$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft File: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft (raw, json) Hash identifier: aSnj8ydtl6h94ei2qg3t76qqGS9ql/8EQjw1zsSzCm8= Subject key identifier: 8F:B1:9E:AF:1A:AD:05:8A:E2:3D:45:BF:C6:5A:F4:DC:8A:E7:0F:E2 Authority key identifier: 7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 Certificate issuer: /CN=A91AF4CC/serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft Manifest number: 71 Signing time: Sat 31 May 2025 06:25:20 +0000 Manifest this update: Sat 31 May 2025 06:25:20 +0000 Manifest next update: Sat 07 Jun 2025 06:25:20 +0000 Files and hashes: 1: fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl (hash: bXFrCv4BYURP9Vrsp8DCcSQ7mwkRD4q7IU1d0MILOkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF4CC, serialNumber=7E39FE21F9D1585CAEF598FB7D6A06EBFD3106C2 Validity Not Before: May 31 06:25:20 2025 GMT Not After : Jun 7 06:25:20 2025 GMT Subject: CN=683aa0d0-a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:92:e3:38:1a:4f:40:a6:ad:53:fe:1b:55: 1d:04:ee:79:84:c9:df:34:3a:4d:0a:1b:0c:6e:ff: d8:4e:6a:70:8e:f5:78:2b:d7:10:6c:3c:1d:59:34: 44:94:e9:e4:02:a7:8e:ff:f2:27:bc:40:0f:2c:0b: 1a:2d:32:06:dd:29:f5:18:b3:1a:d5:15:8e:32:5f: 28:b5:55:b3:92:bd:75:1e:3c:b5:40:d5:53:31:fb: 29:e1:22:45:c6:be:f7:7d:ef:72:44:4e:1c:82:01: 8f:8c:e6:f6:b3:fc:8c:a0:25:f2:0a:73:3f:b5:43: 83:a8:f8:21:98:38:04:e2:31:a8:e2:99:f2:2e:e7: d1:c0:92:eb:53:16:94:9b:d3:ba:4a:1c:d3:84:2a: 97:1d:13:64:88:4b:f7:78:99:84:bc:36:7d:b0:40: 7b:33:80:6b:52:62:ae:a4:0b:e8:a0:77:b6:22:1e: 02:dd:af:72:b2:4c:81:7a:be:28:cb:44:b4:ce:d2: 7c:5d:02:f6:4d:b5:c4:15:12:b7:3a:c2:22:f3:9e: f4:91:33:0c:c9:1c:9d:26:03:06:0f:c6:5f:d5:8f: 8d:95:95:0b:07:d2:eb:17:e7:2c:1a:37:96:a3:25: ff:b1:b2:aa:32:30:c0:2e:8d:08:ed:66:90:e6:08: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B1:9E:AF:1A:AD:05:8A:E2:3D:45:BF:C6:5A:F4:DC:8A:E7:0F:E2 X509v3 Authority Key Identifier: keyid:7E:39:FE:21:F9:D1:58:5C:AE:F5:98:FB:7D:6A:06:EB:FD:31:06:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF4CC/D581C1BC914811EF87EADD52C4F9AE02/fjn-IfnRWFyu9Zj7fWoG6_0xBsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e1:4a:63:94:22:d5:b0:03:8a:f5:30:ce:31:74:12:ae:11: 48:ee:6a:5e:6b:c6:c2:20:2c:ed:cb:88:55:6f:25:18:3b:48: 63:92:1d:01:bd:93:21:c7:33:cb:14:9f:d4:fc:39:0d:48:02: 45:a5:df:7e:8d:b3:fc:12:9e:41:6e:d3:d6:1a:20:05:5e:b0: 9f:fa:65:79:bd:ac:0d:04:00:43:1f:51:fe:46:29:db:97:ed: 47:18:d7:98:88:84:74:a8:60:67:30:75:de:c3:99:87:03:30: 4c:69:5d:62:05:10:54:09:f2:69:dd:ae:67:60:c4:7f:d9:57: 26:27:fa:18:c5:51:b1:10:2e:d8:db:c1:57:10:06:90:e2:94: f7:52:f3:57:bf:01:8f:53:85:ab:9b:73:d9:24:60:f0:bc:d0: dc:ff:17:f7:fa:8f:78:dd:ca:70:fd:a5:4b:5a:a0:52:7f:9e: 06:7d:29:00:3c:e5:3c:b9:85:87:e0:35:4b:e2:32:15:fd:0f: 7d:33:42:d3:c6:5e:18:06:50:27:a7:b7:2a:10:04:52:23:a8: 83:6c:ab:18:71:d6:bc:56:1f:69:26:ef:f4:ac:8c:9b:a8:14: b1:5e:6e:4b:3c:c1:1e:02:b7:36:76:c5:f6:57:c9:5d:69:d2: 3e:d5:3b:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjRDQzExMC8GA1UEBRMoN0UzOUZFMjFGOUQxNTg1Q0FFRjU5OEZCN0Q2QTA2RUJG RDMxMDZDMjAeFw0yNTA1MzEwNjI1MjBaFw0yNTA2MDcwNjI1MjBaMBgxFjAUBgNV BAMTDTY4M2FhMGQwLWE2YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWkZLjOBpPQKatU/4bVR0E7nmEyd80Ok0KGwxu/9hOanCO9Xgr1xBsPB1ZNESU 6eQCp47/8ie8QA8sCxotMgbdKfUYsxrVFY4yXyi1VbOSvXUePLVA1VMx+ynhIkXG vvd973JEThyCAY+M5vaz/IygJfIKcz+1Q4Oo+CGYOATiMajimfIu59HAkutTFpSb 07pKHNOEKpcdE2SIS/d4mYS8Nn2wQHszgGtSYq6kC+igd7YiHgLdr3KyTIF6vijL RLTO0nxdAvZNtcQVErc6wiLznvSRMwzJHJ0mAwYPxl/Vj42VlQsH0usX5ywaN5aj Jf+xsqoyMMAujQjtZpDmCBTtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj7Gerxqt BYriPUW/xlr03IrnD+IwHwYDVR0jBBgwFoAUfjn+IfnRWFyu9Zj7fWoG6/0xBsIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNENDL0Q1ODFDMUJDOTE0 ODExRUY4N0VBREQ1MkM0RjlBRTAyL2Zqbi1JZm5SV0Z5dTlaajdmV29HNl8weEJz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpuLUlmblJXRnl1OVpqN2ZXb0c2XzB4QnNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NENDL0Q1ODFDMUJDOTE0ODExRUY4N0VBREQ1MkM0RjlBRTAyL2Zqbi1JZm5SV0Z5 dTlaajdmV29HNl8weEJzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG3hSmOUItWwA4r1MM4xdBKuEUjual5rxsIgLO3LiFVvJRg7SGOSHQG9 kyHHM8sUn9T8OQ1IAkWl336Ns/wSnkFu09YaIAVesJ/6ZXm9rA0EAEMfUf5GKduX 7UcY15iIhHSoYGcwdd7DmYcDMExpXWIFEFQJ8mndrmdgxH/ZVyYn+hjFUbEQLtjb wVcQBpDilPdS81e/AY9Thaubc9kkYPC80Nz/F/f6j3jdynD9pUtaoFJ/ngZ9KQA8 5Ty5hYfgNUviMhX9D30zQtPGXhgGUCentyoQBFIjqINsqxhx1rxWH2km7/SsjJuo FLFebks8wR4CtzZ2xfZXyV1p0j7VO68= -----END CERTIFICATE-----Generated at Sat May 31 17:17:33 2025 by rpki-client