$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: seMd5gpTqcJ2b9hcdngp7MNWcOyo3c4Pgl5zZCKBdQg= Subject key identifier: 5D:2B:D4:F0:21:AA:16:B2:BA:4C:79:6F:D0:76:68:16:E9:F7:EB:03 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 0114 Signing time: Thu 03 Jul 2025 05:06:41 +0000 Manifest this update: Thu 03 Jul 2025 05:06:41 +0000 Manifest next update: Thu 10 Jul 2025 05:06:41 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: b2IImJrdZnmjLjGnyL42d11ivGwSrX8+7vU6GDULODo=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Jul 3 05:06:41 2025 GMT Not After : Jul 10 05:06:41 2025 GMT Subject: CN=68660fe1-3b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:2f:b3:41:a8:d0:31:b5:18:a3:c4:f7:5b: 53:8d:b1:55:ad:ab:e1:d2:0e:fd:36:73:0e:9c:c4: d4:4f:9b:b8:a0:6b:2a:53:12:d7:20:bc:67:d4:a1: 80:06:5d:45:6e:d7:3f:a4:bd:d9:d6:86:85:52:c7: 99:6f:6c:88:60:90:f8:a5:55:1e:21:b5:ff:ed:25: ce:82:a3:c0:46:ff:e0:53:b9:8b:5b:5d:de:8f:47: 26:a5:ab:9a:92:8c:cd:03:13:b6:24:73:94:97:81: e8:d2:fe:70:4c:c5:5d:df:40:19:a6:32:9f:76:53: b9:7f:31:01:36:76:a5:31:22:7a:8a:91:6d:dd:88: 75:34:2b:5d:5b:6a:76:69:2e:82:c3:c1:41:37:6e: eb:37:e6:b6:da:ed:d3:61:6b:1b:0e:9d:b6:18:f1: 6a:89:79:07:d2:4a:b7:d1:b1:3a:a7:c5:2a:19:73: c5:3a:b9:cb:e8:61:49:ad:40:23:67:9b:49:0e:df: f7:6c:3d:f2:3b:73:d1:f3:dd:be:ba:ed:78:67:a8: da:3a:9c:cf:1b:fe:cf:a7:0c:5d:4e:2b:ea:d5:81: e9:4a:43:dc:4a:71:42:4b:03:83:1a:21:46:77:aa: 95:b9:16:0e:bc:3f:af:e1:83:f7:14:16:90:f9:a7: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2B:D4:F0:21:AA:16:B2:BA:4C:79:6F:D0:76:68:16:E9:F7:EB:03 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0a:d2:79:8a:9f:86:a4:7a:4c:6a:c0:e0:29:6d:76:c7:d9: 4f:fb:d1:61:e3:25:c4:7f:71:53:81:01:1a:ae:e2:ec:04:5f: 92:fc:45:19:d2:66:82:8a:45:6a:f9:63:e0:3d:78:2a:bd:4f: 23:f6:0b:de:be:30:b5:fe:24:0c:04:ba:14:9b:a2:d8:e8:96: dd:65:0e:7c:15:59:b8:73:f2:a2:56:89:b9:53:69:9d:70:ad: 09:ca:7c:da:08:5f:cd:df:38:4a:38:9a:a5:43:6e:f2:6a:1f: c4:1d:9c:74:5e:66:58:2f:ce:11:2e:7c:66:1a:18:dd:39:85: 41:c3:6e:66:cb:30:ec:7f:cf:7b:c2:6b:1f:70:a0:85:89:ea: 35:41:0d:16:ef:79:0e:4e:35:ae:cb:33:26:02:66:1c:20:02: 49:94:d7:c8:dd:81:0f:b7:22:b2:a4:bc:6c:2b:38:54:ee:d4: fc:f7:7f:0a:3e:e6:ee:72:d8:aa:81:6a:9d:96:6f:ef:19:08: b6:28:5e:e3:5e:b3:73:56:23:0b:37:99:0b:0f:65:75:ca:4f: 93:c3:4e:cb:36:9f:9d:37:04:7c:b5:65:3f:9d:5f:6f:d9:4b: a3:67:4f:06:12:bd:6f:eb:61:26:1b:06:1e:3d:b2:69:4f:60: ef:1d:56:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwNzAzMDUwNjQxWhcNMjUwNzEwMDUwNjQxWjAYMRYwFAYD VQQDEw02ODY2MGZlMS0zYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxovs0Go0DG1GKPE91tTjbFVravh0g79NnMOnMTUT5u4oGsqUxLXILxn1KGA Bl1Fbtc/pL3Z1oaFUseZb2yIYJD4pVUeIbX/7SXOgqPARv/gU7mLW13ej0cmpaua kozNAxO2JHOUl4Ho0v5wTMVd30AZpjKfdlO5fzEBNnalMSJ6ipFt3Yh1NCtdW2p2 aS6Cw8FBN27rN+a22u3TYWsbDp22GPFqiXkH0kq30bE6p8UqGXPFOrnL6GFJrUAj Z5tJDt/3bD3yO3PR892+uu14Z6jaOpzPG/7PpwxdTivq1YHpSkPcSnFCSwODGiFG d6qVuRYOvD+v4YP3FBaQ+acv8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0r1PAh qhayukx5b9B2aBbp9+sDMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGCtJ5ip+GpHpMasDgKW12x9lP+9Fh4yXEf3FTgQEaruLsBF+S/EUZ 0maCikVq+WPgPXgqvU8j9gvevjC1/iQMBLoUm6LY6JbdZQ58FVm4c/KiVom5U2md cK0JynzaCF/N3zhKOJqlQ27yah/EHZx0XmZYL84RLnxmGhjdOYVBw25myzDsf897 wmsfcKCFieo1QQ0W73kOTjWuyzMmAmYcIAJJlNfI3YEPtyKypLxsKzhU7tT8938K PubuctiqgWqdlm/vGQi2KF7jXrNzViMLN5kLD2V1yk+Tw07LNp+dNwR8tWU/nV9v 2UujZ08GEr1v62EmGwYePbJpT2DvHVYk -----END CERTIFICATE-----Generated at Thu Jul 3 22:36:45 2025 by rpki-client