$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: g1SM4VLwUzi5sYr2DYfm9suLw5asqCiiCb56ty2bI80= Subject key identifier: 1A:E6:96:4B:AC:01:21:8D:E5:32:61:D4:1E:FB:EC:45:BC:21:C3:57 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 012F Signing time: Mon 25 Aug 2025 04:58:12 +0000 Manifest this update: Mon 25 Aug 2025 04:58:11 +0000 Manifest next update: Mon 01 Sep 2025 04:58:11 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: FFUt0ACITbSqeICWYMsO827whrA463NpoOgW33c0mhs=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 04:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Aug 25 04:58:11 2025 GMT Not After : Sep 1 04:58:11 2025 GMT Subject: CN=68abed64-5963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:af:9c:12:99:b7:76:dc:81:f6:d8:bb:5c: 7b:f4:80:0f:3b:0f:50:f2:64:aa:3e:ae:9f:86:16: be:3d:cc:ef:15:2f:cd:6d:2d:fb:24:e2:1c:96:c9: 07:02:87:69:0c:4f:6a:70:02:1e:ed:69:8c:d5:cd: df:19:48:28:39:8d:8a:76:a7:69:4d:8b:e3:42:53: 3b:0d:ad:25:1f:8e:e7:07:4e:fa:e3:87:b8:f1:56: c2:db:e0:eb:38:24:81:1e:b1:f9:99:36:cf:e9:93: fb:0f:c9:a5:72:d5:05:21:43:7b:b1:a1:ce:41:8a: 99:59:5a:c0:b9:e8:b0:eb:dc:ea:f9:f1:9f:da:51: 7c:7f:20:52:5a:83:06:17:00:17:74:62:23:c9:38: d6:b9:b3:34:91:4a:b5:54:5e:ab:6d:0a:88:d5:f6: 4b:d2:b5:01:33:23:9c:a3:8e:f9:f6:c7:c4:ff:f4: d8:e5:5d:eb:2d:8e:c2:49:47:74:dc:8a:0f:28:aa: b8:d6:28:08:5f:e3:b0:35:57:ec:e6:05:0e:94:72: 1d:ab:cf:62:d4:f4:ae:9d:3f:fc:fd:03:6a:05:55: a2:95:a9:e2:db:22:95:e4:65:1e:3d:e0:73:05:96: e7:d8:10:b2:91:fc:12:ac:9c:8d:44:e5:e6:d2:ce: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:96:4B:AC:01:21:8D:E5:32:61:D4:1E:FB:EC:45:BC:21:C3:57 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c7:8a:cb:87:76:79:38:ac:cc:2a:e2:99:d3:71:e7:43:e8: 90:ff:85:fe:93:ea:0a:b5:75:44:99:0b:44:f2:d7:40:3c:cf: 5b:d2:25:c4:13:b7:a7:f9:b7:c8:cb:0b:7f:c3:83:25:bf:ff: aa:bb:27:c0:f0:00:48:b4:af:d2:d7:26:1a:86:a2:a6:27:10: b8:5e:e1:b7:5c:b9:d7:c3:0b:c0:0f:61:6a:e7:6b:c5:ed:93: ae:fd:d6:81:22:a1:be:b4:32:04:24:a5:2a:4b:99:b1:3b:e5: f9:9c:16:cc:af:a2:59:7c:88:5c:2d:00:77:f0:02:4a:c9:4b: af:20:9c:8d:33:89:b9:74:88:76:cc:9f:4e:10:f2:7b:ca:a8: 9f:3a:74:70:34:41:4c:a2:d4:e4:ca:19:5c:3e:1d:89:86:81: 9c:8d:68:1f:4a:ab:d6:3f:20:d2:49:a1:e0:57:44:22:e0:49: e6:da:cb:32:69:b2:48:b1:13:e9:05:ce:ce:c0:5d:2b:f7:a3: 85:42:4e:e0:57:6e:3f:94:b9:39:98:0c:55:b1:8e:9b:8b:c9: 26:dc:3c:91:4f:b0:76:bf:a1:63:1c:6b:bf:1f:97:e8:a8:aa: f3:fb:6c:2f:f4:c1:1b:5f:20:56:f0:aa:2a:6d:6a:ad:51:a2: dd:3e:98:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwODI1MDQ1ODExWhcNMjUwOTAxMDQ1ODExWjAYMRYwFAYD VQQDEw02OGFiZWQ2NC01OTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UyvnBKZt3bcgfbYu1x79IAPOw9Q8mSqPq6fhha+PczvFS/NbS37JOIclskH AodpDE9qcAIe7WmM1c3fGUgoOY2KdqdpTYvjQlM7Da0lH47nB07644e48VbC2+Dr OCSBHrH5mTbP6ZP7D8mlctUFIUN7saHOQYqZWVrAueiw69zq+fGf2lF8fyBSWoMG FwAXdGIjyTjWubM0kUq1VF6rbQqI1fZL0rUBMyOco4759sfE//TY5V3rLY7CSUd0 3IoPKKq41igIX+OwNVfs5gUOlHIdq89i1PSunT/8/QNqBVWilani2yKV5GUePeBz BZbn2BCykfwSrJyNROXm0s69swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrmlkus ASGN5TJh1B777EW8IcNXMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxx4rLh3Z5OKzMKuKZ03HnQ+iQ/4X+k+oKtXVEmQtE8tdAPM9b0iXE E7en+bfIywt/w4Mlv/+quyfA8ABItK/S1yYahqKmJxC4XuG3XLnXwwvAD2Fq52vF 7ZOu/daBIqG+tDIEJKUqS5mxO+X5nBbMr6JZfIhcLQB38AJKyUuvIJyNM4m5dIh2 zJ9OEPJ7yqifOnRwNEFMotTkyhlcPh2JhoGcjWgfSqvWPyDSSaHgV0Qi4Enm2ssy abJIsRPpBc7OwF0r96OFQk7gV24/lLk5mAxVsY6bi8km3DyRT7B2v6FjHGu/H5fo qKrz+2wv9MEbXyBW8KoqbWqtUaLdPphj -----END CERTIFICATE-----Generated at Mon Aug 25 23:22:36 2025 by rpki-client