$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: PzuGpaRzqOhI4bwCy+06MA1HcELBRyRP3QiFrloGr7k= Subject key identifier: B6:BE:38:6B:72:69:22:6F:BD:F2:26:59:1D:7F:E3:07:0C:D8:42:BF Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A09 Signing time: Wed 18 Jun 2025 19:44:58 +0000 Manifest this update: Wed 18 Jun 2025 19:44:58 +0000 Manifest next update: Wed 25 Jun 2025 19:44:58 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: 4tCv7npeuSB+tPwJMas3/37fmAbPbDOb2a+FRfPJzUA=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 6YSal0k37yOUJLUbfkiKR/DSeI3K/4jgwnlzNntMzvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Jun 18 19:44:58 2025 GMT Not After : Jun 25 19:44:58 2025 GMT Subject: CN=6853173a-0eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:08:17:d8:96:56:98:c7:ea:c6:eb:c4:2c: 80:23:14:47:b4:09:80:fb:fa:ac:83:a2:6f:a0:1a: 77:2c:42:87:2e:71:cf:9e:c0:e2:cd:42:c0:b6:72: c4:02:bf:5f:46:1e:eb:10:4d:11:17:af:3e:e7:8e: 16:1d:34:f8:96:5a:8b:da:ec:66:ed:5b:95:fe:c3: 69:fe:3b:9a:66:43:e5:33:0f:fb:67:c6:49:13:9c: ed:e5:9d:aa:b8:04:be:7d:03:c8:09:a7:1e:50:c7: 3b:6e:8e:4e:dd:a1:cc:0c:12:3c:81:2c:d9:43:ab: 27:e8:d7:36:e6:05:8b:c5:6c:63:f3:36:1e:64:ed: 43:28:17:d1:e7:46:b4:a1:7c:d2:73:a9:2a:57:d7: f2:ff:4e:bc:b5:2e:0a:cd:9d:82:7f:d7:ac:d4:d3: 91:7d:65:d9:e0:6a:0d:1c:77:f9:a7:03:23:29:04: 4c:aa:0c:ce:b6:4c:da:41:9f:7b:fc:f0:1d:be:3b: 44:ab:b3:8b:08:71:23:c0:a3:25:ef:67:f6:9d:9f: e2:e3:3e:20:4c:86:f9:82:79:c4:75:91:b1:92:b0: 21:03:31:41:30:d4:e7:ea:bf:7b:d0:f0:77:8c:4e: c5:1e:44:f3:02:a1:1f:bc:1c:e0:96:d4:3d:2b:88: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:38:6B:72:69:22:6F:BD:F2:26:59:1D:7F:E3:07:0C:D8:42:BF X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:59:a2:a6:c4:bc:f8:60:82:83:14:99:3f:a4:12:e7:bd:7a: 92:62:75:18:05:c2:2e:9f:85:67:7f:df:a9:89:ee:c2:2d:de: 20:d3:9d:dc:0b:95:86:42:00:c1:0b:60:25:b1:e0:43:49:f0: eb:92:e3:11:7a:b1:87:10:3d:0d:c7:40:43:4c:c5:bd:59:da: ad:b2:4f:41:84:2e:ba:b0:b9:46:8f:2d:74:5d:98:a4:38:66: 58:7f:9a:8a:c1:fd:67:a7:e8:59:b1:16:4c:02:15:1d:97:44: 75:9e:e0:1d:72:db:68:d7:ac:d4:dd:99:42:89:35:53:6e:0e: 57:c2:3c:d5:8b:34:2a:f5:79:ee:a7:dc:77:22:24:74:a3:ea: 11:f4:c2:47:ca:01:d0:53:13:6c:c0:52:cb:a8:54:30:08:ef: 6a:27:7f:6b:6e:f6:f5:29:c9:8f:51:af:a7:5c:80:ee:73:dc: fe:f1:b1:c3:a1:e7:62:3e:86:43:6b:92:2a:c5:98:c9:d6:ba: c3:e9:7f:77:00:22:e7:d3:fc:46:7a:88:ac:f6:69:39:52:cc: d1:29:aa:26:54:8c:af:ee:dd:21:b1:81:9b:db:e8:79:0b:89: 63:99:ac:c8:dd:5a:9d:5f:5d:46:3f:88:aa:9a:ca:52:c6:fc: e1:7f:ca:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwNjE4MTk0NDU4WhcNMjUwNjI1MTk0NDU4WjAYMRYwFAYD VQQDEw02ODUzMTczYS0wZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVMIF9iWVpjH6sbrxCyAIxRHtAmA+/qsg6JvoBp3LEKHLnHPnsDizULAtnLE Ar9fRh7rEE0RF68+544WHTT4llqL2uxm7VuV/sNp/juaZkPlMw/7Z8ZJE5zt5Z2q uAS+fQPICaceUMc7bo5O3aHMDBI8gSzZQ6sn6Nc25gWLxWxj8zYeZO1DKBfR50a0 oXzSc6kqV9fy/068tS4KzZ2Cf9es1NORfWXZ4GoNHHf5pwMjKQRMqgzOtkzaQZ97 /PAdvjtEq7OLCHEjwKMl72f2nZ/i4z4gTIb5gnnEdZGxkrAhAzFBMNTn6r970PB3 jE7FHkTzAqEfvBzgltQ9K4jhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa+OGty aSJvvfImWR1/4wcM2EK/MB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALWaKmxLz4YIKDFJk/pBLnvXqSYnUYBcIun4Vnf9+pie7CLd4g053c C5WGQgDBC2AlseBDSfDrkuMRerGHED0Nx0BDTMW9Wdqtsk9BhC66sLlGjy10XZik OGZYf5qKwf1np+hZsRZMAhUdl0R1nuAdctto16zU3ZlCiTVTbg5XwjzVizQq9Xnu p9x3IiR0o+oR9MJHygHQUxNswFLLqFQwCO9qJ39rbvb1KcmPUa+nXIDuc9z+8bHD oediPoZDa5IqxZjJ1rrD6X93ACLn0/xGeois9mk5UszRKaomVIyv7t0hsYGb2+h5 C4ljmazI3VqdX11GP4iqmspSxvzhf8qL -----END CERTIFICATE-----Generated at Fri Jun 20 14:47:13 2025 by rpki-client