$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: er7sRVc/UrFF3wQDNM/Y2C3cTJ0KM5hxbnC1GscFS88= Subject key identifier: F8:3A:52:11:6A:45:BD:FB:F4:6F:D6:88:45:99:F2:20:77:B4:99:FE Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 0948 Signing time: Fri 22 Aug 2025 20:23:36 +0000 Manifest this update: Fri 22 Aug 2025 20:23:36 +0000 Manifest next update: Fri 29 Aug 2025 20:23:36 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: DCR0Mhl4N0QS3frY43jdevMnFoyFNws+4o+xebIRFyY=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Aug 22 20:23:36 2025 GMT Not After : Aug 29 20:23:36 2025 GMT Subject: CN=68a8d1c8-e8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:75:92:24:e7:5e:61:a3:e0:39:99:fb:e0: 4a:ad:67:54:a5:5d:d8:e1:09:80:c3:53:22:f0:9d: 20:36:e5:25:b6:a6:6d:44:47:41:ef:e1:a6:d7:45: 33:89:59:a6:e6:34:1e:eb:d1:60:df:7a:ab:e1:c1: 37:01:3a:be:34:57:61:86:ff:17:57:7a:65:3c:b5: 78:46:47:69:7b:7b:7c:21:72:df:08:be:af:af:3a: 31:7d:9c:4e:30:63:9c:f0:a2:f7:de:52:e0:e9:ca: ae:62:ad:2e:c9:6a:b6:31:6f:91:7b:29:f2:df:19: 5e:5a:e3:9a:ca:23:a8:5a:3b:25:8e:e8:d5:ab:74: 4f:02:3c:c9:da:f9:f6:6f:8e:48:c3:87:87:89:ab: 43:0f:a8:7d:f0:69:e5:8e:69:a2:d5:1f:f2:d1:c1: 55:76:bd:ec:2f:a0:7e:e9:5f:60:95:05:ac:8d:29: b9:25:98:b3:47:ec:fe:b7:f7:e2:30:c8:5e:0c:f8: 7f:1d:03:9d:4e:79:b9:2d:6d:48:f6:10:ce:18:18: dc:14:f2:d6:3e:c1:92:0d:7f:de:47:63:d1:22:e6: 75:47:4f:1e:34:5b:be:54:a1:10:02:cf:18:3a:37: cf:e3:48:f7:0e:2f:5d:f6:8d:54:a1:61:82:55:a2: 04:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:52:11:6A:45:BD:FB:F4:6F:D6:88:45:99:F2:20:77:B4:99:FE X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bb:5f:3c:ee:13:fc:2a:de:0e:9f:f8:f1:4b:ec:98:66:6a: e0:dc:17:d2:72:c0:48:12:98:72:22:5e:7e:1e:48:dd:6c:cb: 3e:b2:1f:6e:ca:cf:30:82:95:52:4c:41:25:4d:d3:df:9a:3d: 86:e0:87:18:8b:94:88:a8:d7:d1:73:17:4f:de:f0:34:84:34: 17:7d:46:ef:1a:2c:43:51:0e:ca:9e:cb:02:94:7a:19:d0:0b: ee:cf:2b:27:90:cd:82:de:0a:b0:56:d2:9e:1e:e9:16:f2:14: d8:d8:67:80:e2:e9:c0:5b:bb:09:47:bc:ac:dc:87:e7:f4:e3: a2:50:0f:c9:10:16:af:c7:9a:9a:83:c2:5e:1c:15:d2:6f:7b: bb:09:1b:d4:99:76:eb:6d:42:0a:a6:fc:c3:ae:1a:95:5a:2c: f4:a0:34:ca:fb:2d:b4:4c:44:92:04:a0:69:b7:8e:b3:c6:a2: 72:9d:73:25:16:db:18:98:08:d2:2f:05:e8:a6:41:75:38:de: 59:b3:06:71:8f:a8:52:50:d7:af:b5:00:a9:95:eb:71:fe:53: 32:17:39:7c:5d:ff:e9:01:ba:f6:a8:6f:9c:e8:8f:b7:0d:c3: 66:84:ae:5e:8e:2b:ef:31:47:88:1a:bf:7a:74:02:31:14:1d: a1:8e:39:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjUwODIyMjAyMzM2WhcNMjUwODI5MjAyMzM2WjAYMRYwFAYD VQQDEw02OGE4ZDFjOC1lOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh51kiTnXmGj4DmZ++BKrWdUpV3Y4QmAw1Mi8J0gNuUltqZtREdB7+Gm10Uz iVmm5jQe69Fg33qr4cE3ATq+NFdhhv8XV3plPLV4Rkdpe3t8IXLfCL6vrzoxfZxO MGOc8KL33lLg6cquYq0uyWq2MW+Reyny3xleWuOayiOoWjsljujVq3RPAjzJ2vn2 b45Iw4eHiatDD6h98Gnljmmi1R/y0cFVdr3sL6B+6V9glQWsjSm5JZizR+z+t/fi MMheDPh/HQOdTnm5LW1I9hDOGBjcFPLWPsGSDX/eR2PRIuZ1R08eNFu+VKEQAs8Y OjfP40j3Di9d9o1UoWGCVaIECwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg6UhFq Rb379G/WiEWZ8iB3tJn+MB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1u1887hP8Kt4On/jxS+yYZmrg3BfScsBIEphyIl5+HkjdbMs+sh9u ys8wgpVSTEElTdPfmj2G4IcYi5SIqNfRcxdP3vA0hDQXfUbvGixDUQ7KnssClHoZ 0AvuzysnkM2C3gqwVtKeHukW8hTY2GeA4unAW7sJR7ys3Ifn9OOiUA/JEBavx5qa g8JeHBXSb3u7CRvUmXbrbUIKpvzDrhqVWiz0oDTK+y20TESSBKBpt46zxqJynXMl FtsYmAjSLwXopkF1ON5ZswZxj6hSUNevtQCpletx/lMyFzl8Xf/pAbr2qG+c6I+3 DcNmhK5ejivvMUeIGr96dAIxFB2hjjm0 -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:48 2025 by rpki-client