$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: xmoY8fNzcubO6dnYq2kcXm8saQkl0/eGAVh9EdPqzeA= Subject key identifier: B0:9C:16:5D:A4:97:21:EB:10:45:2F:EE:7E:09:E3:4C:95:FC:7D:9C Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 08 Signing time: Tue 13 May 2025 07:23:39 +0000 Manifest this update: Tue 13 May 2025 07:23:38 +0000 Manifest next update: Tue 20 May 2025 07:23:38 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: lkQaUBtECQTZE6/HO8wDkIf4VmfQSjlRpTpOVsp+vxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: May 13 07:23:38 2025 GMT Not After : May 20 07:23:38 2025 GMT Subject: CN=6822f37b-1eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:73:28:c6:b6:1f:25:15:6d:da:93:eb:d0: e5:1f:70:82:c0:b1:71:40:4b:ac:0f:eb:3a:21:8f: 5b:fa:8e:0a:7b:f1:b7:83:93:b2:b5:14:5d:83:bb: 56:eb:b2:d2:4b:31:f6:c6:e5:12:23:d9:03:22:06: 5a:cd:0c:a0:75:5e:c1:61:30:ef:d4:6b:9a:66:ea: fa:34:0b:11:39:fb:51:6b:76:25:00:66:cb:b9:a4: ab:04:3a:63:42:4e:30:84:ff:49:f4:a9:24:78:17: ff:c3:ad:4d:1d:d7:5e:3f:99:40:b0:0d:bd:7e:2d: 5d:fe:23:16:3b:c0:49:18:25:ff:7c:aa:a5:14:6d: 46:33:18:93:c5:05:36:44:da:5b:ff:e4:42:f5:5c: 77:87:92:63:0b:6a:cc:53:85:78:7a:9f:0f:f0:8d: 9f:dc:68:6b:eb:02:58:a9:79:d2:6c:92:14:5b:b2: 3d:52:c1:62:f0:9d:80:9d:e0:1f:35:5c:3b:44:68: 23:97:54:1d:dd:19:7e:28:74:c9:9a:15:cc:37:dd: 24:ad:a4:e5:28:3c:e9:97:57:c2:67:69:25:46:74: 58:bb:ea:bb:f7:c7:51:f4:92:76:5d:78:6e:bb:2c: b4:19:e4:b3:44:14:bf:76:50:b8:6c:75:1d:86:c8: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:16:5D:A4:97:21:EB:10:45:2F:EE:7E:09:E3:4C:95:FC:7D:9C X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9e:f1:34:3c:dc:16:c1:6f:bc:d3:0a:6a:44:bb:6e:53:9b: ac:c8:92:ec:2d:9c:33:5c:c0:72:32:fb:c4:50:63:b6:7e:3f: 4a:0f:d4:13:d1:aa:13:b5:71:41:77:e5:1b:33:cf:31:84:62: 80:19:bc:30:4b:74:3e:ee:58:cc:c5:22:1d:0e:74:55:13:6d: 9c:01:1b:cf:60:e0:f3:1b:8a:3b:1a:66:2e:76:96:98:bc:73: fa:5d:18:2f:35:cf:c2:8d:c4:90:9c:19:a8:c8:65:90:2e:13: 4a:65:c4:b7:08:bf:7f:f2:8d:48:4a:0f:10:11:ea:9d:96:58: 14:63:78:21:d6:9c:c1:d9:d4:14:48:61:96:6f:f5:0b:28:d8: e1:d1:a4:a2:02:94:1b:cf:30:7f:9b:0d:0d:8f:fe:b1:0b:89: 93:3f:79:18:d4:61:d2:41:f5:f1:b7:22:de:17:d0:51:c7:88: 0b:7d:73:17:0e:60:c5:5c:1c:a5:a6:89:0e:d8:53:95:fd:75: 7c:24:b6:96:48:bb:c4:90:0f:77:16:35:ea:17:cf:70:a9:38: 6d:43:02:91:3a:e3:1e:10:fa:35:00:4f:ba:82:de:50:57:b4: d0:fc:23:80:6a:80:85:f8:68:6a:3c:db:0e:29:42:17:91:53: 7a:5d:dc:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA1MTMwNzIzMzhaFw0yNTA1MjAwNzIzMzhaMBgxFjAUBgNV BAMTDTY4MjJmMzdiLTFlYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk3HMoxrYfJRVt2pPr0OUfcILAsXFAS6wP6zohj1v6jgp78beDk7K1FF2Du1br stJLMfbG5RIj2QMiBlrNDKB1XsFhMO/Ua5pm6vo0CxE5+1FrdiUAZsu5pKsEOmNC TjCE/0n0qSR4F//DrU0d114/mUCwDb1+LV3+IxY7wEkYJf98qqUUbUYzGJPFBTZE 2lv/5EL1XHeHkmMLasxThXh6nw/wjZ/caGvrAlipedJskhRbsj1SwWLwnYCd4B81 XDtEaCOXVB3dGX4odMmaFcw33SStpOUoPOmXV8JnaSVGdFi76rv3x1H0knZdeG67 LLQZ5LNEFL92ULhsdR2GyEU5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsJwWXaSX IesQRS/ufgnjTJX8fZwwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+e8TQ83BbBb7zTCmpEu25Tm6zIkuwtnDNcwHIy+8RQY7Z+P0oP1BPR qhO1cUF35RszzzGEYoAZvDBLdD7uWMzFIh0OdFUTbZwBG89g4PMbijsaZi52lpi8 c/pdGC81z8KNxJCcGajIZZAuE0plxLcIv3/yjUhKDxAR6p2WWBRjeCHWnMHZ1BRI YZZv9Qso2OHRpKIClBvPMH+bDQ2P/rELiZM/eRjUYdJB9fG3It4X0FHHiAt9cxcO YMVcHKWmiQ7YU5X9dXwktpZIu8SQD3cWNeoXz3CpOG1DApE64x4Q+jUAT7qC3lBX tND8I4BqgIX4aGo82w4pQheRU3pd3D4= -----END CERTIFICATE-----Generated at Tue May 13 23:12:13 2025 by rpki-client