$ rpki-client -vvf rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft File: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft (raw, json) Hash identifier: 0F+PjeWhMa4fZvqY9Yg0s20uLV/pHF2bGWOJOa6d5LY= Subject key identifier: 75:D0:40:F5:01:2C:8D:AB:52:58:42:BF:72:A1:AF:17:A7:28:5B:8D Authority key identifier: D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 Certificate issuer: /CN=A9123E38/serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft Manifest number: 0ACC Signing time: Tue 22 Jul 2025 16:49:21 +0000 Manifest this update: Tue 22 Jul 2025 16:49:20 +0000 Manifest next update: Tue 29 Jul 2025 16:49:20 +0000 Files and hashes: 1: 0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl (hash: BWiTEj+QDF03qUzPoQ+VbQhzXsCEZFgJZSnAEk8tBj0=) 2: DC25591636C011F0A9DAF53EC4F9AE02.roa (hash: X6qLGESMHlCjgInNJuuQgeTL462kIXu1+dGUahA9Gs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123E38, serialNumber=D094D24714352E0EBCD3F88275232827BC6AC890 Validity Not Before: Jul 22 16:49:20 2025 GMT Not After : Jul 29 16:49:20 2025 GMT Subject: CN=687fc111-ed69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:a4:13:d0:d1:31:73:ac:8a:60:83:7c:df: d0:4f:a5:06:0e:c1:a4:7d:1f:58:f2:3d:80:2c:8b: 3e:df:3a:5e:f3:56:ae:3d:0d:4c:3e:a4:dd:5c:39: 7f:e6:6a:75:18:fe:b5:d7:7f:9c:d8:d5:bb:e3:b5: e3:b9:6c:e5:a6:c0:d9:7a:0f:39:7d:71:42:ef:c5: fd:ec:42:75:d6:07:ab:57:23:ea:4d:6f:a6:6f:44: 89:03:ec:98:65:a7:a6:7b:bb:a7:d1:8d:20:3b:e7: e9:21:b4:77:ab:2f:ac:a7:f0:7f:94:45:26:16:51: d1:00:4c:ad:52:6d:a3:3b:1b:d0:c7:42:d7:eb:c9: c6:c5:c6:8c:ac:9f:ea:aa:17:77:30:e2:50:b2:63: 70:5e:a1:37:28:02:a5:c5:f7:88:43:fe:26:96:48: 5d:9a:67:77:4b:9e:4b:04:0b:38:2d:ba:b2:40:5b: dc:69:49:13:82:4d:76:c0:a1:42:b5:32:6d:58:82: da:f5:17:6f:57:81:04:a1:31:0e:0e:43:ad:5e:11: 3f:d6:5e:f2:f0:62:e0:71:1e:6f:3e:30:09:73:70: b8:4e:d5:80:bf:ed:73:58:18:3d:f4:74:b9:1b:0a: 44:ea:6c:44:99:e5:3c:55:55:42:2b:d2:e4:0d:47: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:40:F5:01:2C:8D:AB:52:58:42:BF:72:A1:AF:17:A7:28:5B:8D X509v3 Authority Key Identifier: keyid:D0:94:D2:47:14:35:2E:0E:BC:D3:F8:82:75:23:28:27:BC:6A:C8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/6B91EDA0536C11EAA5C2790CC4F9AE02/0JTSRxQ1Lg680_iCdSMoJ7xqyJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:12:b1:d8:71:84:53:55:30:ff:46:9d:5b:3c:ae:f0:be:2c: 9a:17:c9:98:63:7d:a4:6e:0f:d7:fa:3a:c7:38:ee:6a:36:be: cc:83:a1:fb:eb:ca:72:b3:15:b3:af:bf:88:c0:30:e3:bb:56: c4:f4:8d:c3:55:03:b2:b4:fb:98:65:4d:2f:4e:48:d1:8b:c6: e9:10:f2:cb:32:8f:00:c6:78:ea:f3:75:1b:c7:09:4b:76:51: aa:57:05:9a:d3:2a:12:fc:e8:61:03:f3:59:5c:19:8a:54:fb: d2:0a:8b:a5:06:ac:3c:14:45:f7:88:97:28:1a:07:94:15:ed: 6d:7b:a2:b6:67:21:86:92:64:bc:a7:05:00:2b:c2:8f:38:37: 71:9d:6f:dc:bb:6d:d2:29:bb:95:3e:38:c9:78:b0:cc:33:c3: 7e:6c:6c:08:55:e0:2a:d4:b3:fd:32:0c:dd:ba:2e:33:19:35: 18:46:91:d7:02:67:53:4b:b0:25:a8:9f:5d:7f:ad:8c:a6:00: 1e:be:a2:5c:20:d1:90:a8:90:d0:8f:89:be:78:13:ab:a5:e7: 26:81:f8:59:54:a2:7f:7a:5c:0c:54:53:6a:b8:18:fc:fd:4d: 9a:d0:7d:bd:bf:37:42:6f:f9:20:24:3b:23:03:50:f6:58:c3: 2d:92:a5:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNFMzgxMTAvBgNVBAUTKEQwOTREMjQ3MTQzNTJFMEVCQ0QzRjg4Mjc1MjMyODI3 QkM2QUM4OTAwHhcNMjUwNzIyMTY0OTIwWhcNMjUwNzI5MTY0OTIwWjAYMRYwFAYD VQQDEw02ODdmYzExMS1lZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LakE9DRMXOsimCDfN/QT6UGDsGkfR9Y8j2ALIs+3zpe81auPQ1MPqTdXDl/ 5mp1GP6113+c2NW747XjuWzlpsDZeg85fXFC78X97EJ11gerVyPqTW+mb0SJA+yY Zaeme7un0Y0gO+fpIbR3qy+sp/B/lEUmFlHRAEytUm2jOxvQx0LX68nGxcaMrJ/q qhd3MOJQsmNwXqE3KAKlxfeIQ/4mlkhdmmd3S55LBAs4LbqyQFvcaUkTgk12wKFC tTJtWILa9RdvV4EEoTEODkOtXhE/1l7y8GLgcR5vPjAJc3C4TtWAv+1zWBg99HS5 GwpE6mxEmeU8VVVCK9LkDUd1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXQQPUB LI2rUlhCv3KhrxenKFuNMB8GA1UdIwQYMBaAFNCU0kcUNS4OvNP4gnUjKCe8asiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0UzOC82QjkxRURBMDUz NkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxnNjgwX2lDZFNNb0o3eHF5 SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBKVFNSeFExTGc2ODBfaUNkU01vSjd4cXlKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0UzOC82QjkxRURBMDUzNkMxMUVBQTVDMjc5MENDNEY5QUUwMi8wSlRTUnhRMUxn NjgwX2lDZFNNb0o3eHF5SkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLErHYcYRTVTD/Rp1bPK7wviyaF8mYY32kbg/X+jrHOO5qNr7Mg6H7 68pysxWzr7+IwDDju1bE9I3DVQOytPuYZU0vTkjRi8bpEPLLMo8Axnjq83UbxwlL dlGqVwWa0yoS/OhhA/NZXBmKVPvSCoulBqw8FEX3iJcoGgeUFe1te6K2ZyGGkmS8 pwUAK8KPODdxnW/cu23SKbuVPjjJeLDMM8N+bGwIVeAq1LP9Mgzdui4zGTUYRpHX AmdTS7AlqJ9df62MpgAevqJcINGQqJDQj4m+eBOrpecmgfhZVKJ/elwMVFNquBj8 /U2a0H29vzdCb/kgJDsjA1D2WMMtkqVh -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:14 2025 by rpki-client