$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft File: jzFgL06-RV4JnABJu3sAZlWLnYk.mft (raw, json) Hash identifier: d29dQr3vbhafGEnqXpjnhyImg03RSOC0hS6C6pApFlo= Subject key identifier: A5:EF:CC:51:03:4E:72:98:35:69:EA:0A:02:4D:F2:82:38:69:D3:BC Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Certificate serial: 34C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft Manifest number: 34B0 Signing time: Tue 22 Jul 2025 14:37:32 +0000 Manifest this update: Tue 22 Jul 2025 14:37:32 +0000 Manifest next update: Tue 29 Jul 2025 14:37:32 +0000 Files and hashes: 1: jzFgL06-RV4JnABJu3sAZlWLnYk.crl (hash: tYwfB8AqQiQKquSSNaFM375hUQHEUZhhoI9BaNP28LY=) 2: 12C0FA5EA8E811EB8801993BC4F9AE02.roa (hash: /mCgDe/QXkVZ19zwT18pUH2ZsyIWQwp0AHCO+5H4d8I=) 3: DC50B57AE84511EB87AD6B49C4F9AE02.roa (hash: TtYahgOBiAHkLlSezm8CxA8MdQa1tev+wopDkcGdXJg=) 4: DD5C8412E84511EB87AD6B49C4F9AE02.roa (hash: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13509 (0x34c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E6C, serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89 Validity Not Before: Jul 22 14:37:32 2025 GMT Not After : Jul 29 14:37:32 2025 GMT Subject: CN=687fa22c-5424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:02:45:fd:a9:ab:f1:0c:9e:e1:ad:25:e0: 75:fe:ed:7e:ad:9a:bd:5b:19:73:b2:3b:d1:e6:91: be:54:c4:a0:12:d8:74:cb:b0:af:84:70:cb:6e:45: 28:90:4c:39:fc:59:03:b9:7b:b5:c5:f5:58:81:ed: 2a:f8:c2:6b:16:d6:1e:26:b0:d4:da:c2:4a:09:74: 2a:87:03:f8:a0:e8:6a:d7:6d:ac:9b:08:c3:e8:3f: 43:21:f3:7d:a3:4a:3d:48:2e:0a:d1:71:98:5a:b2: ad:ca:d2:2c:41:44:3f:f2:31:d7:ce:64:5d:bb:b0: 2f:1c:24:43:73:a8:6d:ba:4f:46:f8:ea:17:61:07: 8b:b8:cf:33:30:04:05:ca:a8:18:97:32:4c:8a:c8: e2:a2:2c:cd:85:ca:51:b7:d4:4f:13:df:62:2f:1b: cd:dd:dd:c5:a8:b2:18:e8:86:e9:f0:f3:41:44:06: 4b:df:40:75:1c:66:bd:a0:3e:8e:94:2c:a8:f2:64: 25:e6:c8:5c:7e:b2:ae:ad:e5:08:54:6d:3d:8b:60: f0:ad:41:91:f0:c3:e2:48:65:41:ba:f2:4a:cc:12: 69:03:0e:db:8d:7f:8f:53:0b:a6:93:f2:7a:21:38: 3b:92:65:67:6e:c9:99:43:49:48:41:5c:35:6c:97: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EF:CC:51:03:4E:72:98:35:69:EA:0A:02:4D:F2:82:38:69:D3:BC X509v3 Authority Key Identifier: keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c0:d0:13:1c:e5:12:28:49:71:39:c4:18:d2:a4:f4:21:73: 97:d4:b9:f4:05:de:0d:cd:8f:05:c5:65:f6:2e:ee:b6:07:22: 07:31:a2:95:dc:51:58:60:ea:68:76:0f:f2:93:8f:7f:f4:55: df:15:ae:11:b4:e2:a3:97:fe:d4:96:54:f7:23:60:bd:a7:5b: 79:eb:ff:e2:86:95:e8:28:58:ba:3a:a3:92:cb:9c:b7:1c:96: 46:19:e8:91:d9:87:02:fe:8c:78:7f:6e:d9:46:e7:98:f8:19: 5f:46:91:a0:e3:c3:1b:9c:64:47:2e:7c:64:f0:df:9e:67:b2: d5:f1:ce:58:13:61:e7:f0:74:53:da:37:0e:8f:95:53:e3:f5: 09:d8:14:2d:b6:2f:2e:74:06:b9:e0:18:1c:cb:08:8a:63:5b: e0:bc:ee:be:de:c0:20:da:72:d9:48:1c:8e:b8:fb:e8:bc:9e: 30:a0:95:ef:75:e0:76:95:56:e9:4d:2d:b9:ca:0b:67:66:3e: 9f:b4:7b:32:65:f1:57:41:42:8e:76:e8:08:32:fc:d9:0c:d8: 61:f3:ae:f6:96:47:84:8e:95:68:9e:70:e1:d0:67:12:b5:c7: 51:81:2e:1b:08:4a:5f:b5:51:06:90:da:19:33:23:81:ca:df: b4:29:2b:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFNkMxMTAvBgNVBAUTKDhGMzE2MDJGNEVCRTQ1NUUwOTlDMDA0OUJCN0IwMDY2 NTU4QjlEODkwHhcNMjUwNzIyMTQzNzMyWhcNMjUwNzI5MTQzNzMyWjAYMRYwFAYD VQQDEw02ODdmYTIyYy01NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6YCRf2pq/EMnuGtJeB1/u1+rZq9WxlzsjvR5pG+VMSgEth0y7CvhHDLbkUo kEw5/FkDuXu1xfVYge0q+MJrFtYeJrDU2sJKCXQqhwP4oOhq122smwjD6D9DIfN9 o0o9SC4K0XGYWrKtytIsQUQ/8jHXzmRdu7AvHCRDc6htuk9G+OoXYQeLuM8zMAQF yqgYlzJMisjioizNhcpRt9RPE99iLxvN3d3FqLIY6Ibp8PNBRAZL30B1HGa9oD6O lCyo8mQl5shcfrKureUIVG09i2DwrUGR8MPiSGVBuvJKzBJpAw7bjX+PUwumk/J6 ITg7kmVnbsmZQ0lIQVw1bJeHnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXvzFED TnKYNWnqCgJN8oI4adO8MB8GA1UdIwQYMBaAFI8xYC9OvkVeCZwASbt7AGZVi52J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkU2Qy80MjZFM0RCQTFE OEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJWNEpuQUJKdTNzQVpsV0xu WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p6RmdMMDYtUlY0Sm5BQkp1M3NBWmxXTG5Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkU2Qy80MjZFM0RCQTFEOEQxMUUyOTNDNERBRUEwOEIwMkNEMi9qekZnTDA2LVJW NEpuQUJKdTNzQVpsV0xuWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAowNATHOUSKElxOcQY0qT0IXOX1Ln0Bd4NzY8FxWX2Lu62ByIHMaKV 3FFYYOpodg/yk49/9FXfFa4RtOKjl/7UllT3I2C9p1t56//ihpXoKFi6OqOSy5y3 HJZGGeiR2YcC/ox4f27ZRueY+BlfRpGg48MbnGRHLnxk8N+eZ7LV8c5YE2Hn8HRT 2jcOj5VT4/UJ2BQtti8udAa54BgcywiKY1vgvO6+3sAg2nLZSByOuPvovJ4woJXv deB2lVbpTS25ygtnZj6ftHsyZfFXQUKOdugIMvzZDNhh8672lkeEjpVonnDh0GcS tcdRgS4bCEpftVEGkNoZMyOByt+0KSv5 -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:50 2025 by rpki-client