$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: SNdRwYooAPSUTqoTdcW+/YCa6g6X6XxXVdeNGMLnDHQ= Subject key identifier: 5F:5E:03:EF:BE:96:E4:13:C9:C0:48:E0:40:F7:0E:F3:B8:3A:3F:A4 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 1F Signing time: Tue 01 Jul 2025 08:40:01 +0000 Manifest this update: Tue 01 Jul 2025 08:40:01 +0000 Manifest next update: Tue 08 Jul 2025 08:40:01 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: 9USMPnbQP5ycGrRczQ74MxpxBvMOGvieGMtgtN7KSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Jul 1 08:40:01 2025 GMT Not After : Jul 8 08:40:01 2025 GMT Subject: CN=68639ee1-d3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:cf:f2:23:f5:d2:91:c5:2c:19:d0:a5:77: 8e:c0:db:d4:e6:6c:e7:53:e4:77:4f:35:98:d5:6b: 27:3c:f4:84:29:de:06:f5:0e:82:6d:47:79:f8:89: 71:b5:4f:4c:f1:ad:86:52:31:7e:3b:0c:ed:ad:81: 29:46:c3:35:34:ff:21:e1:d0:94:b8:6a:fc:03:72: 99:7f:51:41:19:42:14:e6:c1:a4:de:68:13:41:08: db:7f:6b:47:58:db:1a:6f:1e:cc:7e:7e:9a:53:54: e9:15:0d:23:ee:82:90:c9:e7:96:0c:d6:cb:94:1f: 8b:aa:11:c4:7d:a5:5d:b3:8a:ba:39:62:bd:c9:10: d3:49:c6:29:31:ca:6b:49:62:a3:fa:c2:a0:43:41: 79:60:e9:d6:37:09:30:bb:e9:21:56:5b:e8:f6:15: 44:31:fd:36:47:bb:c2:c8:32:f9:f1:02:3d:8d:5e: 98:9a:7c:50:42:b6:c3:7b:82:da:45:d2:da:1b:7f: fb:bf:10:61:03:47:ee:b9:60:4d:1b:b6:70:a8:1c: f9:dc:8c:84:6c:6c:9f:67:58:ca:a7:e3:cd:99:bf: a1:60:f9:77:b0:e3:9d:2f:ee:8d:01:26:99:a8:20: 0e:d0:7a:3b:95:b4:13:33:05:6b:a8:1e:f7:1a:42: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:03:EF:BE:96:E4:13:C9:C0:48:E0:40:F7:0E:F3:B8:3A:3F:A4 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:40:de:77:20:ba:da:74:75:eb:92:07:5c:0d:1f:55:f5:ee: 71:53:d5:3c:4d:fd:40:5e:a1:5f:bf:3f:0f:cd:52:13:be:5e: 3c:9d:41:d1:bb:2d:73:14:49:1e:73:74:90:16:f8:2c:82:ea: e9:25:93:99:b0:ad:0a:03:f5:14:56:24:5b:35:09:b4:11:ba: 11:a1:5c:84:c1:1b:5e:30:d1:be:52:b6:d3:9d:9b:8f:37:28: 94:db:b3:c4:9f:66:61:55:1d:4e:99:6d:b9:5f:08:18:a5:19: 19:9f:1e:75:82:b3:9c:86:7d:76:45:2a:af:2d:2b:71:23:74: 43:f6:91:12:91:50:3d:d4:29:da:6f:b3:81:1c:05:0b:ff:2b: 29:90:21:74:b2:16:39:54:17:49:e7:6f:a5:07:46:6e:56:8e: 49:e7:78:c4:80:bb:92:80:e9:2c:11:04:75:00:a1:30:6f:2f: 77:a3:7f:bb:bc:74:19:3e:e9:20:98:86:1e:9b:41:52:61:a3: 88:30:e5:b7:52:bc:bd:20:1c:ab:af:72:11:f5:ee:35:25:f8: 61:c0:57:ce:26:00:6a:30:b7:67:37:c0:17:3c:04:10:03:73: 18:77:89:78:0e:0a:b4:87:02:c8:b7:29:92:d3:d1:d1:c9:0f: 6d:d1:28:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA3MDEwODQwMDFaFw0yNTA3MDgwODQwMDFaMBgxFjAUBgNV BAMTDTY4NjM5ZWUxLWQzYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrIc/yI/XSkcUsGdCld47A29TmbOdT5HdPNZjVayc89IQp3gb1DoJtR3n4iXG1 T0zxrYZSMX47DO2tgSlGwzU0/yHh0JS4avwDcpl/UUEZQhTmwaTeaBNBCNt/a0dY 2xpvHsx+fppTVOkVDSPugpDJ55YM1suUH4uqEcR9pV2ziro5Yr3JENNJxikxymtJ YqP6wqBDQXlg6dY3CTC76SFWW+j2FUQx/TZHu8LIMvnxAj2NXpiafFBCtsN7gtpF 0tobf/u/EGEDR+65YE0btnCoHPncjIRsbJ9nWMqn482Zv6Fg+Xew450v7o0BJpmo IA7QejuVtBMzBWuoHvcaQtlzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX14D776W 5BPJwEjgQPcO87g6P6QwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9A3ncgutp0deuSB1wNH1X17nFT1TxN/UBeoV+/Pw/NUhO+XjydQdG7 LXMUSR5zdJAW+CyC6uklk5mwrQoD9RRWJFs1CbQRuhGhXITBG14w0b5SttOdm483 KJTbs8SfZmFVHU6ZbblfCBilGRmfHnWCs5yGfXZFKq8tK3EjdEP2kRKRUD3UKdpv s4EcBQv/KymQIXSyFjlUF0nnb6UHRm5WjknneMSAu5KA6SwRBHUAoTBvL3ejf7u8 dBk+6SCYhh6bQVJho4gw5bdSvL0gHKuvchH17jUl+GHAV84mAGowt2c3wBc8BBAD cxh3iXgOCrSHAsi3KZLT0dHJD23RKPM= -----END CERTIFICATE-----Generated at Thu Jul 3 05:15:05 2025 by rpki-client