$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: McdP0Tir+EBvD3mNFUS58kSmZC0GwBI9zyCIXP1AZ2w= Subject key identifier: E2:6D:82:A5:D6:33:97:D6:EB:00:92:C4:17:79:B5:0A:EF:8D:71:85 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 1095 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 108D Signing time: Thu 18 Sep 2025 17:30:48 +0000 Manifest this update: Thu 18 Sep 2025 17:30:48 +0000 Manifest next update: Thu 25 Sep 2025 17:30:48 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: 9kbUnDk2FPXt//lLWjBm0tQ8CcjsLitRw+5mfZvDLTE=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4245 (0x1095) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Sep 18 17:30:48 2025 GMT Not After : Sep 25 17:30:48 2025 GMT Subject: CN=68cc41c8-3a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:13:60:73:76:12:a4:3c:d1:52:2a:b5:87: c8:48:0d:32:1e:8c:51:78:98:5b:83:62:29:56:63: dc:52:ca:3f:b9:e8:4c:29:55:ba:65:53:ee:3b:3d: b2:2b:ea:18:5f:f4:27:ff:99:76:e2:6f:f8:e0:39: e6:b7:fb:35:2c:93:8e:4f:08:56:66:9e:2a:33:49: c3:7f:6f:68:de:64:c8:74:72:e4:6e:99:b8:29:ac: 2d:35:04:86:66:f7:01:79:18:55:26:67:e2:32:a4: ec:0c:19:d2:53:f4:1b:f6:78:44:4e:fc:ea:15:1f: c2:19:b7:77:00:e6:64:07:0f:40:88:44:ba:04:72: cf:70:d0:5a:61:9f:ac:08:20:f9:f0:29:3b:af:88: f0:98:c2:7b:22:d3:fc:4a:d9:65:da:5e:af:e8:7f: 89:72:54:db:9e:21:44:aa:36:48:c0:82:18:f8:4a: d2:29:21:86:18:31:3a:64:69:ce:5c:16:3d:9d:a4: 21:92:df:a1:2b:a2:67:ea:98:a1:4c:16:37:ac:0a: 96:ae:11:98:66:ff:c3:ff:2e:65:19:ad:92:3d:e3: 80:ca:bc:da:62:e0:12:1e:58:67:0d:9b:13:8c:4b: fb:37:45:90:f6:52:74:55:8c:26:28:fc:5d:7f:48: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6D:82:A5:D6:33:97:D6:EB:00:92:C4:17:79:B5:0A:EF:8D:71:85 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b8:97:54:01:40:a2:4d:34:15:37:eb:10:b1:7b:44:1b:54: 58:6f:8c:bb:0c:e2:65:97:52:b3:63:4f:2f:72:79:c6:3e:5e: df:93:d7:3d:6b:a5:93:d8:b2:91:12:7c:c6:c2:ee:3d:2d:e0: b3:9d:fe:83:37:61:0a:48:f7:b3:1a:28:ab:d4:3a:35:2c:52: a8:85:e9:27:19:8b:c9:2d:bf:dd:4b:e4:c4:8e:d2:60:b5:f0: a3:d5:8c:58:f1:52:77:af:20:34:57:bd:d3:6a:c2:cb:f5:07: 89:9c:76:4a:16:5f:8a:e7:54:31:9c:41:48:0b:82:74:c5:d2: 2b:15:a4:17:5b:48:1f:55:35:3c:c4:28:9f:2f:22:fe:65:4f: 8a:94:52:3a:12:cf:3a:a9:72:7b:3c:0e:70:16:36:09:64:f7: 9e:bb:91:e9:cf:4d:75:93:19:ca:0d:ba:1f:a6:32:f2:f7:fc: 56:19:06:d1:ef:78:08:5b:78:2c:f3:16:64:be:03:01:f5:4f: 99:00:76:99:72:ae:cc:48:de:44:e1:f5:eb:5e:06:ca:b9:bf: 1d:cd:ff:cd:0c:96:63:95:22:4b:b4:84:dd:0e:6e:d5:1b:9e: aa:cb:ce:e0:b9:dd:08:08:b8:15:c8:80:10:72:3f:fa:2e:21: 82:68:40:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwOTE4MTczMDQ4WhcNMjUwOTI1MTczMDQ4WjAYMRYwFAYD VQQDEw02OGNjNDFjOC0zYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VYTYHN2EqQ80VIqtYfISA0yHoxReJhbg2IpVmPcUso/uehMKVW6ZVPuOz2y K+oYX/Qn/5l24m/44Dnmt/s1LJOOTwhWZp4qM0nDf29o3mTIdHLkbpm4KawtNQSG ZvcBeRhVJmfiMqTsDBnSU/Qb9nhETvzqFR/CGbd3AOZkBw9AiES6BHLPcNBaYZ+s CCD58Ck7r4jwmMJ7ItP8Stll2l6v6H+JclTbniFEqjZIwIIY+ErSKSGGGDE6ZGnO XBY9naQhkt+hK6Jn6pihTBY3rAqWrhGYZv/D/y5lGa2SPeOAyrzaYuASHlhnDZsT jEv7N0WQ9lJ0VYwmKPxdf0gqgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJtgqXW M5fW6wCSxBd5tQrvjXGFMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjuJdUAUCiTTQVN+sQsXtEG1RYb4y7DOJll1KzY08vcnnGPl7fk9c9 a6WT2LKREnzGwu49LeCznf6DN2EKSPezGiir1Do1LFKoheknGYvJLb/dS+TEjtJg tfCj1YxY8VJ3ryA0V73TasLL9QeJnHZKFl+K51QxnEFIC4J0xdIrFaQXW0gfVTU8 xCifLyL+ZU+KlFI6Es86qXJ7PA5wFjYJZPeeu5Hpz011kxnKDbofpjLy9/xWGQbR 73gIW3gs8xZkvgMB9U+ZAHaZcq7MSN5E4fXrXgbKub8dzf/NDJZjlSJLtITdDm7V G56qy87gud0ICLgVyIAQcj/6LiGCaECn -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:27 2025 by rpki-client