$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft File: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json) Hash identifier: C7pJVdJpQ110ow2le2Mdt/KpbFfOz6eACCqGknwo53c= Subject key identifier: 30:7D:FA:B8:E0:9F:12:65:03:77:6A:41:8B:AA:EE:ED:6A:04:41:E3 Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 Certificate issuer: /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft Manifest number: 69 Signing time: Tue 13 May 2025 06:09:07 +0000 Manifest this update: Tue 13 May 2025 06:09:06 +0000 Manifest next update: Tue 20 May 2025 06:09:06 +0000 Files and hashes: 1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: tpOLje6oGsgzXY6jGHmqg7AAXkPDdvJyfhVY24+Das4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Validity Not Before: May 13 06:09:06 2025 GMT Not After : May 20 06:09:06 2025 GMT Subject: CN=6822e202-6da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:11:ce:d7:09:ad:c7:21:3a:71:06:f9:2b: 4b:31:42:6f:67:26:e7:3f:81:26:ed:39:71:ea:87: 89:48:17:89:da:8e:9e:b9:8e:98:7e:12:46:31:6a: f2:b5:15:75:1d:2c:d7:40:2f:d6:2a:43:ff:4f:42: de:ef:12:b6:e4:77:ff:0e:d2:ee:9a:11:7d:aa:3d: c6:93:10:8d:57:f1:05:10:b4:a3:ef:c1:b6:26:1a: 44:54:bf:0f:09:20:02:ce:6e:67:dd:94:e2:75:43: 3e:0a:26:52:1d:d1:f1:bf:a1:f5:b9:d7:67:ba:11: 33:37:f8:e3:c0:37:e4:a9:70:0f:40:8b:cc:63:3d: 08:f1:22:20:6f:8d:1c:c8:27:af:d9:03:a2:62:cd: ad:f1:c6:5e:71:e3:6a:b7:bc:89:7e:d6:9c:0b:47: 73:01:c1:0d:4d:df:4a:70:54:8a:aa:5a:35:c2:8d: 99:56:03:07:66:b5:97:d4:33:dd:1e:f8:91:e2:b8: f8:ec:c5:7e:ed:12:0c:d5:84:04:a2:18:5d:ce:8f: 63:f0:f4:21:11:f1:49:8f:a0:c5:ce:8e:75:0d:25: d1:a6:6d:f3:4f:9a:9a:c2:19:7c:7c:e2:64:46:55: 21:45:46:f3:22:e5:70:3b:99:c1:d9:be:1f:6b:df: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7D:FA:B8:E0:9F:12:65:03:77:6A:41:8B:AA:EE:ED:6A:04:41:E3 X509v3 Authority Key Identifier: keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f6:f9:50:89:a9:e3:56:f2:91:e2:c8:19:01:16:61:05:6a: ba:96:20:82:f2:c3:e5:80:b0:f3:1d:20:1d:14:f1:bc:0d:83: a1:9a:20:a6:a7:5a:9c:17:d4:cd:58:6e:d2:cc:04:a1:55:6d: 5d:02:52:a9:88:7b:da:4e:50:b8:cb:65:1b:06:4a:6c:f2:43: 13:32:8d:31:7f:db:77:3f:ea:c5:93:10:9f:6a:d3:b5:04:1c: 70:31:de:61:80:bf:8f:55:89:05:c4:aa:8e:6e:ee:9c:41:d5: f2:c9:0a:2f:2c:ec:bf:e2:3c:92:5f:af:aa:1d:eb:b4:f4:e0: f0:ee:8c:e4:f2:51:b5:53:fc:b9:57:9f:75:a7:2f:b1:43:5c: f4:dc:83:61:13:99:f8:d4:70:30:02:1b:2f:60:61:99:d9:b9: bd:0b:20:fc:ae:a5:3e:a8:8a:89:5e:7e:92:3a:a4:cb:77:11: 6a:b3:e0:5b:32:46:cd:c9:e5:07:b6:eb:46:a7:0d:09:ef:f5: 34:4c:1d:91:fa:75:3a:a4:16:5d:ee:63:bc:fb:dc:3b:2a:35: da:9c:fb:4f:f9:5c:dd:ff:cb:be:e6:b7:06:1f:c8:0c:7c:83: b1:82:59:c3:91:3d:ed:43:ea:c7:62:e1:8a:93:58:68:8c:bf: 06:e4:f7:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjRDQzExMC8GA1UEBRMoN0UzOUZFMjFGOUQxNTg1Q0FFRjU5OEZCN0Q2QTA2RUJG RDMxMDZDMjAeFw0yNTA1MTMwNjA5MDZaFw0yNTA1MjAwNjA5MDZaMBgxFjAUBgNV BAMTDTY4MjJlMjAyLTZkYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBZhHO1wmtxyE6cQb5K0sxQm9nJuc/gSbtOXHqh4lIF4najp65jph+EkYxavK1 FXUdLNdAL9YqQ/9PQt7vErbkd/8O0u6aEX2qPcaTEI1X8QUQtKPvwbYmGkRUvw8J IALObmfdlOJ1Qz4KJlId0fG/ofW512e6ETM3+OPAN+SpcA9Ai8xjPQjxIiBvjRzI J6/ZA6Jiza3xxl5x42q3vIl+1pwLR3MBwQ1N30pwVIqqWjXCjZlWAwdmtZfUM90e +JHiuPjsxX7tEgzVhASiGF3Oj2Pw9CER8UmPoMXOjnUNJdGmbfNPmprCGXx84mRG VSFFRvMi5XA7mcHZvh9r36NXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMH36uOCf EmUDd2pBi6ru7WoEQeMwHwYDVR0jBBgwFoAUfjn+IfnRWFyu9Zj7fWoG6/0xBsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNENDL0Q1ODFDMUJDOTE0 ODExRUY4N0VBREQ1MkM0RjlBRTAyL2Zqbi1JZm5SV0Z5dTlaajdmV29HNl8weEJz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpuLUlmblJXRnl1OVpqN2ZXb0c2XzB4QnNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NENDL0Q1ODFDMUJDOTE0ODExRUY4N0VBREQ1MkM0RjlBRTAyL2Zqbi1JZm5SV0Z5 dTlaajdmV29HNl8weEJzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEv2+VCJqeNW8pHiyBkBFmEFarqWIILyw+WAsPMdIB0U8bwNg6GaIKan WpwX1M1YbtLMBKFVbV0CUqmIe9pOULjLZRsGSmzyQxMyjTF/23c/6sWTEJ9q07UE HHAx3mGAv49ViQXEqo5u7pxB1fLJCi8s7L/iPJJfr6od67T04PDujOTyUbVT/LlX n3WnL7FDXPTcg2ETmfjUcDACGy9gYZnZub0LIPyupT6oiolefpI6pMt3EWqz4Fsy Rs3J5Qe260anDQnv9TRMHZH6dTqkFl3uY7z73DsqNdqc+0/5XN3/y77mtwYfyAx8 g7GCWcORPe1D6sdi4YqTWGiMvwbk9xc= -----END CERTIFICATE-----Generated at Wed May 14 13:33:11 2025 by rpki-client