$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: nfTdj7dNlelgOC15TnhQQQQTSVMPjeMcFf34n+3/xrI= Subject key identifier: 51:1D:26:82:94:0B:9C:9C:D3:A6:D9:1D:DC:92:ED:4E:97:1C:69:7F Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 1059 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 1052 Signing time: Fri 30 May 2025 17:33:37 +0000 Manifest this update: Fri 30 May 2025 17:33:37 +0000 Manifest next update: Fri 06 Jun 2025 17:33:37 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: nt8eINrjqtkeJQI4wXo+aHf7kPoBTMIMFFDFhW+d494=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: /nFahrd1eN8YwTr3PzXHtKOv1+LamBJVN45AsjnPQ5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4185 (0x1059) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: May 30 17:33:37 2025 GMT Not After : Jun 6 17:33:37 2025 GMT Subject: CN=6839ebf1-7f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:7e:4f:82:6b:51:a4:2c:fc:5b:01:f3:c4: 8b:b4:d0:b8:65:d3:a4:b7:79:8f:96:4b:ba:50:2b: ef:39:b4:2d:63:6f:9b:21:1d:bb:c1:b1:5a:40:8a: e7:67:df:79:2e:e8:d7:25:eb:9b:85:09:cb:03:84: 49:dd:05:c1:43:d3:3a:e2:0c:41:09:98:cd:dd:84: 0b:07:f7:3a:c1:19:8a:2d:d2:7d:67:7c:cb:f9:99: 97:e4:76:a2:58:c4:16:7d:cd:f9:a7:bf:00:5f:0a: aa:2d:0f:af:82:8c:3c:c9:05:cb:a7:20:bf:39:0b: 63:57:f7:c7:1d:12:80:b5:83:05:f6:ff:11:07:91: 91:58:22:c8:fb:ba:3e:fc:d4:5f:4d:e2:eb:b0:29: 7a:7a:0e:a1:48:41:db:25:25:00:db:de:95:14:64: eb:5a:0d:6e:89:63:fa:22:cc:98:67:69:ef:8f:bc: c3:06:e8:68:c9:34:c5:07:56:88:6b:40:09:9d:3b: 8b:7c:b1:f4:91:91:7d:e1:e8:3c:95:8c:47:05:a1: 29:3f:6b:0f:d5:b2:51:8b:9c:18:8c:b9:29:23:16: f3:1a:83:57:84:65:2d:93:14:d1:72:1e:e5:16:68: 90:33:d5:7d:7a:27:a0:8e:07:d5:00:e4:7a:9d:e9: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1D:26:82:94:0B:9C:9C:D3:A6:D9:1D:DC:92:ED:4E:97:1C:69:7F X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:47:e6:6f:a0:cf:9c:96:e7:33:e5:6e:d2:5c:1a:3f:50:5d: 11:41:1b:a0:8c:2c:f5:cc:dc:46:3b:70:23:5b:1d:12:e0:9a: 0a:12:6c:10:db:51:0e:a7:d8:51:19:72:3a:79:f4:78:a8:fb: 03:b2:dd:a5:35:1a:7f:b8:1e:9b:d6:93:5f:22:68:e8:4a:c2: 15:59:70:21:33:0d:f6:1f:51:06:b2:18:be:60:e2:9d:06:17: 4d:d5:0b:d8:1d:76:39:10:b0:cf:13:5f:c6:c1:12:cf:31:35: 19:3f:68:57:20:0e:4a:a9:56:6a:bd:18:41:7c:9f:80:df:13: d6:33:c1:dd:f3:74:a7:9f:e3:f3:83:9b:b8:82:33:da:04:2b: 0f:48:b0:8b:68:9c:fa:3d:d6:b8:1c:41:9d:1c:08:73:10:c5: 3f:69:85:9d:19:d3:0d:53:02:50:a4:65:7b:fa:88:8d:83:dd: f8:50:b2:c0:b7:a2:df:d1:e7:92:7c:6c:e0:ca:56:a7:08:06: d0:02:03:81:94:37:e4:92:b4:06:89:06:09:45:a7:c2:b6:60: b7:92:fe:fb:71:38:ce:d2:30:c4:ea:0a:73:a8:33:8b:09:35: 8b:af:fa:b0:ba:de:49:0d:0a:8a:82:c2:b3:9b:12:22:4a:a3: e9:e6:09:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwNTMwMTczMzM3WhcNMjUwNjA2MTczMzM3WjAYMRYwFAYD VQQDEw02ODM5ZWJmMS03ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAh+T4JrUaQs/FsB88SLtNC4ZdOkt3mPlku6UCvvObQtY2+bIR27wbFaQIrn Z995LujXJeubhQnLA4RJ3QXBQ9M64gxBCZjN3YQLB/c6wRmKLdJ9Z3zL+ZmX5Hai WMQWfc35p78AXwqqLQ+vgow8yQXLpyC/OQtjV/fHHRKAtYMF9v8RB5GRWCLI+7o+ /NRfTeLrsCl6eg6hSEHbJSUA296VFGTrWg1uiWP6IsyYZ2nvj7zDBuhoyTTFB1aI a0AJnTuLfLH0kZF94eg8lYxHBaEpP2sP1bJRi5wYjLkpIxbzGoNXhGUtkxTRch7l FmiQM9V9eiegjgfVAOR6nemvcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEdJoKU C5yc06bZHdyS7U6XHGl/MB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALR+ZvoM+clucz5W7SXBo/UF0RQRugjCz1zNxGO3AjWx0S4JoKEmwQ 21EOp9hRGXI6efR4qPsDst2lNRp/uB6b1pNfImjoSsIVWXAhMw32H1EGshi+YOKd BhdN1QvYHXY5ELDPE1/GwRLPMTUZP2hXIA5KqVZqvRhBfJ+A3xPWM8Hd83Snn+Pz g5u4gjPaBCsPSLCLaJz6Pda4HEGdHAhzEMU/aYWdGdMNUwJQpGV7+oiNg934ULLA t6Lf0eeSfGzgylanCAbQAgOBlDfkkrQGiQYJRafCtmC3kv77cTjO0jDE6gpzqDOL CTWLr/qwut5JDQqKgsKzmxIiSqPp5gn+ -----END CERTIFICATE-----Generated at Sat May 31 17:39:13 2025 by rpki-client