$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: pyTFCGHcWx84Rfh4GfnW/gVIQk/IYuxfFPQpGrsWgEw= Subject key identifier: 50:F2:75:D6:07:D0:E9:FA:9D:98:B3:7F:3A:A7:C9:29:2D:E3:3A:E4 Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 0564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 055F Signing time: Fri 18 Jul 2025 23:41:29 +0000 Manifest this update: Fri 18 Jul 2025 23:41:29 +0000 Manifest next update: Fri 25 Jul 2025 23:41:29 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: 1OT/Ld4a/37fqA2pypDiMsWy5tBydlCam1gehQKT1Hs=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: K0g8xWII4g0z2vzjoBYClHiJj2EJk6kk9zBp36ie6T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: Jul 18 23:41:29 2025 GMT Not After : Jul 25 23:41:29 2025 GMT Subject: CN=687adba9-e082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:d9:73:a3:4c:24:8d:1c:01:6d:59:f5:7a: c3:15:f0:c7:cc:a6:8d:0a:a4:44:5e:ce:4b:17:40: 56:ac:50:8b:30:87:b2:15:9a:a0:bc:29:0d:dd:6c: ad:f3:bb:f7:56:86:fe:1d:9c:80:64:79:04:c3:3a: 1f:4b:3e:84:62:66:ce:c8:f2:b7:da:9f:6f:92:44: 1f:19:1c:46:e9:9c:60:65:1f:42:16:ed:12:08:49: b4:f4:81:86:9a:13:39:c6:24:39:34:c0:11:cd:0f: 31:c6:13:65:c9:4b:cd:1f:f8:73:0c:c4:69:ad:bb: 97:f0:94:57:df:75:61:29:54:0a:d7:8f:85:9a:ad: ae:5f:6d:ca:fd:5d:be:f3:f5:05:9b:33:98:a5:46: 89:02:c1:e5:69:90:d6:09:3b:03:61:8f:df:88:21: e7:e2:75:1f:3e:89:e7:c1:ba:00:dc:55:9e:77:ec: d4:2b:3c:d0:c6:29:b9:e6:e8:f0:0e:dc:93:16:66: 82:a2:67:98:46:f7:5c:9e:20:9e:14:72:b7:83:04: 80:a3:0e:40:4b:2d:82:eb:fa:99:56:f8:42:98:2e: 83:d1:1e:95:7f:c6:c1:60:fa:da:fd:bc:61:ec:16: 23:07:8a:4f:f7:21:b1:a9:d5:03:d2:33:58:b2:78: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F2:75:D6:07:D0:E9:FA:9D:98:B3:7F:3A:A7:C9:29:2D:E3:3A:E4 X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fc:f0:8f:a3:8c:c5:6a:db:05:3b:c5:62:de:c1:bc:9a:d5: 3a:4b:61:07:1a:f5:f1:03:83:46:3f:4a:1d:71:ec:88:29:89: eb:58:29:bf:fd:82:32:4c:9d:13:89:0c:36:92:66:4e:f9:6a: 82:90:76:b3:45:e3:52:d8:cf:9a:23:d5:5d:f9:09:a7:98:9f: f5:04:58:b7:e4:01:69:83:48:2f:b3:ab:63:6b:fe:cf:44:a2: f8:89:64:82:3f:28:7c:90:b4:51:64:be:44:5c:cc:71:01:ca: 02:c7:ae:9a:58:5c:bb:07:76:aa:2b:b7:e4:09:2b:a1:b2:6c: 3f:77:45:ec:21:d4:35:a8:c3:e8:ac:d3:5e:f4:20:ba:6e:f8: f7:03:a4:2b:98:c4:42:5e:7a:ac:b5:1e:d9:09:09:00:0c:dc: e2:1d:40:54:ba:59:ec:10:ad:f4:c4:3b:6d:ca:51:6d:55:1a: 3d:1e:fe:14:16:d3:41:e7:c1:7f:36:b1:d9:43:31:67:05:02: 4c:09:c2:10:5b:24:f8:c0:f7:cb:25:d6:61:e6:63:c4:01:c2: d4:f9:a5:15:ce:54:c7:09:3e:60:a5:c6:c0:ba:a8:10:e2:76: 41:d0:c0:81:9d:67:e5:f3:fa:dc:2a:46:bd:3e:da:3c:1c:79: 2c:3f:fc:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjUwNzE4MjM0MTI5WhcNMjUwNzI1MjM0MTI5WjAYMRYwFAYD VQQDEw02ODdhZGJhOS1lMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeTZc6NMJI0cAW1Z9XrDFfDHzKaNCqREXs5LF0BWrFCLMIeyFZqgvCkN3Wyt 87v3Vob+HZyAZHkEwzofSz6EYmbOyPK32p9vkkQfGRxG6ZxgZR9CFu0SCEm09IGG mhM5xiQ5NMARzQ8xxhNlyUvNH/hzDMRprbuX8JRX33VhKVQK14+Fmq2uX23K/V2+ 8/UFmzOYpUaJAsHlaZDWCTsDYY/fiCHn4nUfPonnwboA3FWed+zUKzzQxim55ujw DtyTFmaComeYRvdcniCeFHK3gwSAow5ASy2C6/qZVvhCmC6D0R6Vf8bBYPra/bxh 7BYjB4pP9yGxqdUD0jNYsniLDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDyddYH 0On6nZizfzqnySkt4zrkMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf/PCPo4zFatsFO8Vi3sG8mtU6S2EHGvXxA4NGP0odceyIKYnrWCm/ /YIyTJ0TiQw2kmZO+WqCkHazReNS2M+aI9Vd+QmnmJ/1BFi35AFpg0gvs6tja/7P RKL4iWSCPyh8kLRRZL5EXMxxAcoCx66aWFy7B3aqK7fkCSuhsmw/d0XsIdQ1qMPo rNNe9CC6bvj3A6QrmMRCXnqstR7ZCQkADNziHUBUulnsEK30xDttylFtVRo9Hv4U FtNB58F/NrHZQzFnBQJMCcIQWyT4wPfLJdZh5mPEAcLU+aUVzlTHCT5gpcbAuqgQ 4nZB0MCBnWfl8/rcKka9Pto8HHksP/y5 -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:35 2025 by rpki-client