$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: NqwthHQGaTOg6RvuznoLsUTahzFPVJUvDje4NoxXsUw= Subject key identifier: D4:B7:32:0C:82:39:0C:C7:5A:59:13:88:18:A0:C8:1B:5C:F7:60:A2 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 0F Signing time: Sat 31 May 2025 07:37:12 +0000 Manifest this update: Sat 31 May 2025 07:37:12 +0000 Manifest next update: Sat 07 Jun 2025 07:37:12 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: CrhxtnZ+Yk/+DiRHqOAxnLgHyq76Kea/E1rLa8loGHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: May 31 07:37:12 2025 GMT Not After : Jun 7 07:37:12 2025 GMT Subject: CN=683ab1a8-957b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:5b:71:5e:26:7b:6e:73:10:83:e1:50:91: ed:59:23:ab:28:bd:39:63:d9:e6:de:e0:01:7c:a7: f2:61:69:f0:7d:33:f1:3d:78:26:85:6c:15:17:3c: 96:dc:77:41:89:6b:fd:dc:5a:90:c7:24:5c:f7:5f: f8:a7:94:91:f0:be:7e:a5:d3:e3:63:6e:91:37:30: 7f:71:5b:4d:23:ed:72:dd:6e:0c:9d:20:9c:ce:5e: 46:83:ea:a1:2f:bc:45:5f:7d:a9:e2:0d:d7:9c:b3: a9:06:42:1a:83:34:9e:5f:ef:33:3b:6d:bc:af:27: 3d:83:60:cf:a6:cc:9a:0e:c6:cd:34:6f:79:34:5c: 76:3a:70:d9:0d:2c:cd:c5:41:7d:01:25:ed:bc:08: 91:f3:36:89:ce:cb:df:fb:e2:ee:ac:d9:b2:9e:e8: 1a:90:dc:f2:b1:89:2a:91:4c:da:52:6a:6b:51:cd: bb:91:d7:fc:9b:bf:cb:49:31:07:fb:6e:98:f9:cf: 87:94:a1:ed:2e:0c:fc:d5:d2:63:3f:69:12:cf:5a: 45:10:f7:b4:dd:8c:12:21:e5:b7:98:7f:76:6a:55: 5a:54:52:e9:ec:74:88:29:c3:96:3c:4f:d0:2a:9a: bd:8a:fd:b4:ba:89:18:96:15:4e:86:cb:d8:df:fd: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:32:0C:82:39:0C:C7:5A:59:13:88:18:A0:C8:1B:5C:F7:60:A2 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:7b:ec:c4:af:80:d2:ec:bc:92:d6:01:02:93:87:90:1e:18: ac:5e:cd:f8:72:32:0a:0a:3a:b7:b2:a9:ff:79:f7:9c:ad:2a: 23:90:7c:1f:bf:33:c6:f6:c7:72:a1:49:d3:2d:49:6b:fc:ea: 68:32:bf:12:21:fe:fd:cf:e5:4a:0e:f4:c2:27:11:7b:92:0b: 28:e8:1f:f4:a2:62:d7:65:27:9d:19:e6:4d:ee:0e:0d:5e:e2: 9f:db:a2:fd:e6:ae:cc:55:49:0f:45:7e:3b:f7:42:f6:4f:de: a0:d5:78:42:f9:ca:f4:48:f8:6c:39:5e:ff:67:8b:ba:47:dc: 97:0b:c6:b6:b7:fa:23:25:e1:a6:59:b5:5e:c0:3e:e7:62:60: 54:94:1e:0b:92:1b:54:f7:38:7f:68:26:f3:fa:01:4c:e5:23: 28:9c:0b:36:7e:37:12:a8:8d:cf:d3:38:7c:36:da:57:c2:3c: ca:7f:b8:64:cd:7e:3b:14:06:17:af:a5:fe:8c:7f:0d:55:9b: af:6b:66:b6:a0:b9:8a:37:59:a7:82:f0:e8:8e:08:a8:93:61: 10:3f:57:8d:30:35:43:66:1a:0f:89:30:5d:47:64:81:bf:66: 60:2d:1d:28:41:56:34:ca:76:e4:f6:73:c9:64:97:fc:72:a2: 2f:d8:6a:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA1MzEwNzM3MTJaFw0yNTA2MDcwNzM3MTJaMBgxFjAUBgNV BAMTDTY4M2FiMWE4LTk1N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLTltxXiZ7bnMQg+FQke1ZI6sovTlj2ebe4AF8p/JhafB9M/E9eCaFbBUXPJbc d0GJa/3cWpDHJFz3X/inlJHwvn6l0+NjbpE3MH9xW00j7XLdbgydIJzOXkaD6qEv vEVffaniDdecs6kGQhqDNJ5f7zM7bbyvJz2DYM+mzJoOxs00b3k0XHY6cNkNLM3F QX0BJe28CJHzNonOy9/74u6s2bKe6BqQ3PKxiSqRTNpSamtRzbuR1/ybv8tJMQf7 bpj5z4eUoe0uDPzV0mM/aRLPWkUQ97TdjBIh5beYf3ZqVVpUUunsdIgpw5Y8T9Aq mr2K/bS6iRiWFU6Gy9jf/VifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1LcyDII5 DMdaWROIGKDIG1z3YKIwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADF77MSvgNLsvJLWAQKTh5AeGKxezfhyMgoKOreyqf9595ytKiOQfB+/ M8b2x3KhSdMtSWv86mgyvxIh/v3P5UoO9MInEXuSCyjoH/SiYtdlJ50Z5k3uDg1e 4p/bov3mrsxVSQ9Ffjv3QvZP3qDVeEL5yvRI+Gw5Xv9ni7pH3JcLxra3+iMl4aZZ tV7APudiYFSUHguSG1T3OH9oJvP6AUzlIyicCzZ+NxKojc/TOHw22lfCPMp/uGTN fjsUBhevpf6Mfw1Vm69rZraguYo3WaeC8OiOCKiTYRA/V40wNUNmGg+JMF1HZIG/ ZmAtHShBVjTKduT2c8lkl/xyoi/Yavg= -----END CERTIFICATE-----Generated at Sat May 31 17:14:37 2025 by rpki-client