$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: o/qHC3J+epoNoiuvIE0ZP3+6f/01Dz96JDQZtinBQi8= Subject key identifier: 6E:6E:EA:4B:E1:56:72:88:4B:44:3C:82:27:65:BF:11:53:CA:36:45 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 49 Signing time: Wed 17 Sep 2025 08:06:44 +0000 Manifest this update: Wed 17 Sep 2025 08:06:43 +0000 Manifest next update: Wed 24 Sep 2025 08:06:43 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: I1aZ88QtNxbTi/W+jOsBeXi8t2Jhho/SXWFhFAIiL4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Sep 17 08:06:43 2025 GMT Not After : Sep 24 08:06:43 2025 GMT Subject: CN=68ca6c14-9409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:5a:f2:c1:ff:2b:a0:3b:66:e9:50:5a:52: a1:85:cf:19:51:4d:fb:fa:1b:c3:2c:b2:2b:d8:f2: 28:4c:d0:16:16:e1:4b:75:61:b1:6b:f2:4b:3c:9a: 2f:75:b2:c0:a9:b1:ac:6d:21:40:09:97:6b:28:37: 17:7a:a4:f9:0b:1c:f8:10:4d:5a:58:4b:96:b3:58: 9d:23:64:91:2a:97:35:5b:f6:1b:ae:44:3f:51:52: 3d:3c:15:29:c4:1e:7f:d3:69:a4:8c:43:d7:ac:ec: fe:99:eb:91:6e:51:00:4d:72:29:4c:16:74:af:5f: f6:7f:c1:b3:09:8d:e9:57:c6:f9:f1:9e:db:4d:81: 53:e1:86:0e:a3:23:d9:b7:05:16:f9:e9:28:82:08: df:ea:c8:f3:47:0c:e0:a9:4b:d5:c2:7b:f6:f0:c6: 24:07:8f:ff:44:6d:c0:60:c1:7d:71:bf:54:0b:62: d3:59:76:34:86:37:56:39:2b:4f:61:fd:5a:aa:e0: 28:37:c5:24:41:c9:0d:bb:0f:a4:a7:cd:21:a6:0d: 94:a0:53:47:bb:28:6e:e3:69:99:b2:30:7f:ee:e3: a5:a4:28:34:78:90:49:cb:55:8f:11:f5:ce:de:af: 44:ba:07:c3:51:0c:7d:ff:b3:18:ed:76:a0:71:6d: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6E:EA:4B:E1:56:72:88:4B:44:3C:82:27:65:BF:11:53:CA:36:45 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:01:ac:dd:94:80:98:eb:aa:c3:ab:31:04:ca:19:7d:c0:bd: 34:4c:df:48:dd:29:6e:d8:e0:7a:cc:81:74:03:33:b9:1a:08: 57:4d:17:29:5f:94:4b:34:23:7a:29:f0:ef:b6:4f:47:d1:20: 06:3a:de:6a:51:25:a4:7a:2b:b7:b8:12:af:e3:8c:d1:67:84: 9a:7b:21:4c:66:29:20:01:fe:ef:ff:f5:20:c1:98:ff:10:0a: bc:5e:b8:59:3f:a4:88:92:57:73:72:59:ca:62:f0:82:ba:17: 00:03:a9:37:a3:aa:17:0e:14:82:e3:9a:24:d2:b1:c4:b3:06: 94:41:69:4c:7d:89:37:14:21:01:35:75:12:f4:32:91:03:8e: 28:af:26:78:ed:eb:ce:ff:d2:dc:41:f6:d8:3f:6f:bb:59:d3: f2:de:9c:29:ad:26:32:8f:de:5e:4c:af:19:f8:af:55:cd:75: 97:d9:94:9b:5e:4d:ad:46:9e:82:95:0b:f9:56:93:61:90:7f: a3:3a:91:38:3f:a6:85:3b:ae:f3:fa:84:dd:e7:da:c7:d3:65: 45:bb:48:cc:48:59:a2:7f:4f:96:0c:a9:53:0a:a7:ec:10:0f: dc:cf:74:b4:9c:37:76:40:ec:d2:f7:15:12:09:6f:35:e1:f3: 10:26:2f:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA5MTcwODA2NDNaFw0yNTA5MjQwODA2NDNaMBgxFjAUBgNV BAMTDTY4Y2E2YzE0LTk0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVk1rywf8roDtm6VBaUqGFzxlRTfv6G8MssivY8ihM0BYW4Ut1YbFr8ks8mi91 ssCpsaxtIUAJl2soNxd6pPkLHPgQTVpYS5azWJ0jZJEqlzVb9huuRD9RUj08FSnE Hn/TaaSMQ9es7P6Z65FuUQBNcilMFnSvX/Z/wbMJjelXxvnxnttNgVPhhg6jI9m3 BRb56SiCCN/qyPNHDOCpS9XCe/bwxiQHj/9EbcBgwX1xv1QLYtNZdjSGN1Y5K09h /Vqq4Cg3xSRByQ27D6SnzSGmDZSgU0e7KG7jaZmyMH/u46WkKDR4kEnLVY8R9c7e r0S6B8NRDH3/sxjtdqBxbY45AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbm7qS+FW cohLRDyCJ2W/EVPKNkUwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYBrN2UgJjrqsOrMQTKGX3AvTRM30jdKW7Y4HrMgXQDM7kaCFdNFylf lEs0I3op8O+2T0fRIAY63mpRJaR6K7e4Eq/jjNFnhJp7IUxmKSAB/u//9SDBmP8Q CrxeuFk/pIiSV3NyWcpi8IK6FwADqTejqhcOFILjmiTSscSzBpRBaUx9iTcUIQE1 dRL0MpEDjiivJnjt687/0txB9tg/b7tZ0/LenCmtJjKP3l5Mrxn4r1XNdZfZlJte Ta1GnoKVC/lWk2GQf6M6kTg/poU7rvP6hN3n2sfTZUW7SMxIWaJ/T5YMqVMKp+wQ D9zPdLScN3ZA7NL3FRIJbzXh8xAmL1k= -----END CERTIFICATE-----Generated at Fri Sep 19 01:17:35 2025 by rpki-client