$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: PIF4JMyuxvaEdQ++0a1IiR4CF6ki4XB8JPCiIkL3/j0= Subject key identifier: A8:F0:1E:3D:C3:51:4A:8D:96:E3:4A:6B:13:2C:C0:5F:7D:25:0A:E1 Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 0940 Signing time: Wed 06 Aug 2025 20:35:08 +0000 Manifest this update: Wed 06 Aug 2025 20:35:08 +0000 Manifest next update: Wed 13 Aug 2025 20:35:08 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: jfw2eJ+V21t/x+A1OcmkgQ1/QzOe5RuC2eKCpdbIX7U=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Aug 6 20:35:08 2025 GMT Not After : Aug 13 20:35:08 2025 GMT Subject: CN=6893bc7c-b838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:da:81:53:5e:26:39:94:83:5a:68:8b:6c: ae:4c:24:65:94:28:a4:8d:65:00:54:e6:15:c0:c1: f3:e7:f3:96:05:cf:26:91:39:ad:20:b3:6d:f2:51: 3a:fa:50:4a:f5:1b:b2:57:15:e0:a9:52:66:b4:ec: 1a:22:71:c5:34:f7:89:44:94:4b:19:a4:49:79:19: a9:69:8f:27:f9:b1:01:c4:02:b2:55:7b:72:50:31: 25:47:ce:a6:d5:9e:82:33:48:62:51:e1:6e:54:b4: 01:9f:c3:40:7c:0c:21:28:50:c2:72:55:20:af:86: 03:4b:f7:73:a4:4c:46:8f:7f:48:88:2d:3f:1b:2e: 4f:35:fd:ff:20:e3:25:52:c0:9d:b3:e3:cd:62:8b: 67:28:27:53:c0:e5:b5:fa:32:eb:56:25:54:db:71: e1:07:a3:b2:42:5a:53:3e:84:ab:e8:b2:18:c9:3a: 9c:2e:f7:a1:33:59:d5:ed:e4:00:31:bb:17:2b:55: 88:ba:fe:38:e4:6a:b5:ab:e1:f4:02:62:7a:70:2c: 7c:b2:14:78:96:89:7a:49:e2:03:59:70:86:b0:78: b4:ef:4a:a6:1f:30:33:cc:59:6a:43:14:03:58:40: 3c:66:78:4b:33:4d:13:ee:29:28:a8:bb:d9:41:67: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:1E:3D:C3:51:4A:8D:96:E3:4A:6B:13:2C:C0:5F:7D:25:0A:E1 X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:25:89:01:f0:f6:d9:b3:10:0e:d4:92:af:91:49:69:3b:f7: dd:53:98:42:86:b4:c2:83:cf:e5:32:ea:8a:b0:b2:bd:38:7a: 26:22:45:a2:ba:a1:fe:5f:f5:8d:4a:48:bb:b0:b5:49:a8:d7: 53:31:37:23:6f:06:dc:12:05:f1:ed:2a:28:d1:e6:9f:da:3b: 7a:1b:11:d1:ed:c3:04:68:0a:94:f5:17:8a:26:cc:75:23:97: 0d:99:49:17:89:3a:7f:4e:59:69:fa:40:d6:17:26:7d:3b:08: 1a:1f:48:f1:88:b3:50:86:cc:0d:56:15:82:2e:07:a6:0d:a4: e2:19:9e:ee:cf:12:4a:ba:62:e8:c5:c5:8b:d6:77:e5:7f:db: 93:26:2e:cc:cf:40:2f:ae:78:e2:12:7c:52:d3:e4:ca:18:b9: 45:03:f2:df:5c:46:68:f0:40:13:24:0c:9a:99:d6:16:ef:b6: 9a:e9:92:3c:73:2e:8b:d3:13:65:32:a9:52:3d:a9:50:ac:86: 8d:c1:29:e7:79:ea:0d:22:71:26:68:0f:da:07:69:51:d6:c2: 73:5e:a2:f9:5a:9e:ab:3e:e7:fb:7e:50:2b:19:c9:f6:79:5d: 4e:ed:d0:50:37:b3:5e:8e:ab:8e:be:fe:3e:e5:bc:e0:2e:e7: 31:34:6d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjUwODA2MjAzNTA4WhcNMjUwODEzMjAzNTA4WjAYMRYwFAYD VQQDEw02ODkzYmM3Yy1iODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36/agVNeJjmUg1poi2yuTCRllCikjWUAVOYVwMHz5/OWBc8mkTmtILNt8lE6 +lBK9RuyVxXgqVJmtOwaInHFNPeJRJRLGaRJeRmpaY8n+bEBxAKyVXtyUDElR86m 1Z6CM0hiUeFuVLQBn8NAfAwhKFDCclUgr4YDS/dzpExGj39IiC0/Gy5PNf3/IOMl UsCds+PNYotnKCdTwOW1+jLrViVU23HhB6OyQlpTPoSr6LIYyTqcLvehM1nV7eQA MbsXK1WIuv445Gq1q+H0AmJ6cCx8shR4lol6SeIDWXCGsHi070qmHzAzzFlqQxQD WEA8ZnhLM00T7ikoqLvZQWeCeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjwHj3D UUqNluNKaxMswF99JQrhMB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIJYkB8PbZsxAO1JKvkUlpO/fdU5hChrTCg8/lMuqKsLK9OHomIkWi uqH+X/WNSki7sLVJqNdTMTcjbwbcEgXx7Soo0eaf2jt6GxHR7cMEaAqU9ReKJsx1 I5cNmUkXiTp/Tllp+kDWFyZ9OwgaH0jxiLNQhswNVhWCLgemDaTiGZ7uzxJKumLo xcWL1nflf9uTJi7Mz0AvrnjiEnxS0+TKGLlFA/LfXEZo8EATJAyamdYW77aa6ZI8 cy6L0xNlMqlSPalQrIaNwSnneeoNInEmaA/aB2lR1sJzXqL5Wp6rPuf7flArGcn2 eV1O7dBQN7NejquOvv4+5bzgLucxNG35 -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:15 2025 by rpki-client