$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json) Hash identifier: 8dksEAyswgEd0IGEJDxYBJ3g4ONIW/wBM3/DlNRfxCM= Subject key identifier: 58:78:72:BB:43:EA:37:BC:3A:76:A3:7D:7F:24:C3:D8:0B:94:74:F0 Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft Manifest number: 029A Signing time: Sun 11 May 2025 01:05:16 +0000 Manifest this update: Sun 11 May 2025 01:05:16 +0000 Manifest next update: Sun 18 May 2025 01:05:16 +0000 Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: CEmcIBRje1o2gm0B9ewSMuGOj6JfnBHMjfCGqdAcHL4=) 2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: zUVl5DeV2betZU5hQ4iQSvT6ZzKQrdzXjnE3qS2LJSk=) 3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: I6dVpGCM55P59sT81mzHGHdXEzFaqKidoCFix5oxTTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Validity Not Before: May 11 01:05:16 2025 GMT Not After : May 18 01:05:16 2025 GMT Subject: CN=681ff7cc-463c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:ea:1c:73:9a:3c:e8:ab:db:82:0d:6f:a9: 59:db:2a:32:bc:53:30:64:70:99:29:a2:3c:f7:11: 9f:da:56:f5:d0:b9:8a:87:06:d6:d2:72:38:43:75: 97:1a:1b:4a:91:a4:cb:d0:fb:18:f7:e3:6a:e0:18: 34:68:5a:bc:58:6e:30:55:b7:57:d5:e7:d2:5c:08: db:da:dc:e2:44:67:b5:d1:02:fe:60:bc:d6:a3:af: 7b:1d:69:db:bb:2c:3f:4d:05:bd:f6:4d:8e:6e:f5: bf:7b:53:a2:60:1c:14:84:63:79:02:28:e9:d7:88: d2:22:c1:df:12:b5:98:bf:0f:1d:81:49:0a:58:63: 07:49:d3:55:c8:e8:7e:62:6a:d1:a0:f4:3e:7a:7b: 06:bc:ce:7d:55:a5:c2:a1:37:c4:9d:a5:82:4b:a7: e8:ff:33:ce:08:e7:cd:aa:af:bb:6f:d2:55:7a:c8: 72:bc:2e:21:3e:6c:14:3e:18:3d:15:00:fa:bd:04: 10:06:1a:78:15:9b:d3:d4:af:5a:ec:ac:2a:1d:f3: 92:8c:1b:64:7b:e7:b6:39:ee:40:03:42:45:5b:05: d8:0c:c9:1a:fa:39:e1:6f:73:02:2e:2f:f8:1f:a8: be:3d:29:dc:0b:9c:c4:33:95:b2:f2:e2:29:78:c2: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:72:BB:43:EA:37:BC:3A:76:A3:7D:7F:24:C3:D8:0B:94:74:F0 X509v3 Authority Key Identifier: keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ca:10:9a:16:1f:0f:01:b3:99:11:24:27:cc:f8:eb:6a:a1: fd:09:06:ea:23:aa:48:a1:ce:c6:5e:a2:9e:f0:63:4f:b6:33: 67:67:74:f8:35:cc:0e:16:dd:a2:1d:58:7a:7c:1a:07:03:a0: 3e:9a:ac:33:e7:69:65:cb:3f:21:57:2b:3b:f4:56:57:64:7a: 87:7d:32:9f:a9:21:5a:3a:0f:45:98:6f:55:4b:5b:9c:65:ec: b0:cf:f9:6d:e0:ee:fb:6a:18:5e:98:7b:d9:d1:02:aa:ec:e4: 7f:78:d0:7d:18:92:cc:fb:c0:5a:d4:35:92:92:51:01:68:94: 6d:99:8c:36:dd:4b:98:55:11:9e:c2:20:65:84:f5:fc:c7:ad: f5:41:31:f8:a9:95:0f:b7:76:32:bc:4b:55:4a:00:87:f0:5a: cf:ee:99:46:49:f5:a1:24:9a:5f:e2:c8:da:d1:83:d6:a1:47: 16:5c:18:27:83:71:b4:aa:54:b9:6d:fa:43:0b:d1:59:aa:f7: b9:ac:9b:78:15:c9:1f:62:e3:ae:5a:9a:b9:ac:e5:29:ff:33: 81:58:54:1c:db:d1:eb:99:08:bf:a1:bc:7a:15:bd:d9:60:ff: e1:1b:6d:ca:95:c4:f9:05:8c:49:b4:d1:76:ca:d1:f0:8d:79: 9e:92:28:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD QzFCRTFDMzgwHhcNMjUwNTExMDEwNTE2WhcNMjUwNTE4MDEwNTE2WjAYMRYwFAYD VQQDEw02ODFmZjdjYy00NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19HqHHOaPOir24INb6lZ2yoyvFMwZHCZKaI89xGf2lb10LmKhwbW0nI4Q3WX GhtKkaTL0PsY9+Nq4Bg0aFq8WG4wVbdX1efSXAjb2tziRGe10QL+YLzWo697HWnb uyw/TQW99k2ObvW/e1OiYBwUhGN5Aijp14jSIsHfErWYvw8dgUkKWGMHSdNVyOh+ YmrRoPQ+ensGvM59VaXCoTfEnaWCS6fo/zPOCOfNqq+7b9JVeshyvC4hPmwUPhg9 FQD6vQQQBhp4FZvT1K9a7KwqHfOSjBtke+e2Oe5AA0JFWwXYDMka+jnhb3MCLi/4 H6i+PSncC5zEM5Wy8uIpeMIQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh4crtD 6je8OnajfX8kw9gLlHTwMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGyhCaFh8PAbOZESQnzPjraqH9CQbqI6pIoc7GXqKe8GNPtjNnZ3T4 NcwOFt2iHVh6fBoHA6A+mqwz52llyz8hVys79FZXZHqHfTKfqSFaOg9FmG9VS1uc Zeywz/lt4O77ahhemHvZ0QKq7OR/eNB9GJLM+8Ba1DWSklEBaJRtmYw23UuYVRGe wiBlhPX8x631QTH4qZUPt3YyvEtVSgCH8FrP7plGSfWhJJpf4sja0YPWoUcWXBgn g3G0qlS5bfpDC9FZqve5rJt4FckfYuOuWpq5rOUp/zOBWFQc29HrmQi/obx6Fb3Z YP/hG23KlcT5BYxJtNF2ytHwjXmekijS -----END CERTIFICATE-----Generated at Sun May 11 14:43:55 2025 by rpki-client