$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: HYJ0MB7PK1JAR9mX80m04n69+8s0BwYaR03elk6ZAus= Subject key identifier: FB:A2:B9:9B:76:75:DE:F3:60:BD:A2:B3:C2:E1:3D:9A:2D:C8:12:D0 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 34A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 348C Signing time: Mon 12 May 2025 14:36:29 +0000 Manifest this update: Mon 12 May 2025 14:36:29 +0000 Manifest next update: Mon 19 May 2025 14:36:29 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: 0szXwZ8efezxCKIvQJmRhMQksuT06OiXdu6gGdD1Lrk=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13473 (0x34a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: May 12 14:36:29 2025 GMT Not After : May 19 14:36:29 2025 GMT Subject: CN=6822076d-d6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cb:33:cd:76:ac:c1:d7:84:04:7e:f1:b5:03: 48:cb:05:57:34:3b:0f:8e:97:28:66:c7:b5:35:a7: d2:22:bd:64:10:01:d8:31:d9:da:7f:9c:38:25:90: 2d:a9:0b:79:9c:a0:b4:ca:c2:30:15:60:e9:0c:35: a3:52:4b:6a:9d:2d:c4:4e:9c:1f:f9:8b:a6:e1:4d: 14:35:9e:e8:56:cf:ca:1a:ef:74:8f:6a:76:9e:89: 57:84:9f:fa:c0:b8:22:eb:a1:91:d8:a8:c6:9d:59: 79:34:4f:1b:6d:2d:11:fe:e3:07:f0:c6:1f:aa:6d: 3f:56:73:48:83:c6:59:1a:8c:c2:b0:1e:d6:35:08: bf:65:15:8e:4c:77:32:85:6b:ef:52:a2:91:4d:ed: 36:6b:aa:c6:bd:29:6f:9b:47:f9:98:5a:9b:f6:da: ec:21:44:a2:d8:cf:57:91:70:79:ef:0b:8a:d0:56: dd:41:64:12:ee:e5:e4:09:51:a1:6c:15:9f:37:98: a6:8e:29:78:18:8a:0d:78:34:a2:b3:9f:f0:3d:21: 83:41:8b:d8:e7:46:05:fa:ec:bd:ab:83:8b:bd:b1: 39:12:ab:7c:84:7e:d9:da:fc:06:d1:a4:09:b3:34: 30:75:c0:b1:34:1d:d0:1e:ef:2d:c2:0a:d3:8a:a7: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A2:B9:9B:76:75:DE:F3:60:BD:A2:B3:C2:E1:3D:9A:2D:C8:12:D0 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c2:b8:b4:1d:aa:e7:96:66:e4:87:26:f7:9f:a4:9a:21:f6: 60:65:f0:a0:c2:7f:3e:d2:b9:a6:e1:89:e7:26:f5:e9:cc:91: 17:60:6b:ba:a0:c3:ed:2c:96:0a:3f:28:b9:a1:32:ee:7a:90: 6c:cc:a3:e0:a8:99:1b:19:cd:9e:16:6a:74:b9:09:a2:e4:26: 63:4b:27:a0:0e:71:84:59:d9:0f:26:4d:25:69:12:76:6e:37: 79:59:87:d9:0e:76:5b:93:a5:e5:d4:71:1c:30:30:1b:b7:53: 74:e5:ed:ca:2d:b9:ef:af:87:1e:c3:7c:17:ac:e5:1f:01:d4: 8f:81:85:16:1e:a7:5b:6d:3c:d9:4e:e8:c7:07:ad:67:a9:c2: df:de:86:eb:12:1a:6d:dd:e4:b5:35:18:a9:d5:f6:87:96:7c: 3a:1b:be:56:18:ae:88:6d:fe:df:a0:7a:87:09:31:33:4a:e7: b4:40:a7:85:14:df:b4:ba:05:b2:ab:f7:a0:23:a9:94:f8:67: 9f:55:08:62:9d:3b:f2:e3:25:05:87:4e:c2:81:e5:bc:fb:b7: 3e:20:75:24:c6:fd:a0:5d:3e:0c:fe:37:2e:04:c8:29:a3:5a: 34:e5:f1:27:de:a0:36:5a:1b:cd:d5:2f:8c:5a:57:52:22:5a: 2e:cc:83:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjUwNTEyMTQzNjI5WhcNMjUwNTE5MTQzNjI5WjAYMRYwFAYD VQQDEw02ODIyMDc2ZC1kNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28szzXaswdeEBH7xtQNIywVXNDsPjpcoZse1NafSIr1kEAHYMdnaf5w4JZAt qQt5nKC0ysIwFWDpDDWjUktqnS3ETpwf+Yum4U0UNZ7oVs/KGu90j2p2nolXhJ/6 wLgi66GR2KjGnVl5NE8bbS0R/uMH8MYfqm0/VnNIg8ZZGozCsB7WNQi/ZRWOTHcy hWvvUqKRTe02a6rGvSlvm0f5mFqb9trsIUSi2M9XkXB57wuK0FbdQWQS7uXkCVGh bBWfN5imjil4GIoNeDSis5/wPSGDQYvY50YF+uy9q4OLvbE5Eqt8hH7Z2vwG0aQJ szQwdcCxNB3QHu8twgrTiqdcTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuiuZt2 dd7zYL2is8LhPZotyBLQMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHwri0Harnlmbkhyb3n6SaIfZgZfCgwn8+0rmm4YnnJvXpzJEXYGu6 oMPtLJYKPyi5oTLuepBszKPgqJkbGc2eFmp0uQmi5CZjSyegDnGEWdkPJk0laRJ2 bjd5WYfZDnZbk6Xl1HEcMDAbt1N05e3KLbnvr4cew3wXrOUfAdSPgYUWHqdbbTzZ TujHB61nqcLf3obrEhpt3eS1NRip1faHlnw6G75WGK6Ibf7foHqHCTEzSue0QKeF FN+0ugWyq/egI6mU+GefVQhinTvy4yUFh07CgeW8+7c+IHUkxv2gXT4M/jcuBMgp o1o05fEn3qA2WhvN1S+MWldSIlouzINH -----END CERTIFICATE-----Generated at Mon May 12 16:55:11 2025 by rpki-client