$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: bWq9UC8pKLwmNgsRvGBMOHUroPezyJD7RDb2r71Dz30= Subject key identifier: D2:BB:DB:B7:70:A0:26:3A:C9:80:D6:F4:42:A6:42:4B:D0:F2:19:C8 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 28 Signing time: Sat 19 Jul 2025 08:01:25 +0000 Manifest this update: Sat 19 Jul 2025 08:01:24 +0000 Manifest next update: Sat 26 Jul 2025 08:01:24 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: tWlQuFV4nWhCbljTE+XrwbBCtPPsWtItCUcy8DjulM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Jul 19 08:01:24 2025 GMT Not After : Jul 26 08:01:24 2025 GMT Subject: CN=687b50d4-b1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:cb:20:08:67:7b:18:b7:15:58:0f:56:79: d0:f5:4d:f3:6f:10:ad:d4:b4:13:d0:b5:d9:df:09: d5:89:61:0f:c6:d7:79:be:4a:a3:de:3a:37:b0:33: a7:55:5d:04:59:b4:09:82:1e:b8:b2:d0:39:a7:ca: b7:b7:5b:4d:44:45:90:10:d7:8d:83:09:31:1d:2b: 8b:29:f2:9b:05:a8:de:46:8f:7d:af:b6:95:94:ff: 64:26:1c:5c:3d:08:f8:22:03:57:f1:24:45:5b:34: 0f:b8:e9:01:72:a4:68:8a:68:95:90:04:82:c9:16: 7f:c5:22:76:a5:86:e6:c7:8c:2e:e4:58:21:d5:b2: 28:c8:ca:d1:19:e2:1a:54:ec:c7:1c:54:c4:35:66: 41:e3:02:a5:f5:8c:98:99:61:30:1d:d1:13:a7:52: 9a:56:d0:63:5b:f5:4e:c6:e9:19:1a:2d:60:b6:cd: a8:74:4d:d0:65:c1:77:a8:39:f6:1a:9b:7a:35:30: 9f:43:e8:49:74:ad:9c:67:3d:ef:6c:25:2f:d8:57: 08:4b:d9:bc:81:21:f2:5c:e0:a8:00:24:35:3b:12: 82:41:a0:84:0c:d5:a7:2d:b5:86:f3:da:3f:fe:7a: 21:b8:78:03:81:5e:37:f9:bc:8d:be:93:05:b4:7a: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:DB:B7:70:A0:26:3A:C9:80:D6:F4:42:A6:42:4B:D0:F2:19:C8 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:4e:6a:84:40:ee:bb:d7:88:54:94:3e:0a:cf:5b:64:a5:79: 24:cc:62:a9:99:fa:2e:48:fb:a9:21:b2:6e:f2:db:9f:26:54: f1:38:0f:75:7f:bd:ed:8f:9f:a7:d1:13:57:4e:64:4e:5a:08: 19:de:34:a5:8a:79:39:05:f5:f2:aa:e5:af:57:f1:e9:89:b2: 1a:5c:85:58:a6:09:1c:2d:70:3a:85:ea:72:34:2b:81:e2:ad: 37:c3:8a:b6:f0:53:7a:0e:29:f3:73:e0:ab:23:78:43:b3:48: 2a:74:fd:43:0c:1b:be:ce:71:d2:7a:07:dc:e6:89:1f:57:4e: 3b:14:0a:a3:34:7c:17:44:d4:c2:11:06:74:07:8e:38:41:28: 72:0e:8c:0d:b0:b6:39:ab:dd:49:68:5f:51:8b:a6:cd:64:5a: 10:95:60:1b:f3:e6:55:ef:a3:f0:24:35:d1:a2:b2:9d:d6:62: 1b:fe:ee:11:d5:de:6f:84:f9:1e:a2:6f:db:77:9c:4f:b2:d3: ce:54:b9:cd:21:97:2e:8a:8e:b9:a1:5f:80:dc:b8:96:ec:cb: a7:38:0f:ef:d9:ca:b1:ee:ca:c7:86:2e:64:41:94:83:6c:60: a4:9f:58:d8:29:cf:35:c7:fe:93:06:73:16:2a:22:e8:f9:20: c4:42:6a:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA3MTkwODAxMjRaFw0yNTA3MjYwODAxMjRaMBgxFjAUBgNV BAMTDTY4N2I1MGQ0LWIxYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBD8sgCGd7GLcVWA9WedD1TfNvEK3UtBPQtdnfCdWJYQ/G13m+SqPeOjewM6dV XQRZtAmCHriy0Dmnyre3W01ERZAQ142DCTEdK4sp8psFqN5Gj32vtpWU/2QmHFw9 CPgiA1fxJEVbNA+46QFypGiKaJWQBILJFn/FInalhubHjC7kWCHVsijIytEZ4hpU 7MccVMQ1ZkHjAqX1jJiZYTAd0ROnUppW0GNb9U7G6RkaLWC2zah0TdBlwXeoOfYa m3o1MJ9D6El0rZxnPe9sJS/YVwhL2byBIfJc4KgAJDU7EoJBoIQM1acttYbz2j/+ eiG4eAOBXjf5vI2+kwW0et+rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0rvbt3Cg JjrJgNb0QqZCS9DyGcgwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABhOaoRA7rvXiFSUPgrPW2SleSTMYqmZ+i5I+6khsm7y258mVPE4D3V/ ve2Pn6fRE1dOZE5aCBneNKWKeTkF9fKq5a9X8emJshpchVimCRwtcDqF6nI0K4Hi rTfDirbwU3oOKfNz4KsjeEOzSCp0/UMMG77OcdJ6B9zmiR9XTjsUCqM0fBdE1MIR BnQHjjhBKHIOjA2wtjmr3UloX1GLps1kWhCVYBvz5lXvo/AkNdGisp3WYhv+7hHV 3m+E+R6ib9t3nE+y085Uuc0hly6KjrmhX4DcuJbsy6c4D+/ZyrHuyseGLmRBlINs YKSfWNgpzzXH/pMGcxYqIuj5IMRCalw= -----END CERTIFICATE-----Generated at Sun Jul 20 11:31:45 2025 by rpki-client