$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: rq1Qt79yqBQx+XlMsQ/E/U9qI1byGDhy095w7Pse4es= Subject key identifier: 57:D1:B2:44:53:66:19:2C:23:C0:C5:C0:DC:55:63:34:E0:3D:D0:26 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0ABE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0ABC Signing time: Fri 20 Jun 2025 16:42:27 +0000 Manifest this update: Fri 20 Jun 2025 16:42:27 +0000 Manifest next update: Fri 27 Jun 2025 16:42:27 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: qjK7sdpxSBsGszpFScVniceaXeQ929q0TG/AWqepjtM=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: X6qLGESMHlCjgInNJuuQgeTL462kIXu1+dGUahA9Gs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2750 (0xabe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Jun 20 16:42:27 2025 GMT Not After : Jun 27 16:42:27 2025 GMT Subject: CN=68558f73-cb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:b9:39:1d:18:80:97:f8:65:7d:2c:ee:38: 0c:25:20:2f:58:71:e2:59:22:af:8c:45:4f:6c:19: 3a:c7:f6:14:e2:eb:ce:57:f1:2e:01:ff:c4:2a:30: 90:27:30:4f:f4:af:e1:d9:c2:07:ed:68:18:53:26: 7e:7d:ee:6c:34:63:09:eb:b0:95:46:89:1f:71:b1: c9:ff:7c:7b:6b:ed:9e:68:37:0b:f7:ce:58:ee:85: 93:f5:40:f7:7c:f6:38:3a:e3:4f:03:fe:82:1e:27: e1:e7:49:20:ff:17:73:d1:2a:d8:7a:9e:8d:85:fc: d1:f8:2c:37:ba:ea:2c:fb:c5:f5:0d:f8:4a:df:c6: 2a:6e:8e:4e:55:7e:6b:b4:a3:91:02:0c:c7:2e:06: be:6f:33:0a:fd:05:e9:56:07:1e:b0:85:c5:4a:b6: 40:48:fd:6d:2a:30:bb:c4:b4:3f:c8:e6:f6:c1:b1: 1b:15:69:fe:a9:18:2b:38:a4:51:fb:f2:6f:a5:c1: 44:5f:08:99:90:e3:7a:b8:6b:b9:f7:75:14:67:f7: 55:76:bf:49:6a:30:23:a7:ca:a3:66:59:64:9f:68: b8:db:e4:43:58:c3:b6:31:7b:d2:f7:0a:d1:f5:70: 4e:f2:b6:5a:a2:ea:81:89:12:3c:71:4b:c6:34:01: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D1:B2:44:53:66:19:2C:23:C0:C5:C0:DC:55:63:34:E0:3D:D0:26 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5f:a4:58:08:7b:77:68:44:85:24:6a:ac:f4:90:85:f0:7e: 0e:23:7b:2b:1b:f3:2e:71:50:a6:8b:24:ac:fe:79:74:22:1d: a6:8c:7a:08:04:61:48:80:f5:c2:eb:13:58:22:d4:77:5e:5f: 42:96:b4:c0:a5:e4:b0:b9:e5:7b:a6:e1:2c:af:33:dc:ef:96: 13:fb:00:75:25:30:17:3a:75:50:60:fb:cd:87:e7:e2:50:ca: 32:55:d4:1e:1b:ec:ca:90:8f:38:81:e6:43:31:cd:3b:f0:f6: 74:4d:81:e4:d0:be:41:17:62:cc:b3:d2:1c:b4:7a:ff:a7:4e: b9:38:09:02:c0:a4:63:52:50:43:66:e3:8d:04:4d:7e:ca:df: ca:a5:d6:91:64:0f:06:4d:e3:70:0a:22:1d:82:80:70:da:ef: 79:95:92:65:f0:c0:8c:de:69:b1:38:ad:4b:fa:bb:7f:ed:62: dc:47:8c:1e:b6:6a:71:cb:cf:bb:60:fb:69:12:8b:4f:d2:28: ee:59:e9:fd:34:94:33:a2:7e:13:94:fc:1e:12:a6:75:d3:6d: 2a:b4:7f:38:df:ff:60:34:d0:f4:63:80:90:c5:84:be:81:58: 72:a1:d7:5c:bf:82:8c:5e:69:51:3a:f5:56:20:b6:1a:c9:ac: ff:cb:a4:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUwNjIwMTY0MjI3WhcNMjUwNjI3MTY0MjI3WjAYMRYwFAYD VQQDEw02ODU1OGY3My1jYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMi5OR0YgJf4ZX0s7jgMJSAvWHHiWSKvjEVPbBk6x/YU4uvOV/EuAf/EKjCQ JzBP9K/h2cIH7WgYUyZ+fe5sNGMJ67CVRokfcbHJ/3x7a+2eaDcL985Y7oWT9UD3 fPY4OuNPA/6CHifh50kg/xdz0SrYep6NhfzR+Cw3uuos+8X1DfhK38Yqbo5OVX5r tKORAgzHLga+bzMK/QXpVgcesIXFSrZASP1tKjC7xLQ/yOb2wbEbFWn+qRgrOKRR +/JvpcFEXwiZkON6uGu593UUZ/dVdr9JajAjp8qjZllkn2i42+RDWMO2MXvS9wrR 9XBO8rZaouqBiRI8cUvGNAEAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfRskRT ZhksI8DFwNxVYzTgPdAmMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaX6RYCHt3aESFJGqs9JCF8H4OI3srG/MucVCmiySs/nl0Ih2mjHoI BGFIgPXC6xNYItR3Xl9ClrTApeSwueV7puEsrzPc75YT+wB1JTAXOnVQYPvNh+fi UMoyVdQeG+zKkI84geZDMc078PZ0TYHk0L5BF2LMs9IctHr/p065OAkCwKRjUlBD ZuONBE1+yt/KpdaRZA8GTeNwCiIdgoBw2u95lZJl8MCM3mmxOK1L+rt/7WLcR4we tmpxy8+7YPtpEotP0ijuWen9NJQzon4TlPweEqZ1020qtH843/9gNND0Y4CQxYS+ gVhyoddcv4KMXmlROvVWILYayaz/y6R3 -----END CERTIFICATE-----Generated at Sat Jun 21 02:51:28 2025 by rpki-client