$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: RAHztBr9cmCxZOqbQH//JPYFVpF8IDrHtD0+B1Uoefw= Subject key identifier: 6D:5F:A0:99:E5:A2:DF:84:F8:88:F8:6E:9D:C2:9D:69:72:74:A5:31 Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0AD6 Signing time: Sun 10 Aug 2025 16:39:30 +0000 Manifest this update: Sun 10 Aug 2025 16:39:29 +0000 Manifest next update: Sun 17 Aug 2025 16:39:29 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: wCEUeU5CTWLb4Nc6MKszIDi7Tt9M9G1N/wHiSod7HV0=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: X6qLGESMHlCjgInNJuuQgeTL462kIXu1+dGUahA9Gs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Aug 10 16:39:29 2025 GMT Not After : Aug 17 16:39:29 2025 GMT Subject: CN=6898cb42-6939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:45:17:3b:18:c8:61:ee:b8:33:65:41:79: 0a:fc:83:8e:20:2d:5e:b2:c3:16:5d:d5:61:ad:9c: f2:ea:01:d9:b6:c0:b9:2e:94:75:3a:82:5c:01:76: 15:bd:e4:bb:fc:93:1e:e9:65:8d:4b:77:bc:96:f1: 3b:7f:30:16:9b:fa:e9:23:eb:94:d4:c1:7d:23:e7: ff:ac:a7:b6:fa:a8:7d:a6:18:60:05:54:1a:c9:66: 38:6e:b5:fd:da:bc:3a:53:26:9c:bc:83:ee:67:0a: 7f:2b:95:6e:cb:a3:dc:0e:45:5a:fb:01:1c:8c:45: 84:fc:a0:9f:27:0c:95:05:b6:c5:84:e0:3e:bf:50: 2e:73:35:47:b8:f9:af:4e:00:90:f9:32:a1:b9:61: 56:8d:62:3b:6f:80:be:ad:7e:b0:78:5f:5f:aa:09: e7:ff:b3:52:59:da:6a:05:79:ee:9b:0d:69:7c:95: 2d:ad:d6:9b:b1:b7:c8:e2:42:09:7e:07:76:87:96: 3b:38:c5:55:54:d1:7d:bd:b3:25:7e:1e:da:2c:c2: db:3e:1e:e7:93:2f:c2:c7:d2:1b:30:df:37:a9:6e: 30:5e:8a:ed:9b:e2:fb:26:b4:17:c6:36:90:d9:7a: e7:ba:2d:0c:5d:22:68:27:a6:88:a8:e6:82:3b:73: 41:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5F:A0:99:E5:A2:DF:84:F8:88:F8:6E:9D:C2:9D:69:72:74:A5:31 X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:04:54:2a:5e:1f:b7:68:bb:0e:4f:b5:9c:eb:26:03:87:9d: 52:65:58:d1:c2:02:5a:4f:10:69:ff:65:73:ed:61:ee:98:57: 2a:2c:23:db:d5:d0:66:7b:76:01:af:7f:f4:11:cb:34:a6:98: 9d:bc:64:46:48:4a:22:aa:cc:b5:c6:13:95:d7:ac:c1:f8:8c: 66:ba:ff:d7:aa:75:5d:0c:f2:a3:03:98:d9:22:23:74:54:34: 25:17:fd:c3:ad:22:a3:15:7d:d0:2d:39:47:13:06:d1:11:87: 16:10:fd:4c:f0:72:2e:7f:07:84:ce:0d:a2:4f:be:64:a9:00: e7:4e:bc:dc:cf:20:d3:c8:64:58:ed:3d:42:28:32:7e:ea:c2: 15:96:b0:f5:2f:df:c2:aa:ea:c1:0e:59:16:ea:98:13:aa:12: e3:d9:89:e0:8d:b6:b0:c9:7f:77:f8:a9:bf:79:2a:0b:99:72: a3:c0:48:d3:dd:16:71:73:02:ff:5d:68:3a:46:ac:48:f0:50: 30:87:40:60:a0:8f:bf:27:89:1d:09:d1:39:46:c5:00:6f:07: 5e:1f:e6:7e:7e:d3:95:91:e6:55:05:d6:ac:be:92:4e:e7:77: b4:6f:11:59:9b:8c:90:bf:86:40:62:ec:66:27:22:8e:33:49: 6d:b5:cb:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUwODEwMTYzOTI5WhcNMjUwODE3MTYzOTI5WjAYMRYwFAYD VQQDEw02ODk4Y2I0Mi02OTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wtFFzsYyGHuuDNlQXkK/IOOIC1essMWXdVhrZzy6gHZtsC5LpR1OoJcAXYV veS7/JMe6WWNS3e8lvE7fzAWm/rpI+uU1MF9I+f/rKe2+qh9phhgBVQayWY4brX9 2rw6UyacvIPuZwp/K5Vuy6PcDkVa+wEcjEWE/KCfJwyVBbbFhOA+v1AuczVHuPmv TgCQ+TKhuWFWjWI7b4C+rX6weF9fqgnn/7NSWdpqBXnumw1pfJUtrdabsbfI4kIJ fgd2h5Y7OMVVVNF9vbMlfh7aLMLbPh7nky/Cx9IbMN83qW4wXortm+L7JrQXxjaQ 2Xrnui0MXSJoJ6aIqOaCO3NBdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1foJnl ot+E+Ij4bp3CnWlydKUxMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVBFQqXh+3aLsOT7Wc6yYDh51SZVjRwgJaTxBp/2Vz7WHumFcqLCPb 1dBme3YBr3/0Ecs0ppidvGRGSEoiqsy1xhOV16zB+Ixmuv/XqnVdDPKjA5jZIiN0 VDQlF/3DrSKjFX3QLTlHEwbREYcWEP1M8HIufweEzg2iT75kqQDnTrzczyDTyGRY 7T1CKDJ+6sIVlrD1L9/CqurBDlkW6pgTqhLj2YngjbawyX93+Km/eSoLmXKjwEjT 3RZxcwL/XWg6RqxI8FAwh0BgoI+/J4kdCdE5RsUAbwdeH+Z+ftOVkeZVBdasvpJO 53e0bxFZm4yQv4ZAYuxmJyKOM0lttcvJ -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:25 2025 by rpki-client