$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: TO+L0SDAPmssQovZ3O+PfZAOFgHE/wHy7sbZuS2XFR0= Subject key identifier: 02:E5:1E:10:EF:7C:C1:DC:4D:41:31:E8:13:CA:73:B8:44:BA:0E:3E Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 106D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 1065 Signing time: Wed 02 Jul 2025 17:34:35 +0000 Manifest this update: Wed 02 Jul 2025 17:34:34 +0000 Manifest next update: Wed 09 Jul 2025 17:34:34 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: yqZ4u7cplqsPpt60+i47kIJa/oR45mktnljdJSK9gMo=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4205 (0x106d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Jul 2 17:34:34 2025 GMT Not After : Jul 9 17:34:34 2025 GMT Subject: CN=68656dab-8c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:b3:9b:08:ef:5a:94:69:e5:c4:40:56:63: 48:3e:7d:ed:ad:65:36:11:50:8c:40:e6:7f:96:6a: ba:6d:50:ef:81:93:5b:43:ea:96:50:bf:b7:3f:f7: 20:e6:a4:68:41:4a:92:b8:d3:aa:bb:a9:52:42:6e: b9:bf:61:84:42:6b:6a:bc:ce:e2:36:c1:41:86:4f: 87:4a:e9:20:2d:54:9a:a6:53:ef:0c:44:72:38:e1: 1d:15:9e:31:21:ae:3b:47:70:06:c4:f1:93:81:84: b0:20:11:f1:7b:48:f3:7e:19:b8:00:52:1c:cf:59: f9:09:e6:e6:ac:34:09:50:9a:32:74:23:3d:e4:2c: 59:0c:b6:df:bc:c1:31:ac:b7:9e:02:83:c3:ac:b8: 70:93:e6:5c:3b:80:fe:c5:3d:0c:1e:cb:05:bf:db: 63:36:23:7b:81:9b:a4:01:18:c5:40:a4:e2:f3:ff: 00:8c:79:93:c3:99:9c:c9:20:f9:bb:43:37:dd:11: 1a:ab:d3:fe:68:55:12:94:1e:75:8d:76:9e:7c:69: 0c:0a:3b:43:df:a9:94:35:18:7f:8c:95:ef:d6:23: 9f:2a:ac:0b:40:9c:0f:27:b0:d6:eb:a4:5d:7f:12: ed:0a:71:95:6d:d1:93:ae:02:fd:7d:ed:2d:c7:6c: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E5:1E:10:EF:7C:C1:DC:4D:41:31:E8:13:CA:73:B8:44:BA:0E:3E X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:28:e5:eb:fc:82:9b:55:58:3b:c3:1a:33:cf:97:ad:28: 7c:25:f7:c0:45:63:62:39:79:b2:48:ca:de:83:07:cb:82:e8: 66:8d:ca:9d:3a:10:66:46:5d:0f:ce:98:b7:cd:42:c1:93:87: 13:0e:3e:af:cd:57:73:8d:ca:d2:af:f2:09:d5:cc:65:24:30: d4:91:ba:e9:d2:83:a0:56:6e:ec:8c:d8:f9:a0:0e:5f:13:c7: 21:25:cb:d3:64:fd:c4:ec:79:03:35:86:2f:99:f7:83:5d:94: 94:87:48:95:48:b9:b4:a4:39:74:b5:df:70:cc:fd:3c:cf:fe: 82:26:c7:5f:67:3b:07:47:09:ba:0e:3a:d5:49:47:31:2a:9d: 1e:85:9f:9c:f9:43:55:b3:4e:9b:e3:cf:71:b0:5f:55:51:42: b2:f4:1d:6e:88:48:a6:2b:6d:35:34:73:27:0c:4c:3a:56:b6: 1d:25:96:78:58:b0:a2:dc:49:0c:72:d2:fd:80:06:68:f7:c5: a0:f3:ab:8e:00:2a:6d:33:71:43:15:75:88:bd:3d:1b:42:42: 17:61:0a:ee:cf:d8:b4:8d:ab:37:01:da:81:f6:93:f0:88:d6: 9c:41:db:a4:e2:d6:15:0c:68:05:91:bd:67:73:91:42:bd:cd: 1c:de:8e:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwNzAyMTczNDM0WhcNMjUwNzA5MTczNDM0WjAYMRYwFAYD VQQDEw02ODY1NmRhYi04YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMezmwjvWpRp5cRAVmNIPn3trWU2EVCMQOZ/lmq6bVDvgZNbQ+qWUL+3P/cg 5qRoQUqSuNOqu6lSQm65v2GEQmtqvM7iNsFBhk+HSukgLVSaplPvDERyOOEdFZ4x Ia47R3AGxPGTgYSwIBHxe0jzfhm4AFIcz1n5CebmrDQJUJoydCM95CxZDLbfvMEx rLeeAoPDrLhwk+ZcO4D+xT0MHssFv9tjNiN7gZukARjFQKTi8/8AjHmTw5mcySD5 u0M33REaq9P+aFUSlB51jXaefGkMCjtD36mUNRh/jJXv1iOfKqwLQJwPJ7DW66Rd fxLtCnGVbdGTrgL9fe0tx2xcBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALlHhDv fMHcTUEx6BPKc7hEug4+MB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByGyjl6/yCm1VYO8MaM8+XrSh8JffARWNiOXmySMregwfLguhmjcqd OhBmRl0Pzpi3zULBk4cTDj6vzVdzjcrSr/IJ1cxlJDDUkbrp0oOgVm7sjNj5oA5f E8chJcvTZP3E7HkDNYYvmfeDXZSUh0iVSLm0pDl0td9wzP08z/6CJsdfZzsHRwm6 DjrVSUcxKp0ehZ+c+UNVs06b489xsF9VUUKy9B1uiEimK201NHMnDEw6VrYdJZZ4 WLCi3EkMctL9gAZo98Wg86uOACptM3FDFXWIvT0bQkIXYQruz9i0jas3AdqB9pPw iNacQduk4tYVDGgFkb1nc5FCvc0c3o5Q -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:22 2025 by rpki-client