$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft File: jfabjPAtRHKg4tL07m5JMm09sMU.mft (raw, json) Hash identifier: nMtscu5IWB/TY+RPs1GLzNvHWVpEq676ZBCbyfvKnf4= Subject key identifier: 6B:F4:C9:04:2D:3A:F4:81:06:64:4F:29:5E:15:FD:03:2B:E7:0D:CE Authority key identifier: 8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 Certificate issuer: /CN=A9147BA3/serialNumber=8DF69B8CF02D4472A0E2D2F4EE6E49326D3DB0C5 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft Manifest number: 3472 Signing time: Fri 04 Apr 2025 15:10:21 +0000 Manifest this update: Fri 04 Apr 2025 15:10:20 +0000 Manifest next update: Fri 11 Apr 2025 15:10:20 +0000 Files and hashes: 1: jfabjPAtRHKg4tL07m5JMm09sMU.crl (hash: jpZYSF+IIbKvE/lKhyqopQ2dPtXOUsYJ2/M0xEpn6Bo=) 2: 2B2C31BE3B8B11EB8D76362DC4F9AE02.roa (hash: END/X8NWEnYQqU51TlQvCrkCaUczqULOOoxx1HVtbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147BA3 Validity Not Before: Apr 4 15:10:20 2025 GMT Not After : Apr 11 15:10:20 2025 GMT Subject: CN=67eff65c-c710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:08:76:31:ba:27:e9:da:26:78:13:a7:48: 9f:3c:7d:c2:d7:05:61:43:b1:9b:f6:45:d4:8e:73: cb:24:90:8e:ef:9e:d8:cb:b0:04:3f:40:7e:ac:92: c2:45:46:b9:2a:6a:24:34:85:4c:a7:06:67:fe:c3: 12:c7:3d:b6:39:18:77:fe:d9:48:28:49:f8:d6:bd: cf:76:f3:53:e2:61:75:d4:2a:9d:27:65:a2:ae:31: 53:d8:49:00:f7:30:af:9d:a1:ee:d6:fe:09:f1:1f: 30:d1:96:bb:90:ee:b5:c7:7d:2d:b3:b6:c4:a1:0a: d1:a9:f1:c9:d6:b8:05:52:52:7f:0c:74:98:fc:e6: 72:ea:30:9a:94:74:1c:76:99:59:f4:bd:76:19:38: 36:77:af:8d:9c:c5:c5:a2:d3:35:76:8d:27:de:d4: 50:b7:19:8f:78:29:8b:ce:8d:7d:ac:27:3c:86:95: 09:8e:4e:8c:23:25:15:53:cb:4d:b6:8c:d9:91:d4: b7:8b:d9:5e:af:18:04:4f:69:aa:6e:45:2c:e1:62: 63:66:21:d7:28:a4:77:cb:ff:4b:66:03:f0:9c:3b: 4e:3b:bf:77:25:29:1a:7e:6d:7d:70:b3:7e:43:93: f4:71:5c:dc:6e:d1:51:0c:8c:cb:13:e6:66:20:4f: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F4:C9:04:2D:3A:F4:81:06:64:4F:29:5E:15:FD:03:2B:E7:0D:CE X509v3 Authority Key Identifier: keyid:8D:F6:9B:8C:F0:2D:44:72:A0:E2:D2:F4:EE:6E:49:32:6D:3D:B0:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfabjPAtRHKg4tL07m5JMm09sMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BA3/77EA7A241DA311E292E5CA9808B02CD2/jfabjPAtRHKg4tL07m5JMm09sMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e7:dc:ff:b5:5b:46:0e:ca:3a:a1:32:59:a7:0d:92:7c:2c: e2:81:62:7a:a7:43:85:f2:e3:30:a2:67:76:cf:2a:b9:d5:ba: 68:12:c5:b1:bd:f1:0f:81:99:3e:d1:f3:61:a6:db:86:9f:0d: 7e:ff:8a:ed:fe:8c:89:b0:17:c3:22:9c:c6:79:9c:5b:b1:fe: 22:72:02:46:98:45:4b:1e:44:4e:24:d6:ba:28:14:1f:7b:e5: 6e:6e:c3:76:be:24:4b:b6:b6:99:ac:a3:c2:88:31:de:f9:15: e8:c9:1c:bd:52:5a:67:63:5f:eb:bf:c4:b9:d0:2d:66:0d:48: 48:59:db:72:6c:c4:dc:0f:3a:d5:39:5e:41:ae:0c:28:ed:d3: aa:06:a2:0d:0e:99:4b:68:4c:91:e4:57:89:a7:81:e7:92:76: 80:78:c4:4d:87:90:a6:3d:9d:7d:29:ba:24:03:0c:59:3b:1a: 57:8e:88:76:f7:59:42:d1:74:e4:7a:69:78:7e:46:1e:2c:66: 1d:51:0d:35:6e:73:b9:fb:81:5a:72:40:66:a5:56:bf:8b:53: 29:76:8d:fe:88:4f:a8:39:39:58:a0:be:b5:8f:98:5a:10:73: 1c:ee:ad:9b:13:e8:e9:3e:99:88:a0:af:a4:eb:1a:12:16:f9: ff:06:f0:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCQTMxMTAvBgNVBAUTKDhERjY5QjhDRjAyRDQ0NzJBMEUyRDJGNEVFNkU0OTMy NkQzREIwQzUwHhcNMjUwNDA0MTUxMDIwWhcNMjUwNDExMTUxMDIwWjAYMRYwFAYD VQQDEw02N2VmZjY1Yy1jNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxMIdjG6J+naJngTp0ifPH3C1wVhQ7Gb9kXUjnPLJJCO757Yy7AEP0B+rJLC RUa5KmokNIVMpwZn/sMSxz22ORh3/tlIKEn41r3PdvNT4mF11CqdJ2WirjFT2EkA 9zCvnaHu1v4J8R8w0Za7kO61x30ts7bEoQrRqfHJ1rgFUlJ/DHSY/OZy6jCalHQc dplZ9L12GTg2d6+NnMXFotM1do0n3tRQtxmPeCmLzo19rCc8hpUJjk6MIyUVU8tN tozZkdS3i9lerxgET2mqbkUs4WJjZiHXKKR3y/9LZgPwnDtOO793JSkafm19cLN+ Q5P0cVzcbtFRDIzLE+ZmIE92wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv0yQQt OvSBBmRPKV4V/QMr5w3OMB8GA1UdIwQYMBaAFI32m4zwLURyoOLS9O5uSTJtPbDF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JBMy83N0VBN0EyNDFE QTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJIS2c0dEwwN201Sk1tMDlz TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pmYWJqUEF0UkhLZzR0TDA3bTVKTW0wOXNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0JBMy83N0VBN0EyNDFEQTMxMUUyOTJFNUNBOTgwOEIwMkNEMi9qZmFialBBdFJI S2c0dEwwN201Sk1tMDlzTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa59z/tVtGDso6oTJZpw2SfCzigWJ6p0OF8uMwomd2zyq51bpoEsWx vfEPgZk+0fNhptuGnw1+/4rt/oyJsBfDIpzGeZxbsf4icgJGmEVLHkROJNa6KBQf e+VubsN2viRLtraZrKPCiDHe+RXoyRy9UlpnY1/rv8S50C1mDUhIWdtybMTcDzrV OV5Brgwo7dOqBqINDplLaEyR5FeJp4HnknaAeMRNh5CmPZ19KbokAwxZOxpXjoh2 91lC0XTkeml4fkYeLGYdUQ01bnO5+4FackBmpVa/i1Mpdo3+iE+oOTlYoL61j5ha EHMc7q2bE+jpPpmIoK+k6xoSFvn/BvCq -----END CERTIFICATE-----Generated at Sat Apr 5 19:19:11 2025 by rpki-client