$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft File: JqjITCDQKn_Eru3hVcCzGwjue2c.mft (raw, json) Hash identifier: sM2eZZnluBY6UQfiduTh4zN1IOTlP94srEIDcH4gp0k= Subject key identifier: C8:F6:A2:AB:6D:A4:00:EB:78:F9:07:53:DE:E8:E7:AA:F2:23:13:96 Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 Certificate issuer: /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft Manifest number: 0663 Signing time: Sun 20 Jul 2025 22:39:23 +0000 Manifest this update: Sun 20 Jul 2025 22:39:23 +0000 Manifest next update: Sun 27 Jul 2025 22:39:23 +0000 Files and hashes: 1: JqjITCDQKn_Eru3hVcCzGwjue2c.crl (hash: K/mKqDLz5eMEp57S+8LQ3/9CvfXyEQn8o0ucOqQTmWU=) 2: E562A356702F11EF9806F81FC4F9AE02.roa (hash: /aaQDKulw/fABnAamA7jEF65J1LvCjkHfFV15p+zWsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00E, serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67 Validity Not Before: Jul 20 22:39:23 2025 GMT Not After : Jul 27 22:39:23 2025 GMT Subject: CN=687d701b-03ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:3a:84:29:5b:58:c0:05:42:0d:11:bd:4f: 91:d0:1c:cc:04:ee:e9:d9:21:16:13:84:32:f4:8c: e8:59:30:6d:cf:6d:e6:99:11:78:54:59:bb:b8:5d: fe:6e:82:98:4b:77:14:b2:9a:6e:5b:d4:4c:89:5f: 13:fd:00:04:6f:61:72:8e:4e:9b:89:ff:ec:c4:a9: 4f:3e:01:a1:12:02:1a:6e:ae:8f:e6:63:6c:5f:59: 63:30:3a:57:36:8f:0a:d5:17:77:1d:bf:32:f3:0f: 37:49:6f:91:22:b4:b1:87:18:cf:bd:f0:9e:60:6e: 2c:7f:e3:a6:f8:06:2f:8b:a9:5a:5e:67:24:b1:8e: ab:d6:2f:f2:8f:11:b4:34:64:e2:71:f2:64:5f:7f: 10:a3:97:be:c8:1e:86:6f:2f:b3:c8:8e:63:87:f5: a6:8c:18:b8:75:12:43:31:da:2d:22:43:0d:ba:c6: f3:51:cf:95:33:f5:52:59:1e:dd:d1:de:81:d3:1e: 0d:9c:43:57:dd:c1:91:f0:2f:cd:0d:4c:07:b0:a9: 96:35:f7:b1:cd:3d:26:b7:7d:c5:3d:ee:04:b5:ff: 5c:1d:a5:ba:c5:9e:c0:66:d4:5d:32:79:bd:58:31: d5:f1:fb:89:0d:36:73:0b:81:d6:4c:a8:bd:53:38: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F6:A2:AB:6D:A4:00:EB:78:F9:07:53:DE:E8:E7:AA:F2:23:13:96 X509v3 Authority Key Identifier: keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:36:ab:34:d3:73:58:2a:58:05:1e:b1:5d:22:93:d8:21:92: 49:fc:16:21:10:fd:a2:b9:4b:9d:e5:7f:c6:ae:c9:76:19:27: 0b:5e:9b:e1:2e:d8:c8:ea:46:f9:62:4d:25:80:b0:d7:cd:92: 8b:9f:85:4e:fb:61:b8:aa:e4:51:fd:99:94:dc:27:93:26:fc: 66:0c:d5:cf:ca:d2:46:5f:bb:30:e9:2d:9c:d8:f4:0c:2e:a2: 12:80:0c:df:7c:60:b1:04:b4:69:6a:5c:d5:e8:d1:fd:07:fd: 85:c3:3e:4a:d6:c5:66:61:1a:ce:b9:cf:98:12:84:c6:87:4a: 7d:a2:3d:a9:08:c0:23:c2:fd:20:cd:62:0b:62:8d:6d:ef:3d: 22:95:2c:f4:d8:03:a9:23:98:17:6d:d7:93:74:76:f0:c6:31: 17:36:f5:44:03:9c:97:3c:d4:78:f0:d2:ac:75:7c:ec:9f:68: ee:99:16:82:69:ef:8d:45:1f:e4:46:0c:5d:16:37:fe:2d:c3: a2:81:6f:89:99:16:91:b6:f5:0c:d9:eb:0d:0b:90:69:7e:89: fe:30:7c:57:1d:7b:41:11:2c:10:25:b1:97:e5:50:3f:c8:36: 8f:3d:3f:e2:65:00:43:bf:d7:4d:c4:b8:0c:8b:c2:46:7a:b3: b3:19:bf:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEUxMTAvBgNVBAUTKDI2QThDODRDMjBEMDJBN0ZDNEFFRURFMTU1QzBCMzFC MDhFRTdCNjcwHhcNMjUwNzIwMjIzOTIzWhcNMjUwNzI3MjIzOTIzWjAYMRYwFAYD VQQDEw02ODdkNzAxYi0wM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcI6hClbWMAFQg0RvU+R0BzMBO7p2SEWE4Qy9IzoWTBtz23mmRF4VFm7uF3+ boKYS3cUsppuW9RMiV8T/QAEb2Fyjk6bif/sxKlPPgGhEgIabq6P5mNsX1ljMDpX No8K1Rd3Hb8y8w83SW+RIrSxhxjPvfCeYG4sf+Om+AYvi6laXmcksY6r1i/yjxG0 NGTicfJkX38Qo5e+yB6Gby+zyI5jh/WmjBi4dRJDMdotIkMNusbzUc+VM/VSWR7d 0d6B0x4NnENX3cGR8C/NDUwHsKmWNfexzT0mt33FPe4Etf9cHaW6xZ7AZtRdMnm9 WDHV8fuJDTZzC4HWTKi9UzjC8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj2oqtt pADrePkHU97o56ryIxOWMB8GA1UdIwQYMBaAFCaoyEwg0Cp/xK7t4VXAsxsI7ntn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRS9DNkI1N0M4RThD OTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtuX0VydTNoVmNDekd3anVl MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pxaklUQ0RRS25fRXJ1M2hWY0N6R3dqdWUyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRS9DNkI1N0M4RThDOTAxMUVCOTFERTBFN0FDNEY5QUUwMi9KcWpJVENEUUtu X0VydTNoVmNDekd3anVlMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYNqs003NYKlgFHrFdIpPYIZJJ/BYhEP2iuUud5X/Grsl2GScLXpvh LtjI6kb5Yk0lgLDXzZKLn4VO+2G4quRR/ZmU3CeTJvxmDNXPytJGX7sw6S2c2PQM LqISgAzffGCxBLRpalzV6NH9B/2Fwz5K1sVmYRrOuc+YEoTGh0p9oj2pCMAjwv0g zWILYo1t7z0ilSz02AOpI5gXbdeTdHbwxjEXNvVEA5yXPNR48NKsdXzsn2jumRaC ae+NRR/kRgxdFjf+LcOigW+JmRaRtvUM2esNC5Bpfon+MHxXHXtBESwQJbGX5VA/ yDaPPT/iZQBDv9dNxLgMi8JGerOzGb+h -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:24 2025 by rpki-client