$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft File: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft (raw, json) Hash identifier: XNOVqHFKtRskQNvrrBQET7H+x4khDRUWc3RoQcDjML4= Subject key identifier: 26:86:F6:1A:BD:48:D5:15:A1:8C:5A:92:8B:67:9C:01:42:19:61:ED Authority key identifier: 24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 Certificate issuer: /CN=A9119A40/serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft Manifest number: 107F Signing time: Wed 20 Aug 2025 18:21:57 +0000 Manifest this update: Wed 20 Aug 2025 18:21:56 +0000 Manifest next update: Wed 27 Aug 2025 18:21:56 +0000 Files and hashes: 1: JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl (hash: fhYc7+eO6q8sr1oJHrrYhTIYgA38bI+OLAPd8Xgcid8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=24DAA7A9BAC6548D8AC6CD10581C4B7BFD076465 Validity Not Before: Aug 20 18:21:56 2025 GMT Not After : Aug 27 18:21:56 2025 GMT Subject: CN=68a61245-be65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:76:72:19:71:43:7f:87:dc:52:f8:0c:1e: 8a:d2:95:48:c1:bb:22:22:d9:7a:83:d6:5d:10:22: 0e:bc:30:54:9b:0f:32:48:b2:d8:05:00:9e:bd:17: d4:6f:20:5b:f0:55:1e:62:f5:82:c3:b8:7d:70:35: 4f:b0:17:7b:c3:44:78:75:b0:97:e9:4a:8b:85:8b: 08:8f:c1:92:ae:25:8c:2b:15:db:e4:28:ac:46:04: e3:ac:ea:7b:2f:73:bc:1f:2a:cf:a8:67:73:da:d5: 2e:c7:43:60:cb:31:c0:ec:e2:e2:56:c0:85:e9:47: 65:28:21:3f:51:74:9c:7b:63:31:aa:84:bc:b9:46: d6:77:09:9a:07:bf:65:b0:20:19:90:24:8a:a1:1a: 50:81:3a:65:5e:9c:22:d2:af:fa:ab:64:e9:dd:3d: 2f:61:9d:f2:a0:b3:c5:13:32:db:92:8d:f0:fb:1d: c7:cb:fe:41:60:23:87:8c:45:02:82:3f:35:0b:f6: 8e:c0:cf:75:79:20:65:40:15:d8:28:39:88:0f:e7: c8:1b:fc:82:1b:a0:7a:b1:c4:f5:7a:84:bc:46:99: 64:4f:64:fb:db:c5:60:5f:6d:58:31:18:2d:31:14: ec:ac:0d:bd:72:49:72:2b:f4:7b:58:60:3f:83:9e: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:F6:1A:BD:48:D5:15:A1:8C:5A:92:8B:67:9C:01:42:19:61:ED X509v3 Authority Key Identifier: keyid:24:DA:A7:A9:BA:C6:54:8D:8A:C6:CD:10:58:1C:4B:7B:FD:07:64:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/JNqnqbrGVI2Kxs0QWBxLe_0HZGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:01:52:05:02:07:5c:16:0d:b5:e8:48:c9:ba:1b:db:76:c6: dc:ec:dc:41:3b:e3:c8:35:48:9a:e1:e0:34:f6:bc:6c:63:5c: 80:db:32:2e:a4:f9:2c:39:46:6c:2f:21:8f:be:23:fe:52:24: 68:d7:a7:0a:26:29:28:e1:b1:9c:86:5d:0d:a5:66:ce:4d:ec: b5:03:66:2d:8c:29:2d:ff:67:9c:f6:35:cb:1e:46:ac:27:bd: b6:a5:63:b2:c2:3e:00:bd:2d:eb:78:79:c9:b3:be:46:2b:fc: 08:f5:79:a1:4f:c7:76:18:e1:50:f7:de:20:49:51:50:a0:7a: a2:bf:90:74:4c:0c:40:20:d4:d5:07:26:7d:41:8a:53:01:ea: ec:91:ae:ad:ea:7b:f8:4b:b2:20:e8:d4:9d:3a:1c:9f:00:3e: e3:b0:5d:d2:0b:5a:82:20:62:83:d5:06:b9:f7:3e:0c:c5:0a: 28:19:45:3b:95:d8:f6:9a:e7:0a:ed:91:72:0c:b4:23:b6:af: 3b:75:19:e4:a3:7b:25:72:1e:f4:ae:9c:09:35:a4:3d:26:19: 21:c9:67:78:e1:94:d0:c4:33:84:5d:1a:87:e6:c5:33:90:a2: 93:45:d4:1c:7b:f7:ed:4a:eb:67:1a:11:d8:ac:1e:8d:35:3f: b7:aa:76:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKDI0REFBN0E5QkFDNjU0OEQ4QUM2Q0QxMDU4MUM0QjdC RkQwNzY0NjUwHhcNMjUwODIwMTgyMTU2WhcNMjUwODI3MTgyMTU2WjAYMRYwFAYD VQQDEw02OGE2MTI0NS1iZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyw52chlxQ3+H3FL4DB6K0pVIwbsiItl6g9ZdECIOvDBUmw8ySLLYBQCevRfU byBb8FUeYvWCw7h9cDVPsBd7w0R4dbCX6UqLhYsIj8GSriWMKxXb5CisRgTjrOp7 L3O8HyrPqGdz2tUux0NgyzHA7OLiVsCF6UdlKCE/UXSce2MxqoS8uUbWdwmaB79l sCAZkCSKoRpQgTplXpwi0q/6q2Tp3T0vYZ3yoLPFEzLbko3w+x3Hy/5BYCOHjEUC gj81C/aOwM91eSBlQBXYKDmID+fIG/yCG6B6scT1eoS8RplkT2T728VgX21YMRgt MRTsrA29cklyK/R7WGA/g56MWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaG9hq9 SNUVoYxakotnnAFCGWHtMB8GA1UdIwQYMBaAFCTap6m6xlSNisbNEFgcS3v9B2Rl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJMkt4czBRV0J4TGVfMEha R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcW5xYnJHVkkyS3hzMFFXQnhMZV8wSFpHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi9KTnFucWJyR1ZJ Mkt4czBRV0J4TGVfMEhaR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeAVIFAgdcFg216EjJuhvbdsbc7NxBO+PINUia4eA09rxsY1yA2zIu pPksOUZsLyGPviP+UiRo16cKJiko4bGchl0NpWbOTey1A2YtjCkt/2ec9jXLHkas J722pWOywj4AvS3reHnJs75GK/wI9XmhT8d2GOFQ994gSVFQoHqiv5B0TAxAINTV ByZ9QYpTAerska6t6nv4S7Ig6NSdOhyfAD7jsF3SC1qCIGKD1Qa59z4MxQooGUU7 ldj2mucK7ZFyDLQjtq87dRnko3slch70rpwJNaQ9JhkhyWd44ZTQxDOEXRqH5sUz kKKTRdQce/ftSutnGhHYrB6NNT+3qnbq -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:06 2025 by rpki-client