$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json) Hash identifier: DCAUU2Ch3oN7ePdESVnt/JP/MDu9hlc0iiKDmyWC8rc= Subject key identifier: 52:E9:38:6E:10:AD:1E:D6:8F:74:27:64:0F:1D:6D:6F:C6:36:35:B2 Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 1063 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft Manifest number: 105C Signing time: Wed 18 Jun 2025 17:20:34 +0000 Manifest this update: Wed 18 Jun 2025 17:20:33 +0000 Manifest next update: Wed 25 Jun 2025 17:20:33 +0000 Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: Hi0ZVpwebpoYEa7oLFwBUKs8m8uC0wfrGu6/+qf3dRY=) 2: B70383D6385411E9A0023656C4F9AE02.roa (hash: /nFahrd1eN8YwTr3PzXHtKOv1+LamBJVN45AsjnPQ5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4195 (0x1063) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Jun 18 17:20:33 2025 GMT Not After : Jun 25 17:20:33 2025 GMT Subject: CN=6852f562-78c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:b4:72:a4:44:31:5a:76:5a:a6:a8:0b:b5: e3:5f:ea:90:56:dd:98:eb:45:38:98:f2:ba:5d:52: c4:27:92:bf:01:66:c9:68:64:18:c1:31:92:74:e5: 38:a1:c4:ca:b9:db:16:20:f1:b1:58:4d:1a:d7:7f: eb:28:96:36:1e:4c:34:e4:5e:13:41:f5:9c:ab:93: eb:2d:7d:41:10:ca:76:bb:b4:11:40:98:9f:90:ed: 0c:40:f1:67:da:e9:44:8d:86:68:47:43:5c:c9:44: e8:bc:d3:39:f3:11:81:1c:6d:ae:ec:7a:3b:f9:23: 63:01:cc:39:dd:92:d8:b7:5f:94:f6:1f:84:61:f5: 27:39:71:72:a4:70:59:c9:1a:0d:0e:5c:78:bf:8b: a9:57:d4:63:77:d3:84:e5:13:67:41:7e:17:97:27: 8e:2b:00:4c:de:3a:24:e6:79:6f:3b:44:f0:b0:e4: 2e:fd:0c:99:3a:65:a4:6d:f2:80:a5:da:9a:ac:1a: 51:cb:50:ff:73:f3:fb:26:95:69:db:59:2a:cc:c8: 7f:d0:e3:a4:51:25:dc:c8:19:8d:a7:45:86:9f:a6: e6:7f:16:88:3f:16:4e:9f:51:ae:bf:36:6b:26:59: 05:58:1d:6a:25:f7:fc:58:9a:a3:15:35:6e:07:21: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E9:38:6E:10:AD:1E:D6:8F:74:27:64:0F:1D:6D:6F:C6:36:35:B2 X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:67:57:bf:97:36:58:5b:b6:2c:4e:4d:99:8c:ce:ce:59:41: b8:82:34:f2:9a:41:ad:cf:56:9b:01:61:b5:f5:c3:ce:79:cf: 2b:dc:2b:ab:d8:a5:54:36:4c:cd:0f:a6:0a:ff:44:1b:f0:88: 77:32:6e:0d:9e:53:75:07:10:e2:dd:0e:d8:39:a3:3c:f8:4b: 7b:75:c2:71:5f:10:b5:08:e2:37:55:a1:88:36:9d:3d:0d:dc: a4:d8:2d:a8:93:f2:55:59:e9:82:24:11:ab:0d:c9:e5:bb:22: ac:fb:f1:60:df:27:04:af:b3:47:a9:6a:97:1f:a2:18:8b:6e: e1:bf:80:5e:c8:d8:31:49:c5:1c:a1:60:1c:2b:62:a4:31:ec: 0f:f5:bf:da:ea:09:51:64:e1:cd:dd:17:31:ea:ce:14:07:e3: 9a:2d:1d:de:d0:92:78:e0:9b:5d:7c:86:9b:f8:79:23:b0:f7: 3e:0d:e0:5c:1e:50:fb:2f:f0:5a:96:e2:77:29:5e:95:3e:66: 47:4d:4a:df:56:5e:ca:22:0c:ec:fd:29:cd:86:d3:0e:42:6a: 7a:f9:25:ad:0b:82:66:ad:8f:96:17:08:78:da:6f:f0:fb:5e: ea:22:71:84:8b:7c:8f:86:93:59:e6:d1:7c:46:7e:12:d5:77: 77:52:3f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwNjE4MTcyMDMzWhcNMjUwNjI1MTcyMDMzWjAYMRYwFAYD VQQDEw02ODUyZjU2Mi03OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm20cqREMVp2WqaoC7XjX+qQVt2Y60U4mPK6XVLEJ5K/AWbJaGQYwTGSdOU4 ocTKudsWIPGxWE0a13/rKJY2Hkw05F4TQfWcq5PrLX1BEMp2u7QRQJifkO0MQPFn 2ulEjYZoR0NcyUTovNM58xGBHG2u7Ho7+SNjAcw53ZLYt1+U9h+EYfUnOXFypHBZ yRoNDlx4v4upV9Rjd9OE5RNnQX4XlyeOKwBM3jok5nlvO0TwsOQu/QyZOmWkbfKA pdqarBpRy1D/c/P7JpVp21kqzMh/0OOkUSXcyBmNp0WGn6bmfxaIPxZOn1GuvzZr JlkFWB1qJff8WJqjFTVuByFC/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLpOG4Q rR7Wj3QnZA8dbW/GNjWyMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUI5RS85OEI1N0Q4NjM4NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFy VktTU2Fjd3ZTeHJDdHVoVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADZ1e/lzZYW7YsTk2ZjM7OWUG4gjTymkGtz1abAWG19cPOec8r3Cur 2KVUNkzND6YK/0Qb8Ih3Mm4NnlN1BxDi3Q7YOaM8+Et7dcJxXxC1COI3VaGINp09 Ddyk2C2ok/JVWemCJBGrDcnluyKs+/Fg3ycEr7NHqWqXH6IYi27hv4BeyNgxScUc oWAcK2KkMewP9b/a6glRZOHN3Rcx6s4UB+OaLR3e0JJ44JtdfIab+HkjsPc+DeBc HlD7L/BaluJ3KV6VPmZHTUrfVl7KIgzs/SnNhtMOQmp6+SWtC4JmrY+WFwh42m/w +17qInGEi3yPhpNZ5tF8Rn4S1Xd3Uj8Y -----END CERTIFICATE-----Generated at Fri Jun 20 05:04:19 2025 by rpki-client