$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: T0hI2nhVoC1kVldbVCNhHgnOcJCi9as0ZEnxdOJNCiY= Subject key identifier: B9:F5:51:29:AA:2B:1B:03:7E:81:49:41:0D:3E:72:5C:F3:BC:1B:55 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 1087 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 107F Signing time: Fri 22 Aug 2025 17:29:16 +0000 Manifest this update: Fri 22 Aug 2025 17:29:15 +0000 Manifest next update: Fri 29 Aug 2025 17:29:15 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: ysBW4By3KSygaxZrVE0XJ50Jn1Dl2DwO+aftCzgSWMc=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4231 (0x1087) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Aug 22 17:29:15 2025 GMT Not After : Aug 29 17:29:15 2025 GMT Subject: CN=68a8a8eb-aa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:07:77:4d:26:50:47:25:f8:ac:00:aa:0d: 8b:f9:ef:02:dc:5d:a4:69:8e:1e:e3:ef:0d:d2:7b: dd:ee:b9:6f:20:63:c3:bd:18:97:a7:e5:ac:55:fb: 05:2e:5f:3e:1f:d3:bf:3e:38:85:ee:71:f6:eb:03: 39:71:ba:26:27:b3:16:75:67:e4:38:24:c8:9c:f6: c9:4c:53:f1:ad:d2:f7:34:65:41:f1:c2:53:49:56: 10:75:66:a7:87:39:22:da:4d:f4:ad:d9:6e:eb:4b: 17:1f:a8:a3:a9:63:73:96:ee:e0:1b:e6:bc:7c:59: 0a:d9:ca:4f:fd:48:16:89:9a:ca:46:4d:15:ae:57: 3c:60:18:38:2b:cf:6e:27:b3:59:1c:92:c1:e0:c1: d9:6e:bc:30:ae:0b:fd:61:23:2d:d6:b4:88:82:fd: 3f:52:fe:43:3f:e5:14:1f:42:04:d7:fc:12:e5:67: dd:17:e4:7f:1e:a0:6d:63:18:5f:2b:ab:42:e8:1a: e3:1d:6b:5d:06:d0:cc:22:79:02:e0:91:e5:42:f0: 6d:eb:df:cc:af:47:25:9d:b9:25:9e:4a:55:61:fe: b3:c2:e0:b9:fd:82:fb:4d:a8:2b:aa:7c:99:37:f8: 3a:0b:a9:91:75:41:e1:ab:2c:07:7b:f2:86:b8:b7: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F5:51:29:AA:2B:1B:03:7E:81:49:41:0D:3E:72:5C:F3:BC:1B:55 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:54:fa:04:72:2b:74:ac:69:62:88:60:95:7e:7e:5e:d1:e2: c2:66:87:42:a8:d8:34:aa:9c:bb:da:d0:32:ed:f1:4e:ad:89: 32:4e:1f:88:e4:a8:6b:5d:d1:89:01:8e:d2:ee:15:9b:d6:c0: d3:ae:48:cb:04:76:c1:6c:c1:a2:ce:e1:75:51:9c:19:82:3c: 13:32:d3:99:ea:37:42:b5:2e:71:1c:de:1d:c3:09:af:80:ba: 07:d8:de:f0:4b:c4:a0:21:aa:bb:43:7f:4d:2a:9a:2f:ab:69: 56:ab:ed:68:28:40:3d:1a:fc:98:0b:02:0b:92:9e:e6:7d:75: fb:92:f9:ea:11:8a:4d:dd:5c:62:67:0b:cf:00:9e:dd:d5:c4: 3b:0e:70:f7:52:21:35:40:d6:12:0a:98:42:3c:46:a8:f7:e0: 4f:8e:8d:59:07:19:fa:20:33:9c:ef:2f:a3:f4:8f:7d:6d:2a: 92:55:c0:ad:69:b9:61:68:0c:2f:d9:cd:b2:55:68:47:d1:71: 6a:a5:21:b3:a9:0f:8d:72:75:c5:80:b8:db:76:98:35:c8:47: 89:ac:7b:76:43:ea:68:16:31:99:03:f7:7d:bb:72:5d:87:07: 6a:51:f0:50:70:18:b5:0d:6e:c4:fc:50:3f:a8:08:de:ce:17: 39:f5:42:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwODIyMTcyOTE1WhcNMjUwODI5MTcyOTE1WjAYMRYwFAYD VQQDEw02OGE4YThlYi1hYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2cHd00mUEcl+KwAqg2L+e8C3F2kaY4e4+8N0nvd7rlvIGPDvRiXp+WsVfsF Ll8+H9O/PjiF7nH26wM5cbomJ7MWdWfkOCTInPbJTFPxrdL3NGVB8cJTSVYQdWan hzki2k30rdlu60sXH6ijqWNzlu7gG+a8fFkK2cpP/UgWiZrKRk0Vrlc8YBg4K89u J7NZHJLB4MHZbrwwrgv9YSMt1rSIgv0/Uv5DP+UUH0IE1/wS5WfdF+R/HqBtYxhf K6tC6BrjHWtdBtDMInkC4JHlQvBt69/Mr0clnbklnkpVYf6zwuC5/YL7TagrqnyZ N/g6C6mRdUHhqywHe/KGuLfZywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn1USmq KxsDfoFJQQ0+clzzvBtVMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAVPoEcit0rGliiGCVfn5e0eLCZodCqNg0qpy72tAy7fFOrYkyTh+I 5KhrXdGJAY7S7hWb1sDTrkjLBHbBbMGizuF1UZwZgjwTMtOZ6jdCtS5xHN4dwwmv gLoH2N7wS8SgIaq7Q39NKpovq2lWq+1oKEA9GvyYCwILkp7mfXX7kvnqEYpN3Vxi ZwvPAJ7d1cQ7DnD3UiE1QNYSCphCPEao9+BPjo1ZBxn6IDOc7y+j9I99bSqSVcCt ablhaAwv2c2yVWhH0XFqpSGzqQ+NcnXFgLjbdpg1yEeJrHt2Q+poFjGZA/d9u3Jd hwdqUfBQcBi1DW7E/FA/qAjezhc59UJg -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:41 2025 by rpki-client