$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: YMJRy6sz79MXIEauDE9qUgsZxd1NbXlmZlQ7kTDAe1I= Subject key identifier: 2C:E1:C9:7F:74:24:9E:8F:FA:EB:97:52:A9:8F:84:2D:EA:35:8E:53 Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 3483 Signing time: Thu 24 Apr 2025 14:36:43 +0000 Manifest this update: Thu 24 Apr 2025 14:36:43 +0000 Manifest next update: Thu 01 May 2025 14:36:43 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: Cg+Dpka5839JhstvHX6WIukzq+b4YnPzzDEFOPHwwcQ=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Apr 24 14:36:43 2025 GMT Not After : May 1 14:36:43 2025 GMT Subject: CN=680a4c7b-67ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c7:44:35:ec:a5:0e:72:9a:99:4c:a0:a9:c6: 06:50:87:7f:e7:43:e7:b7:16:b3:62:1e:94:64:ad: af:74:60:f0:7e:93:e5:53:6a:c1:6f:19:09:0e:e0: 3b:ce:b0:d3:e6:7d:8f:83:f3:7f:72:91:a5:a4:21: 0c:06:00:8b:6d:23:8c:5f:1a:f9:06:41:67:3a:9b: f4:d4:b0:ea:b6:cb:ae:da:f0:31:10:b2:1f:8f:34: 1b:33:d5:71:d5:6b:7d:44:88:14:81:a5:6b:c7:bd: db:ec:02:b1:0c:29:69:e6:33:31:88:62:26:75:51: c6:32:ed:d0:39:7b:7e:c4:be:66:c8:df:98:43:14: 67:0b:00:59:2d:2b:f2:97:37:11:a2:f9:17:47:db: b1:ba:c3:d3:c3:1f:78:b4:f3:f8:fc:ba:94:4a:9d: 7b:86:f0:ca:58:65:d3:39:8d:07:51:f9:f6:f2:12: 74:43:99:90:91:57:b7:0b:cb:aa:94:b5:59:03:c6: c2:fd:23:93:f9:f4:e8:35:a9:81:d9:7e:3e:e6:4c: 1f:11:0e:08:97:6b:89:cc:e8:72:a2:7a:70:8d:3b: f4:ef:14:ed:5f:5a:9d:67:8f:74:36:e9:45:76:a9: 7e:3a:e5:58:49:5c:22:4b:1d:4b:be:45:ba:8e:38: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E1:C9:7F:74:24:9E:8F:FA:EB:97:52:A9:8F:84:2D:EA:35:8E:53 X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:34:82:26:7b:f6:28:0b:25:e3:f5:f4:9f:de:a3:3f:a8:b8: 49:44:13:6c:fb:bc:9b:b2:6f:82:2f:f0:69:5a:43:b3:5b:b7: 67:30:8d:47:41:6c:8e:e8:7d:13:d6:62:38:c3:f3:aa:27:73: 07:e3:42:38:66:50:a3:77:39:16:b4:6d:f5:d7:d9:bb:79:1d: 41:51:4a:b2:18:68:63:5f:5a:ea:4a:63:ac:52:0a:fa:75:05: 9b:c6:ee:ac:28:56:65:dd:5c:d0:26:78:71:c3:b2:a0:c2:1b: cf:1b:6d:4f:0c:8c:2c:3e:69:6d:b8:98:68:91:2d:cd:89:96: bd:32:ef:17:21:b3:c0:5e:18:5b:23:7b:11:31:21:d5:77:69: c9:de:db:65:c4:ad:28:ef:03:c6:b7:5c:ed:e8:6c:93:3f:46: 89:b3:5b:ef:09:d1:ad:2c:a4:e8:43:52:95:67:4d:af:ae:12: 00:72:39:50:1c:a9:47:f7:80:d2:9a:47:f7:88:25:71:0b:c5: 42:86:f8:ec:b3:ef:b6:41:f8:67:c2:da:f5:ff:66:28:26:e6: 76:33:4c:b1:4d:66:15:db:5c:0d:23:92:f4:10:db:bd:4b:2c: ef:8f:37:03:c7:4b:a8:05:9d:d6:6c:90:fb:76:35:f2:4e:18: 32:39:0f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjUwNDI0MTQzNjQzWhcNMjUwNTAxMTQzNjQzWjAYMRYwFAYD VQQDEw02ODBhNGM3Yi02N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cdENeylDnKamUygqcYGUId/50PntxazYh6UZK2vdGDwfpPlU2rBbxkJDuA7 zrDT5n2Pg/N/cpGlpCEMBgCLbSOMXxr5BkFnOpv01LDqtsuu2vAxELIfjzQbM9Vx 1Wt9RIgUgaVrx73b7AKxDClp5jMxiGImdVHGMu3QOXt+xL5myN+YQxRnCwBZLSvy lzcRovkXR9uxusPTwx94tPP4/LqUSp17hvDKWGXTOY0HUfn28hJ0Q5mQkVe3C8uq lLVZA8bC/SOT+fToNamB2X4+5kwfEQ4Il2uJzOhyonpwjTv07xTtX1qdZ490NulF dql+OuVYSVwiSx1LvkW6jjj2YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzhyX90 JJ6P+uuXUqmPhC3qNY5TMB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1NIIme/YoCyXj9fSf3qM/qLhJRBNs+7ybsm+CL/BpWkOzW7dnMI1H QWyO6H0T1mI4w/OqJ3MH40I4ZlCjdzkWtG3119m7eR1BUUqyGGhjX1rqSmOsUgr6 dQWbxu6sKFZl3VzQJnhxw7KgwhvPG21PDIwsPmltuJhokS3NiZa9Mu8XIbPAXhhb I3sRMSHVd2nJ3ttlxK0o7wPGt1zt6GyTP0aJs1vvCdGtLKToQ1KVZ02vrhIAcjlQ HKlH94DSmkf3iCVxC8VChvjss++2Qfhnwtr1/2YoJuZ2M0yxTWYV21wNI5L0ENu9 SyzvjzcDx0uoBZ3WbJD7djXyThgyOQ8k -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:10 2025 by rpki-client