$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft File: JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json) Hash identifier: LLssORqgnXviMNWDROBkcpMy38q2WGqDmajQpVQTNk8= Subject key identifier: 18:DC:68:89:C9:A2:A8:4F:5F:B0:54:18:8E:0C:B6:B3:A9:AF:3F:13 Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft Manifest number: 0C54 Signing time: Sun 20 Jul 2025 18:36:41 +0000 Manifest this update: Sun 20 Jul 2025 18:36:40 +0000 Manifest next update: Sun 27 Jul 2025 18:36:40 +0000 Files and hashes: 1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: x5WUzL10/HlsNrrsD7rb1I60X4XSOtO9a0xfYYlORng=) 2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: Ze8Yanp+k5PHmh85OnFiLG44bNuhfOzahNgejKqhDtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C Validity Not Before: Jul 20 18:36:40 2025 GMT Not After : Jul 27 18:36:40 2025 GMT Subject: CN=687d3739-a5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:cf:a5:c4:b8:a7:9c:c5:c7:ef:6d:dc:80: fa:c9:3e:80:04:17:64:14:3d:ee:c4:3d:94:8b:7e: bd:d0:d8:41:93:81:61:60:4f:60:27:41:79:19:3d: 56:4a:ec:60:c7:90:eb:89:21:e9:67:fe:55:42:9d: bd:23:9e:94:80:b7:d4:5e:76:92:f8:f5:f1:1f:3e: 6f:53:f1:4a:39:b5:c8:eb:a1:53:8e:18:5f:6c:e7: fe:2f:ba:66:68:e1:ce:72:fc:2a:be:59:4b:ba:9c: 70:2d:a6:29:6b:08:c5:cd:b6:f5:b0:10:ca:3a:4b: c3:98:39:99:40:4e:c3:63:e0:2f:bb:f8:d4:9e:71: 24:42:36:56:76:ae:17:e6:28:e8:60:eb:43:e3:72: a5:7f:51:db:53:9a:d1:8c:d1:28:bd:eb:86:5f:fc: bf:c2:5c:6b:b8:be:26:e3:95:93:7a:cc:17:e5:4a: 42:78:07:46:b2:24:4f:2c:79:20:e9:b1:73:c6:46: ad:a8:68:b3:51:d1:1e:61:eb:8b:12:38:1f:d4:2c: c3:83:9a:ee:ad:d1:a1:c4:23:1d:bf:82:e9:8d:3e: b3:20:5c:90:8b:1e:80:cb:10:64:f4:70:61:00:ea: aa:14:23:23:f8:cf:93:ca:7b:82:a9:e3:82:41:8e: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:68:89:C9:A2:A8:4F:5F:B0:54:18:8E:0C:B6:B3:A9:AF:3F:13 X509v3 Authority Key Identifier: keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:30:13:60:80:2f:54:89:d0:b7:68:56:4b:69:8b:b2:b4:ef: e0:3f:f8:d5:0a:0e:1b:c9:2c:a4:c2:f8:27:5c:b8:21:a2:24: 20:f0:04:8f:fb:f9:34:44:8d:43:55:79:ad:77:83:3d:18:a7: 14:a6:53:fb:5f:c2:84:be:5b:fc:f0:75:4e:71:eb:71:2b:60: 8b:70:7c:95:b3:e1:37:33:dc:f8:86:75:f6:94:c4:66:37:67: f1:49:5d:0e:b3:ae:b5:5d:e8:cc:12:79:cf:d3:86:e4:c7:07: dc:96:2e:af:a9:6c:5d:38:65:e8:37:bc:64:cb:db:92:4e:49: c0:7f:f0:b6:44:fb:e3:6b:39:5e:80:a6:d1:96:7c:47:e3:4e: 0c:2c:69:bc:0d:3f:e6:0c:2f:be:2e:5b:85:f8:fd:1d:eb:92: 6b:20:08:45:40:77:31:48:49:70:3f:b6:f8:5a:55:fd:67:c1: 07:53:21:a2:cd:51:8d:ab:2d:0b:fb:c9:75:f3:bc:c2:4a:a3: dc:4e:e9:bc:9e:34:3a:f4:11:d3:35:35:a4:02:d2:1d:e9:38: 05:6c:49:71:4b:0f:cc:d0:9f:77:2f:7c:0a:43:cb:55:0c:90: de:54:ec:03:71:ba:9e:07:43:6f:0b:83:76:73:ec:99:4b:f4: cb:a1:d9:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3 MzUzRkJGMkMwHhcNMjUwNzIwMTgzNjQwWhcNMjUwNzI3MTgzNjQwWjAYMRYwFAYD VQQDEw02ODdkMzczOS1hNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynzPpcS4p5zFx+9t3ID6yT6ABBdkFD3uxD2Ui3690NhBk4FhYE9gJ0F5GT1W Suxgx5DriSHpZ/5VQp29I56UgLfUXnaS+PXxHz5vU/FKObXI66FTjhhfbOf+L7pm aOHOcvwqvllLupxwLaYpawjFzbb1sBDKOkvDmDmZQE7DY+Avu/jUnnEkQjZWdq4X 5ijoYOtD43Klf1HbU5rRjNEoveuGX/y/wlxruL4m45WTeswX5UpCeAdGsiRPLHkg 6bFzxkatqGizUdEeYeuLEjgf1CzDg5rurdGhxCMdv4LpjT6zIFyQix6AyxBk9HBh AOqqFCMj+M+TynuCqeOCQY6unwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjcaInJ oqhPX7BUGI4MtrOprz8TMB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92 eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr WFVHYVFvX0hBYVZ6VV92eXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkMBNggC9UidC3aFZLaYuytO/gP/jVCg4bySykwvgnXLghoiQg8ASP +/k0RI1DVXmtd4M9GKcUplP7X8KEvlv88HVOcetxK2CLcHyVs+E3M9z4hnX2lMRm N2fxSV0Os661XejMEnnP04bkxwfcli6vqWxdOGXoN7xky9uSTknAf/C2RPvjazle gKbRlnxH404MLGm8DT/mDC++LluF+P0d65JrIAhFQHcxSElwP7b4WlX9Z8EHUyGi zVGNqy0L+8l187zCSqPcTum8njQ69BHTNTWkAtId6TgFbElxSw/M0J93L3wKQ8tV DJDeVOwDcbqeB0NvC4N2c+yZS/TLodmQ -----END CERTIFICATE-----Generated at Mon Jul 21 07:18:30 2025 by rpki-client