$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft File: jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json) Hash identifier: sEMVeat2imkEUnY8B5tx/CXPaYzgZ+BwMpwwlC9n9ks= Subject key identifier: 10:12:AA:21:F7:60:19:C8:BD:5D:C8:E0:48:C8:78:70:65:1E:03:E6 Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft Manifest number: 09FF Signing time: Fri 30 May 2025 20:06:00 +0000 Manifest this update: Fri 30 May 2025 20:05:59 +0000 Manifest next update: Fri 06 Jun 2025 20:05:59 +0000 Files and hashes: 1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: lYnApK/LyS45RWWWbDbwV2wFABY2SrZkJro7a0OGO7o=) 2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: 6YSal0k37yOUJLUbfkiKR/DSeI3K/4jgwnlzNntMzvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4 Validity Not Before: May 30 20:05:59 2025 GMT Not After : Jun 6 20:05:59 2025 GMT Subject: CN=683a0fa8-50fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:a5:08:99:1c:e5:15:3f:4a:f3:c7:8f:7c: 71:84:a7:26:d7:f0:d7:cb:10:c6:85:89:13:4e:37: 93:59:0f:02:bd:c0:e1:21:dd:c2:ae:94:8d:3c:dc: ef:5a:57:1a:eb:fd:07:98:be:38:fd:5c:3b:dd:f7: db:4b:0e:f3:e3:80:9e:50:12:f1:82:29:95:c3:1f: f0:2a:29:51:5a:19:30:97:f7:88:f8:5b:77:6f:71: d0:37:42:af:74:70:d1:aa:2f:a9:26:ab:04:37:40: 76:e7:13:a1:10:ba:97:81:45:62:70:e9:b8:03:29: 8f:3e:19:60:11:99:e7:7d:89:2e:bd:b8:d4:dd:b9: e2:55:5c:ac:cc:8a:90:49:d8:5a:6b:87:28:a1:d0: 40:bf:a1:2e:cf:44:a2:29:38:b9:b8:e6:c7:f9:42: b9:8a:b7:4f:d1:b4:ca:2a:2a:db:d8:22:21:71:b7: f5:0c:31:c7:02:bc:90:3e:38:a0:90:86:bb:0b:09: 47:63:e2:0b:55:b0:f5:3d:3d:23:6e:be:a6:1e:4f: 5f:6b:ff:2d:42:ca:8a:9c:88:2c:4f:bf:92:ee:af: 49:b7:2b:1c:bc:33:e9:33:06:7b:00:ec:4e:76:de: f6:27:21:4f:5b:40:04:04:30:55:fa:11:dd:12:d7: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:AA:21:F7:60:19:C8:BD:5D:C8:E0:48:C8:78:70:65:1E:03:E6 X509v3 Authority Key Identifier: keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c7:b7:c6:44:50:f6:a2:83:b0:f9:5c:5c:a0:6c:fa:8c:98: d9:15:df:7b:5a:19:5d:ca:8d:a5:9a:2b:71:6c:65:08:c4:ca: ac:35:e2:38:ef:2a:06:9d:9b:59:6e:20:87:e9:5f:34:7d:e8: d5:c6:99:35:3d:60:d7:1d:ed:43:10:29:76:8d:77:d2:9e:90: 8d:4a:c6:15:39:09:dd:af:13:6f:c9:35:49:92:ce:90:7d:d8: a1:06:87:1a:84:ce:53:a1:e6:a2:26:f6:d9:2e:e4:94:7b:e3: ba:3b:dc:00:d9:93:89:3f:f2:07:98:fb:c8:41:2d:eb:db:8c: cd:c5:32:cc:ba:c2:9f:6e:8a:fc:a1:c2:3d:23:af:1a:af:30: 58:ff:a3:27:28:30:57:7a:f5:de:04:1b:85:26:7b:46:ec:3f: 28:59:62:fd:34:35:fb:d2:05:c9:bd:ee:f2:8f:6f:07:d4:ac: 6d:24:fc:b3:ec:eb:56:9e:06:0c:6e:7f:08:3c:20:28:85:71: 9b:e3:2c:7e:97:4f:20:96:5c:be:4d:c3:bf:e5:13:c6:cf:d0: fc:1f:09:82:f2:6b:78:de:99:a1:60:41:df:d0:1e:dc:0a:b8: 27:84:2f:b8:0d:f2:f1:bd:a0:00:71:be:bd:2e:02:ce:4e:43: 9a:a8:0d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBDNTExMTAvBgNVBAUTKDhEN0UzMDU4MzUwQkI4REZFRkZDRTc3NzBCQkM4Qzg2 Qjc2MkExRTQwHhcNMjUwNTMwMjAwNTU5WhcNMjUwNjA2MjAwNTU5WjAYMRYwFAYD VQQDEw02ODNhMGZhOC01MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN2lCJkc5RU/SvPHj3xxhKcm1/DXyxDGhYkTTjeTWQ8CvcDhId3CrpSNPNzv Wlca6/0HmL44/Vw73ffbSw7z44CeUBLxgimVwx/wKilRWhkwl/eI+Ft3b3HQN0Kv dHDRqi+pJqsEN0B25xOhELqXgUVicOm4AymPPhlgEZnnfYkuvbjU3bniVVyszIqQ Sdhaa4coodBAv6Euz0SiKTi5uObH+UK5irdP0bTKKirb2CIhcbf1DDHHAryQPjig kIa7CwlHY+ILVbD1PT0jbr6mHk9fa/8tQsqKnIgsT7+S7q9JtyscvDPpMwZ7AOxO dt72JyFPW0AEBDBV+hHdEtfgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBASqiH3 YBnIvV3I4EjIeHBlHgPmMB8GA1UdIwQYMBaAFI1+MFg1C7jf7/zndwu8jIa3YqHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEM1MS80NzZBN0JFMDdC QkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVOX3ZfT2QzQzd5TWhyZGlv ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYNHdXRFVMdU5fdl9PZDNDN3lNaHJkaW9lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEM1MS80NzZBN0JFMDdCQkMxMUVBOTYzRjM2ODZDNEY5QUUwMi9qWDR3V0RVTHVO X3ZfT2QzQzd5TWhyZGlvZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANx7fGRFD2ooOw+VxcoGz6jJjZFd97Whldyo2lmitxbGUIxMqsNeI4 7yoGnZtZbiCH6V80fejVxpk1PWDXHe1DECl2jXfSnpCNSsYVOQndrxNvyTVJks6Q fdihBocahM5ToeaiJvbZLuSUe+O6O9wA2ZOJP/IHmPvIQS3r24zNxTLMusKfbor8 ocI9I68arzBY/6MnKDBXevXeBBuFJntG7D8oWWL9NDX70gXJve7yj28H1KxtJPyz 7OtWngYMbn8IPCAohXGb4yx+l08glly+TcO/5RPGz9D8HwmC8mt43pmhYEHf0B7c CrgnhC+4DfLxvaAAcb69LgLOTkOaqA2N -----END CERTIFICATE-----Generated at Sat May 31 17:44:11 2025 by rpki-client