$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: wRkpYQ1H73rRTuIFqFfz/BTwXfc4nwqx9R4r/JWcFVs= Subject key identifier: C7:B5:11:D6:BF:7F:C1:4A:0F:42:02:B7:D2:41:90:D3:B6:69:08:9C Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 3B Signing time: Sat 23 Aug 2025 07:46:23 +0000 Manifest this update: Sat 23 Aug 2025 07:46:23 +0000 Manifest next update: Sat 30 Aug 2025 07:46:23 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: SAnydi5+EIcOaZiYfFuOV38f9yQtg75STHW08h5aEyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Aug 23 07:46:23 2025 GMT Not After : Aug 30 07:46:23 2025 GMT Subject: CN=68a971cf-a1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:0c:05:21:40:0d:d8:2e:a4:06:0d:6f:61: dd:a8:04:30:46:3c:06:44:84:73:af:8a:57:96:a8: 96:2c:be:0c:67:5e:7e:49:06:6b:6a:a7:5d:a3:12: 89:72:81:21:9d:ce:ba:52:b7:78:43:d4:45:47:f3: 41:2c:a7:f7:d4:69:b6:74:38:ed:79:2a:1c:db:22: cb:fa:3d:a0:c3:44:57:e1:3b:da:2b:39:9f:1f:50: 14:37:b0:36:8c:4b:b6:07:78:5d:61:6c:2a:8c:f2: 99:93:8a:8c:d0:a2:69:3a:82:99:29:11:5b:3c:c1: 1d:22:c5:63:85:e3:8f:41:da:7a:12:3b:98:7a:c0: fd:41:af:72:06:5a:15:c5:fd:69:da:0e:ab:51:25: 3a:6d:77:0e:c9:8e:c3:8b:4e:2d:57:e4:06:ce:44: 92:68:41:f0:1b:c3:bb:a0:4e:7c:50:95:43:5c:4f: fa:07:4a:1f:88:b2:28:a7:1d:33:4f:d7:cc:51:c9: 8f:d3:e5:13:1b:ea:b3:7b:83:cb:bd:8b:b8:5b:07: 97:b1:ce:e3:50:99:f0:7a:04:8d:a9:ef:1e:14:00: c6:c0:ce:b0:e7:7f:1f:ba:a7:79:f9:ad:12:c7:e3: a5:30:88:93:13:6d:46:84:bc:e1:6a:47:3b:47:5e: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:11:D6:BF:7F:C1:4A:0F:42:02:B7:D2:41:90:D3:B6:69:08:9C X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e1:a2:5b:0d:6a:af:36:cd:24:83:20:6e:72:e9:a7:39:dc: e2:ab:3b:64:3d:c6:39:d7:b3:fd:26:29:61:22:ed:32:82:47: 08:9a:d5:34:9a:1c:59:72:87:bf:c3:81:c3:ed:22:3a:3b:0d: c8:a7:d6:87:f2:6c:93:68:21:4f:57:7a:82:d0:d8:40:f2:31: 72:46:ac:02:7f:8e:80:ac:ee:ba:b3:fe:75:5d:b3:85:71:99: c0:09:08:82:88:d6:43:21:bb:94:47:58:32:6d:7a:36:50:2c: c8:65:30:3a:da:80:21:37:38:66:d6:2f:c5:7f:c8:be:89:c8: 52:37:fe:ed:d7:3c:4c:a1:53:c0:ee:8e:e9:17:2d:cb:9a:f2: 19:b3:60:cf:66:05:bc:58:71:8a:96:45:2b:9d:f2:dc:b4:df: 81:e8:18:52:e7:27:8e:18:fc:6c:37:de:46:17:1e:b1:c7:7e: 0e:dc:07:cc:17:73:0e:a4:d4:d0:ea:53:f9:76:6d:39:20:06: 19:32:28:f6:86:85:3b:99:ce:66:2d:f3:e0:e8:70:e8:14:2f: e6:d9:91:84:ec:75:d8:ba:32:71:a2:b1:71:48:97:53:3d:b5: 8f:ea:c3:90:3c:50:2d:a9:a2:0e:b2:bf:6a:c1:87:a3:fe:51: 93:06:b1:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA4MjMwNzQ2MjNaFw0yNTA4MzAwNzQ2MjNaMBgxFjAUBgNV BAMTDTY4YTk3MWNmLWExZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbVAwFIUAN2C6kBg1vYd2oBDBGPAZEhHOvileWqJYsvgxnXn5JBmtqp12jEoly gSGdzrpSt3hD1EVH80Esp/fUabZ0OO15KhzbIsv6PaDDRFfhO9orOZ8fUBQ3sDaM S7YHeF1hbCqM8pmTiozQomk6gpkpEVs8wR0ixWOF449B2noSO5h6wP1Br3IGWhXF /WnaDqtRJTptdw7JjsOLTi1X5AbORJJoQfAbw7ugTnxQlUNcT/oHSh+IsiinHTNP 18xRyY/T5RMb6rN7g8u9i7hbB5exzuNQmfB6BI2p7x4UAMbAzrDnfx+6p3n5rRLH 46UwiJMTbUaEvOFqRztHXlDNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx7UR1r9/ wUoPQgK30kGQ07ZpCJwwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfholsNaq82zSSDIG5y6ac53OKrO2Q9xjnXs/0mKWEi7TKCRwia1TSa HFlyh7/DgcPtIjo7Dcin1ofybJNoIU9XeoLQ2EDyMXJGrAJ/joCs7rqz/nVds4Vx mcAJCIKI1kMhu5RHWDJtejZQLMhlMDragCE3OGbWL8V/yL6JyFI3/u3XPEyhU8Du jukXLcua8hmzYM9mBbxYcYqWRSud8ty034HoGFLnJ44Y/Gw33kYXHrHHfg7cB8wX cw6k1NDqU/l2bTkgBhkyKPaGhTuZzmYt8+DocOgUL+bZkYTsddi6MnGisXFIl1M9 tY/qw5A8UC2pog6yv2rBh6P+UZMGsQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:57 2025 by rpki-client