$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: roV5Fc3xZaQoSbT+k83uAGhmRXo0s8aeMHMtAlciElE= Subject key identifier: 39:9F:05:F1:0E:9A:00:87:CC:7A:CE:29:15:B8:30:9D:62:4A:81:90 Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 349F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 3496 Signing time: Sat 14 Jun 2025 15:07:00 +0000 Manifest this update: Sat 14 Jun 2025 15:06:59 +0000 Manifest next update: Sat 21 Jun 2025 15:06:59 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: rS9ep7rgziNHusQRZStXAtAss2Ca2HrrxfYHxjjOckQ=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3, serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Validity Not Before: Jun 14 15:06:59 2025 GMT Not After : Jun 21 15:06:59 2025 GMT Subject: CN=684d9013-1bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:36:85:a1:1f:dc:7d:6f:44:67:d5:29:7d: 13:d6:4a:e8:71:1b:48:61:a0:5f:a4:00:b4:ad:0d: 84:3b:f5:3f:1c:7d:97:bf:c7:9e:ed:25:86:1a:b7: 77:ca:cb:ad:b5:54:fa:8a:25:27:4c:59:90:4e:4c: 05:43:69:10:55:ed:b3:c7:f2:2e:f0:0f:a0:00:70: 19:20:97:c4:14:0f:fe:6c:7c:4e:9d:42:51:79:f3: 29:80:50:98:67:6c:a2:a9:c1:75:f0:4b:1a:0f:c8: 37:ac:ae:59:f1:b2:7d:09:1a:1c:e7:39:13:14:94: 20:54:9f:e8:b5:3f:7d:0f:96:41:56:44:c8:11:38: f3:ba:9b:53:e5:bf:fe:16:b8:77:51:5d:b3:9d:3e: ac:ab:1d:0b:30:5e:8a:8b:ab:fd:90:ef:4c:ed:9b: 05:9c:65:65:c0:67:8e:3c:80:da:79:d6:32:cf:b6: 19:04:9e:87:31:b8:e5:c6:94:0e:49:93:ab:63:c3: c9:04:67:c3:ac:c8:6b:ea:70:13:1d:28:2e:c9:bd: bb:59:7d:dc:21:6e:90:45:d8:20:94:1a:bb:62:09: 83:72:26:0d:91:08:3c:28:fa:ce:ef:f3:10:47:82: 0f:f0:32:2c:cf:b3:d2:dd:56:20:ac:7d:a4:e7:84: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9F:05:F1:0E:9A:00:87:CC:7A:CE:29:15:B8:30:9D:62:4A:81:90 X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7c:48:0e:9c:22:9e:f5:e1:10:50:e6:df:6c:1f:cb:63:ee: 1f:4b:16:2a:b0:88:96:ef:ea:97:3d:a3:99:c1:df:f7:a0:03: 98:ed:b3:a8:0e:6b:ed:73:8d:ae:15:c4:69:f5:f6:88:08:9e: aa:77:df:aa:83:d6:a8:d5:00:bd:36:2e:73:7f:d9:cb:ab:d7: 79:8d:bd:8a:cc:6e:65:6a:06:d1:c5:85:1b:11:6a:6b:d6:dd: 47:fc:c3:b3:98:bd:6a:11:3f:55:0b:63:39:57:aa:d2:23:2e: fd:8b:f5:bb:e1:4e:6e:5f:09:20:39:bc:4a:e3:61:07:8f:8c: d1:50:cd:4f:40:60:00:8c:a9:e9:cd:f8:77:1d:3e:0d:57:ac: 62:b1:95:39:24:d0:32:92:8c:66:76:ef:38:aa:72:09:9e:33: dd:d9:0a:2b:b8:a5:5f:8d:24:16:cb:9b:5f:be:00:1f:41:a0: 17:a5:81:7d:50:77:86:55:a2:aa:8d:34:6e:d9:cc:dd:1d:38: 2c:7d:e6:8a:95:46:66:07:7d:2d:34:f8:cf:25:32:57:74:6c: c4:de:3e:3c:0d:e7:a8:dc:18:50:c8:e4:b3:ac:93:b0:a6:c2: b4:83:89:64:61:40:06:a7:b5:12:26:d6:7d:48:0f:5d:99:65: fc:1f:35:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjUwNjE0MTUwNjU5WhcNMjUwNjIxMTUwNjU5WjAYMRYwFAYD VQQDEw02ODRkOTAxMy0xYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5c2haEf3H1vRGfVKX0T1krocRtIYaBfpAC0rQ2EO/U/HH2Xv8ee7SWGGrd3 ysuttVT6iiUnTFmQTkwFQ2kQVe2zx/Iu8A+gAHAZIJfEFA/+bHxOnUJRefMpgFCY Z2yiqcF18EsaD8g3rK5Z8bJ9CRoc5zkTFJQgVJ/otT99D5ZBVkTIETjzuptT5b/+ Frh3UV2znT6sqx0LMF6Ki6v9kO9M7ZsFnGVlwGeOPIDaedYyz7YZBJ6HMbjlxpQO SZOrY8PJBGfDrMhr6nATHSguyb27WX3cIW6QRdgglBq7YgmDciYNkQg8KPrO7/MQ R4IP8DIsz7PS3VYgrH2k54T01wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmfBfEO mgCHzHrOKRW4MJ1iSoGQMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2fEgOnCKe9eEQUObfbB/LY+4fSxYqsIiW7+qXPaOZwd/3oAOY7bOo Dmvtc42uFcRp9faICJ6qd9+qg9ao1QC9Ni5zf9nLq9d5jb2KzG5lagbRxYUbEWpr 1t1H/MOzmL1qET9VC2M5V6rSIy79i/W74U5uXwkgObxK42EHj4zRUM1PQGAAjKnp zfh3HT4NV6xisZU5JNAykoxmdu84qnIJnjPd2QoruKVfjSQWy5tfvgAfQaAXpYF9 UHeGVaKqjTRu2czdHTgsfeaKlUZmB30tNPjPJTJXdGzE3j48Deeo3BhQyOSzrJOw psK0g4lkYUAGp7USJtZ9SA9dmWX8HzU3 -----END CERTIFICATE-----Generated at Sun Jun 15 06:02:58 2025 by rpki-client