$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: rUPn0c5X/4v5PYEfqaplAMkX3DVBq21onZRVBhTiNEI= Subject key identifier: 5A:A0:79:B8:2B:2A:03:76:8B:DA:A0:A8:BE:E8:13:84:F3:88:29:20 Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A23 Signing time: Fri 08 Aug 2025 20:09:05 +0000 Manifest this update: Fri 08 Aug 2025 20:09:04 +0000 Manifest next update: Fri 15 Aug 2025 20:09:04 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: ILObqFdkgYdBtxw8AWZbESiHwsEqSUa57qbH7X1eHD4=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 6YSal0k37yOUJLUbfkiKR/DSeI3K/4jgwnlzNntMzvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2628 (0xa44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Aug 8 20:09:04 2025 GMT Not After : Aug 15 20:09:04 2025 GMT Subject: CN=68965960-c179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:2d:39:4d:2b:0a:ff:28:2b:6e:cb:60:25: ae:bf:7a:97:55:d5:d2:89:f5:da:f2:74:9f:3c:2a: 7c:69:5b:b3:00:47:af:8b:95:a7:6a:9b:a3:6b:94: a9:dc:2e:fb:92:1a:ca:29:d4:e2:9d:29:a5:c6:14: 05:af:f4:46:2f:c8:23:fc:06:f3:e3:54:8e:28:8c: 1f:11:94:f4:cc:c6:29:18:ab:d6:0d:99:a7:b0:e8: 2c:89:c0:91:2f:32:66:a5:21:d3:f7:f7:ec:b8:d3: 31:9a:c1:e8:1a:72:3f:10:7c:e8:0c:5b:49:cf:af: cb:4c:e7:53:64:08:75:b9:81:2b:be:29:74:97:c2: eb:d0:a2:f9:b9:f0:9d:58:ff:22:d1:18:81:cc:e6: 9e:b6:1e:7e:0e:35:ae:5d:1a:1c:86:1f:a2:49:8b: 87:8a:45:0d:f4:11:3b:bd:9f:f3:dc:f4:fd:76:ce: 86:3d:aa:12:b0:4c:43:85:8f:be:79:a8:02:e3:3a: a2:13:75:8f:50:27:c6:9f:4c:a9:87:e5:79:18:4a: 7c:0d:c1:d2:ff:22:f8:e3:c6:ab:21:2d:f0:f9:67: 22:34:c3:d8:0b:c9:e1:35:6d:58:f3:ec:1a:b5:e7: 50:65:58:c7:3b:6b:aa:9a:01:cc:ba:78:fb:be:d6: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:79:B8:2B:2A:03:76:8B:DA:A0:A8:BE:E8:13:84:F3:88:29:20 X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bc:a0:fd:64:78:d0:f0:a9:a9:8e:68:e0:ed:45:ca:e6:ed: 76:43:82:50:b0:65:51:45:1e:f9:a7:6d:16:05:66:5c:69:c4: 26:1b:fd:db:d7:d1:79:04:49:fa:ef:2a:04:11:77:76:5a:0c: a9:4c:e9:e0:be:f8:e1:fc:09:61:03:cc:00:76:6d:c0:6f:b6: c1:e2:bb:44:12:fa:e0:10:41:19:df:92:10:62:f9:05:0b:84: 19:16:6d:77:90:7b:8f:a9:98:66:bc:00:56:e9:76:f6:ca:d7: d8:7d:59:4f:6c:c0:4d:92:91:72:a5:17:e3:f7:f2:ec:67:c9: e4:f5:14:ef:84:14:3d:5e:e2:d4:ff:b9:93:6e:af:b9:50:cd: a7:f0:fb:0a:1f:77:5b:bc:b1:d2:25:3a:a7:d2:11:04:3d:ea: 60:8d:cc:16:d2:c2:72:1b:43:d9:86:b4:1d:85:7e:8b:88:8f: 89:53:fd:2f:a3:81:71:65:54:b3:e0:a9:5d:a0:f9:dd:58:33: e1:1a:a5:a4:26:a7:68:97:51:b2:35:2d:f2:c7:c2:75:d8:e6: 5f:9a:1d:d9:1a:15:ff:49:30:55:57:0f:75:ff:82:d8:91:03: 9b:4e:22:ca:8f:77:d5:c2:67:ff:21:b5:f6:be:7b:69:3a:70: 77:f5:ab:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwODA4MjAwOTA0WhcNMjUwODE1MjAwOTA0WjAYMRYwFAYD VQQDEw02ODk2NTk2MC1jMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjQtOU0rCv8oK27LYCWuv3qXVdXSifXa8nSfPCp8aVuzAEevi5Wnapuja5Sp 3C77khrKKdTinSmlxhQFr/RGL8gj/Abz41SOKIwfEZT0zMYpGKvWDZmnsOgsicCR LzJmpSHT9/fsuNMxmsHoGnI/EHzoDFtJz6/LTOdTZAh1uYErvil0l8Lr0KL5ufCd WP8i0RiBzOaeth5+DjWuXRochh+iSYuHikUN9BE7vZ/z3PT9ds6GPaoSsExDhY++ eagC4zqiE3WPUCfGn0yph+V5GEp8DcHS/yL448arIS3w+WciNMPYC8nhNW1Y8+wa tedQZVjHO2uqmgHMunj7vta4vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqgebgr KgN2i9qgqL7oE4TziCkgMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqvKD9ZHjQ8Kmpjmjg7UXK5u12Q4JQsGVRRR75p20WBWZcacQmG/3b 19F5BEn67yoEEXd2WgypTOngvvjh/AlhA8wAdm3Ab7bB4rtEEvrgEEEZ35IQYvkF C4QZFm13kHuPqZhmvABW6Xb2ytfYfVlPbMBNkpFypRfj9/LsZ8nk9RTvhBQ9XuLU /7mTbq+5UM2n8PsKH3dbvLHSJTqn0hEEPepgjcwW0sJyG0PZhrQdhX6LiI+JU/0v o4FxZVSz4KldoPndWDPhGqWkJqdol1GyNS3yx8J12OZfmh3ZGhX/STBVVw91/4LY kQObTiLKj3fVwmf/IbX2vntpOnB39auz -----END CERTIFICATE-----Generated at Sun Aug 10 21:12:59 2025 by rpki-client