$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft File: JSQuExmXg1v8mxgEBceXxiiUR-c.mft (raw, json) Hash identifier: IGPSRG9r00SrDNXqhE8pYL53HxenWHdZuwkWpcB42vk= Subject key identifier: F6:41:2F:B2:96:2B:C2:46:3B:F8:D4:F9:DB:6E:DD:0D:B9:49:B9:E6 Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft Manifest number: 0124 Signing time: Sun 03 Aug 2025 05:05:08 +0000 Manifest this update: Sun 03 Aug 2025 05:05:07 +0000 Manifest next update: Sun 10 Aug 2025 05:05:07 +0000 Files and hashes: 1: JSQuExmXg1v8mxgEBceXxiiUR-c.crl (hash: ra0AKlLlHLU1V4pkIt8Okr1PUolQUh8eaWDJUnpa9+E=) 2: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (hash: c6SlXvh5jnzbFaQ7XL8WHzhEyzH6pjJKr/W4VmAYxxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Aug 3 05:05:07 2025 GMT Not After : Aug 10 05:05:07 2025 GMT Subject: CN=688eee04-b0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:0a:68:d3:cd:4d:f0:59:72:aa:23:d6:38: 0a:46:9f:c7:b1:63:da:9b:33:51:60:26:7e:34:e5: 81:66:57:c5:85:9b:67:40:d5:37:0e:29:9d:53:e6: 8d:8a:db:f3:58:ef:eb:51:77:7b:86:c2:72:68:4d: 71:0c:cb:5a:9e:12:b2:dc:a1:6b:aa:a0:29:b0:81: 2d:d4:7d:70:5c:56:db:8f:d1:81:f5:64:20:0d:12: fe:bb:55:e7:51:d8:e7:b9:49:2f:8b:a1:cf:1f:f8: d1:56:39:d3:92:26:97:4d:67:6f:4a:fa:9f:55:c7: 4c:3c:39:20:66:5d:6d:10:f0:b4:66:3b:ce:4e:11: 3d:80:0a:d4:b6:97:da:d0:eb:37:30:92:e4:88:4f: 0d:f7:b5:c1:5b:ce:cf:cc:4e:80:7d:92:ff:f7:68: 6d:eb:ad:1f:74:a9:7b:11:d2:de:88:c3:b4:83:fd: ae:80:cf:fd:44:84:ec:39:7d:fd:1b:ee:d0:49:49: 07:e3:d8:33:90:2a:ca:7b:36:04:fb:66:78:af:36: 9c:e1:7a:df:2f:14:49:60:00:a8:a1:08:9a:db:06: 66:db:61:f5:6a:44:37:20:e1:01:d3:30:71:29:1b: 40:10:93:ce:9d:ed:33:85:15:00:1b:d6:70:a8:b2: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:41:2F:B2:96:2B:C2:46:3B:F8:D4:F9:DB:6E:DD:0D:B9:49:B9:E6 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b1:65:fa:6e:13:c1:47:09:39:61:7f:b6:18:da:47:e6:51: d7:6a:5c:38:15:04:4e:78:1d:4f:31:d9:6d:c0:e4:08:d6:34: ab:fc:fa:56:5f:f9:b1:17:9d:28:67:4a:1f:e6:a1:ac:cd:86: 3d:69:92:89:c4:9c:4b:02:04:f7:22:fa:05:80:72:1d:f2:d0: 7c:7c:75:b1:20:13:be:20:b2:aa:03:9f:cc:58:d0:c3:df:28: 3e:36:34:ca:10:2e:89:e8:15:a5:28:6f:d7:8e:36:21:e2:de: 5e:3f:12:be:d5:b3:cf:06:a2:d3:f6:42:c1:2d:5e:bf:5a:f6: a3:ee:f3:45:af:02:55:e3:9a:b2:66:1a:48:ec:66:cd:ba:a8: e9:41:39:09:55:96:b5:95:b9:af:02:8c:a2:fd:16:b2:89:28: 23:45:3a:e1:b1:71:c2:e4:93:2a:5c:32:4f:cf:3c:e9:d4:3b: dd:bc:33:fa:6c:26:90:04:08:cb:97:7c:65:01:4a:72:9d:c5: ee:4c:b6:53:75:21:d9:47:ed:48:35:c6:20:dd:68:bf:9d:bf: 65:00:b1:b5:06:fe:ec:8c:bb:28:34:4a:dc:c8:81:b8:f4:69: d0:e4:6f:8a:6d:2d:db:cb:1b:2a:ef:78:eb:ff:08:da:4d:06: 70:14:77:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjUwODAzMDUwNTA3WhcNMjUwODEwMDUwNTA3WjAYMRYwFAYD VQQDEw02ODhlZWUwNC1iMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0oKaNPNTfBZcqoj1jgKRp/HsWPamzNRYCZ+NOWBZlfFhZtnQNU3DimdU+aN itvzWO/rUXd7hsJyaE1xDMtanhKy3KFrqqApsIEt1H1wXFbbj9GB9WQgDRL+u1Xn UdjnuUkvi6HPH/jRVjnTkiaXTWdvSvqfVcdMPDkgZl1tEPC0ZjvOThE9gArUtpfa 0Os3MJLkiE8N97XBW87PzE6AfZL/92ht660fdKl7EdLeiMO0g/2ugM/9RITsOX39 G+7QSUkH49gzkCrKezYE+2Z4rzac4XrfLxRJYACooQia2wZm22H1akQ3IOEB0zBx KRtAEJPOne0zhRUAG9ZwqLKXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZBL7KW K8JGO/jU+dtu3Q25SbnmMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC80Q0JCMUIzMkI4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcx djhteGdFQmNlWHhpaVVSLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvsWX6bhPBRwk5YX+2GNpH5lHXalw4FQROeB1PMdltwOQI1jSr/PpW X/mxF50oZ0of5qGszYY9aZKJxJxLAgT3IvoFgHId8tB8fHWxIBO+ILKqA5/MWNDD 3yg+NjTKEC6J6BWlKG/XjjYh4t5ePxK+1bPPBqLT9kLBLV6/Wvaj7vNFrwJV45qy ZhpI7GbNuqjpQTkJVZa1lbmvAoyi/RayiSgjRTrhsXHC5JMqXDJPzzzp1DvdvDP6 bCaQBAjLl3xlAUpyncXuTLZTdSHZR+1INcYg3Wi/nb9lALG1Bv7sjLsoNErcyIG4 9GnQ5G+KbS3byxsq73jr/wjaTQZwFHe4 -----END CERTIFICATE-----Generated at Mon Aug 4 11:26:44 2025 by rpki-client