$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: moqeqOwERY5aTfv9CMMROCXnYucglas02B3JvKzOiSE= Subject key identifier: F1:A2:4A:BA:2A:91:01:26:E3:A7:42:5C:2F:0B:91:C6:35:65:52:D7 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 07AE Signing time: Fri 04 Jul 2025 21:35:53 +0000 Manifest this update: Fri 04 Jul 2025 21:35:53 +0000 Manifest next update: Fri 11 Jul 2025 21:35:53 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: nxQR4TGW6x6wn3UwcQlxX1xLBMHzw2HTw7uLqI7ZFVM=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Jul 4 21:35:53 2025 GMT Not After : Jul 11 21:35:53 2025 GMT Subject: CN=68684939-9004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:ad:44:bb:68:f5:bd:26:5b:55:db:b5:bb: 8f:9a:ab:47:05:1b:64:cd:a6:05:f7:cc:57:cb:a2: 61:2f:6a:f1:be:5a:76:59:0e:69:77:10:c4:0e:b6: 53:55:c8:36:fc:4d:80:0d:04:25:ec:d2:3f:7f:35: c8:64:6f:ed:4a:7b:70:f3:ee:ed:56:76:b5:29:72: 0b:8a:05:17:cd:42:24:16:84:ab:47:a4:58:3f:64: ae:84:93:6e:c1:5d:65:80:64:8c:17:51:72:8e:53: 31:7f:65:fa:ef:90:73:59:d2:91:19:c6:23:4c:5a: 4a:c3:2c:a6:90:bc:a0:3d:52:0c:df:0e:6f:ef:52: 7a:71:c9:31:e6:e0:99:9f:ca:df:7f:44:e9:fe:68: 46:84:34:3c:96:81:f4:b7:c1:3d:42:29:17:28:ff: d6:09:68:98:60:57:1d:65:92:7e:1e:fc:8d:74:7e: a8:e7:b6:51:de:8c:1a:65:6a:01:d8:0e:e4:a2:ef: 00:35:b5:6f:97:28:c4:6b:2a:41:26:f8:9f:56:b9: b5:63:46:88:91:82:06:40:de:b2:c1:4f:e4:a1:7d: 4e:3e:b2:5b:31:3c:1d:39:5a:9a:5e:53:fb:28:3f: 76:05:62:2e:bc:58:2b:01:d5:b1:d8:49:04:16:07: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A2:4A:BA:2A:91:01:26:E3:A7:42:5C:2F:0B:91:C6:35:65:52:D7 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:23:d3:a1:7e:3c:f7:24:cb:77:83:1c:d9:8b:44:74:a3:b1: 4a:15:7d:fc:53:97:50:34:85:71:d4:79:2e:28:b2:32:45:f6: eb:a1:0b:db:c9:6d:67:28:63:84:04:3f:52:e7:d7:d6:00:c9: a9:b2:dc:c3:7f:57:d1:c3:2a:83:05:78:cf:6d:a4:be:25:81: d5:58:02:ef:1c:d0:1a:c5:1e:1f:5c:12:0b:c3:65:d7:9f:0e: ce:b6:18:06:ec:45:b2:ba:af:ae:83:03:22:26:d1:0c:11:b0: 88:88:e2:7f:1e:5d:ad:0f:f0:55:48:64:2d:1f:06:b5:72:b2: 06:dc:f9:f1:67:35:32:6c:40:10:99:f7:cb:91:dd:94:4a:27: 02:9c:28:0c:c6:2f:a8:57:0d:b2:ea:af:95:c9:ac:db:ee:99: fa:bb:1c:86:f0:35:fe:9b:7d:f7:22:eb:66:0e:b4:80:d3:cd: 2b:39:0f:a1:9d:57:a8:27:18:f7:39:d4:ff:41:84:dd:18:41: ea:55:7b:f3:1f:54:7b:10:58:88:9b:41:19:bd:c7:62:69:c1: 8a:65:db:ae:34:a2:fa:96:4b:e9:9b:48:2b:0d:a3:9c:7c:6b: ab:dc:cf:37:bd:1f:07:e4:e6:9a:0a:d0:94:11:21:88:8f:51: 03:b7:d0:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUwNzA0MjEzNTUzWhcNMjUwNzExMjEzNTUzWjAYMRYwFAYD VQQDEw02ODY4NDkzOS05MDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/mtRLto9b0mW1XbtbuPmqtHBRtkzaYF98xXy6JhL2rxvlp2WQ5pdxDEDrZT Vcg2/E2ADQQl7NI/fzXIZG/tSntw8+7tVna1KXILigUXzUIkFoSrR6RYP2SuhJNu wV1lgGSMF1FyjlMxf2X675BzWdKRGcYjTFpKwyymkLygPVIM3w5v71J6cckx5uCZ n8rff0Tp/mhGhDQ8loH0t8E9QikXKP/WCWiYYFcdZZJ+HvyNdH6o57ZR3owaZWoB 2A7kou8ANbVvlyjEaypBJvifVrm1Y0aIkYIGQN6ywU/koX1OPrJbMTwdOVqaXlP7 KD92BWIuvFgrAdWx2EkEFgfL7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGiSroq kQEm46dCXC8LkcY1ZVLXMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0I9Ohfjz3JMt3gxzZi0R0o7FKFX38U5dQNIVx1HkuKLIyRfbroQvb yW1nKGOEBD9S59fWAMmpstzDf1fRwyqDBXjPbaS+JYHVWALvHNAaxR4fXBILw2XX nw7OthgG7EWyuq+ugwMiJtEMEbCIiOJ/Hl2tD/BVSGQtHwa1crIG3PnxZzUybEAQ mffLkd2USicCnCgMxi+oVw2y6q+Vyazb7pn6uxyG8DX+m333IutmDrSA080rOQ+h nVeoJxj3OdT/QYTdGEHqVXvzH1R7EFiIm0EZvcdiacGKZduuNKL6lkvpm0grDaOc fGur3M83vR8H5OaaCtCUESGIj1EDt9DB -----END CERTIFICATE-----Generated at Sat Jul 5 22:30:27 2025 by rpki-client