$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json) Hash identifier: rdy3pg2DvbaJMiDFoiqx/IBqr8NWePQxHX0QTmB+pKs= Subject key identifier: C4:05:03:80:6D:5F:8E:6E:C9:96:26:0A:2C:2A:6F:6A:29:59:D6:24 Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft Manifest number: 02B3 Signing time: Tue 01 Jul 2025 02:08:22 +0000 Manifest this update: Tue 01 Jul 2025 02:08:22 +0000 Manifest next update: Tue 08 Jul 2025 02:08:22 +0000 Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: qMN4M292vTtQPbzJDAcrXfkW06NTxOnWOZxWed2VDNE=) 2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: zUVl5DeV2betZU5hQ4iQSvT6ZzKQrdzXjnE3qS2LJSk=) 3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: I6dVpGCM55P59sT81mzHGHdXEzFaqKidoCFix5oxTTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Validity Not Before: Jul 1 02:08:22 2025 GMT Not After : Jul 8 02:08:22 2025 GMT Subject: CN=68634316-ad95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:f0:f1:83:58:41:61:61:af:a6:bc:99:bb: 21:e4:9c:ef:ae:f5:4f:fb:24:df:00:0f:9b:8e:6c: 15:b8:af:43:9c:19:7c:68:8d:10:0f:9f:6b:3b:07: 43:71:a8:07:4a:6b:b3:6e:23:3c:9a:a3:d7:bb:e4: ff:cd:79:f9:c2:06:a8:5f:09:fb:4c:1a:ab:62:cb: 25:3a:1d:4f:80:a5:18:a2:d4:fb:5c:f8:95:4a:dc: 2c:3f:eb:30:a4:35:cf:fb:74:25:e8:5f:c2:5a:49: 38:6d:5b:7c:9e:e9:36:71:67:eb:3c:ec:44:9a:a1: 42:5a:58:dd:8b:05:3c:f8:81:14:a5:fd:3d:0a:55: b9:f2:b7:2f:d4:40:d8:1f:0a:a5:9d:a7:d5:63:9e: 14:36:d1:aa:d5:94:a9:7c:c3:e3:29:74:ee:fe:3a: e1:00:8b:83:30:3b:df:00:f7:4f:08:21:53:96:7a: a8:f3:6b:b5:1c:a6:6d:4b:f4:4b:4c:5c:1b:94:1a: f1:48:52:7a:d9:68:ec:6e:11:af:e1:2f:a1:7a:66: ac:26:12:f3:ae:b1:79:b6:08:05:b5:22:60:6a:44: fd:e4:6e:14:89:02:4b:84:3c:c2:8b:df:4a:eb:28: c3:3b:12:48:3a:00:e2:53:08:84:0f:23:1a:74:cb: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:05:03:80:6D:5F:8E:6E:C9:96:26:0A:2C:2A:6F:6A:29:59:D6:24 X509v3 Authority Key Identifier: keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:78:44:55:8c:50:af:69:7c:f8:2e:f8:f6:64:af:fb:13:e0: 19:67:d3:7c:3e:36:83:18:2d:12:da:5f:61:63:42:fc:82:9d: 20:89:68:95:68:63:22:ad:df:b4:6a:b5:87:b0:a4:53:89:0e: 93:59:e5:8c:3a:75:2e:de:8b:51:2d:97:ff:6f:6f:9b:95:35: d6:22:95:f4:37:7f:1c:16:9d:b5:13:9c:2b:4b:c4:4e:ac:67: 2a:bd:25:0b:e8:b0:5f:a3:35:4a:c6:01:36:67:1c:ca:2d:8c: 07:b8:e0:2b:f9:b9:3b:b6:e7:72:56:0d:d4:89:ce:31:1b:db: 7b:ab:8c:b6:6f:e1:ae:bb:c0:d8:50:38:ed:2d:ce:f1:a6:5b: 0e:42:13:e1:bb:51:d5:b3:3b:1b:30:76:c0:67:33:93:7e:a0: 32:5b:f9:73:99:8d:e3:fe:88:22:ee:6d:be:11:01:d1:f5:5c: e7:c8:02:75:c6:57:65:06:0f:47:ff:19:f5:19:fb:c1:99:21: fe:7c:36:b4:32:86:4b:91:e9:08:eb:4b:e9:1f:ba:c0:3a:91: 31:0e:f8:5c:c3:d7:9d:c8:8f:70:24:76:f2:a2:41:5f:95:2e: 13:4c:3c:9f:57:a4:23:0f:78:d9:a8:12:92:2f:b3:e9:d3:fd: 45:50:55:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD QzFCRTFDMzgwHhcNMjUwNzAxMDIwODIyWhcNMjUwNzA4MDIwODIyWjAYMRYwFAYD VQQDEw02ODYzNDMxNi1hZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxivw8YNYQWFhr6a8mbsh5JzvrvVP+yTfAA+bjmwVuK9DnBl8aI0QD59rOwdD cagHSmuzbiM8mqPXu+T/zXn5wgaoXwn7TBqrYsslOh1PgKUYotT7XPiVStwsP+sw pDXP+3Ql6F/CWkk4bVt8nuk2cWfrPOxEmqFCWljdiwU8+IEUpf09ClW58rcv1EDY HwqlnafVY54UNtGq1ZSpfMPjKXTu/jrhAIuDMDvfAPdPCCFTlnqo82u1HKZtS/RL TFwblBrxSFJ62WjsbhGv4S+hemasJhLzrrF5tggFtSJgakT95G4UiQJLhDzCi99K 6yjDOxJIOgDiUwiEDyMadMskkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQFA4Bt X45uyZYmCiwqb2opWdYkMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNeERVjFCvaXz4Lvj2ZK/7E+AZZ9N8PjaDGC0S2l9hY0L8gp0giWiV aGMird+0arWHsKRTiQ6TWeWMOnUu3otRLZf/b2+blTXWIpX0N38cFp21E5wrS8RO rGcqvSUL6LBfozVKxgE2ZxzKLYwHuOAr+bk7tudyVg3Uic4xG9t7q4y2b+Guu8DY UDjtLc7xplsOQhPhu1HVszsbMHbAZzOTfqAyW/lzmY3j/ogi7m2+EQHR9VznyAJ1 xldlBg9H/xn1GfvBmSH+fDa0MoZLkekI60vpH7rAOpExDvhcw9edyI9wJHbyokFf lS4TTDyfV6QjD3jZqBKSL7Pp0/1FUFU1 -----END CERTIFICATE-----Generated at Tue Jul 1 08:10:19 2025 by rpki-client