$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft File: jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft (raw, json) Hash identifier: J1Rh46ERAGSF5gj4fX7ydnwafiAVJoqY9WnX+raS/xY= Subject key identifier: 29:E4:A8:C2:42:6A:55:7C:34:F6:DF:3E:6C:50:70:A7:FF:7B:B1:17 Authority key identifier: 8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 Certificate issuer: /CN=A9113A22/serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft Manifest number: 16 Signing time: Fri 13 Jun 2025 06:51:59 +0000 Manifest this update: Fri 13 Jun 2025 06:51:59 +0000 Manifest next update: Fri 20 Jun 2025 06:51:59 +0000 Files and hashes: 1: jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl (hash: hgOaazCWz10bhhJPy3kLKBr1f4HmONtSv6BUBl594sA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A22, serialNumber=8E96EA3D15E91670BFAA4FC49FEAAD7FB6CCF984 Validity Not Before: Jun 13 06:51:59 2025 GMT Not After : Jun 20 06:51:59 2025 GMT Subject: CN=684bca8f-868d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:33:66:0b:50:2f:ff:d0:c3:46:e0:62:db: fd:4c:bd:b9:ad:4e:65:98:ce:86:d6:1e:a1:19:a5: e0:94:51:e2:37:64:ee:81:01:b3:02:d9:9d:61:a9: d4:79:fe:03:2c:de:c8:4d:9c:3d:28:c7:64:64:96: 55:7f:e7:63:02:86:4d:08:7c:11:b6:8f:c4:5b:d9: c6:dd:f3:83:a6:2b:2f:d7:dc:00:82:ad:37:18:df: a5:c4:5e:38:22:9a:9b:48:8b:f6:5c:ac:63:d1:9b: 97:ad:38:db:b1:f8:44:56:e6:26:3d:1a:66:64:cb: 35:cb:67:d7:8f:8b:0b:10:e2:45:36:bb:f1:8a:d4: 8c:98:95:d0:2c:c8:46:57:70:d9:b9:ce:ba:53:3d: 73:3c:04:e2:c9:8b:7a:b4:06:6a:d6:20:21:ca:64: 0e:a0:6e:86:5a:09:0e:1a:a9:c7:8b:9c:30:ed:13: 08:64:2c:04:ae:2c:9a:b5:92:d6:a2:de:f1:23:17: 35:24:fb:fe:85:7e:52:f5:35:89:02:5a:ca:88:99: 97:c3:54:16:47:1e:d5:fb:6a:b0:28:5f:5b:71:8c: ab:6e:54:15:75:19:7a:98:fe:42:a4:7f:43:a3:1a: 3c:92:4c:d2:f4:c0:04:27:83:7a:60:c1:3f:d9:2c: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E4:A8:C2:42:6A:55:7C:34:F6:DF:3E:6C:50:70:A7:FF:7B:B1:17 X509v3 Authority Key Identifier: keyid:8E:96:EA:3D:15:E9:16:70:BF:AA:4F:C4:9F:EA:AD:7F:B6:CC:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jpbqPRXpFnC_qk_En-qtf7bM-YQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A22/741B0EEA274011F0BA741E22C4F9AE02/jpbqPRXpFnC_qk_En-qtf7bM-YQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e9:55:89:7f:b1:3d:49:cb:84:20:36:fa:66:f9:86:17:03: f9:8b:10:0d:10:68:35:af:95:ab:bc:d8:b0:38:07:74:ef:37: ea:75:7a:b0:15:42:4e:72:85:51:88:c6:e2:92:dd:19:60:17: 14:07:71:aa:08:19:c8:34:3c:73:55:88:fb:7e:f7:69:ab:e1: 53:8c:a8:90:26:70:e6:58:e6:bb:a7:d4:bb:c3:78:7c:62:b1: 69:6b:c0:d6:cc:35:4c:5c:fa:b2:28:e6:23:05:3a:f5:c2:ee: 71:b5:26:b4:e2:71:61:5e:b9:25:d1:e1:0f:26:8f:97:aa:c4: 9f:e2:a3:4b:f9:34:af:17:98:48:bb:41:27:1a:f9:94:42:1b: e5:47:96:54:79:d5:5b:c0:f5:d5:1b:5e:2f:dd:cd:cc:3b:ef: 37:3d:8e:d3:b5:f7:64:f6:74:58:60:80:f0:83:0b:6e:6e:ed: fd:6b:ce:28:ec:04:54:77:89:60:b3:8c:cf:f2:c8:63:37:88: 58:ae:a6:b4:85:83:41:e9:be:35:7a:58:a6:c8:d2:89:b1:78: ff:81:93:71:a0:88:51:37:3d:3c:91:0c:a6:4c:9b:4f:4a:6f: b1:ac:83:79:74:ce:96:4c:f5:b4:97:59:b1:8a:9f:c3:74:5f: 8a:c2:fa:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0EyMjExMC8GA1UEBRMoOEU5NkVBM0QxNUU5MTY3MEJGQUE0RkM0OUZFQUFEN0ZC NkNDRjk4NDAeFw0yNTA2MTMwNjUxNTlaFw0yNTA2MjAwNjUxNTlaMBgxFjAUBgNV BAMTDTY4NGJjYThmLTg2OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHwzNmC1Av/9DDRuBi2/1MvbmtTmWYzobWHqEZpeCUUeI3ZO6BAbMC2Z1hqdR5 /gMs3shNnD0ox2RkllV/52MChk0IfBG2j8Rb2cbd84OmKy/X3ACCrTcY36XEXjgi mptIi/ZcrGPRm5etONux+ERW5iY9GmZkyzXLZ9ePiwsQ4kU2u/GK1IyYldAsyEZX cNm5zrpTPXM8BOLJi3q0BmrWICHKZA6gboZaCQ4aqceLnDDtEwhkLASuLJq1ktai 3vEjFzUk+/6FflL1NYkCWsqImZfDVBZHHtX7arAoX1txjKtuVBV1GXqY/kKkf0Oj GjySTNL0wAQng3pgwT/ZLC9pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKeSowkJq VXw09t8+bFBwp/97sRcwHwYDVR0jBBgwFoAUjpbqPRXpFnC/qk/En+qtf7bM+YQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQTIyLzc0MUIwRUVBMjc0 MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5DX3FrX0VuLXF0ZjdiTS1Z US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvanBicVBSWHBGbkNfcWtfRW4tcXRmN2JNLVlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QTIyLzc0MUIwRUVBMjc0MDExRjBCQTc0MUUyMkM0RjlBRTAyL2pwYnFQUlhwRm5D X3FrX0VuLXF0ZjdiTS1ZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTpVYl/sT1Jy4QgNvpm+YYXA/mLEA0QaDWvlau82LA4B3TvN+p1erAV Qk5yhVGIxuKS3RlgFxQHcaoIGcg0PHNViPt+92mr4VOMqJAmcOZY5run1LvDeHxi sWlrwNbMNUxc+rIo5iMFOvXC7nG1JrTicWFeuSXR4Q8mj5eqxJ/io0v5NK8XmEi7 QSca+ZRCG+VHllR51VvA9dUbXi/dzcw77zc9jtO192T2dFhggPCDC25u7f1rzijs BFR3iWCzjM/yyGM3iFiuprSFg0HpvjV6WKbI0omxeP+Bk3GgiFE3PTyRDKZMm09K b7Gsg3l0zpZM9bSXWbGKn8N0X4rC+u4= -----END CERTIFICATE-----Generated at Sat Jun 14 19:18:01 2025 by rpki-client