$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: XjhMfas+hxl2ViYhp675/8c/itF8kD4bShZ89gU/ORk= Subject key identifier: F0:EB:5F:C8:2C:7B:F3:F6:00:71:51:6E:08:FA:5B:4D:0F:22:78:64 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 1048 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 1041 Signing time: Thu 24 Apr 2025 17:23:46 +0000 Manifest this update: Thu 24 Apr 2025 17:23:46 +0000 Manifest next update: Thu 01 May 2025 17:23:46 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: dKxxJrxqHwidcTSqjUZ4yGj511opqiju1jv4pgspd7s=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: /nFahrd1eN8YwTr3PzXHtKOv1+LamBJVN45AsjnPQ5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4168 (0x1048) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Apr 24 17:23:46 2025 GMT Not After : May 1 17:23:46 2025 GMT Subject: CN=680a73a2-5578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:63:92:34:c7:f9:8f:ba:52:d6:1f:27:9c: 2d:45:be:9a:58:37:92:18:f0:29:d4:ca:44:f1:ff: ac:0f:a9:d0:6f:1c:3f:eb:0b:6f:3a:50:0f:58:c9: e8:a6:45:2e:5c:ad:82:d0:b9:6b:2e:bd:55:50:9d: cb:8b:c3:e3:47:69:10:cd:21:29:8c:db:ee:01:32: 6a:af:34:4d:a5:cb:d1:e5:a9:39:84:c4:97:a6:d4: 60:00:7f:da:d4:00:ae:14:88:36:2b:34:34:06:e8: 8c:43:b1:be:4f:51:d6:f2:7c:80:b0:77:e4:d7:6b: 82:70:54:22:5e:36:5e:c4:2f:fe:7c:02:57:8b:7a: 59:b9:93:da:2a:94:e8:b4:72:70:82:77:14:67:c5: ab:a7:b3:84:ec:89:a9:b9:06:c5:cc:0d:ef:0f:9b: d4:da:e1:65:fb:85:eb:0c:66:e7:3f:4a:19:3f:cf: 8a:77:c2:f0:2a:9f:87:b8:95:97:03:31:2d:08:56: 00:77:be:2d:7a:64:c1:09:e5:44:88:ac:cb:04:00: 95:5d:f9:05:c9:6f:9f:09:44:3f:e8:5a:3c:d4:b2: 05:72:9a:f2:69:22:e9:58:df:c3:0e:ab:12:43:3e: 57:36:9d:ad:03:42:c0:5f:ce:56:01:7e:ff:5c:4b: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EB:5F:C8:2C:7B:F3:F6:00:71:51:6E:08:FA:5B:4D:0F:22:78:64 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:43:6e:57:b7:c7:73:52:3a:6f:6e:02:86:51:47:71:5a:7d: e1:bd:ba:6b:3e:da:2c:a8:2d:b7:d0:d9:f2:00:6a:3b:7f:fd: 99:0b:a2:06:bd:68:95:da:ed:bf:0d:ba:61:5b:b9:e4:72:cd: 98:f6:00:a6:bd:ff:9b:e5:3e:1b:4b:96:db:ad:90:21:83:29: e8:2c:f5:0f:64:7f:71:1d:98:d0:3a:e5:74:01:cc:28:db:22: 38:f9:80:e9:50:da:cf:cb:8b:7f:1c:0e:58:58:8a:bd:31:6b: b3:47:7c:ec:38:ba:2b:da:af:b8:30:33:05:66:78:5c:c5:98: 23:32:c1:28:5e:6a:c3:f0:8c:24:a3:bc:e3:ec:69:59:ee:33: 99:26:0a:88:cd:c0:7d:cc:aa:46:b8:6e:7d:a4:66:01:e1:5b: 7a:9a:f1:2f:28:14:b5:65:ec:22:05:31:38:71:4b:77:a6:59: e9:b1:b0:27:02:a8:d3:39:92:85:91:b7:4e:38:35:d2:a2:5f: 88:56:47:49:a1:6b:2f:0f:b7:4e:56:5a:31:cf:2f:a4:a0:20: 5c:48:09:97:18:05:19:c3:99:88:d1:6d:fe:1c:4c:eb:08:c9: d3:5e:5d:f2:28:ae:3f:52:a9:61:09:bd:0e:57:c6:c6:b1:f9: 45:9c:fc:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwNDI0MTcyMzQ2WhcNMjUwNTAxMTcyMzQ2WjAYMRYwFAYD VQQDEw02ODBhNzNhMi01NTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PdjkjTH+Y+6UtYfJ5wtRb6aWDeSGPAp1MpE8f+sD6nQbxw/6wtvOlAPWMno pkUuXK2C0LlrLr1VUJ3Li8PjR2kQzSEpjNvuATJqrzRNpcvR5ak5hMSXptRgAH/a 1ACuFIg2KzQ0BuiMQ7G+T1HW8nyAsHfk12uCcFQiXjZexC/+fAJXi3pZuZPaKpTo tHJwgncUZ8Wrp7OE7ImpuQbFzA3vD5vU2uFl+4XrDGbnP0oZP8+Kd8LwKp+HuJWX AzEtCFYAd74temTBCeVEiKzLBACVXfkFyW+fCUQ/6Fo81LIFcpryaSLpWN/DDqsS Qz5XNp2tA0LAX85WAX7/XEuXxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDrX8gs e/P2AHFRbgj6W00PInhkMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Q25Xt8dzUjpvbgKGUUdxWn3hvbprPtosqC230NnyAGo7f/2ZC6IG vWiV2u2/DbphW7nkcs2Y9gCmvf+b5T4bS5bbrZAhgynoLPUPZH9xHZjQOuV0Acwo 2yI4+YDpUNrPy4t/HA5YWIq9MWuzR3zsOLor2q+4MDMFZnhcxZgjMsEoXmrD8Iwk o7zj7GlZ7jOZJgqIzcB9zKpGuG59pGYB4Vt6mvEvKBS1ZewiBTE4cUt3plnpsbAn AqjTOZKFkbdOODXSol+IVkdJoWsvD7dOVloxzy+koCBcSAmXGAUZw5mI0W3+HEzr CMnTXl3yKK4/UqlhCb0OV8bGsflFnPxe -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:36 2025 by rpki-client