$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft File: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json) Hash identifier: NO2wECAH4oXF/naOgbPhcmxA6QSFGS2MQ/ja0N7UkgI= Subject key identifier: ED:F0:3E:E9:EE:E4:15:DD:C8:1F:1B:4C:5F:FC:86:39:5A:2F:AC:12 Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 Certificate issuer: /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft Manifest number: 60 Signing time: Fri 25 Apr 2025 06:03:42 +0000 Manifest this update: Fri 25 Apr 2025 06:03:42 +0000 Manifest next update: Fri 02 May 2025 06:03:42 +0000 Files and hashes: 1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: 046NzvUxXGIliaQfYEs+iAgcJNjZtK5GKZjQNtaffps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Validity Not Before: Apr 25 06:03:42 2025 GMT Not After : May 2 06:03:42 2025 GMT Subject: CN=680b25be-1ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:e8:19:19:c4:d0:6f:61:16:0d:d6:37:da: 95:c0:80:88:13:92:f6:b7:54:86:4c:3e:e2:6d:35: 09:cf:93:de:b5:a0:77:f2:7c:ad:f3:0f:61:e6:65: c8:b9:a4:96:01:4e:ea:49:4e:f7:e2:2b:58:c9:34: 53:bf:97:e3:4a:0b:92:3f:a7:cc:8c:dd:7d:30:fa: 9f:3f:21:94:b4:6e:a9:c3:bf:d9:6b:06:00:70:55: 03:60:42:11:b0:fa:a4:b3:ca:31:70:91:ed:ac:eb: 22:a6:25:08:e3:e0:a6:14:1a:ca:fe:ee:e7:a2:c2: cf:96:2b:37:0b:72:88:80:c5:65:e0:a1:ea:35:92: 97:1b:b2:22:54:34:02:0c:c3:85:a1:ff:e9:1e:37: 75:6d:b9:cd:78:45:08:66:a1:53:31:a8:bc:69:7c: d3:fa:e5:89:c0:0c:39:d9:0f:16:bf:8e:06:07:74: 2a:f1:99:ff:cc:13:d8:c6:1f:95:d3:20:ea:c6:fd: 91:68:43:a1:b7:e9:ce:c4:03:23:6b:fd:fb:30:8a: 5a:23:82:5c:ac:47:1c:9d:6e:37:00:4c:e1:37:8d: e6:d3:10:b3:7a:e6:b7:c1:76:73:d7:e4:0c:91:7e: 5f:ac:2a:49:c0:34:b9:d0:05:06:6d:94:11:71:cf: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F0:3E:E9:EE:E4:15:DD:C8:1F:1B:4C:5F:FC:86:39:5A:2F:AC:12 X509v3 Authority Key Identifier: keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8b:ec:16:d5:d3:b1:c0:ee:d8:fa:a7:fa:c9:3f:2a:31:21: 72:0a:30:4b:1a:d0:d3:a5:d9:80:8e:5b:13:32:c4:52:18:d7: c5:04:4e:f2:90:24:aa:d3:fa:1c:0f:6c:7b:ea:e0:86:13:20: 34:de:9a:0b:bd:30:07:92:43:4a:36:6a:ca:c9:8e:72:00:3c: e6:66:0b:27:bb:d2:d9:47:5f:ad:55:39:c7:4a:92:41:b6:bb: fa:66:22:a0:4e:8c:6f:06:fb:a5:a4:de:0e:9c:60:0b:d5:a4: 82:13:02:6f:f4:36:55:f6:7f:2e:9f:88:12:be:cc:fc:67:61: 00:ab:1e:e0:f6:48:a0:d6:dd:0c:1f:cb:7a:9d:1f:fa:9b:a0: ef:9c:28:c3:0b:67:d5:e0:38:7a:6e:76:70:75:e2:e7:85:9a: f6:00:0c:40:fe:5a:b9:62:46:51:ca:22:8d:60:48:b5:b8:11: 5e:ca:81:a9:8a:b4:c7:00:bf:8a:ea:b3:f8:10:b1:08:53:76: db:e7:4b:a2:9e:09:92:bc:3a:82:4d:93:d5:af:9c:3e:90:8b: c6:14:e2:e2:5c:f6:36:23:af:4d:6c:39:b5:b3:42:83:01:38: 25:ce:c2:4f:f8:8e:90:a9:eb:14:f0:ee:2d:53:85:2d:b0:65: 3c:aa:48:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjRDQzExMC8GA1UEBRMoN0UzOUZFMjFGOUQxNTg1Q0FFRjU5OEZCN0Q2QTA2RUJG RDMxMDZDMjAeFw0yNTA0MjUwNjAzNDJaFw0yNTA1MDIwNjAzNDJaMBgxFjAUBgNV BAMTDTY4MGIyNWJlLTFhYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfuOgZGcTQb2EWDdY32pXAgIgTkva3VIZMPuJtNQnPk961oHfyfK3zD2HmZci5 pJYBTupJTvfiK1jJNFO/l+NKC5I/p8yM3X0w+p8/IZS0bqnDv9lrBgBwVQNgQhGw +qSzyjFwke2s6yKmJQjj4KYUGsr+7ueiws+WKzcLcoiAxWXgoeo1kpcbsiJUNAIM w4Wh/+keN3Vtuc14RQhmoVMxqLxpfNP65YnADDnZDxa/jgYHdCrxmf/ME9jGH5XT IOrG/ZFoQ6G36c7EAyNr/fswilojglysRxydbjcATOE3jebTELN65rfBdnPX5AyR fl+sKknANLnQBQZtlBFxz2bLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7fA+6e7k Fd3IHxtMX/yGOVovrBIwHwYDVR0jBBgwFoAUfjn+IfnRWFyu9Zj7fWoG6/0xBsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNENDL0Q1ODFDMUJDOTE0 ODExRUY4N0VBREQ1MkM0RjlBRTAyL2Zqbi1JZm5SV0Z5dTlaajdmV29HNl8weEJz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpuLUlmblJXRnl1OVpqN2ZXb0c2XzB4QnNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NENDL0Q1ODFDMUJDOTE0ODExRUY4N0VBREQ1MkM0RjlBRTAyL2Zqbi1JZm5SV0Z5 dTlaajdmV29HNl8weEJzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADqL7BbV07HA7tj6p/rJPyoxIXIKMEsa0NOl2YCOWxMyxFIY18UETvKQ JKrT+hwPbHvq4IYTIDTemgu9MAeSQ0o2asrJjnIAPOZmCye70tlHX61VOcdKkkG2 u/pmIqBOjG8G+6Wk3g6cYAvVpIITAm/0NlX2fy6fiBK+zPxnYQCrHuD2SKDW3Qwf y3qdH/qboO+cKMMLZ9XgOHpudnB14ueFmvYADED+WrliRlHKIo1gSLW4EV7KgamK tMcAv4rqs/gQsQhTdtvnS6KeCZK8OoJNk9WvnD6Qi8YU4uJc9jYjr01sObWzQoMB OCXOwk/4jpCp6xTw7i1ThS2wZTyqSKM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:42 2025 by rpki-client