$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft File: JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft (raw, json) Hash identifier: pSo4SSkWxeW6ah2FhO3K6yhWbRuf5KpLvNmv3Cn+a5A= Subject key identifier: 66:05:C0:6A:95:93:17:58:42:E7:74:AF:1B:27:28:4D:A8:EE:BC:07 Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D Certificate issuer: /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft Manifest number: 037D Signing time: Mon 21 Jul 2025 01:08:08 +0000 Manifest this update: Mon 21 Jul 2025 01:08:07 +0000 Manifest next update: Mon 28 Jul 2025 01:08:07 +0000 Files and hashes: 1: JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl (hash: JKavD0iBthOsOnuSyUuCP9lIja8iAtjsJsQREGBbj7s=) 2: F02F57CCB0F911EC95467362C4F9AE02.roa (hash: 8c3vaTi0BSxLkUymwaj9MHcp45Mf7rThPmFdOeP7vA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D Validity Not Before: Jul 21 01:08:07 2025 GMT Not After : Jul 28 01:08:07 2025 GMT Subject: CN=687d92f8-9fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:38:6f:88:c6:66:6c:5b:c0:9c:ed:59:e5:2c: 49:38:de:de:b0:65:6b:e3:9d:0d:24:28:ed:b7:43: 8f:0a:4d:9d:50:5f:85:80:a3:46:1a:27:d1:82:cb: 98:bf:ae:49:df:79:b3:c1:fc:66:ee:3d:d4:6e:84: 17:fd:cb:0f:e3:7f:74:fc:81:42:2e:e6:cb:09:b9: 0b:85:1f:11:53:5e:a0:b4:c8:35:7f:d2:20:d2:f5: c5:61:25:b2:ce:45:bb:ba:b5:3e:ae:f5:c4:3a:c6: 22:e1:51:ea:79:70:b3:f5:57:a7:8b:ae:84:12:e1: 3a:f8:d2:ee:10:3f:40:fa:a6:93:a2:70:3d:8f:6e: 0c:b0:e8:b7:b0:4f:d3:1e:9c:7f:50:16:00:70:60: 51:62:c4:5e:36:f2:1d:0a:36:43:60:66:ed:35:7e: 8c:60:f7:c1:8d:63:b6:ae:ba:d8:b2:9f:05:42:d3: bb:04:b2:de:1c:b4:6a:03:56:4e:ef:7c:03:64:e8: dc:2b:50:a4:a8:16:3f:6b:50:fc:a8:77:b7:3a:98: 87:a3:d1:5a:c5:b0:dc:4c:cc:f6:d4:33:29:12:82: 3e:c9:63:43:54:c7:0d:8f:7a:dd:22:9b:e7:c5:ed: c3:eb:b4:a7:61:57:f5:a9:3e:c4:6a:3b:0b:40:ce: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:05:C0:6A:95:93:17:58:42:E7:74:AF:1B:27:28:4D:A8:EE:BC:07 X509v3 Authority Key Identifier: keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:1d:73:ea:f1:4b:26:86:f1:0f:e7:fc:e2:97:db:fc:39: b6:53:76:e9:df:ea:96:47:e3:1e:8a:d9:04:a3:92:2e:30:d9: 07:a8:96:19:b2:30:bb:41:47:f7:91:e6:f4:22:46:6a:ec:49: b8:51:ed:1d:d6:10:7f:95:bd:2e:be:bc:b2:be:b2:53:22:60: a9:a4:0e:4e:9d:89:84:74:c5:6b:b0:f7:4a:74:df:c9:35:38: 67:c9:bb:f5:14:a8:49:b4:d3:a3:22:35:d2:b5:31:5a:75:8e: f6:6b:98:3e:b5:89:ec:2b:04:eb:4a:f0:c9:fa:4a:17:79:b1: ef:09:c0:39:58:60:76:6d:a8:94:a3:47:f6:47:4e:13:1a:22: 78:b6:cf:3f:c3:39:23:90:42:76:2b:a6:fe:d4:84:e0:98:7c: f1:41:c4:5b:b9:07:f6:77:8b:05:ed:2a:75:ec:9e:1f:38:37: 11:96:89:9a:0c:d3:e3:5f:41:08:5f:db:ae:8f:f4:57:45:63: 44:19:e1:f7:71:b1:e9:c4:5a:ca:60:a0:45:98:6b:dd:77:30: dd:94:96:9a:a2:68:35:fb:f0:d8:99:a9:8e:78:d0:b6:5b:7b: 74:db:7f:6c:5d:93:a1:dc:d9:f2:f6:71:ba:23:1b:4f:16:36: 78:d4:5c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1OTIxMTAvBgNVBAUTKDI0MEVDMTVEMTQ0NEQ0M0YwNzdDOTRENDhCRUVEMUFG MDkwNzREM0QwHhcNMjUwNzIxMDEwODA3WhcNMjUwNzI4MDEwODA3WjAYMRYwFAYD VQQDEw02ODdkOTJmOC05ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ThviMZmbFvAnO1Z5SxJON7esGVr450NJCjtt0OPCk2dUF+FgKNGGifRgsuY v65J33mzwfxm7j3UboQX/csP4390/IFCLubLCbkLhR8RU16gtMg1f9Ig0vXFYSWy zkW7urU+rvXEOsYi4VHqeXCz9Veni66EEuE6+NLuED9A+qaTonA9j24MsOi3sE/T Hpx/UBYAcGBRYsReNvIdCjZDYGbtNX6MYPfBjWO2rrrYsp8FQtO7BLLeHLRqA1ZO 73wDZOjcK1CkqBY/a1D8qHe3OpiHo9FaxbDcTMz21DMpEoI+yWNDVMcNj3rdIpvn xe3D67SnYVf1qT7EajsLQM7wRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYFwGqV kxdYQud0rxsnKE2o7rwHMB8GA1UdIwQYMBaAFCQOwV0URNQ/B3yU1Ivu0a8JB009 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU5Mi81MUUxMjcyQUIw RjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFEOEhmSlRVaS03UnJ3a0hU VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pBN0JYUlJFMUQ4SGZKVFVpLTdScndrSFRUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU5Mi81MUUxMjcyQUIwRjUxMUVDODFDRkY0NThDNEY5QUUwMi9KQTdCWFJSRTFE OEhmSlRVaS03UnJ3a0hUVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMjR1z6vFLJobxD+f84pfb/Dm2U3bp3+qWR+MeitkEo5IuMNkHqJYZ sjC7QUf3keb0IkZq7Em4Ue0d1hB/lb0uvryyvrJTImCppA5OnYmEdMVrsPdKdN/J NThnybv1FKhJtNOjIjXStTFadY72a5g+tYnsKwTrSvDJ+koXebHvCcA5WGB2baiU o0f2R04TGiJ4ts8/wzkjkEJ2K6b+1ITgmHzxQcRbuQf2d4sF7Sp17J4fODcRloma DNPjX0EIX9uuj/RXRWNEGeH3cbHpxFrKYKBFmGvddzDdlJaaomg1+/DYmamOeNC2 W3t0239sXZOh3Nny9nG6IxtPFjZ41Fwb -----END CERTIFICATE-----Generated at Tue Jul 22 04:55:04 2025 by rpki-client