$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: /6hZsxguWgamMa3JMaA1e9O8c+s974NIdz52fMJjAaM= Subject key identifier: 50:D2:70:A0:5A:A5:DA:37:38:28:3A:CF:66:2F:AF:CF:67:35:49:7B Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 349D Signing time: Sat 14 Jun 2025 14:36:44 +0000 Manifest this update: Sat 14 Jun 2025 14:36:43 +0000 Manifest next update: Sat 21 Jun 2025 14:36:43 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: SS+9/B4TxjZNX9ZvJ/0jsN9PQAcra4B0oDmbTjhL5co=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Jun 14 14:36:43 2025 GMT Not After : Jun 21 14:36:43 2025 GMT Subject: CN=684d88fc-0574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:6a:1d:54:3e:d7:63:12:3f:72:84:27:20: de:91:25:b5:a3:79:88:b7:f3:76:97:4e:db:3a:0c: 40:25:bf:7d:b9:3a:fc:70:0a:12:70:14:f1:e3:d1: 4d:9d:5c:25:36:80:b4:ae:e7:4a:e6:e2:99:b8:af: c9:27:86:74:9c:c0:b5:51:02:1c:35:7c:70:f8:71: 3f:5f:03:9c:b1:c3:18:a3:8c:9c:3b:56:cb:7a:bf: ff:fd:ca:d8:41:6a:2e:93:92:e9:e1:99:1d:73:f7: 80:d4:df:d9:94:a4:50:90:2c:29:83:46:ca:ba:00: 90:61:24:d7:3a:78:22:86:c7:12:aa:cf:a1:6b:0e: 4f:ae:5e:4f:45:31:25:30:d9:6a:ae:81:25:19:7f: 01:c2:a7:42:35:23:29:6f:23:42:0b:7f:d7:09:9a: d0:7f:ec:29:fd:c0:7c:cd:df:79:d9:f1:fb:78:b2: 52:ce:82:8f:92:2c:e6:0a:50:92:e3:76:ec:3a:37: fc:4e:d5:89:38:05:d6:ff:b7:03:d2:94:1b:b9:29: e0:5a:8c:6e:ec:88:81:8c:5c:fe:76:d8:83:13:4e: 7b:d7:df:bf:a7:d6:84:75:fe:4e:f2:70:eb:e3:c3: 00:e2:14:09:e6:70:17:13:fe:d9:d1:59:3a:a0:e1: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D2:70:A0:5A:A5:DA:37:38:28:3A:CF:66:2F:AF:CF:67:35:49:7B X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:22:b5:ac:f2:42:b8:66:af:62:09:c5:0e:79:5d:2c:c6:17: 79:7a:ef:3c:f0:8a:bd:ea:8c:f3:a8:53:a0:a3:8a:35:0b:56: 13:de:ad:03:f7:6f:87:1f:2c:08:cb:6b:62:e1:25:48:97:4d: 7f:a7:b8:bc:cf:f5:8b:73:90:2c:b5:49:1a:bf:1f:ad:84:93: d8:f3:eb:e8:8e:66:aa:08:41:e3:4c:fe:ff:cc:7a:e8:fe:c8: 63:90:d2:a9:60:a8:b6:65:34:36:b3:37:7b:bd:87:a8:f1:46: 69:b1:47:37:53:f9:8d:ab:7d:51:60:92:db:13:b0:4e:72:7a: 93:a9:d1:ca:bb:1c:06:22:ca:76:4a:95:5b:08:06:82:ec:9f: 05:20:9f:29:5c:9f:24:bd:cd:6e:33:0e:cb:e7:93:41:06:1e: 61:96:c3:1c:be:0b:cb:ae:88:df:ee:aa:57:0c:ae:7d:ad:8b: 93:df:ec:c0:b6:cd:b4:a0:db:ba:70:b5:39:b0:b4:63:d2:91: 82:9b:bd:0b:8e:50:9a:6f:bb:5d:29:5a:bb:ab:4b:ff:2d:3c: 6f:61:2e:d6:cc:30:37:eb:51:d9:c7:4b:34:0d:38:eb:64:ee: 15:32:d5:ff:75:77:9a:92:e1:16:35:eb:57:c9:24:7b:27:0e: 12:50:cc:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjUwNjE0MTQzNjQzWhcNMjUwNjIxMTQzNjQzWjAYMRYwFAYD VQQDEw02ODRkODhmYy0wNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc5qHVQ+12MSP3KEJyDekSW1o3mIt/N2l07bOgxAJb99uTr8cAoScBTx49FN nVwlNoC0rudK5uKZuK/JJ4Z0nMC1UQIcNXxw+HE/XwOcscMYo4ycO1bLer///crY QWouk5Lp4Zkdc/eA1N/ZlKRQkCwpg0bKugCQYSTXOngihscSqs+haw5Prl5PRTEl MNlqroElGX8BwqdCNSMpbyNCC3/XCZrQf+wp/cB8zd952fH7eLJSzoKPkizmClCS 43bsOjf8TtWJOAXW/7cD0pQbuSngWoxu7IiBjFz+dtiDE05719+/p9aEdf5O8nDr 48MA4hQJ5nAXE/7Z0Vk6oOHQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDScKBa pdo3OCg6z2Yvr89nNUl7MB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKIrWs8kK4Zq9iCcUOeV0sxhd5eu888Iq96ozzqFOgo4o1C1YT3q0D 92+HHywIy2ti4SVIl01/p7i8z/WLc5AstUkavx+thJPY8+vojmaqCEHjTP7/zHro /shjkNKpYKi2ZTQ2szd7vYeo8UZpsUc3U/mNq31RYJLbE7BOcnqTqdHKuxwGIsp2 SpVbCAaC7J8FIJ8pXJ8kvc1uMw7L55NBBh5hlsMcvgvLrojf7qpXDK59rYuT3+zA ts20oNu6cLU5sLRj0pGCm70LjlCab7tdKVq7q0v/LTxvYS7WzDA361HZx0s0DTjr ZO4VMtX/dXeakuEWNetXySR7Jw4SUMyp -----END CERTIFICATE-----Generated at Sun Jun 15 08:25:23 2025 by rpki-client