$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft File: js-frkP30c1uEgKDTA9BrMG-HDg.mft (raw, json) Hash identifier: JnIiMY+0y/AUKvJMCWXUa3sQ/4yKVaaQEn62Cjpq1iI= Subject key identifier: 77:FB:F5:46:D7:71:A5:B8:E8:5A:81:D8:FA:46:5B:27:C4:A8:04:B1 Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft Manifest number: 02AA Signing time: Fri 13 Jun 2025 01:01:04 +0000 Manifest this update: Fri 13 Jun 2025 01:01:03 +0000 Manifest next update: Fri 20 Jun 2025 01:01:03 +0000 Files and hashes: 1: js-frkP30c1uEgKDTA9BrMG-HDg.crl (hash: 1LkeMpDPahCRt/Yv6XIG0hAr5sGI9Ls3FBz3XUiMPE0=) 2: 30FD2F34717711ED807F3C30C4F9AE02.roa (hash: zUVl5DeV2betZU5hQ4iQSvT6ZzKQrdzXjnE3qS2LJSk=) 3: 31A9E86E717711ED807F3C30C4F9AE02.roa (hash: I6dVpGCM55P59sT81mzHGHdXEzFaqKidoCFix5oxTTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38 Validity Not Before: Jun 13 01:01:03 2025 GMT Not After : Jun 20 01:01:03 2025 GMT Subject: CN=684b7850-c537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:e7:b9:40:15:e6:60:92:68:4c:2c:67:f8: 7d:34:23:db:19:90:5f:cb:3b:27:3d:06:5a:3a:29: fe:e2:eb:6c:7e:ab:fc:cd:4b:bc:e5:ff:3b:32:4b: 74:3f:a5:c4:f4:b4:08:9f:3c:59:1f:e1:ad:e2:24: 76:7f:94:24:9c:c9:0c:70:18:70:38:82:b0:7e:22: 25:cd:58:4a:00:7d:b7:a2:82:2c:96:98:23:68:5a: d5:25:c1:e5:4b:ca:d3:6a:e2:5e:54:da:af:ad:bd: 8c:76:bd:48:95:3c:8c:08:1e:3e:d5:24:b4:ee:50: 73:9a:72:5f:68:ee:02:6f:58:9d:02:07:ef:27:f8: cd:cc:1c:d5:4e:52:45:0d:72:b6:b1:fc:2b:d6:6a: da:06:c7:12:b4:3d:e0:46:0d:48:25:f0:e2:a2:85: 01:ce:4f:dd:7d:a6:0b:ee:4f:dd:e0:ec:9c:4b:00: 94:54:51:33:de:bf:d5:59:1e:f5:da:20:f8:b8:77: 80:65:dd:86:08:65:89:af:34:e8:f2:08:91:58:60: a0:61:73:a6:d1:8d:dc:68:03:89:b6:53:56:93:9b: 0d:49:f4:5e:a9:8c:97:a1:65:85:ee:fa:f4:a8:2f: 39:ed:1d:57:53:cc:77:56:d5:4e:0b:d2:8d:12:47: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:F5:46:D7:71:A5:B8:E8:5A:81:D8:FA:46:5B:27:C4:A8:04:B1 X509v3 Authority Key Identifier: keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4f:3d:9b:c7:8f:d5:d2:76:95:0a:86:e5:e3:b1:84:ba:9d: cc:f3:66:3d:1b:ca:2c:87:e5:1c:07:19:f6:75:3a:14:b1:de: 27:a2:fc:a7:82:94:29:54:15:2d:b1:9a:ff:0f:6d:3e:85:1f: 39:6b:f6:31:c8:8e:c9:78:2b:3a:f4:f7:2c:1a:03:74:da:19: 34:ed:31:60:d7:b6:0d:09:76:be:d3:c3:61:33:38:27:c5:ae: cb:f6:9f:3d:22:a5:c9:11:38:bf:53:88:75:d8:c3:33:cd:2b: 02:62:43:32:75:b4:b0:c1:0b:2d:06:84:31:a4:98:43:8d:90: f6:98:57:eb:43:e2:d9:6a:89:86:d5:a5:34:79:ff:64:72:8a: 87:05:a4:5e:7b:63:bf:bd:1e:e2:3b:fb:2a:d8:bd:55:71:f1: f3:08:2b:78:cf:6e:28:be:d3:56:50:23:7c:a3:44:e2:24:95: 45:47:14:bf:fc:88:70:7b:6d:6e:64:82:94:08:a9:1f:8b:e5: e0:43:50:b4:d7:fb:15:4b:1b:9a:89:bf:fb:1e:c1:56:c9:1a: ca:7c:f5:05:ba:80:50:6c:aa:d3:49:d6:87:50:4d:d8:4d:46: 13:61:87:f5:a1:48:98:3f:e6:b7:a6:a9:49:25:dc:b2:af:ef: 6c:48:c7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1OTIxMTAvBgNVBAUTKDhFQ0Y5RkFFNDNGN0QxQ0Q2RTEyMDI4MzRDMEY0MUFD QzFCRTFDMzgwHhcNMjUwNjEzMDEwMTAzWhcNMjUwNjIwMDEwMTAzWjAYMRYwFAYD VQQDEw02ODRiNzg1MC1jNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnLnuUAV5mCSaEwsZ/h9NCPbGZBfyzsnPQZaOin+4utsfqv8zUu85f87Mkt0 P6XE9LQInzxZH+Gt4iR2f5QknMkMcBhwOIKwfiIlzVhKAH23ooIslpgjaFrVJcHl S8rTauJeVNqvrb2Mdr1IlTyMCB4+1SS07lBzmnJfaO4Cb1idAgfvJ/jNzBzVTlJF DXK2sfwr1mraBscStD3gRg1IJfDiooUBzk/dfaYL7k/d4OycSwCUVFEz3r/VWR71 2iD4uHeAZd2GCGWJrzTo8giRWGCgYXOm0Y3caAOJtlNWk5sNSfReqYyXoWWF7vr0 qC857R1XU8x3VtVOC9KNEkcjyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHf79UbX caW46FqB2PpGWyfEqASxMB8GA1UdIwQYMBaAFI7Pn65D99HNbhICg0wPQazBvhw4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjU5Mi9EOTE1MzFCNkZF QzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBjMXVFZ0tEVEE5QnJNRy1I RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzLWZya1AzMGMxdUVnS0RUQTlCck1HLUhEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjU5Mi9EOTE1MzFCNkZFQzgxMUVDQTdDRDkzNjlDNEY5QUUwMi9qcy1mcmtQMzBj MXVFZ0tEVEE5QnJNRy1IRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Tz2bx4/V0naVCobl47GEup3M82Y9G8osh+UcBxn2dToUsd4novyn gpQpVBUtsZr/D20+hR85a/YxyI7JeCs69PcsGgN02hk07TFg17YNCXa+08NhMzgn xa7L9p89IqXJETi/U4h12MMzzSsCYkMydbSwwQstBoQxpJhDjZD2mFfrQ+LZaomG 1aU0ef9kcoqHBaRee2O/vR7iO/sq2L1VcfHzCCt4z24ovtNWUCN8o0TiJJVFRxS/ /Ihwe21uZIKUCKkfi+XgQ1C01/sVSxuaib/7HsFWyRrKfPUFuoBQbKrTSdaHUE3Y TUYTYYf1oUiYP+a3pqlJJdyyr+9sSMeo -----END CERTIFICATE-----Generated at Sat Jun 14 17:46:45 2025 by rpki-client