$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft File: JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft (raw, json) Hash identifier: tU9++wp3loeR3IoQNTizIBAzMqr0bAFJEmKAiM0vNN0= Subject key identifier: 20:F1:F4:10:D3:60:8F:87:A5:12:24:71:29:0B:CF:4E:90:1E:EA:75 Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Certificate serial: 0E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft Manifest number: 0E22 Signing time: Tue 22 Jul 2025 17:57:53 +0000 Manifest this update: Tue 22 Jul 2025 17:57:53 +0000 Manifest next update: Tue 29 Jul 2025 17:57:53 +0000 Files and hashes: 1: JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl (hash: wnq2qlPjTmR8XdiyZZETMD15Vu+ZLpCe1aNRtU2ZgRw=) 2: 72D9F434AD2411E98D9E935AC4F9AE02.roa (hash: 6yiyih3iYU5SXCZve8BQVAbNfjgN61udEXmY/BbF0dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3629 (0xe2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Validity Not Before: Jul 22 17:57:53 2025 GMT Not After : Jul 29 17:57:53 2025 GMT Subject: CN=687fd121-ae69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:4f:ec:0d:66:7b:dd:a5:12:f4:e7:c8:25: 7f:e2:ec:22:56:94:b0:ba:0d:64:8e:8a:a1:95:e7: 6a:b6:13:59:d9:21:48:50:b0:a4:18:fe:5c:67:68: 23:05:78:ba:f3:9e:f4:c4:08:0f:bf:95:5d:d1:2e: 84:56:5a:c7:5f:d8:6b:61:79:c6:6c:2e:60:8b:94: 5d:da:25:84:2a:d8:ea:38:89:b6:32:43:51:0b:3e: 1e:6c:f8:bf:54:e6:ed:6a:51:dd:0b:60:0b:dd:27: 2a:ec:bd:43:ff:bf:c3:fb:ce:ca:a6:d2:fc:b7:67: b5:27:1e:93:08:03:40:a6:a2:75:33:ec:1a:ce:1a: 29:c7:67:99:9a:0d:a5:f7:48:90:78:be:98:03:32: cb:c9:0c:72:da:6c:42:6f:8f:11:c3:6c:3c:16:40: 6e:f4:6f:3d:a0:ae:66:b8:ab:fe:4b:89:8f:c4:06: 92:ae:77:4f:b3:bf:e6:fc:40:9b:a9:d5:ae:30:b4: 34:b5:b5:e6:ab:d0:b5:19:1d:c5:47:d2:60:bc:9a: 8f:01:80:f9:e2:b2:d5:1a:e9:69:59:10:24:0a:09: ef:10:f6:2c:73:12:5d:e5:c6:e2:07:28:69:02:35: 4b:af:58:30:12:86:c6:08:b4:11:16:ae:85:fc:0c: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:F4:10:D3:60:8F:87:A5:12:24:71:29:0B:CF:4E:90:1E:EA:75 X509v3 Authority Key Identifier: keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:78:af:16:3c:47:68:2d:c0:4e:2e:86:37:c4:85:ab:f2:68: 73:68:61:3c:ed:ef:3b:3e:66:cc:06:6b:c3:d3:72:0a:72:b0: 3f:90:c0:0d:c9:f6:64:88:4c:ff:3e:d4:1f:79:42:2d:c3:07: dd:6d:31:48:a5:98:96:d9:f9:8c:6b:4c:f6:ef:17:98:5f:3f: 41:a7:4f:77:5d:01:2b:ae:5a:b6:d8:9b:e2:85:de:d8:eb:f1: e0:93:9e:60:ac:90:ed:97:bb:14:73:db:09:2d:1c:a1:e1:73: 68:47:99:d0:62:87:1d:f2:00:3d:55:b1:f1:9c:e4:4b:e7:6e: 72:8c:b5:3e:43:d0:4f:4a:23:ba:76:83:68:79:39:56:1a:68: aa:b2:03:df:ca:97:9c:f2:f4:d8:df:e2:f4:fe:bc:2b:bf:9f: 5c:7d:ab:19:25:f7:5e:d8:8e:1c:f4:2b:0d:49:4a:70:a4:15: e5:8c:8f:bc:43:54:c4:1f:f9:6d:d6:8c:5a:a2:02:3c:95:dc: d0:a1:b2:8a:e4:6b:96:64:ba:e5:1c:b6:ed:26:73:84:74:67: ce:f5:db:ba:42:f8:96:c3:fd:75:a4:f6:4a:aa:e7:13:8c:d5: 07:10:d6:b5:f3:55:12:2b:d1:35:44:69:18:89:fe:80:7a:e4: 5e:38:f6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVGRDI5M0MyQTYz ODFCNUM0MjYwHhcNMjUwNzIyMTc1NzUzWhcNMjUwNzI5MTc1NzUzWjAYMRYwFAYD VQQDEw02ODdmZDEyMS1hZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WlP7A1me92lEvTnyCV/4uwiVpSwug1kjoqhledqthNZ2SFIULCkGP5cZ2gj BXi68570xAgPv5Vd0S6EVlrHX9hrYXnGbC5gi5Rd2iWEKtjqOIm2MkNRCz4ebPi/ VObtalHdC2AL3Scq7L1D/7/D+87KptL8t2e1Jx6TCANApqJ1M+wazhopx2eZmg2l 90iQeL6YAzLLyQxy2mxCb48Rw2w8FkBu9G89oK5muKv+S4mPxAaSrndPs7/m/ECb qdWuMLQ0tbXmq9C1GR3FR9JgvJqPAYD54rLVGulpWRAkCgnvEPYscxJd5cbiByhp AjVLr1gwEobGCLQRFq6F/AzooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDx9BDT YI+HpRIkcSkLz06QHup1MB8GA1UdIwQYMBaAFCQ9kkN84jBQPlSO/Sk8KmOBtcQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNDNS8wMzY2RDdBRUFD RTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1GQS1WSTc5S1R3cVk0RzF4 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEMlNRM3ppTUZBLVZJNzlLVHdxWTRHMXhDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjNDNS8wMzY2RDdBRUFDRTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1G QS1WSTc5S1R3cVk0RzF4Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpeK8WPEdoLcBOLoY3xIWr8mhzaGE87e87PmbMBmvD03IKcrA/kMAN yfZkiEz/PtQfeUItwwfdbTFIpZiW2fmMa0z27xeYXz9Bp093XQErrlq22Jvihd7Y 6/Hgk55grJDtl7sUc9sJLRyh4XNoR5nQYocd8gA9VbHxnORL525yjLU+Q9BPSiO6 doNoeTlWGmiqsgPfypec8vTY3+L0/rwrv59cfasZJfde2I4c9CsNSUpwpBXljI+8 Q1TEH/lt1oxaogI8ldzQobKK5GuWZLrlHLbtJnOEdGfO9du6QviWw/11pPZKqucT jNUHENa181USK9E1RGkYif6AeuReOPZu -----END CERTIFICATE-----Generated at Thu Jul 24 08:31:07 2025 by rpki-client