$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: zzPAmqx3GTjymaGi/KD6ZBrAzpsAFmpEfCs2GOuyp7c= Subject key identifier: B5:7C:F4:B2:50:7E:B7:14:7F:EA:5F:98:36:C7:1E:26:23:35:63:F6 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 04:46:50 +0000 Manifest this update: Sat 23 Aug 2025 04:46:49 +0000 Manifest next update: Sat 30 Aug 2025 04:46:49 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: GBSCcS55bsKd6pQLbejcb3boYhnEjReinqzXMsMuEE8=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Aug 23 04:46:49 2025 GMT Not After : Aug 30 04:46:49 2025 GMT Subject: CN=68a947b9-c526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:54:98:6c:9b:06:ea:e5:0c:0f:04:e4:84: 1a:83:52:fd:7d:ca:0f:1b:51:8a:4b:15:e8:f4:a2: 6b:58:82:3b:c0:27:85:6d:8d:bd:72:8c:63:09:82: 34:ae:b4:df:c5:a5:7b:ac:b2:9e:2a:53:87:f9:09: 97:2b:4c:7b:54:65:3c:40:6d:45:2e:2b:c0:31:4b: 14:4e:bd:86:96:c8:17:5c:49:77:a1:02:2a:24:28: 31:04:cd:4c:42:52:5a:f4:e0:21:35:c0:50:cf:82: de:e8:fe:13:51:e2:9b:9f:af:30:ea:12:90:31:8a: 5a:24:c3:c1:38:9d:ad:00:5c:9f:9f:a1:49:e2:0d: 8a:b1:e2:2c:f2:11:4a:cd:dc:d6:11:fe:af:cc:93: 2c:c1:5f:f8:0d:ae:68:22:ec:20:e7:eb:35:b9:71: c5:ec:23:de:3c:bf:e3:a2:6b:64:ce:f9:19:99:de: 2b:8a:f4:10:ec:c3:34:6d:c5:e7:86:82:21:41:b1: b1:d2:0e:87:5d:23:87:f4:1d:95:a7:9d:ef:d1:ee: e5:e0:24:3d:54:eb:cc:8e:3b:59:79:17:62:6a:57: 9e:c7:80:7a:b6:de:d9:ee:d4:4a:3b:b6:11:0b:ab: 42:bd:cb:ae:4b:68:b0:5d:12:d7:64:6d:a0:85:fa: b9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7C:F4:B2:50:7E:B7:14:7F:EA:5F:98:36:C7:1E:26:23:35:63:F6 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:14:38:ef:05:69:36:83:36:74:7f:07:38:0b:08:16:8a:45: 91:df:fa:80:de:1d:c1:c7:34:0d:f2:8f:f4:55:3e:f8:9f:f5: 28:ff:ea:e2:09:2b:43:56:2c:28:91:52:85:10:e0:11:ae:61: 32:c3:98:09:e9:8b:60:1e:e9:b5:bd:eb:21:82:90:57:7e:13: 76:58:3d:03:1c:7b:02:bd:40:ae:0f:b8:ce:dc:e6:b8:df:c0: ce:05:3d:06:ba:05:32:86:89:51:e9:fb:7c:eb:91:79:a7:52: 9b:9a:24:69:bb:9f:51:a8:4f:a5:8c:42:49:0f:3f:fa:1b:df: 8d:6d:76:3a:ec:e4:53:af:73:c2:13:71:7b:71:dd:f6:e2:e7: b7:df:c4:d7:46:69:07:d6:d2:02:37:d6:3a:03:03:40:3b:8c: 46:8c:4f:8c:b2:55:8d:28:4e:07:39:85:ac:08:25:7b:36:11: 24:b0:62:c4:08:1c:f4:0e:83:1d:af:bc:ca:aa:45:b5:6d:a3: ad:3d:49:3b:65:a1:e1:0e:ac:15:5b:1f:9d:70:89:fb:35:52: de:da:0d:2b:3f:d8:02:ee:0b:3f:4d:ff:d7:17:9c:38:a5:77: df:89:35:d7:c7:c0:40:8a:49:90:fd:6f:92:b4:82:52:9f:81: 01:00:55:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwODIzMDQ0NjQ5WhcNMjUwODMwMDQ0NjQ5WjAYMRYwFAYD VQQDEw02OGE5NDdiOS1jNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArftUmGybBurlDA8E5IQag1L9fcoPG1GKSxXo9KJrWII7wCeFbY29coxjCYI0 rrTfxaV7rLKeKlOH+QmXK0x7VGU8QG1FLivAMUsUTr2GlsgXXEl3oQIqJCgxBM1M QlJa9OAhNcBQz4Le6P4TUeKbn68w6hKQMYpaJMPBOJ2tAFyfn6FJ4g2KseIs8hFK zdzWEf6vzJMswV/4Da5oIuwg5+s1uXHF7CPePL/jomtkzvkZmd4rivQQ7MM0bcXn hoIhQbGx0g6HXSOH9B2Vp53v0e7l4CQ9VOvMjjtZeRdialeex4B6tt7Z7tRKO7YR C6tCvcuuS2iwXRLXZG2ghfq5IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV89LJQ frcUf+pfmDbHHiYjNWP2MB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNFDjvBWk2gzZ0fwc4CwgWikWR3/qA3h3BxzQN8o/0VT74n/Uo/+ri CStDViwokVKFEOARrmEyw5gJ6YtgHum1veshgpBXfhN2WD0DHHsCvUCuD7jO3Oa4 38DOBT0GugUyholR6ft865F5p1KbmiRpu59RqE+ljEJJDz/6G9+NbXY67ORTr3PC E3F7cd324ue338TXRmkH1tICN9Y6AwNAO4xGjE+MslWNKE4HOYWsCCV7NhEksGLE CBz0DoMdr7zKqkW1baOtPUk7ZaHhDqwVWx+dcIn7NVLe2g0rP9gC7gs/Tf/XF5w4 pXffiTXXx8BAikmQ/W+StIJSn4EBAFV0 -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:06 2025 by rpki-client