$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: fkp1jze2mlPwDOwXwTThiF3CLzD6gH6otgLHGTWbW/4= Subject key identifier: 43:72:24:02:63:19:11:36:B1:FD:A6:DF:96:B5:33:B8:EC:04:6D:5E Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 07A3 Signing time: Thu 12 Jun 2025 20:58:05 +0000 Manifest this update: Thu 12 Jun 2025 20:58:04 +0000 Manifest next update: Thu 19 Jun 2025 20:58:04 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: ZZfVSnVLdBVSsuuDdsQpf6ZCLCVaBSkiECDTPsTfJeQ=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: Jun 12 20:58:04 2025 GMT Not After : Jun 19 20:58:04 2025 GMT Subject: CN=684b3f5d-4434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:d2:19:63:07:4d:38:4a:24:97:39:55:f4: d8:2f:c8:0b:cf:41:e0:38:76:b2:ed:c3:5f:5d:2b: 9d:08:50:ff:f0:5a:a2:cd:dd:66:40:ab:bb:52:cc: cd:8e:57:9f:6c:35:aa:8f:61:78:f1:f2:61:3f:83: f5:12:e8:08:f2:90:a6:d6:68:d8:07:7a:3a:f1:f0: c7:f8:99:22:b1:7f:b1:af:8a:fa:26:1c:e8:da:ef: 06:08:13:5b:e2:17:8c:c4:f8:af:cc:da:cf:2c:2a: 4e:15:17:87:0e:b9:a4:cd:d1:a0:48:a0:1f:15:64: 2e:a1:46:d5:c9:a5:a2:a8:27:3e:94:bc:7f:38:1b: 1a:bb:23:0f:56:18:30:3f:3e:40:3a:0e:53:71:8f: b3:95:a3:b1:f8:f8:5d:7d:7f:f3:a4:dc:18:91:42: cf:22:66:28:9c:02:b8:aa:f0:da:07:f0:53:92:a0: b8:38:9f:2e:96:53:59:64:43:f7:cc:46:12:9f:0d: 12:0e:b9:b3:8f:b1:f4:85:e0:a7:4b:45:58:b7:9e: fd:69:75:07:71:f2:04:1d:fb:b2:f6:c8:4e:7e:af: 4d:34:53:3a:a2:17:ff:d3:9a:bc:05:a9:04:0e:fd: c3:e9:fd:89:b6:0a:9a:7a:0f:d6:6a:f5:77:a8:01: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:72:24:02:63:19:11:36:B1:FD:A6:DF:96:B5:33:B8:EC:04:6D:5E X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:94:5e:28:fc:51:8e:bd:b2:12:f2:7f:bd:74:25:b7:ff:c3: e6:2b:ad:56:3f:6a:ee:67:e8:07:5a:07:86:32:2d:58:46:97: 07:05:92:c8:0f:37:9b:81:7c:7d:8b:5f:84:b5:e6:68:68:09: f9:48:fb:5d:5b:16:5c:38:22:03:26:fb:e6:43:b9:fe:e2:5b: 08:72:0c:07:59:b7:d7:a3:90:da:e3:26:58:d0:07:90:11:73: 4c:f6:77:98:cf:4e:10:f8:f0:a1:9b:08:a8:1d:e8:fa:06:83: fa:c7:a8:a7:35:14:cd:99:6b:c9:e2:4c:68:5b:e0:19:f1:0f: b4:f8:5a:82:24:bc:e8:1a:11:0a:2a:ee:b2:db:f4:2e:65:db: 8d:6a:8e:30:0e:bf:b8:9e:dd:dd:de:ee:ae:9d:df:d1:a7:d1: 83:95:38:7f:0f:73:e8:1e:cd:4c:1a:55:a0:ee:be:00:31:f8: 86:aa:7e:e7:dd:d4:55:f8:07:2c:99:f1:d5:ab:23:54:29:b5: 91:33:4a:87:25:7b:36:ef:21:1a:38:6e:01:21:88:7f:24:e2: b8:c0:af:ce:79:e4:d5:f5:95:f9:fe:35:2a:22:8e:dd:ec:4d: ef:8e:d1:6a:3a:a7:fe:50:e6:5b:63:8d:7f:83:95:bb:b5:44: 1a:fa:9f:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUwNjEyMjA1ODA0WhcNMjUwNjE5MjA1ODA0WjAYMRYwFAYD VQQDEw02ODRiM2Y1ZC00NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk7SGWMHTThKJJc5VfTYL8gLz0HgOHay7cNfXSudCFD/8Fqizd1mQKu7UszN jlefbDWqj2F48fJhP4P1EugI8pCm1mjYB3o68fDH+JkisX+xr4r6Jhzo2u8GCBNb 4heMxPivzNrPLCpOFReHDrmkzdGgSKAfFWQuoUbVyaWiqCc+lLx/OBsauyMPVhgw Pz5AOg5TcY+zlaOx+PhdfX/zpNwYkULPImYonAK4qvDaB/BTkqC4OJ8ullNZZEP3 zEYSnw0SDrmzj7H0heCnS0VYt579aXUHcfIEHfuy9shOfq9NNFM6ohf/05q8BakE Dv3D6f2Jtgqaeg/WavV3qAEySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENyJAJj GRE2sf2m35a1M7jsBG1eMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAilF4o/FGOvbIS8n+9dCW3/8PmK61WP2ruZ+gHWgeGMi1YRpcHBZLI DzebgXx9i1+EteZoaAn5SPtdWxZcOCIDJvvmQ7n+4lsIcgwHWbfXo5Da4yZY0AeQ EXNM9neYz04Q+PChmwioHej6BoP6x6inNRTNmWvJ4kxoW+AZ8Q+0+FqCJLzoGhEK Ku6y2/QuZduNao4wDr+4nt3d3u6und/Rp9GDlTh/D3PoHs1MGlWg7r4AMfiGqn7n 3dRV+AcsmfHVqyNUKbWRM0qHJXs27yEaOG4BIYh/JOK4wK/OeeTV9ZX5/jUqIo7d 7E3vjtFqOqf+UOZbY41/g5W7tUQa+p8M -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:00 2025 by rpki-client