$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: 4DlcgIUhj8t1Xt+9aX17BcmBOTKxXl1YYp80OWpfeDw= Subject key identifier: AB:B7:61:00:73:C6:9C:57:AB:01:FA:A8:7B:82:F5:75:B8:12:E0:8D Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 34 Signing time: Sat 09 Aug 2025 08:07:52 +0000 Manifest this update: Sat 09 Aug 2025 08:07:52 +0000 Manifest next update: Sat 16 Aug 2025 08:07:52 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: 2j8Y/9ph/757Xj/5PPL5LFNMZoIfNfnciyR/2ajVlBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Aug 9 08:07:52 2025 GMT Not After : Aug 16 08:07:52 2025 GMT Subject: CN=689701d8-b1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:ae:b9:f1:3b:6e:41:9b:38:3e:67:36:88: c9:bc:b5:2c:0c:18:e1:b7:b3:0a:2e:61:d0:e5:f6: b1:1f:ef:d2:2e:f4:9b:99:a9:db:dd:74:29:e4:5d: 95:14:7a:c2:34:17:37:d2:0d:64:bc:eb:02:ab:d9: 7b:0e:83:05:58:a1:83:cb:aa:6c:46:b8:4e:4e:38: 85:f9:e3:b5:64:16:c4:83:52:f4:e7:a4:f9:12:48: 32:57:f9:ea:48:80:21:71:c6:2d:9d:09:d5:e5:0b: 5a:c2:08:d2:bc:bb:9b:4b:86:b4:9d:39:9a:f5:6d: 1f:d1:f5:10:82:71:03:b1:d8:e3:f4:a0:63:ae:c5: ba:29:6a:02:a1:e9:d9:69:c7:5e:b4:6e:36:fb:81: e5:cf:58:f3:96:29:13:03:ae:d4:d9:72:6a:26:80: 0d:93:f5:23:38:18:e1:22:03:8f:1b:47:a4:09:0d: 8a:a3:90:cf:76:94:9a:1b:56:8c:09:d5:f0:0b:5a: 64:34:16:43:f7:0f:d0:29:d9:a0:96:ea:ce:d7:09: 76:1f:c8:96:be:1e:e0:fb:32:c6:2e:2a:08:1b:45: 47:dc:e3:68:c3:d8:a7:30:bc:d0:1b:17:d3:bb:23: e4:1d:9d:f0:37:9f:ec:f0:e6:84:fc:8d:ca:60:eb: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B7:61:00:73:C6:9C:57:AB:01:FA:A8:7B:82:F5:75:B8:12:E0:8D X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:81:b7:89:92:83:56:ed:ef:7f:9c:44:ee:68:0f:07:d9: 1a:b7:13:d1:6d:4b:62:70:c5:b1:c8:27:57:83:c7:9f:3a:e9: 67:e6:04:26:c8:75:21:b8:ad:68:5b:2c:fb:fc:ca:f4:70:f8: 35:bd:9e:b3:31:b6:ec:4c:0e:cc:49:ca:6d:05:02:a4:fa:fe: 38:62:ba:67:50:21:6b:94:b8:f8:80:b0:b7:18:ba:58:4a:d6: 1f:9a:79:28:d7:e9:48:e7:49:7c:56:80:3c:af:7d:bd:c2:77: b1:9e:0c:07:8e:67:35:e7:2f:2d:d0:c6:6c:07:41:eb:b5:20: 9e:32:3b:37:15:6c:2c:71:bd:90:0e:cb:15:2b:5a:3f:8d:d7: 1c:37:cb:85:8a:cc:1a:bd:7f:80:30:61:45:79:d5:0d:45:62: 91:12:47:1c:dc:ad:c5:c5:e4:a7:78:80:92:e2:71:15:4a:8c: 27:50:2e:9f:97:e1:05:62:aa:be:13:3c:2d:98:47:eb:ff:27: 68:0e:16:e7:46:68:70:16:f6:cb:04:c6:2e:99:69:d1:74:1a: 73:f8:77:c5:70:0c:b3:b2:45:6e:9c:1e:4b:c8:9e:bc:04:34: 51:d6:31:9b:74:d0:10:02:18:e0:ad:60:8e:df:8c:f5:a1:7d: 1d:dd:1d:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA4MDkwODA3NTJaFw0yNTA4MTYwODA3NTJaMBgxFjAUBgNV BAMTDTY4OTcwMWQ4LWIxZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUya658TtuQZs4Pmc2iMm8tSwMGOG3swouYdDl9rEf79Iu9JuZqdvddCnkXZUU esI0FzfSDWS86wKr2XsOgwVYoYPLqmxGuE5OOIX547VkFsSDUvTnpPkSSDJX+epI gCFxxi2dCdXlC1rCCNK8u5tLhrSdOZr1bR/R9RCCcQOx2OP0oGOuxbopagKh6dlp x160bjb7geXPWPOWKRMDrtTZcmomgA2T9SM4GOEiA48bR6QJDYqjkM92lJobVowJ 1fALWmQ0FkP3D9Ap2aCW6s7XCXYfyJa+HuD7MsYuKggbRUfc42jD2KcwvNAbF9O7 I+QdnfA3n+zw5oT8jcpg60vjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq7dhAHPG nFerAfqoe4L1dbgS4I0wHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBKgbeJkoNW7e9/nETuaA8H2Rq3E9FtS2JwxbHIJ1eDx5866WfmBCbI dSG4rWhbLPv8yvRw+DW9nrMxtuxMDsxJym0FAqT6/jhiumdQIWuUuPiAsLcYulhK 1h+aeSjX6UjnSXxWgDyvfb3Cd7GeDAeOZzXnLy3QxmwHQeu1IJ4yOzcVbCxxvZAO yxUrWj+N1xw3y4WKzBq9f4AwYUV51Q1FYpESRxzcrcXF5Kd4gJLicRVKjCdQLp+X 4QViqr4TPC2YR+v/J2gOFudGaHAW9ssExi6ZadF0GnP4d8VwDLOyRW6cHkvInrwE NFHWMZt00BACGOCtYI7fjPWhfR3dHTo= -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:19 2025 by rpki-client