$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: u7TPK+aXIvmAOv4iKVmBK4rwQBKB8kJxUT+SGl6QjDA= Subject key identifier: 8C:CE:5B:F6:32:29:9E:A5:68:DF:77:27:86:44:BB:D3:EE:8F:8A:AC Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 0A18 Signing time: Fri 18 Jul 2025 20:05:23 +0000 Manifest this update: Fri 18 Jul 2025 20:05:22 +0000 Manifest next update: Fri 25 Jul 2025 20:05:22 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: /BMociCNHPvQPvO7PjTQg0229fMetERzYLcbsVNQ5Vk=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 6YSal0k37yOUJLUbfkiKR/DSeI3K/4jgwnlzNntMzvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: Jul 18 20:05:22 2025 GMT Not After : Jul 25 20:05:22 2025 GMT Subject: CN=687aa903-3bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:0a:27:ec:dd:85:0c:16:1c:f8:94:74:1e: 72:58:94:1e:cc:a3:e1:dd:3c:53:ce:0b:c9:13:77: dc:46:92:48:81:16:2e:06:cd:22:0b:3f:ca:45:7c: f7:84:e2:e2:50:6b:10:b8:17:21:a0:08:fd:17:13: 66:54:12:5f:c4:d0:a0:32:d6:94:72:a1:06:5a:20: a6:85:7a:40:55:d8:eb:6d:e8:50:ed:08:95:59:e2: f6:d6:18:16:40:1a:68:ab:9d:e9:e7:18:d0:04:1a: 5b:b1:1f:ba:b0:fe:51:da:6b:9f:a8:ac:56:bb:00: 4d:77:b7:67:22:3d:7e:ff:f7:99:0e:61:46:9c:80: 68:36:2e:39:78:4c:81:79:ac:08:e2:a4:f5:6d:a7: ee:71:0c:1d:fb:23:74:e9:98:c7:00:7c:af:0e:8b: bb:99:21:f0:bb:ef:65:39:df:32:28:27:bc:f3:ee: bd:bc:22:61:77:6f:5d:8a:23:6b:e6:d2:f1:52:b0: 56:71:55:69:a3:df:18:46:2b:7e:18:43:a9:e2:1b: 5e:dd:b9:05:aa:ec:80:ed:da:8e:20:27:8e:9b:15: e4:b3:c8:79:b4:fe:d6:29:ac:2e:a5:88:e8:c3:4d: 1c:2b:ce:e1:5f:20:78:8a:07:65:2a:64:7c:e5:7d: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CE:5B:F6:32:29:9E:A5:68:DF:77:27:86:44:BB:D3:EE:8F:8A:AC X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c5:8b:4e:f0:17:7e:67:4f:0b:c4:c6:14:34:46:1f:b3:8b: 67:28:c7:81:b9:74:41:35:c0:48:64:70:3a:c1:b8:d9:7d:f0: 36:ee:7b:95:6e:65:01:17:d4:2f:32:18:15:47:6b:32:02:a3: 72:25:20:a8:bd:70:19:7a:09:34:1c:b8:a7:88:ef:f1:bf:d9: 04:c2:7c:b5:04:b6:cc:a6:23:0a:1b:b6:ff:d2:0e:c3:f0:3e: 89:69:bd:11:2f:c6:b7:c6:63:54:5d:b3:1e:31:d9:72:47:ae: d7:a1:b9:33:6e:e7:dd:69:3a:7e:88:18:f7:20:73:16:6c:c1: 66:ae:f6:d5:cd:0d:8f:08:7f:0e:1f:1b:78:a2:c9:5d:44:45: a8:68:bc:fe:71:71:2a:b6:a4:88:45:09:d4:3a:db:a7:72:76: 35:4a:79:49:70:74:1a:a7:a5:5e:e4:b8:34:e6:46:5b:cb:3f: df:91:c9:22:69:e7:d4:af:7d:96:2d:44:bf:12:4d:00:90:bd: e4:ed:6b:03:0e:98:ff:f0:3b:5a:88:cd:50:b6:58:10:3b:b9: 08:aa:f8:8e:0b:0f:70:3d:9e:82:fb:f0:06:32:a8:3d:a1:41: 98:d5:14:c2:db:0c:9d:8f:28:67:24:b0:c8:2f:01:91:97:37: b8:d1:54:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwNzE4MjAwNTIyWhcNMjUwNzI1MjAwNTIyWjAYMRYwFAYD VQQDEw02ODdhYTkwMy0zYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwQKJ+zdhQwWHPiUdB5yWJQezKPh3TxTzgvJE3fcRpJIgRYuBs0iCz/KRXz3 hOLiUGsQuBchoAj9FxNmVBJfxNCgMtaUcqEGWiCmhXpAVdjrbehQ7QiVWeL21hgW QBpoq53p5xjQBBpbsR+6sP5R2mufqKxWuwBNd7dnIj1+//eZDmFGnIBoNi45eEyB eawI4qT1bafucQwd+yN06ZjHAHyvDou7mSHwu+9lOd8yKCe88+69vCJhd29diiNr 5tLxUrBWcVVpo98YRit+GEOp4hte3bkFquyA7dqOICeOmxXks8h5tP7WKawupYjo w00cK87hXyB4igdlKmR85X3WFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzOW/Yy KZ6laN93J4ZEu9Puj4qsMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfxYtO8Bd+Z08LxMYUNEYfs4tnKMeBuXRBNcBIZHA6wbjZffA27nuV bmUBF9QvMhgVR2syAqNyJSCovXAZegk0HLiniO/xv9kEwny1BLbMpiMKG7b/0g7D 8D6Jab0RL8a3xmNUXbMeMdlyR67XobkzbufdaTp+iBj3IHMWbMFmrvbVzQ2PCH8O Hxt4osldREWoaLz+cXEqtqSIRQnUOtuncnY1SnlJcHQap6Ve5Lg05kZbyz/fkcki aefUr32WLUS/Ek0AkL3k7WsDDpj/8DtaiM1QtlgQO7kIqviOCw9wPZ6C+/AGMqg9 oUGY1RTC2wydjyhnJLDILwGRlze40VSy -----END CERTIFICATE-----Generated at Sun Jul 20 04:27:27 2025 by rpki-client