$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: sksc/hceilsqBr+fXaI4cMbgANyfVp/eBonuDJNC02M= Subject key identifier: BE:4C:1A:55:37:5B:B8:10:10:7E:60:CF:49:6C:D8:5E:77:CC:1C:57 Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 347C Signing time: Thu 24 Apr 2025 15:08:22 +0000 Manifest this update: Thu 24 Apr 2025 15:08:22 +0000 Manifest next update: Thu 01 May 2025 15:08:22 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: 9nAEX+3Vp5BWMu/ODyhMMvkV5KhsqqW76/jcLfYlSuM=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Apr 24 15:08:22 2025 GMT Not After : May 1 15:08:22 2025 GMT Subject: CN=680a53e6-ff4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:35:da:41:57:2d:a0:83:a8:04:07:2b:01:2b: 6f:89:78:fd:d0:00:d7:a8:59:41:72:b1:8e:ea:d4: ac:fe:45:c0:36:af:e0:89:42:39:d0:bb:c2:a3:2d: 48:67:b8:47:5f:50:44:18:88:2a:06:b2:36:f6:68: 23:a4:e1:03:77:1d:ae:77:11:58:1b:7f:83:a8:b8: a7:5c:0a:99:66:ea:e9:79:e4:12:cf:02:01:f5:b1: db:00:83:bf:21:9f:5d:8a:9e:99:6b:c5:c1:ab:d4: 67:da:e0:e4:30:01:a0:e6:58:2b:f7:e3:c1:b9:f0: 49:f8:90:ed:fb:ea:06:4e:16:5b:cd:0a:c5:41:09: 1f:05:84:cf:2e:7d:89:31:40:f0:59:82:ee:08:ae: c0:ed:93:33:c3:51:4c:6b:25:2d:9c:9b:aa:d0:c5: 82:3f:26:fe:17:74:82:30:85:3b:6b:a2:96:98:5d: 7e:c8:2c:97:ea:13:01:53:ac:45:e2:d3:4a:39:c4: e1:eb:dc:17:ba:52:b3:7d:78:34:78:8a:15:a8:78: e8:cc:8e:c4:8c:9c:93:0d:2c:d7:7d:36:55:c9:59: f8:17:87:ca:83:fe:38:a6:2f:0e:57:a8:0a:e8:1b: 3a:49:43:41:1d:68:0a:03:29:8c:c6:d2:c5:9f:22: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4C:1A:55:37:5B:B8:10:10:7E:60:CF:49:6C:D8:5E:77:CC:1C:57 X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:88:87:e8:5b:3c:5a:e6:f5:a4:75:33:ce:e9:ce:65:e3:0f: 5e:b7:ef:e9:6a:43:fb:ac:92:28:b8:10:70:73:68:cb:7d:ec: de:5c:fb:17:75:b0:43:31:30:7b:71:ce:3c:76:01:ee:71:34: 8a:27:93:2b:9e:3f:62:d9:a4:46:f3:db:04:f1:9b:4e:66:cf: 5c:02:9b:39:5e:ce:22:3b:2d:2a:84:82:5c:f8:f4:cb:df:a2: f9:c0:e3:cc:bc:09:40:9e:20:0e:29:e4:24:48:5e:8a:d7:bf: 43:48:a6:01:c6:19:01:9a:3c:76:92:0e:b5:6f:57:b5:40:cf: 18:42:13:03:28:b3:72:9d:c9:0b:13:57:be:c3:09:36:ca:e6: f4:d2:e5:b0:bb:f8:40:8a:fe:04:9f:ca:14:39:00:b5:c8:7f: 65:d5:26:be:63:78:23:48:a7:05:21:89:93:94:19:2d:68:cb: 0e:a5:ad:84:62:29:f5:e0:a9:b4:f9:97:9e:4a:cb:c5:d8:8b: e7:4f:ca:32:fd:02:f2:6c:bc:82:87:67:0d:ba:cf:47:ae:85: d2:c0:dc:94:55:b8:9c:34:e0:03:88:8d:0d:74:78:ed:9e:77: 62:9b:c0:f5:67:00:7d:56:be:3c:56:a4:8f:4b:07:00:f7:1a: 4c:bd:d2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjUwNDI0MTUwODIyWhcNMjUwNTAxMTUwODIyWjAYMRYwFAYD VQQDEw02ODBhNTNlNi1mZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zXaQVctoIOoBAcrAStviXj90ADXqFlBcrGO6tSs/kXANq/giUI50LvCoy1I Z7hHX1BEGIgqBrI29mgjpOEDdx2udxFYG3+DqLinXAqZZurpeeQSzwIB9bHbAIO/ IZ9dip6Za8XBq9Rn2uDkMAGg5lgr9+PBufBJ+JDt++oGThZbzQrFQQkfBYTPLn2J MUDwWYLuCK7A7ZMzw1FMayUtnJuq0MWCPyb+F3SCMIU7a6KWmF1+yCyX6hMBU6xF 4tNKOcTh69wXulKzfXg0eIoVqHjozI7EjJyTDSzXfTZVyVn4F4fKg/44pi8OV6gK 6Bs6SUNBHWgKAymMxtLFnyKgwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5MGlU3 W7gQEH5gz0ls2F53zBxXMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9iIfoWzxa5vWkdTPO6c5l4w9et+/pakP7rJIouBBwc2jLfezeXPsX dbBDMTB7cc48dgHucTSKJ5Mrnj9i2aRG89sE8ZtOZs9cAps5Xs4iOy0qhIJc+PTL 36L5wOPMvAlAniAOKeQkSF6K179DSKYBxhkBmjx2kg61b1e1QM8YQhMDKLNynckL E1e+wwk2yub00uWwu/hAiv4En8oUOQC1yH9l1Sa+Y3gjSKcFIYmTlBktaMsOpa2E Yin14Km0+ZeeSsvF2IvnT8oy/QLybLyCh2cNus9HroXSwNyUVbicNOADiI0NdHjt nndim8D1ZwB9Vr48VqSPSwcA9xpMvdKV -----END CERTIFICATE-----Generated at Sat Apr 26 05:13:01 2025 by rpki-client