$ rpki-client -vvf rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft File: 22JQZX_rwWTrghx2UqvjqF-prNQ.mft (raw, json) Hash identifier: NNI9g0PH0uVDOyLuHp0pQFs5yV0is+f1HbdJ1tG/2MU= Subject key identifier: AD:1A:1C:C7:54:94:6A:AD:D8:41:B0:FF:DE:47:5A:F3:0C:1D:56:F0 Authority key identifier: DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 Certificate issuer: /CN=A91197BC/serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft Manifest number: 0926 Signing time: Mon 16 Jun 2025 20:09:58 +0000 Manifest this update: Mon 16 Jun 2025 20:09:57 +0000 Manifest next update: Mon 23 Jun 2025 20:09:57 +0000 Files and hashes: 1: 22JQZX_rwWTrghx2UqvjqF-prNQ.crl (hash: cRd9Gg0mVmr6W/I1Ah0UhxWG5hNdU3ZS2v7SdCXP/yA=) 2: 51408896A3E211EF8DAB713BC4F9AE02.roa (hash: Hia1kxQCYg8oyQHwZwIXTMQyGra4hQiDpSVRmvXE9k8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91197BC, serialNumber=DB6250657FEBC164EB821C7652ABE3A85FA9ACD4 Validity Not Before: Jun 16 20:09:57 2025 GMT Not After : Jun 23 20:09:57 2025 GMT Subject: CN=68507a16-29a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:db:6e:f0:a1:61:d4:55:76:c4:79:ca:de: 0b:9e:63:3a:c1:83:13:01:4e:cc:f6:40:af:1f:f2: 5f:4a:e3:2b:7b:b7:00:46:c9:ef:c2:dc:1a:50:2d: bc:5d:bd:b8:b4:f6:11:84:fb:39:73:9f:d1:88:08: 4a:2f:91:4e:e2:51:b5:ee:f2:d3:93:56:7f:15:6e: 80:ea:ec:52:61:ba:4d:ef:00:b8:5d:f2:bb:b8:e6: b7:8b:ca:bf:54:bc:4a:4f:e6:74:a2:9e:14:b0:dc: 10:7e:f4:ec:6b:44:c4:96:5a:cd:d3:74:8d:82:1b: 4e:7b:c5:e6:c3:8b:8c:1b:19:f4:dc:77:5d:e9:2b: 5d:60:df:b7:58:06:d7:f6:ab:b1:8b:64:c9:06:21: 75:8c:30:2a:f3:b1:1e:07:0e:27:a0:f8:06:02:b8: 9e:d2:62:74:7c:de:58:f3:0e:4d:54:27:c4:12:3a: d6:45:4b:39:5c:b7:89:e7:df:8b:02:4a:11:56:95: a1:66:93:2d:f4:bf:cc:29:23:c8:fd:1e:00:48:3e: 01:b3:c2:df:c9:12:59:0e:34:91:91:31:d2:64:d5: da:c7:33:18:e7:53:c6:f5:76:8e:c3:07:dc:3e:76: c7:a0:cb:20:d1:7b:9f:6b:09:88:0c:08:9c:4f:9b: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1A:1C:C7:54:94:6A:AD:D8:41:B0:FF:DE:47:5A:F3:0C:1D:56:F0 X509v3 Authority Key Identifier: keyid:DB:62:50:65:7F:EB:C1:64:EB:82:1C:76:52:AB:E3:A8:5F:A9:AC:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/22JQZX_rwWTrghx2UqvjqF-prNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91197BC/A8CAFBC2AA2811EA81B19681C4F9AE02/22JQZX_rwWTrghx2UqvjqF-prNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:51:7d:3f:72:8a:20:00:08:a1:41:bb:e6:6f:89:b5:ce:3b: 78:c3:c1:46:38:9e:98:bb:55:da:2a:23:6d:67:17:62:29:d8: aa:53:57:23:09:47:06:a9:d3:7b:4a:55:1b:4b:84:33:f7:3f: e2:8f:c0:45:1a:ef:23:96:7f:3f:70:54:19:1e:b9:aa:6d:16: bf:b8:e6:4b:6f:32:e8:99:00:03:5d:e5:ae:60:06:e2:3c:7e: 4f:f8:7f:8a:93:05:10:80:8c:52:77:49:42:4c:2b:4f:72:1e: f9:6f:8a:4e:eb:e1:74:d9:34:74:96:6a:c3:c7:9c:88:48:6f: 7a:92:b9:c1:16:40:1a:f2:20:81:13:b6:a1:9d:c9:4e:0e:88: 12:d9:08:34:b6:54:03:7b:3d:3a:e9:7b:20:ac:d9:41:bf:08: 60:ed:50:de:e7:50:ff:d7:ba:92:c0:02:15:79:da:b0:36:3e: de:73:ec:2b:cd:05:a6:a1:b5:da:b8:66:62:8d:e6:c6:59:07: 56:47:32:2a:f1:67:8b:11:61:9f:47:8b:b0:a4:c3:a7:ff:ef: 8a:52:0f:0e:4a:a3:6d:1f:e3:aa:1b:fa:47:c4:8b:9e:95:b8: ab:d4:2d:52:f9:e4:d5:d9:d8:12:bc:91:3e:cb:2e:09:43:8f: 6f:fc:54:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3QkMxMTAvBgNVBAUTKERCNjI1MDY1N0ZFQkMxNjRFQjgyMUM3NjUyQUJFM0E4 NUZBOUFDRDQwHhcNMjUwNjE2MjAwOTU3WhcNMjUwNjIzMjAwOTU3WjAYMRYwFAYD VQQDEw02ODUwN2ExNi0yOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DHbbvChYdRVdsR5yt4LnmM6wYMTAU7M9kCvH/JfSuMre7cARsnvwtwaUC28 Xb24tPYRhPs5c5/RiAhKL5FO4lG17vLTk1Z/FW6A6uxSYbpN7wC4XfK7uOa3i8q/ VLxKT+Z0op4UsNwQfvTsa0TEllrN03SNghtOe8Xmw4uMGxn03Hdd6StdYN+3WAbX 9quxi2TJBiF1jDAq87EeBw4noPgGArie0mJ0fN5Y8w5NVCfEEjrWRUs5XLeJ59+L AkoRVpWhZpMt9L/MKSPI/R4ASD4Bs8LfyRJZDjSRkTHSZNXaxzMY51PG9XaOwwfc PnbHoMsg0XufawmIDAicT5uK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0aHMdU lGqt2EGw/95HWvMMHVbwMB8GA1UdIwQYMBaAFNtiUGV/68Fk64IcdlKr46hfqazU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTdCQy9BOENBRkJDMkFB MjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndXVHJnaHgyVXF2anFGLXBy TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIySlFaWF9yd1dUcmdoeDJVcXZqcUYtcHJOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTdCQy9BOENBRkJDMkFBMjgxMUVBODFCMTk2ODFDNEY5QUUwMi8yMkpRWlhfcndX VHJnaHgyVXF2anFGLXByTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApUX0/coogAAihQbvmb4m1zjt4w8FGOJ6Yu1XaKiNtZxdiKdiqU1cj CUcGqdN7SlUbS4Qz9z/ij8BFGu8jln8/cFQZHrmqbRa/uOZLbzLomQADXeWuYAbi PH5P+H+KkwUQgIxSd0lCTCtPch75b4pO6+F02TR0lmrDx5yISG96krnBFkAa8iCB E7ahnclODogS2Qg0tlQDez066XsgrNlBvwhg7VDe51D/17qSwAIVedqwNj7ec+wr zQWmobXauGZijebGWQdWRzIq8WeLEWGfR4uwpMOn/++KUg8OSqNtH+OqG/pHxIue lbir1C1S+eTV2dgSvJE+yy4JQ49v/FSr -----END CERTIFICATE-----Generated at Wed Jun 18 11:31:56 2025 by rpki-client