$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: vXUMzHwd/pM8chWtMWIbA+gqa7CngUaGP7f08dTSGG4= Subject key identifier: 8E:4A:36:62:D8:42:C9:0C:9A:3C:97:6A:53:EC:61:4A:D9:56:1D:2B Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 34A6 Signing time: Wed 02 Jul 2025 14:39:25 +0000 Manifest this update: Wed 02 Jul 2025 14:39:24 +0000 Manifest next update: Wed 09 Jul 2025 14:39:24 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: hEeiMXh00JYMOwTbMEa9+0v1P0Z1E2F8AidjV4/aDzQ=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Jul 2 14:39:24 2025 GMT Not After : Jul 9 14:39:24 2025 GMT Subject: CN=6865449c-8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:fd:81:07:6d:e4:f1:2a:7a:57:32:e3:db: 3a:25:d3:f5:f5:4d:c8:11:40:b9:86:d9:8b:9c:7b: 64:ac:9a:52:ae:d9:23:fe:15:b7:ec:fd:1d:51:9f: 71:ad:ba:5c:79:64:00:8d:0d:04:94:99:dc:f1:f3: 31:39:e9:92:8d:7f:70:c9:c2:74:a9:97:1c:99:a3: 58:0e:7a:57:b1:66:69:56:f1:6c:8b:34:b8:f5:c5: 8f:0b:64:56:44:8d:13:0d:c2:f5:20:ab:72:d0:39: bb:ff:9e:04:09:48:50:cc:01:7c:9c:fb:5c:05:8a: 00:fd:b7:5b:3f:82:24:8e:8c:b0:fa:7c:23:4c:88: 0d:88:17:a7:66:cf:f9:1f:12:ca:7a:b8:27:ab:89: 4e:7f:2c:35:25:fe:9d:c5:d4:dd:2d:c2:9e:b1:5b: fd:01:68:12:47:41:4f:49:93:c4:f5:0c:ec:9c:40: 08:60:b4:ec:d2:d0:1d:fc:5e:91:86:9e:14:c0:51: 7d:20:6c:75:99:a2:be:e5:e3:f8:ba:96:51:0b:88: df:ae:2a:13:50:17:5d:2d:c5:21:e8:70:d8:bc:c7: 4d:d7:aa:d5:7d:24:89:79:83:c9:88:1c:fb:18:f8: d4:7c:bc:5a:42:e4:3f:39:93:05:34:24:af:47:ac: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:36:62:D8:42:C9:0C:9A:3C:97:6A:53:EC:61:4A:D9:56:1D:2B X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f2:c9:57:60:77:3d:56:e0:0a:1f:d6:90:7b:03:76:c4:bb: d2:c6:21:c9:91:52:87:2b:c6:bb:7a:b9:22:4b:53:95:53:a7: d4:7e:39:f9:49:69:51:64:e0:a9:d5:08:2a:73:c8:60:da:eb: bb:b7:aa:95:5c:6a:34:f6:06:65:ec:e8:e2:ce:5a:39:61:d4: 07:82:73:99:f6:9f:4d:ce:9a:49:47:db:32:dc:4c:44:3c:20: f8:09:b5:6b:1c:55:7f:c4:b4:57:6a:c1:bf:56:b0:78:60:30: 3f:85:9c:10:f9:b0:94:5a:29:da:0e:8a:7a:1a:c5:49:d1:1d: a0:96:1d:09:c4:ff:72:b6:4f:ef:c1:3a:d0:b8:ff:83:e0:24: b0:b1:ea:b8:ff:98:61:c1:0d:7b:a5:75:e6:2f:6d:31:4a:07: e8:41:42:29:96:ab:49:7f:77:b4:33:c7:0a:6f:8e:8b:ba:70: ac:fd:c1:43:e9:26:a2:7c:f8:ed:03:65:3b:5a:f1:35:ee:d4: d4:d1:78:fe:83:2c:78:76:8d:e7:b6:3a:7d:27:e6:e1:32:06: 17:fe:bc:40:7d:be:ed:d8:6f:90:d7:be:b6:d0:4b:91:5f:f9: e4:e7:fc:66:80:36:07:4a:2e:a9:ab:18:9f:28:dd:01:da:f4: 1f:be:ac:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjUwNzAyMTQzOTI0WhcNMjUwNzA5MTQzOTI0WjAYMRYwFAYD VQQDEw02ODY1NDQ5Yy04ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjD9gQdt5PEqelcy49s6JdP19U3IEUC5htmLnHtkrJpSrtkj/hW37P0dUZ9x rbpceWQAjQ0ElJnc8fMxOemSjX9wycJ0qZccmaNYDnpXsWZpVvFsizS49cWPC2RW RI0TDcL1IKty0Dm7/54ECUhQzAF8nPtcBYoA/bdbP4Ikjoyw+nwjTIgNiBenZs/5 HxLKergnq4lOfyw1Jf6dxdTdLcKesVv9AWgSR0FPSZPE9QzsnEAIYLTs0tAd/F6R hp4UwFF9IGx1maK+5eP4upZRC4jfrioTUBddLcUh6HDYvMdN16rVfSSJeYPJiBz7 GPjUfLxaQuQ/OZMFNCSvR6zAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5KNmLY QskMmjyXalPsYUrZVh0rMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB78slXYHc9VuAKH9aQewN2xLvSxiHJkVKHK8a7erkiS1OVU6fUfjn5 SWlRZOCp1Qgqc8hg2uu7t6qVXGo09gZl7Ojizlo5YdQHgnOZ9p9NzppJR9sy3ExE PCD4CbVrHFV/xLRXasG/VrB4YDA/hZwQ+bCUWinaDop6GsVJ0R2glh0JxP9ytk/v wTrQuP+D4CSwseq4/5hhwQ17pXXmL20xSgfoQUIplqtJf3e0M8cKb46LunCs/cFD 6SaifPjtA2U7WvE17tTU0Xj+gyx4do3ntjp9J+bhMgYX/rxAfb7t2G+Q17620EuR X/nk5/xmgDYHSi6pqxifKN0B2vQfvqyJ -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:14 2025 by rpki-client