$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft File: j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json) Hash identifier: pbOO+1EgkT/HdXRQYDxvj+KZgIR6wSg3WNNH7xpplN0= Subject key identifier: 09:40:A1:84:56:D5:15:4E:EA:93:5D:E3:02:BC:15:0C:B7:DC:AD:46 Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 Certificate issuer: /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft Manifest number: 079C Signing time: Fri 30 May 2025 21:30:36 +0000 Manifest this update: Fri 30 May 2025 21:30:36 +0000 Manifest next update: Fri 06 Jun 2025 21:30:36 +0000 Files and hashes: 1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: 5eZNv7aP3MF0WcaNrYR60vUfiqqcR3XxRXvQMbTst4w=) 2: C3A97C9405FD11EBA6C82784C4F9AE02.roa (hash: 15RN1wkLoRgyN9kMvXETnVOe9SQQOWeOre0ydQBRUx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27 Validity Not Before: May 30 21:30:36 2025 GMT Not After : Jun 6 21:30:36 2025 GMT Subject: CN=683a237c-e412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d4:6c:4e:0a:8a:4b:88:bd:5c:bb:4c:00:e6: 5c:7d:f7:0e:6f:03:d0:1f:cc:a2:75:68:79:95:46: 70:b8:dd:7c:2f:af:2d:01:8c:c6:12:59:b1:34:23: 8c:4a:0d:fc:a4:3b:d6:c3:55:38:d6:8b:4f:ee:c1: 88:52:f5:70:44:55:ae:fb:58:60:bb:4a:30:17:5b: d7:78:ad:f2:67:d1:30:2f:41:b1:78:0c:79:cc:c2: 19:fa:85:8e:3e:b6:2b:2f:0c:ac:82:9f:af:d5:dc: 7c:a5:1b:ce:5a:f2:5c:80:d5:00:c2:98:7a:f0:68: a0:40:c4:aa:63:3c:cb:61:3f:7c:6e:25:22:d8:9b: 40:e8:1b:66:6d:6e:90:e0:4f:94:70:06:8c:36:64: ff:f9:e4:10:47:ca:f4:31:52:44:22:17:e0:93:3f: 3f:11:f0:81:2f:1b:01:bd:af:98:39:34:cf:67:ff: d8:00:1a:33:7a:13:c7:4b:39:74:6b:f7:06:93:f9: 7a:ca:f2:e4:c1:a9:b1:ad:c1:5d:81:b3:0d:57:7c: 71:0a:c0:8b:8b:81:d9:24:e0:d7:1e:1c:cf:9a:df: 7b:d2:50:04:c1:98:e0:f6:93:bb:6e:4d:b8:9b:70: 73:f2:54:9f:62:9f:2c:c1:17:81:5a:03:4c:8b:39: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:A1:84:56:D5:15:4E:EA:93:5D:E3:02:BC:15:0C:B7:DC:AD:46 X509v3 Authority Key Identifier: keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:da:31:07:a7:f2:14:48:ee:b5:01:5f:9f:37:34:b6:38:a8: 30:d4:2b:32:5d:0d:6b:b9:75:e6:de:72:13:f5:dd:12:31:71: 86:82:4b:47:29:f5:5f:a8:7a:a8:e3:63:cb:b2:96:2d:76:ac: e0:69:3f:d2:90:94:1c:ed:7f:e8:7a:a3:69:16:36:db:08:ac: c4:b1:08:bb:e5:36:24:e7:04:79:b1:5e:5d:07:83:a2:4f:df: 8f:78:9b:65:6b:09:24:54:fc:c4:59:74:ef:0f:0e:0b:e9:08: ff:9b:e8:f3:d8:17:b0:0c:28:95:0c:ec:4a:d3:95:6f:9f:81: a6:35:00:94:43:97:81:27:c1:5c:dd:cc:42:a6:9c:5f:ae:e2: 74:a3:37:16:00:15:37:c6:51:b2:b6:c7:d7:bd:ac:8b:fe:1e: bf:b6:42:93:46:fb:68:f0:08:4d:fb:9e:64:39:db:7a:3a:8b: 90:63:c6:f6:9e:47:93:c4:e4:e5:01:ef:66:06:cb:d8:09:31: 88:53:a3:2b:b4:1f:19:d3:6e:34:bb:a7:32:17:95:19:5f:97: 50:aa:21:d5:70:47:e8:f8:ee:d6:47:e6:cd:fc:5d:e7:be:96: a6:c8:12:77:41:4d:ba:bd:ad:c9:69:cf:0a:e1:ef:ff:41:b3: 8c:b5:73:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3 RDc1RkJEMjcwHhcNMjUwNTMwMjEzMDM2WhcNMjUwNjA2MjEzMDM2WjAYMRYwFAYD VQQDEw02ODNhMjM3Yy1lNDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NRsTgqKS4i9XLtMAOZcffcObwPQH8yidWh5lUZwuN18L68tAYzGElmxNCOM Sg38pDvWw1U41otP7sGIUvVwRFWu+1hgu0owF1vXeK3yZ9EwL0GxeAx5zMIZ+oWO PrYrLwysgp+v1dx8pRvOWvJcgNUAwph68GigQMSqYzzLYT98biUi2JtA6BtmbW6Q 4E+UcAaMNmT/+eQQR8r0MVJEIhfgkz8/EfCBLxsBva+YOTTPZ//YABozehPHSzl0 a/cGk/l6yvLkwamxrcFdgbMNV3xxCsCLi4HZJODXHhzPmt970lAEwZjg9pO7bk24 m3Bz8lSfYp8swReBWgNMiznDMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlAoYRW 1RVO6pNd4wK8FQy33K1GMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1 RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo2jEHp/IUSO61AV+fNzS2OKgw1CsyXQ1ruXXm3nIT9d0SMXGGgktH KfVfqHqo42PLspYtdqzgaT/SkJQc7X/oeqNpFjbbCKzEsQi75TYk5wR5sV5dB4Oi T9+PeJtlawkkVPzEWXTvDw4L6Qj/m+jz2BewDCiVDOxK05Vvn4GmNQCUQ5eBJ8Fc 3cxCppxfruJ0ozcWABU3xlGytsfXvayL/h6/tkKTRvto8AhN+55kOdt6OouQY8b2 nkeTxOTlAe9mBsvYCTGIU6MrtB8Z0240u6cyF5UZX5dQqiHVcEfo+O7WR+bN/F3n vpamyBJ3QU26va3Jac8K4e//QbOMtXN1 -----END CERTIFICATE-----Generated at Sat May 31 17:37:41 2025 by rpki-client