc/U31MYRAdAj7uqhuXVOSL alz/j5ZRM1AbXGtxhepC3Ue5aBmlwsLVYy3+sKbqbLzVrEhcFqPI3ZP7seP1Xz5H woeJAH4q9FhZ4ndusnyYg4xoLdsFDzmk6uCpilXJlp0LI5EkIA2cyrKmz6rP/s11 +WYZCtdQLOJuoRNr4S5gOlHkoBgsK+OL -----END CERTIFICATE-----Generated at Mon Jun 2 21:09:24 2025 by rpki-client